last executing test programs: 8m3.69935674s ago: executing program 0 (id=2272): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x101201) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x8, 0x18, 0x400, 0x5, "a59a16929f5b0eb6bcbf0cca8d234aa395fedbd4f3d8ff0ba3fa089b1972d4bd"}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1138000, 0x800, 0x3, 0x1}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00003df000/0x1000)=nil, 0x1000, &(0x7f0000000180)='hsr0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) poll(&(0x7f0000000080)=[{r2, 0x27}], 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @remote}, {0x1, @random="5ba1be23488e"}, 0x12, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'hsr0\x00'}) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000140)={0x6, 0x20, 0x7ff, 0xe40, "510a58af1996b87658c2018e63fe03d9ebc4feacade72fdd7a978ced071bb5d2"}) fadvise64(r1, 0x7, 0x0, 0x1) read(r1, &(0x7f0000000040)=""/106, 0x6a) syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x101201) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x8, 0x18, 0x400, 0x5, "a59a16929f5b0eb6bcbf0cca8d234aa395fedbd4f3d8ff0ba3fa089b1972d4bd"}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1138000, 0x800, 0x3, 0x1}, 0x20) (async) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00003df000/0x1000)=nil, 0x1000, &(0x7f0000000180)='hsr0\x00') (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) (async) poll(&(0x7f0000000080)=[{r2, 0x27}], 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) (async) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @remote}, {0x1, @random="5ba1be23488e"}, 0x12, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'hsr0\x00'}) (async) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000140)={0x6, 0x20, 0x7ff, 0xe40, "510a58af1996b87658c2018e63fe03d9ebc4feacade72fdd7a978ced071bb5d2"}) (async) fadvise64(r1, 0x7, 0x0, 0x1) (async) read(r1, &(0x7f0000000040)=""/106, 0x6a) (async) 8m3.639141592s ago: executing program 0 (id=2273): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340860600702c1ffe80"], 0xffdd) read(r0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x93) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000r_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x10158110, 0x7}}, 0x50) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4a) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@redirect_dir_nofollow}, {@verity_require}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendto$inet(r5, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) read$FUSE(r3, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) chdir(&(0x7f0000000080)='./file0\x00') write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, r6, {0x7, 0x2b, 0x4, 0x40000, 0x7fff, 0x2, 0x1, 0x2, 0x0, 0x0, 0x40, 0x7}}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r7) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) readahead(r0, 0x1, 0x79844e1c) 8m3.638907861s ago: executing program 0 (id=2274): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80702, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000d80)={{0x0, 0x0, 0x80}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x164, 0x0, &(0x7f00000005c0)=[@acquire={0x40046305, 0x2}, @free_buffer, @acquire_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x5, 0x1, 0xf}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/230, 0xe6, 0x0, 0x13}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}}, &(0x7f0000000240)={0x0, 0x20, 0x48}}}, @clear_death={0x400c630f, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x3, &(0x7f0000000280)=""/65, 0x41, 0x0, 0x27}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/11, 0xb}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000004c0)={0x0, 0x28, 0x40}}, 0x1000}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000500)={@flat=@handle={0x73682a85, 0x100, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000580)={0x0, 0x18, 0x30}}}], 0x57, 0x0, &(0x7f0000000740)="11789c32bf355427e840f9fc69f2e0bc17d084815de53b93eb3b8d54c84b9250d38ec29723ee54faa9afc6e5b30c708ba291f6cfbdbac6e7aa2121c79f410d3ee2ab82d1f57db374e26efe87d1aae9737ae8d0c6629158"}) 8m3.638452661s ago: executing program 0 (id=2275): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x22401, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x22401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r3, &(0x7f0000000200)=""/251, 0xfb) bind$vsock_stream(r3, 0x0, 0x0) (async) bind$vsock_stream(r3, 0x0, 0x0) getdents(r0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = getpid() r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) copy_file_range(r6, &(0x7f00000061c0)=0xffffffffffff0001, r6, 0x0, 0x2, 0x0) (async) copy_file_range(r6, &(0x7f00000061c0)=0xffffffffffff0001, r6, 0x0, 0x2, 0x0) syz_pidfd_open(r5, 0x0) (async) syz_pidfd_open(r5, 0x0) getrandom(&(0x7f0000000000)=""/76, 0xfffffe55, 0x2) madvise(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$binder(0x0, 0x0, 0x0, 0x20c411, 0x0) (async) mount$binder(0x0, 0x0, 0x0, 0x20c411, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x100800, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1001002, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xc6, 0xb0, 0x0, 0x3, 0x80, 0x1, 0x31, 0x8, 0x6, 0x1, 0x4, 0x0, 0x6, 0x3, 0x1, 0x80, 0x9, 0x5, '\x00', 0xfe, 0x80000000}) 8m3.390222645s ago: executing program 0 (id=2278): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000000100)=""/17, 0x11, 0x2002, &(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x2, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) recvfrom$inet(r0, &(0x7f0000000100)=""/17, 0x11, 0x2002, &(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x2, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) (async) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (async) 8m3.384228005s ago: executing program 0 (id=2279): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) listen(r1, 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x2, 0x9, 0x40, @private2, @rand_addr=' \x01\x00', 0x40, 0x8000, 0x3, 0x800}}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m3.342706596s ago: executing program 32 (id=2279): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) listen(r1, 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x2, 0x9, 0x40, @private2, @rand_addr=' \x01\x00', 0x40, 0x8000, 0x3, 0x800}}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m34.137001358s ago: executing program 3 (id=2722): mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='vfat\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) 7m34.122267898s ago: executing program 3 (id=2723): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x87) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) msync(&(0x7f0000640000/0xd000)=nil, 0xd000, 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000000, 0x128112, r3, 0xb3f9a000) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="01001000000000005e00000000000000440f704e0d85642e410f2167b930080000b871de0000ba000000000f30"], 0x5e}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x10000000000000, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) fchown(r2, 0x0, 0xee01) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000180)={0x1, 0xffffffffffffffff, 0x1}) r9 = getgid() mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000400)='/dev/loop', &(0x7f0000000440)='./cgroup\x00', 0xffffffffffffffff) read$FUSE(r3, &(0x7f000000e440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a3c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009885f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4dbcacea29d4554d2d95ed4444e9bcbd6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa35e548ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f5823", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0xfffffffffffffffc, {0x4000000000005, 0x0, 0x0, {0x1, 0x9, 0x1, 0x800000004, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, r10}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f00000003c0)=[0x0, 0x0, r9, r10]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x20c00a, 0x0) 7m33.988805021s ago: executing program 3 (id=2724): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r2, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) chmod(&(0x7f0000000200)='./file2/file0\x00', 0x24e) setuid(0xee01) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00') prlimit64(r3, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendfile(r2, r2, 0x0, 0x7ffff000) 7m33.987727721s ago: executing program 3 (id=2725): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002180)) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002180)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002340)={0x0, 0x0}, &(0x7f0000002380)=0xc) getgroups(0x6, &(0x7f00000023c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0xee01]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002480), &(0x7f00000024c0)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002480)={0x0, 0x0, 0x0}, &(0x7f00000024c0)=0xc) statx(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x400, 0x800, &(0x7f0000002700)) (async) statx(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x400, 0x800, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002800)={0x0, 0x0, 0x0}, &(0x7f0000002840)=0xc) geteuid() (async) r11 = geteuid() fstat(0xffffffffffffffff, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002900), &(0x7f0000002940)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002900)={0x0, 0x0}, &(0x7f0000002940)=0xc) r14 = getuid() lstat(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)) (async) lstat(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002d40)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002d40)=0x0) getegid() (async) r17 = getegid() syz_fuse_handle_req(r0, &(0x7f0000000000)="d310bf6bea4675c6eadb8b317af0a22a5ceb4a57b97384004ba1bf91234584e5fc81ff200d203637242e5d703e47b1132b93701e25eab4251c90a8d5aaf413ce80dcc9ad92b4abe10ca0fc284c9d0f4d97e923f253ce8ac77b3940e686cc9373a055828c4b96da53ab5d13b4a728e41085a1e2291005228eab93e2befb97f44f81490cf1096cd06a6c9743b094252b166d5ffad4e6bfb3e6d56f913a0951a128211f37b18368c7dda8e5299ff3e9396caa0fe411ea28c1623ef4c7094f01a60e76ea560bda118eba283aa99f0f3a05d10c3bb2392883ee7f4734e9547326da9bdc45a7cb499afbed2a422e906fd5d8090a982eb927c768bca7faa9f8b4edeb6e5a587fbd3ae6d19e215af0bfedf219e381a868f9de6cfce37858463e8928016935fbf90a0bf8003778fead231e534fcdb80bdc60f030e95b768771f343c11f20017e001185bf3ed554428bd9ad151040ae886d3df6cbf9d933c3b4bbe061fade9bdbe878b4789cd19dc7de572aa1fa5c547935d2dce13c40bd4e9fa277af77e2cfa77fed8d6e0572787bada124bc278a85b8b1f664674246aff8a40cd9955a94ebf90dc79af7260bb1269f3982128709aaec782281423258b352a6985109ba538e4b3f09af1e603d73f86e14c5935117d01d4acc060bc39586ed5ca22f0177fcd0a1a919f3a39c62f000801d92e9b5b6ceb49c9bbe1330d37c0a62c55dc7a7a4f480f56102e19d39da2eff7ce1732578c11e29740c87533d42fcf6ccc326e9a195d579c264e1ff5b9c29327dd2418aa75c71a00a2e4061457d593944440d948168fe8d50233059283f1e73e9baa51b85b2ff71a6675af5e50245e0d8ac2962e3516ef358846c92e4b5bff42eab838c57c9e633a1eb3978e8725c58019cae87f6de539a42f21218606f1bbedde929c3a2763fc6a4d74194220320515796388aa7674e6644ab10494fe7ac20f0a9e8e2f17e0eec619524bfa144f10d25061685275e2c79c3b95b95ddb6c7074dc0361a40f570744f0fd2ac0bd056b66aabb9e2d360dc0e5338d775302cc99df1c75b17e45bca7590d8a68a72d2813a8a6f3411d6d50565200486f0d9b9a6aa56ae963351b4d892df89c344db2da1374f7e87819c62182a04869a427b78eb9c0506c9f7f5dd470ea24652614690867ea6a3addc67ec043deaa5292e8c88aceaa81a1c179e1a96b8b4178cec0023e81728d6a61475dd31bcac8d38f91640f205cecbc60de38cba68d2c4804f0a3dfbfd7e57adedc152c2f13f99ec71f1e620807755eb7b3f01bab48b72db6e8fe7e10e029e0849c42176504b641517e8658efafe6da7793930d58c5d10a5ea7d129b670152a3c67ecd6687a1d932f55c68234937c70073daa194ff55a5f59c522c55697efd3719e9e7745e01be144524877ef8da26d244688c12d373bb7b1e2529d0d5768621f002de69910f88ffb23b9971bbbd9cf63ebbc34e28e76236dfa42b5f3efb5f68e9c29cf3e241fde900b7d49cb6fce2cf9f52b9ade4310f4a30c868d58dcb077ec5c89686600145e3b5514710a3118f5863aa1b88a0fcfed6fdaa96eb714770c1c10b1f0ff7ba96b4c5c62f2365f89bfc1fd59407a6c833e0763b1336bfc8f4b468a2b9067dccb4c3dceb347078d0bfe2544a33f3cd2080fb32ef4b1f65c485ea6de43e8e0ad8bbcc04adae5bcac9a7ba8dfbc4931db7a55afb192e4567a728d08acaa8242d11c9a289a03c06ca1385defb8f65000873da521a68b9c125e5e54ef7512e3cd6f168be560b6dea3353a7c0da8f28ad19354352374845d8d68e12b07aacb6f2567e8304ca05d14ac17f5f69136e11caca273347a0f72da697c2d4211e9ce83c12e242f714966b33acfe327aa9df321143f114aaf5d10e8a0661b6c5a3ff2ec8001d08847a5c9106c655261f6220920c1739a8cf5587d3829b1245a12e38b081a8a483efafb650414120dda31375e4b1ef807eda90f3686772e3801c9882edbe0b2c63765cee26b03cc591ebaa45eac8a8c31f160a6c72b2161b7d9c49404e70de7249ae88ba9b35c87fe19c88877af6432164a7cd2896c584a070bb306b2d803fabef9f713b0c3313336d35b4178510f6f29118adc79b3a8521c0739f4d52563fa2604c4401893a397ad1618ef90be2c749cdd64d3eec7cedd25bf085fb0679f87d4b5a3b9cd73fd643358beaab81434f67246e82dda1384b132225e7e0d5996ca45a29a4091a76de5fc347fcc031e792b7d8de4a40ecd5b1aa364b6390539112020559cf7c5006652c34fb2d2f12023bbb9827aaa42d677d4c7716224089241b9f385a0beef98f403709835df287d9680ada6393db158f3ca189c765af69c6f3ec6a7f92648f1e6454b31f6f512fd1ef1a76933ec5c3b47b444457b440cc4acaeda7d467527d15c4a674e04665c9ee6cdc4947581fa50d7c3840a2a8a79772b1dad62a6efd4bfcbd1f9c8f91c473d349738c65da8472cbfc07e7d5d76d1d02ddabb66e04e137140a440315bdd3401f76bf9e923b8f20eefebf643e45cc8715ba8316d283fc9ab645958ce9eb498f24319ed7477369e13fe6ff13c05693cfae541909ae0ebee46c4cd1f11eb54ce1dd0c47f675925dcb405cc3adbb982afd07d9fa762eeab82b1f28586b11db8c3e6dc655553ca11454269578ddafa7e4226981bfc0632c7beeeee6dcb58b85330b544b4fe7d8523895905214592720452e99bbab02eff9ff0ec28e6e1b32a698c0acb707965f51a0ef95801a1a561f9e1a2feff89ff1f0cfcb890aa263a677464ce38472bdfc5b3bd418270947a319f7e67192efcbf8fda960e72e5adb53178c5986f22fb4671dd664bddf3e3c34117e827effade9e8540034af918ef3911ac235c5c6fcc1c0da76944e3087e04d550b431f92c06e264dd7c4e86ddf5bedc6bfc3cb371f2be4fa1ac11e57b651bc5518caced0213d48827f9df5725434c7d7dba4c6a1e631b775aaf9698d0c44916b07a221806c933b761b9705bb2d253cb4a40cc451a7d0c46cd63519f18448f10de20537ea12af90d979542b6aca04c75a282771d0a52d4240ceb43a0109029d6b5acc77f8a6788be26caf73ef155b55e8512dc05193894d2fe5d4bf6dc4ba7ec2f929d3aebd6165dba1a755c1b516478531a055eb881f49951d3649d681b985e7016a6883bccdc8ea55cb144f318ca495a0d04f7c6d525ed413389c88b721410380534d735daf46cbadf5c912925eab8641507299764127ad18b4b0f4d5e5a7d2e70d00b26dd02912578c58f4a46727b21efaaffbdb07c645f2e54120ae8103955d3274a50e4999e146167e3df345e281c8ec14425c8718cdf54b99fd59290c35f4de817157543698adbe03ad91220165ac2719e11effcfca960996c4206b6a083cbac748677a54c0068d7aae7e6d343a9c0637d6c25923fabbb83a2a7d8b5b5a29d77c8bda533c01243a000bf327b7e94d38d9beef1b0ae8adac0b379dd1f47fe55907bbc8c173065b05fd18d8d6950a0167f02803fa037a2fc73cce9f65bd2ca79a2214abeb4cc5840b1d268c0c3eb9f355b6b76a951f007fe61d28a859aceac43a8bfa7e5d4c5ee2d5c70ba3e9c7dac42d0a540abc00e7bb4376e42ce97d49a0703f6a396831f779a2bf52577c5dee1fca91726f6a2c65e76fb4623b47801e99908d9fc6d40570a5d9139bfc029990efe425a45a7567704603f6bd7a2857610347ecc12b44dc1802a5dd28f1eb44ce6bb9a57e33172ead2dfbee8b8edf770da8cbb9d94f444ca78f7e77761f0d322acc07f1e6734b746e8124e431ff3bc24d056ad758140bdca397b02a8e5e456237fff07862bd91c9e6fa8dc80d508593bf8c6eb945522a912580b267385cd985988caaaaae8b8c2d4a3b74f78160c9e37710385102d894d37cce5b3107d266bfe554196ac742ed2c1a79be0d2628297899856a4d5c2ff6778cb0f3d53384fd41fe18858c1f84cc8c3133a2438cc622acc10497dbc8b66f97a28e10052bfa746eaeeaf65bc88a82fe4e2ec378400bdd635e58874e4e4038548130fbbfe5eedfdc21efe90cfaf225a818a94262cbbc3e061ae33c588253a04114650f16881b26af99b276e0620353f2f4cdb399b20d98bd2bdb6b6c124e5c2a863986ef93f2b692960758c795e1168a3e8cd09f26f723a3905c40ad00300c2dbb850062d877e2bc8b3919ad33df2cd9d1ef31ae84b86b7b57168061cfb6f32a76a4fd3b5a2f52ea3fe6a550d74421f4282f167787a4c7e2c15253f21229df4c34d8b52275ef95047f7e480e145bfc8e8e340986af922ec1e9bcd0a4451b7eee515479ca014de012c6d25e293d773adf2539bb2a7304787d26571f4054e0f8d2e83730ba1b625b2dae28f4c0dfc2b9eac769cadea490b7a116490c0b07b3d648835a4be9044d4a9656b40e3fb9e36039d4674e24673e9bcaa15b7be38b573e848aee704e05b58418ca47ee91623e5488fc57dbf3437198705009f1e019cb344b6b968c06f12f6a87ddf66cdedc7c7bc211f5ede82ada73d52b2795f78d69e6863018a06b9b2891b4927481e50775977c73bf7bbddd01ce44c0d225dbd977bc45dc76cc599f6ffd39e611bbff94e7e5a058719389c939a75f930ba07f9f1c90c983a7a68c9795d6f1afc9443a655e9e4ecd58bde722b0b2e209ea56a02320379f253f5e97e4f5f565c0d9353261d6e565e9df1d861a87e0a09f348ba47b67095f5fd8a1f4864d891109d102cecbe00e420d5c2eb21be545d33ee67af799739535b8239bd2b10a509df530b4d44df4e0f1c1416771122ec6e31cc1026b6faf5bede9c83d81a9657f9ae226e89a6857e470b72d31fc142862461c6222b647d2d6f6160d5c07eeb7e0475a4665ba6b9cca83792e0fcd11ce92c9df6544ba1f14d1fdf20db5d2d70ab795c414338fe9b311fe2f737a6c28d92fab98cecd0339a7b7ace283d504d903b168f636b388de2c69b01390107f66382d2814527dcd4df1116bdade60267c7fcb3d67ebd23560b5a7cf555446cc84bb39674ef076446b728b59d4cdbb955e056c3d1b229789804ffa098e57ede3504f714c7b413b04e955015b09e61a77b56c712087458463e99d5b318f764f29994d304b645dc314f7aa2d421ac37fa4a2b0eac55286f58f539501246ac1a94b64dfcc3a5ac5d5f9efcce331463a0b69bff3408cb57beb3fe2a98e8027a4f2b18622e3a6f202663c7a6029cca7e8e74c5e7055106f1123027800bc9d60e1ec0097a558f79166516c6d41e44ddec518141b5c65e97deea4fe9e7f4da66540311d1073d458f13ff8bee727379ceca0c18021acf2faf286602f428d30b304be76187671730171e817cc531378d547a09601aed1bf0a1f8130594ac9b32361c7c68b01ef54f765fce2609e463cd7e8f6bfe2f5166fcbdbd0d57dba03efff18508b98972d492d1040fd70003c94d6805ab18c524d89575d3640d0eccef659cd9d70e4b05ccc052b27c4247f7966dfd83503e6bf703fdf14a898297395f9fa9bd7aaa1555493f3afa82718af8b352763c9598e415a458d148ff837d0d531cc1163c126f09f93e0c1411f67a6ec09ee59c89979ff1033ed77f4d0311d89a23629d69a0332a44393f7e909bd750e3674c0fcb39d0be8424e28453b9f614e33a58e46372b42e13f81aa7f5a13adf96d366ea2c2da82900db77ed9d96016cc97eec91d9dd5a983f20f5c153da701188446c161c565d057b9ce47d7a282691e97f204576da8d0419a9f6f633c4f6e1cc6a630169a9e96b985190b988ccc13b0446c4a6363e8bc24c1079aa9d40f2571afd282ed54649c48953f63c3c8db9d6aeda76690d918c47f769da9db048ec1fd39d1382ec3ec647c9a34f0fe5c24d92649bc341e0288a1f8d78ecf8aed039cffeecdc8576d08a7c192ae164631a768aa94c37f51acaaddb2a6c1cf4f94e18dd1303bb32cda769362c01a2546a40804021d9865a8f232c72f5c974a3b09c8dc4acbbdf9a87a3db31d69961aec795c527732a0366948187dd8229d13fd3e2b6c458079e09aaff61e836ef5fc95bf3cbd3c7a94db615449fc6637ffb9e51654c03f993fd6b06afb45fe9462218017b6a8beb6e428ad625d0a294f4a35994410c44e6b75b71d6c8904352a178e1462dacfbcc22be76133ab116b117658045774f34b4c310c0ce48594ae1fb48efad8169d5525b490f906cbd6104907277a901cef15403548fd9288e9848a951fda354f5875219a99ffb9c5dcb973ff31d35efb6b16fe32b3f400f89e11c3b35ea508a8078bfe071d54ef0535f0eea2ef14b732e4fc80151e30ddfef7670a04f8102080af832bfdd823108bd35f67eb42e96a24826be2f5ce688fb1a3060f7040e2657c5dd6456795a34acf914710183f410529e7889e96698ff88972c366372c0b340e009e1291dca1c09f96b2632f371cfc6529c62bd45d75da535a3053aef38a1733dd6375c31571b49da089928b4c2a3d8dc4df3276e1dc4b6d454d77778f7039a65ef7f4fabbee48ae6b43b7d597e8280fd43cf331cea93cb63b1e22904f32656e418b39164ea9e28d0987be7bc9cca2da2e219ce615565ed62390de91decafdf93a8607448cb5a562c98323faf95b29a36b1f1b51b0339d507e61d37f98be9f72abb082499517dcbd1d5f195e5c32b42d1ab65d81f472b88c4dca305265b8f0549dd1a4e7a6f848a27e6e05b4dffd9fe27ee954632c9c0f75076e9457e99e0e444bcc281614d0f131a97a95dffb2ee6017c4ca30ebe03abf19124f6275f71e96dd37c4c1ee71539d63b19843586c1edc1df30d9c5bdb718530156cd8875db250168465f907d4fa8a183b6c89deafd52f47ea9216f6b8faf67ba0920ac78c5869005f77f69e029f5c84668ea8a74ce9ba5ebdf70d4956be46732d939b46b5725e54c4fd1cf9223f3391c721edc76668726addbca10c7b9a5278b9de9dffce1824b98e406c49377b3690072da132b23dac147a6fbbf61f83fa997f39bb10e5b35f95f2e4a02b3e3deaebb90d72b83f03293bdf8e18f55799c706b3c13a75935495183406aee7bfb3e8f9c97d158cdf5d5df6ade07ece4388131270804248e144cf7579f84ed62e662eb2f7a6dc52b48997a5a49fedb0a15c88f426d2df38403d7ed8c7b53c162ae08e0e280c6e53b16a3cd6a54916b4ec514313d461e7d46a7419c450b2eb2e9ce42ebb369420f72e000a76d4b3c2df90c004ba892260980507ab0cac411b612b65f40afcb225fee7dee6e18a48de9f8d8b3678cac9f1796a9dc9b44fd704d76560a7b19950970d068bd4eab77232e446c764d696f2112668d9a648a239edf827b5645b11e28350a396f472acb5be8a0dee5f9b677e96a8364c938b83ca1b7adaaa7aaed4fc93399376b0a35526019acf09a1acddd21275ee85e741ff70e30383706a5f829b7dd73fb0f78731f278044dad2611f7b29b022caef1065722293a2899a4ab54a03fe7fb8b8b81673f134210036e04c02f90683caba452adc9394f3e6d2e5ef5bcc89263931f2a4eafc48341b3b56ab13d22c9e2b6b419f0f3c38639668939f42fafe7ae589c0869a6e5a4ff9444a5948c12cae81244b73956150fdea3eaac53d7122376751f6fd6ed2cfbabea8f065a5f282d0d7eac2ea64c274ff32aeee8111e226d8836bbccc1dc32e048ea90cd1e71e7f4cf56a25940a08a07dec0efa03310d0c0fb881180eab920a6f31e3114fd1cba0fb90ca743eaa343c1195a72b62a1025e381f09b517281036229211d9842603348bbe1cb8590721f23ca029b68decba978de50f0b4fe908d5eade5f9243e209b4bff646a85d79e3baf7f843d2d3fa8f54d3fc8b37b66131848ce233323d51fc1259b5b118e76176a41800aef171242e7df7b65e783d0c6be80d8f573e21030325bf708ab4320fd8784472aad8ed7c6b9f22730bd51fa6fc2170e4c88f9ca4668813c7dde0600a88d041b1e574c4c70dec7448fb7e9572716c66c67a8018f330f6250f55de715030347ec29f8b702c8b2e9974a455167ccf10391463ec35a08e29cd1a20b0c7fad0acfd477a5d7514f6915f4c9dd770d03802ad7e37b68c2a3a8e5c8a694cdc1f62a5c1ce7292dc7230b91eeaffe219cb932d15c4fd33d801b8990815ba4db28875878c2d0d2b6f8d97d49c480cc8307c35665fb3ee9226affe2025274a992feec98a50402411b16c1813ee2e3d7174b9618499dcf2fa49bc6412b89d3543735719de2f338c208207859549c5c0e76b477b2295b21b7ccf924b8c66552b7d6f4c3da42014354f68d9e07721cee8fed3598f1d5216d3c953162c8d6912837048423a9eab0b2f7ed99fa2e641cb7ff353513fa9d077913276bece91b62f8d255b2806645338ab69dce47d572f5601f9c86e996450b9184a9e4359295904b5446453b433a7a1a7032e2f9e080f56daa74b36551fa64291d3a53640a4128498116cd22135edeb29fcf3fe4c72f5ae8066baafef1c6469bed837cef4019009adea47db3f935fc4b37f44bb28901c73d2866b76b77a15363adf128e0de3ca066ea1d3381cb3526dadf2c434bc0dd9a6405844c2f939bc335174e27c0c13a4b8a37b1ba9f5731a4108549c4c1b9d32c2524c6c848e3c70400d1146853b1054667d19ee8d3ab8c3be69a968892ad87275617b67772127837fa77832718d9f6d67774678b714871596e8a6c3e26a0089f5493ad279c7c681de3e6dd0d6b1fc9cf2e36755c9f657a97f680356a43bc54815a7cb32c71114f3aa76cd6ce0093cc7ba0a3409a1e7ded6fa9106c709e27b9d64dad5ea607425186f3043a795b8b1cfec373ab1d30796d18bb6569bb323b5ec0d022d84dd3f87fb676c41f024f572814b8cf2b7eae46ddf03f52f04c3fc8d75355ec36617eb78a7c2b0e81fd3e5f6aa3d2499813c23b4c18f94b0f3081f6c3067dedf720b3bca318a233a1cfec2189842f21d78a668ba072fc52de613352bfea39bbc46afd60b371875e05654e523b2ec1005d5e10b1a697e6b7c9edd59d859612ead9523f3996bb1508f5866a94f00bc0e906931027167a79058e44a847cceabd9ecffd93bae630891326328f5239dbe38bc92eb57f6fa0dfec074556bfbc15cd94eaed0ec8b0ac5fc3895a131a21a739216176f6c312928fadfa64d572a0bb0b8de8e99be39f4a9c4e51df3964c8d21d5221825ff1f3147ed0ae2497bf97c4fe08b8cf07cd80e63bd2c146945dae47a335e568a4292c0a7d149256d7c24c883445560514e3427f74e93725ded56922b79c3171b4b921a4ec6de18bddbf44d85e46fcfd75cc9f652633ae733ad31f1c8794ab1934128b55a8717396971b8c618a8adcc67c3cc24c607fdfcdb15c634ab8de397864236cfeb97ba9c7fe5029685737b7b8c5b2151a45d7e0aacc124dfc70201e6b2d6450719a315c3147483f640155353626abfa5b91b73d4f15e29347227f495f44d56f06b5c2d7e7ec527e5ef0ba4412028c837071e4446af66c0613f75c8dbe888b049736e65c1c07aa4177ceefa8e3896efb1d0a12c5034edc59282f63095a320d4d0dd5088c787f42042d75ba89bdfeb80fd70b4bde0944518eb60b6355583482658766614d1502f8def8c456526689f353d37753e292fa944dfd3b84ef7482f242fb9fe159c55d98abb6d0064248b4163024b926d73d06eaae084c09643d76d2d55ada8ffed0ae8993ef4f6fd28f11b3d90229c773b2edbf303530b6097b0d5a2d019f50bc0f9698afc936ff4fb83ffeaf97fd3b78d8175903fbb1ef4b89e411cb1e55451862919f18bbda6740d217c08d02b54c013862d0dc5e95d8dfabb1d71ee6be702870a1c5cccd02e6da36b00856e654cb38263a27814f5f5e1864c3b9147a384bd22a088bf2190ed0bebce82f4619a03c6cc6b107a61250d582b90aafe9742298577d5b0bc706b6ef50ad05283dc620fb3b0bdab91df7a93ee94f3d5e58efb3028134c900774c5ae6506420e52eb54affcb603f2490182a25dd4939ac95e38161b8c805ab4f497b146e7b58123cef39e1b0933a266ac9190188924aa73abef5575b7efc9ebfac10f4d86bfaf7b9013d9bd6833e4cd1371524c886a83dbe4616bc1e4b853a47748a86bb1e6e5fd9a1fac6869ad50fcb57657861046161939bf5eec746875c216242beecb1468386f151f3b84335a0ab9050858084e4a326257428d29853ef3256e9729f5bd884138f668e4dd9cd151085ab3c6f4e6a2cf700620e832686539fd8771706ee26e8c36a5218e69e4c467872391d4bec214890e04b0c7db41ee06ba767860bb955050b7b3b6fe76d5fee52e986004ea582742ef39908d3276e59081eb1fd50ebcbc0dedad4077d87a0df147ea8d8a4e8ff258c65ab971bc30a70ac6f07c31956b824b9aff6567507946ed36ebc846ea088a52001e7c66a2fe54e43d08392bf875a5a8e360ad3609fd08b54bb0f765d0cee607f2f727ab0e97c0d35959d779b428a0c11359a094f18dfc32782f969fb3e00b14b6983549be42380b69b6da7b1252a91864cb2cd2bce3135646d6ba6ec53942bde518140d466dcd99feb0023049238bda54fece7ebc0578424730ce2fdaca5f585a2e0229dd4727cde4774fae4af3d19b4f44bdad6aa7f8a5f41c7c290faffe1f728af6a7b883d550242d989ff63acae4b563c5c34e084eb4f01804721cd8073ebb9fb53d089332cbb65d05046feadd95a83bec13f1d4eff98576cca6214a4e03b0716a631760392e8235f67959d08453f3ca2085dcccab092fd348a7c240691a8ec385dc3c0136b759a5e1d2173c8c67b510d12d244d8f345fd1f6ce1fcd5b33a41488c1839a047c7afa15fda7de21d25ba2f3deae01e1c155fbb6ac0c4ff1fffa29752c154c41f1c92a767e553504d90855b33e7d60a9e49cf9cf649fbdc55508ba40e4c285cf0e185623402e75b5d3d0bfd67d402a3ae10b51fc8a9bcdff703cbfc0b2360faaef8aef9c8015bfc8fa7806966bd72d43dc433cfe60f5600c0b5aae303216df690ec91f0b473e77e86e3491c67bdb138d8f552c85a0ed406d2d3bf7f1ee498dfc73228742f930a4193f35238393dadae53a266a23f9eb11ba4e9bc8231e7b560ded80f7e73a8890d784a8d100d447dbc7c0521309b43c6e5a9358a392fcc6cbd3667fa833033c129021cd44c2fcb23be7644fb9a9cc2a3e7f7ba0459d04a309de111f7fa6058adcda48e1e58b613b908b4c670884638d9937e72c1513b00e560ca7b1d22d4c178f9a8bff5f90c6a65b3978dc92706087e08804f884bb563cd145e6edd625c7da4565a9b5b6f04ae1ca3b1bbe0fbbf30f157ca8caf86ae51400fe933be2cab1b23c8e12cadc54b23f3341221f218f506021d37e92ad4f54ae0f39ac931eb710b39f7970d68780ed152a36b0e5848ed1818134cd87489e0ce8a9ad8c3f575dcec3791ac12c0a76adf4c1cf43a4f1b61cc490fd736d374d61da01a8cab176186dedbcad099359768ec574fb0209fc21f6ea87af490f9f79b8581d2beceeeab3ffef06520ff61d67e0051480c37e831b4fdc44504cc18282ca90e4079dc155bd19b708d427b68c588ed893026488eb25c850d8df8bb94b49a2c275bf0e815d", 0x2000, &(0x7f0000002ec0)={&(0x7f0000002000)={0x50, 0xfffffffffffffffe, 0x1, {0x7, 0x2b, 0x3, 0x8002, 0x3, 0x7, 0x3, 0xbb, 0x0, 0x0, 0x1, 0x6}}, &(0x7f0000002080)={0x18, 0x0, 0x3, {0xfff}}, &(0x7f00000020c0)={0x18, 0xfffffffffffffffe, 0x8, {0x401}}, &(0x7f0000002100)={0x18, 0x0, 0xfff}, &(0x7f0000002140)={0x18, 0xffffffffffffffda, 0x8001, {0x400}}, &(0x7f00000021c0)={0x28, 0xfffffffffffffffe, 0x9, {{0x4, 0xb9, 0x2, r1}}}, &(0x7f0000002200)={0x60, 0x0, 0x4, {{0x243, 0x0, 0x2e, 0xa30, 0x8, 0x4, 0x58a, 0x88fd}}}, &(0x7f0000002280)={0x18, 0x0, 0x9, {0x5}}, &(0x7f00000022c0)={0x11, 0x0, 0x1, {'\x00'}}, &(0x7f0000002300)={0x20, 0xfffffffffffffffe, 0x4}, &(0x7f0000002400)={0x78, 0x0, 0xf0, {0x9, 0x2, 0x0, {0x4, 0x0, 0xa2, 0x7, 0xcb6, 0x2, 0x4, 0xb, 0x4, 0x4000, 0x401, r2, r4, 0x1, 0x8}}}, &(0x7f0000002500)={0x90, 0x0, 0x9, {0x4, 0x1, 0x3, 0x6, 0x1000, 0x0, {0x1, 0x5, 0x7fffffff, 0x7, 0x401, 0x7, 0x5, 0x7c, 0xfff, 0x2000, 0x5, r6, 0xee00, 0x6, 0x9}}}, &(0x7f00000025c0)={0xc8, 0x0, 0x7fffffff, [{0x7, 0x7, 0xa, 0x7, ':\\@%x-&-:)'}, {0x1, 0x3, 0x1, 0x0, '\x02'}, {0x3, 0x7fff, 0x0, 0xffffffff}, {0x0, 0x9d87, 0x0, 0x10001}, {0x2, 0x4, 0x2, 0x0, '$)'}, {0x0, 0x0, 0x6, 0x9, '[]){&%'}]}, &(0x7f0000002980)={0x1e0, 0x0, 0x2, [{{0x3, 0x3, 0x4, 0x4, 0x4ec, 0x2, {0x4, 0x8, 0x6, 0x9, 0xfffffffffffffffb, 0xfff, 0x5, 0x2, 0x6, 0xc000, 0x80000000, r8, r10, 0x4, 0x6}}, {0x3, 0x6, 0x1, 0x5, '\x00'}}, {{0x2, 0x1, 0xb, 0xd6f63f0, 0x0, 0x7fff, {0x0, 0xcc, 0x8, 0x7, 0x210000, 0x0, 0xab, 0x8, 0x2, 0x1000, 0x2, r11, r12, 0xa6, 0x7}}, {0x3, 0x5, 0x0, 0x8}}, {{0x6, 0x0, 0x5, 0xdf52, 0x4, 0x100, {0x3, 0x7, 0x80000001, 0x0, 0x9, 0x9, 0x8, 0x0, 0x101, 0xa000, 0x0, r13, 0xee01, 0x5, 0x100}}, {0x0, 0xe, 0x0, 0x79}}]}, &(0x7f0000002c40)={0xa0, 0x0, 0x6, {{0x1, 0x1, 0x1, 0x400, 0x0, 0x8, {0x3, 0x4c6e607f, 0xb, 0x9, 0x9, 0x6, 0x8001, 0x1, 0x0, 0xa000, 0x8, r14, r15, 0x4, 0x32}}, {0x0, 0x1}}}, &(0x7f0000002d00)={0x20, 0x0, 0x9, {0x5, 0x0, 0x8, 0xbc}}, &(0x7f0000002d80)={0x130, 0x0, 0xe54, {0xd26d, 0x9, 0x0, '\x00', {0x2000, 0x3, 0x101, 0x4, r16, r17, 0xa000, '\x00', 0x1, 0x0, 0x6, 0x3, {0x6, 0x1000}, {0x6, 0x8000}, {0x2, 0x7}, {0x1, 0xc}, 0x3, 0x2, 0xd, 0x4}}}}) mount$9p_virtio(&(0x7f0000002f80), &(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000), 0x4010, &(0x7f0000003040)={'trans=virtio,', {[{@mmap}, {@loose}], [{@measure}, {@uid_eq={'uid', 0x3d, r8}}, {@context={'context', 0x3d, 'system_u'}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) prctl$PR_GET_SECUREBITS(0x1b) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000030c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000003340)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000003740)={{r0}, r18, 0x2, @inherit={0x50, &(0x7f00000032c0)={0x1, 0x1, 0x2, 0x6, {0x1, 0x6, 0xfffffffffffffffe, 0x7, 0x9}, [0x9aea]}}, @devid=r19}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000003740)={{r0}, r18, 0x2, @inherit={0x50, &(0x7f00000032c0)={0x1, 0x1, 0x2, 0x6, {0x1, 0x6, 0xfffffffffffffffe, 0x7, 0x9}, [0x9aea]}}, @devid=r19}) setreuid(r2, r8) prctl$PR_GET_SECUREBITS(0x1b) mount$overlay(0x0, &(0x7f0000004740)='./file1\x00', &(0x7f0000004780), 0x80020, &(0x7f00000047c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fowner_gt={'fowner>', r11}}, {@subj_user={'subj_user', 0x3d, 'trans=virtio,'}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@euid_eq={'euid', 0x3d, r8}}, {@dont_hash}]}) (async) mount$overlay(0x0, &(0x7f0000004740)='./file1\x00', &(0x7f0000004780), 0x80020, &(0x7f00000047c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fowner_gt={'fowner>', r11}}, {@subj_user={'subj_user', 0x3d, 'trans=virtio,'}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@euid_eq={'euid', 0x3d, r8}}, {@dont_hash}]}) r20 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r20, 0x29, 0xd4, &(0x7f0000004880)=0x4, 0x4) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000048c0)=@rnullb, r14, &(0x7f0000004900)) lstat(&(0x7f0000004980)='.\x00', &(0x7f00000049c0)) r21 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file2\x00', &(0x7f0000004a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) getgroups(0x8, &(0x7f0000006b40)=[r21, r3, r7, r22, r5, 0x0, r10, r10]) 7m33.987422721s ago: executing program 3 (id=2726): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x8) prlimit64(0xffffffffffffffff, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r1, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d8", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x483, 0x0, 0xff}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x200000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="90010000100013070000000000000000ff0100000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002ee70000000000000000000000000000000000000000fac3c32072b1647200000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000058000100786381ac470ad88470a0976360fe6263286165732900000000000000000000000000000000000000000100"/320], 0x190}}, 0x0) 7m33.074139315s ago: executing program 3 (id=2742): setregid(0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='gid_map\x00') truncate(&(0x7f0000000040)='./file0\x00', 0xf42) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_tables_matches\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x204a) 7m17.892221405s ago: executing program 33 (id=2742): setregid(0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='gid_map\x00') truncate(&(0x7f0000000040)='./file0\x00', 0xf42) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_tables_matches\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x204a) 6m36.998648182s ago: executing program 4 (id=3725): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x119, 0x75, 0x0, 0x1, [@typed={0x8, 0xe6, 0x0, 0x0, @fd=r1}, @generic="897a22072687e16fdfb849e8dd3bce220a0ca5a0217c43a621fc12ea0f434990fb1debcbb8e87383381132856180c51cf041d37410e5c77c74341ca2fb3527623d0d2d2bc75c54319aadb5a0bf07015b904d89c47e56d4a00a4d5513d73c8f790a8c6205fc5adf3ece36d8bf098573c2ec8b3967135a4bcb4b37bbfc8f6f11a6125f87dedb659579fb127e221eb9a41ce6664ff427973789c92dbadbc1c26802fd2a7e6d3152396176", @nested={0x64, 0x425, 0x0, 0x1, [@nested={0x5d, 0x5b, 0x0, 0x1, [@nested={0x4, 0x38}, @generic="31ee704bf2205ac750d21a6c2f2dfbe2ec632ee97444c6e5508eecb0d002fed7244664b012fdb29ccd21c6e14a7fd67239cda477572049ea05", @nested={0x1a, 0xe8, 0x0, 0x1, [@typed={0x8, 0x99, 0x0, 0x0, @uid}, @generic="8cda759849b5a66f654f3e332a3d"]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x4) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) faccessat(0xffffffffffffffff, 0x0, 0x3) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f4070009040080ff0000fe01000000000000", 0x1c) (async) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) 6m36.998416642s ago: executing program 4 (id=3726): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x51bf3295, 0x101040) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0x40044581, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x0, 0x0, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x1a}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 6m36.998203072s ago: executing program 4 (id=3727): mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 6m36.995366762s ago: executing program 4 (id=3728): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000040), 0x50) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000480)={0x2, 0x0, @ioapic={0x6000, 0xdb72, 0x101, 0x7, 0x0, [{0x1, 0x0, 0x9, '\x00', 0x4}, {0x6, 0xa, 0x4, '\x00', 0xc6}, {0xf, 0x6, 0x3, '\x00', 0x7}, {0x4, 0x8, 0x0, '\x00', 0x2}, {0x6, 0x1, 0x4, '\x00', 0x8}, {0x3, 0x9, 0x40, '\x00', 0x3}, {0x1, 0x3c, 0xa3, '\x00', 0x2}, {0x3, 0x6, 0x6, '\x00', 0x40}, {0x9, 0x3, 0x41, '\x00', 0x2}, {0x4, 0x2, 0x3a, '\x00', 0x86}, {0x3, 0x3, 0x9}, {0x0, 0x0, 0x1, '\x00', 0x7}, {0x7, 0x2, 0x9, '\x00', 0xc0}, {0x5, 0x8, 0x1, '\x00', 0x9}, {0xf9, 0x0, 0x8, '\x00', 0x8}, {0x1, 0x10, 0x2, '\x00', 0x7}, {0x4, 0xc, 0x8}, {0x1b, 0x22, 0x5, '\x00', 0x44}, {0xfd, 0x1, 0xe6, '\x00', 0xe}, {0x5, 0xbc, 0x80}, {0xe, 0x5, 0x7, '\x00', 0x1}, {0x8, 0x2, 0x83, '\x00', 0x5}, {0x2, 0x8, 0x86, '\x00', 0xc}, {0x9, 0x1, 0x29, '\x00', 0x3}]}}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x7405e000) 6m36.960639503s ago: executing program 4 (id=3729): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e17000/0xa000)=nil, 0xa000, &(0x7f0000000000)=',,\x00\te\xcf\xad\x06\x8c-\xc6\xe4w\xd7\xbc\xef\r\xa0orc\xf6F\xe3\xce\xdc\xb7\x1a@\xa5\xfeo+lx\x92&\xb6\b\x82') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000380)='cache=mmap') r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) 6m36.938074373s ago: executing program 4 (id=3730): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x18814, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x18814, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}], [], 0x6b}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "e3de3d7b4cd07ec3eea37de77409000000cac4744c35"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f00000000c0)={{0x7, 0x8}, {}, 0x1}) (async) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f00000000c0)={{0x7, 0x8}, {}, 0x1}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r8, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) write(r8, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) ioctl$HIDIOCGUSAGES(r7, 0xd01c4813, &(0x7f0000000d40)={{0x2, 0x200, 0xfffffffd, 0x9, 0x6, 0x2}, 0x395, [0x1, 0x5, 0x7f, 0x6, 0x0, 0xfffffff9, 0x6, 0x3, 0x0, 0x7fff, 0x0, 0x10000, 0x1d6, 0x1, 0xff, 0xb, 0x9, 0x6, 0x1, 0x0, 0x96, 0xffffffff, 0x7, 0x2, 0x4, 0x5, 0x53, 0x5, 0xfe, 0x80, 0xe, 0xb4, 0xffffffff, 0x7, 0x1ff, 0x4, 0xd9, 0x7, 0xff, 0x6, 0x800, 0xa5a, 0x4000, 0x9, 0x71, 0x200, 0x5, 0x9, 0xfffffff7, 0xf, 0x8000, 0x6, 0x9, 0x581500ab, 0x0, 0x3, 0x400, 0x4, 0x1, 0x9, 0x6, 0x1, 0x0, 0x5, 0x6, 0x5, 0x2, 0x4, 0x800, 0x0, 0x2, 0x9, 0x5, 0x4, 0x2, 0x9, 0xe, 0x9, 0x2, 0x81, 0x1, 0xf3, 0x3, 0x209, 0x100, 0x1000, 0x1, 0x6, 0x2, 0xc82a, 0x4000000, 0xa, 0x7, 0x4, 0x3, 0x2, 0x40, 0x100, 0x6, 0x1, 0xffff, 0xfffffffa, 0xf, 0x8f, 0x7, 0x6f81, 0x9, 0x2, 0x3, 0xd0800000, 0x8, 0x9, 0x6, 0x7f, 0x5eba, 0xdcd, 0x68, 0xf, 0x7, 0x5, 0xe, 0x2, 0x2b, 0x4, 0x6eb, 0x4, 0x9, 0x8, 0x6, 0x0, 0x4, 0xffff, 0x7, 0x0, 0xb, 0x5b4a5d87, 0x5, 0x4, 0x4, 0x7, 0x0, 0x4, 0xfffffff5, 0xa, 0x1000, 0x6, 0x30000, 0x1, 0x200b1ea5, 0x7, 0x9, 0xb, 0x7f, 0x7, 0x9, 0xd6, 0xb17, 0xffffffff, 0x4, 0xe, 0x519, 0x5, 0xb, 0x7, 0xa, 0x0, 0x7, 0x0, 0x9, 0x0, 0x7f, 0xffffffff, 0x7ff, 0x5, 0xfffffff5, 0xf, 0x1010, 0x6, 0x3, 0x81, 0x7, 0x8, 0xd, 0x2, 0x3, 0x0, 0x46b, 0x6, 0x54, 0x1, 0xfffffffd, 0x6, 0x5, 0x80000001, 0x7, 0x4, 0x6, 0x1, 0x7, 0x4, 0x3, 0xac, 0x4, 0x8a900000, 0x8, 0xad, 0xfffff801, 0xffffff49, 0x8001, 0x400, 0x5, 0x7e0, 0x1, 0xc, 0x8, 0xffffffff, 0x9, 0x4, 0x20e, 0x4, 0x101, 0x33af, 0x1, 0xb, 0x2, 0xffff, 0x2, 0xe9, 0x6, 0x0, 0xb4b80000, 0x3ff, 0x6, 0x7, 0x13, 0xfffffff7, 0x80000001, 0x6, 0x8, 0x10001, 0x5, 0x8c6, 0x4aa, 0x8, 0xffffffcf, 0x5, 0xff, 0x5, 0x6, 0x8000, 0xe, 0x4, 0x2, 0x2, 0x1, 0x4, 0x9, 0xe2, 0x83, 0x4, 0xfffffffb, 0x5, 0x3, 0x2, 0x4, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6d, 0x8131, 0x10000, 0xa42, 0x8ea, 0x0, 0x9, 0x6ad3d576, 0x80000001, 0x0, 0x3, 0x7fffffff, 0x9, 0x47, 0x4, 0x1, 0xed, 0x3, 0xffffffff, 0x2, 0x3, 0x1, 0x9, 0x3371, 0x1000, 0xfffffffe, 0xfffffff9, 0x6b2f, 0x4e9f, 0x8, 0x0, 0x2, 0x6, 0xae, 0x2, 0x6, 0x7, 0x5, 0x2, 0x7, 0x9, 0x8, 0x83, 0x9, 0x0, 0x134, 0x9, 0x4, 0x4, 0x1, 0x6a4, 0x4, 0xe, 0x35, 0x6, 0x200, 0x7, 0x10001, 0x3, 0x200, 0xc, 0x2, 0xff, 0x0, 0x5, 0xab, 0xfff, 0x2, 0x8, 0x0, 0x6, 0x1, 0x4, 0x81, 0x5, 0x21e85071, 0x0, 0x80000000, 0x0, 0x9, 0x8000000, 0x4, 0x1, 0x5, 0xb, 0x1000, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x5123, 0xb, 0x5, 0x764, 0x2, 0x9, 0xe, 0xc3, 0x78b7, 0x1, 0x7, 0x7, 0x0, 0x5, 0x7, 0x4, 0x854, 0x3, 0x8, 0x1, 0x9, 0x1, 0x2, 0x8, 0x19580000, 0x9, 0x5, 0x5, 0x1ff, 0x7, 0x9, 0x1, 0x8, 0xffff779f, 0x5, 0x6, 0x7fff, 0x5, 0x4, 0x0, 0xb, 0x80, 0x1, 0x6, 0x6, 0x1, 0x6, 0x8, 0x0, 0x0, 0x1, 0xfffff801, 0x7ff, 0x0, 0x555, 0x3ff, 0x2, 0x9, 0x8e07, 0x8daf, 0x8, 0x3, 0xef46, 0x665, 0xd, 0x4ba, 0x80, 0x340, 0x67, 0x2, 0x9, 0x7e, 0x3, 0x8, 0x9, 0x9, 0x1, 0xf2, 0x5, 0x2df, 0x6, 0x1, 0x321, 0x7, 0x4, 0x0, 0xe, 0x6, 0xd9, 0x3, 0xffffffff, 0xffff8000, 0xdb, 0xd12f, 0x3, 0x4, 0x6, 0x2000, 0xc39, 0x2, 0x0, 0x8, 0x7f, 0x400, 0x4, 0x95, 0x4, 0x1ff, 0x5, 0x3ff, 0x100, 0x1, 0x6, 0x17, 0x8, 0x7, 0x2, 0x4, 0x6, 0x81, 0x7, 0x4, 0x9, 0x200, 0x4, 0x6, 0xf, 0x9, 0xfffff801, 0x8, 0x8, 0x6, 0x7f, 0x2, 0xfffffff6, 0x6a9, 0x5, 0x800, 0x9, 0x7, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x8c94, 0x9, 0xe39, 0x5, 0x13, 0x8, 0x5, 0xc, 0x2, 0x3ff, 0xe3, 0x1ff, 0x5, 0x58, 0x7, 0x101, 0x3, 0x50, 0x4, 0x0, 0x0, 0x3, 0xce, 0x5, 0x8, 0x1f3, 0xc0000000, 0xffffff80, 0x8, 0x7, 0x7, 0x2, 0xa, 0x3, 0x9, 0x3, 0x6, 0xb, 0x200, 0x9, 0xc435, 0x7ff, 0x1, 0x2, 0xe10, 0x1, 0xffff, 0x0, 0x9, 0x0, 0x9, 0x81, 0x2, 0xb, 0xd7, 0x3, 0x2, 0x1, 0xd41, 0xf, 0xffffff89, 0x6, 0x4, 0x4, 0x0, 0x0, 0x8, 0x6, 0xfffffff7, 0x9, 0xf0f, 0xffffff45, 0x2, 0x7, 0x400, 0x8e, 0x6, 0x8, 0x0, 0x4, 0x1, 0x1, 0x4574, 0x6, 0x0, 0x3ff, 0x2, 0x8, 0x0, 0x2, 0x3, 0x4, 0xae0, 0x2, 0x5, 0xffffffff, 0x4, 0x9, 0x2, 0x1000, 0x537b, 0x4, 0x2, 0xb4ba, 0x81, 0x8000, 0x1, 0x6, 0x2, 0x1ff, 0xe12, 0xffffffff, 0x8, 0x4, 0x3, 0x3, 0x7, 0x9, 0x9, 0x400, 0xffff590a, 0xb, 0x0, 0x86500000, 0x5, 0xffffffff, 0x10, 0x0, 0x8, 0x7, 0x10000, 0x3, 0x6, 0x9, 0x4, 0x652, 0x4, 0x7ff, 0x1, 0x3f4, 0xff, 0x3f0, 0xb5c9, 0xbe32, 0x2, 0xdac1, 0x8, 0x6a2, 0x1, 0x7, 0x3, 0x5, 0x7, 0x2, 0xffff, 0x6, 0x6, 0x4, 0xc, 0x1, 0xb080, 0x6ed646d9, 0x1, 0x5, 0x161c8876, 0x8, 0x4, 0x2, 0x7fffffff, 0x5, 0xfffffff9, 0x0, 0x42712e0f, 0x7c, 0x401, 0x4, 0x5, 0xfffff209, 0x1, 0x2, 0x0, 0x20000000, 0xd, 0x2, 0x9, 0x9, 0x6dd5bea6, 0x2, 0x4, 0x5e, 0x4, 0xb, 0x0, 0x5, 0xffff, 0x7, 0x1d, 0x19, 0xa87, 0xfffffff7, 0x8c, 0xe6, 0x1ce0418, 0x9, 0x3, 0x158, 0x8, 0xf, 0x7fff, 0x6, 0xff, 0xfffffff8, 0x200, 0xb, 0x1b4, 0x0, 0x6, 0xf, 0x5, 0x7, 0xffffffff, 0x9, 0x10000, 0x400, 0x3, 0x10001, 0x6d, 0x6, 0xa663, 0x7, 0x2, 0xd, 0x1, 0x3, 0x3, 0x4, 0x3, 0x101, 0x2, 0xea, 0x8, 0x7fffffff, 0x6, 0x0, 0x80000000, 0x7fffffff, 0x7, 0x5, 0x1ec, 0xfffffff7, 0x6, 0x1, 0x1, 0x1, 0x5, 0x800, 0x8, 0x200, 0x4, 0xfffffffe, 0x0, 0x6, 0xa1, 0x1, 0x0, 0xc765, 0x5659, 0x4451, 0x401, 0x6, 0xffffffff, 0x5, 0x9, 0x6, 0x80000000, 0x6, 0x8, 0xa, 0x6, 0x1, 0x3ff, 0x1000, 0x0, 0x8, 0x7, 0x2, 0x3, 0x7fff, 0x7fff, 0xa1, 0x7, 0x4, 0x3ffa, 0xffffffb5, 0x4, 0x9, 0x1, 0x2, 0x2, 0x1000, 0x4, 0x2, 0x9, 0x1, 0xfffffff8, 0x2, 0x2, 0xf, 0x1, 0x0, 0x3, 0x1, 0x0, 0x4, 0x3, 0x6, 0x7, 0xfffffff9, 0x7, 0x0, 0x2f1, 0x4, 0x1f32, 0x33da, 0x322e, 0x9, 0x8, 0x9, 0xdb, 0xffff, 0x1000, 0x4, 0x3, 0x5, 0xa00, 0x5, 0x9, 0x10001, 0x3, 0x8, 0x0, 0x4, 0xfffffff9, 0x3ff, 0x1, 0x80000000, 0x7, 0xffffffff, 0x3, 0x7fff, 0x7, 0x4ed3, 0x9, 0x100, 0x40, 0x5, 0xac1, 0x0, 0x3, 0x0, 0xba, 0x10000, 0xfffff2ab, 0x80, 0x1, 0x88, 0x1, 0xfff, 0x2, 0x5, 0x4, 0x8, 0x1, 0x4, 0xa, 0xff, 0x400, 0xfffffeff, 0xc, 0x3, 0xbd, 0x6, 0x5, 0x9, 0x7, 0xfffffc00, 0x101, 0x3ff, 0xff, 0x4, 0xe59, 0x3, 0x8, 0xf6d, 0x8, 0x0, 0x4, 0x1ff, 0x37d, 0x627e, 0x8, 0x3, 0x35, 0x6c, 0x4, 0x7, 0x0, 0x4, 0x2, 0x101, 0x9, 0x6, 0x1ff, 0x4, 0x4, 0xfffffffe, 0x3ff, 0xdf, 0xd, 0xd, 0xa, 0x2, 0x3, 0x8000, 0x0, 0x4, 0x3, 0xb5, 0x0, 0x2, 0x0, 0x7, 0x0, 0xfffffff7, 0xffff, 0xf56, 0x3, 0x1, 0x81, 0x0, 0x400, 0x1, 0xfffffff2, 0x20000000, 0x6, 0x9, 0xfffff058, 0x10, 0x8000, 0x8, 0x9, 0x100, 0x3ff, 0x0, 0x101, 0xbd, 0xfff, 0x1000, 0x7, 0x1, 0x7fff, 0x2, 0xa, 0x5, 0x4, 0x6, 0x8, 0xffffffff, 0x4, 0xffff0001, 0xa28, 0x6, 0x0, 0x75be660b, 0x3, 0x5, 0x5, 0x1, 0x9, 0xfffe0000, 0x7, 0x6, 0x0, 0x3, 0xe, 0x8, 0x7fffffff, 0x74, 0x0, 0x81, 0x0, 0x6, 0x3, 0x4, 0x80000000, 0x2, 0x7, 0x1, 0x9, 0x8, 0x9, 0x7, 0x4, 0x800, 0xfffffff8, 0x8, 0xb94, 0x3, 0x4, 0x5, 0x81, 0xffffffad, 0xfffffffd, 0x6, 0x9, 0x423, 0xdfd1, 0x5]}) (async) ioctl$HIDIOCGUSAGES(r7, 0xd01c4813, &(0x7f0000000d40)={{0x2, 0x200, 0xfffffffd, 0x9, 0x6, 0x2}, 0x395, [0x1, 0x5, 0x7f, 0x6, 0x0, 0xfffffff9, 0x6, 0x3, 0x0, 0x7fff, 0x0, 0x10000, 0x1d6, 0x1, 0xff, 0xb, 0x9, 0x6, 0x1, 0x0, 0x96, 0xffffffff, 0x7, 0x2, 0x4, 0x5, 0x53, 0x5, 0xfe, 0x80, 0xe, 0xb4, 0xffffffff, 0x7, 0x1ff, 0x4, 0xd9, 0x7, 0xff, 0x6, 0x800, 0xa5a, 0x4000, 0x9, 0x71, 0x200, 0x5, 0x9, 0xfffffff7, 0xf, 0x8000, 0x6, 0x9, 0x581500ab, 0x0, 0x3, 0x400, 0x4, 0x1, 0x9, 0x6, 0x1, 0x0, 0x5, 0x6, 0x5, 0x2, 0x4, 0x800, 0x0, 0x2, 0x9, 0x5, 0x4, 0x2, 0x9, 0xe, 0x9, 0x2, 0x81, 0x1, 0xf3, 0x3, 0x209, 0x100, 0x1000, 0x1, 0x6, 0x2, 0xc82a, 0x4000000, 0xa, 0x7, 0x4, 0x3, 0x2, 0x40, 0x100, 0x6, 0x1, 0xffff, 0xfffffffa, 0xf, 0x8f, 0x7, 0x6f81, 0x9, 0x2, 0x3, 0xd0800000, 0x8, 0x9, 0x6, 0x7f, 0x5eba, 0xdcd, 0x68, 0xf, 0x7, 0x5, 0xe, 0x2, 0x2b, 0x4, 0x6eb, 0x4, 0x9, 0x8, 0x6, 0x0, 0x4, 0xffff, 0x7, 0x0, 0xb, 0x5b4a5d87, 0x5, 0x4, 0x4, 0x7, 0x0, 0x4, 0xfffffff5, 0xa, 0x1000, 0x6, 0x30000, 0x1, 0x200b1ea5, 0x7, 0x9, 0xb, 0x7f, 0x7, 0x9, 0xd6, 0xb17, 0xffffffff, 0x4, 0xe, 0x519, 0x5, 0xb, 0x7, 0xa, 0x0, 0x7, 0x0, 0x9, 0x0, 0x7f, 0xffffffff, 0x7ff, 0x5, 0xfffffff5, 0xf, 0x1010, 0x6, 0x3, 0x81, 0x7, 0x8, 0xd, 0x2, 0x3, 0x0, 0x46b, 0x6, 0x54, 0x1, 0xfffffffd, 0x6, 0x5, 0x80000001, 0x7, 0x4, 0x6, 0x1, 0x7, 0x4, 0x3, 0xac, 0x4, 0x8a900000, 0x8, 0xad, 0xfffff801, 0xffffff49, 0x8001, 0x400, 0x5, 0x7e0, 0x1, 0xc, 0x8, 0xffffffff, 0x9, 0x4, 0x20e, 0x4, 0x101, 0x33af, 0x1, 0xb, 0x2, 0xffff, 0x2, 0xe9, 0x6, 0x0, 0xb4b80000, 0x3ff, 0x6, 0x7, 0x13, 0xfffffff7, 0x80000001, 0x6, 0x8, 0x10001, 0x5, 0x8c6, 0x4aa, 0x8, 0xffffffcf, 0x5, 0xff, 0x5, 0x6, 0x8000, 0xe, 0x4, 0x2, 0x2, 0x1, 0x4, 0x9, 0xe2, 0x83, 0x4, 0xfffffffb, 0x5, 0x3, 0x2, 0x4, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6d, 0x8131, 0x10000, 0xa42, 0x8ea, 0x0, 0x9, 0x6ad3d576, 0x80000001, 0x0, 0x3, 0x7fffffff, 0x9, 0x47, 0x4, 0x1, 0xed, 0x3, 0xffffffff, 0x2, 0x3, 0x1, 0x9, 0x3371, 0x1000, 0xfffffffe, 0xfffffff9, 0x6b2f, 0x4e9f, 0x8, 0x0, 0x2, 0x6, 0xae, 0x2, 0x6, 0x7, 0x5, 0x2, 0x7, 0x9, 0x8, 0x83, 0x9, 0x0, 0x134, 0x9, 0x4, 0x4, 0x1, 0x6a4, 0x4, 0xe, 0x35, 0x6, 0x200, 0x7, 0x10001, 0x3, 0x200, 0xc, 0x2, 0xff, 0x0, 0x5, 0xab, 0xfff, 0x2, 0x8, 0x0, 0x6, 0x1, 0x4, 0x81, 0x5, 0x21e85071, 0x0, 0x80000000, 0x0, 0x9, 0x8000000, 0x4, 0x1, 0x5, 0xb, 0x1000, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x5123, 0xb, 0x5, 0x764, 0x2, 0x9, 0xe, 0xc3, 0x78b7, 0x1, 0x7, 0x7, 0x0, 0x5, 0x7, 0x4, 0x854, 0x3, 0x8, 0x1, 0x9, 0x1, 0x2, 0x8, 0x19580000, 0x9, 0x5, 0x5, 0x1ff, 0x7, 0x9, 0x1, 0x8, 0xffff779f, 0x5, 0x6, 0x7fff, 0x5, 0x4, 0x0, 0xb, 0x80, 0x1, 0x6, 0x6, 0x1, 0x6, 0x8, 0x0, 0x0, 0x1, 0xfffff801, 0x7ff, 0x0, 0x555, 0x3ff, 0x2, 0x9, 0x8e07, 0x8daf, 0x8, 0x3, 0xef46, 0x665, 0xd, 0x4ba, 0x80, 0x340, 0x67, 0x2, 0x9, 0x7e, 0x3, 0x8, 0x9, 0x9, 0x1, 0xf2, 0x5, 0x2df, 0x6, 0x1, 0x321, 0x7, 0x4, 0x0, 0xe, 0x6, 0xd9, 0x3, 0xffffffff, 0xffff8000, 0xdb, 0xd12f, 0x3, 0x4, 0x6, 0x2000, 0xc39, 0x2, 0x0, 0x8, 0x7f, 0x400, 0x4, 0x95, 0x4, 0x1ff, 0x5, 0x3ff, 0x100, 0x1, 0x6, 0x17, 0x8, 0x7, 0x2, 0x4, 0x6, 0x81, 0x7, 0x4, 0x9, 0x200, 0x4, 0x6, 0xf, 0x9, 0xfffff801, 0x8, 0x8, 0x6, 0x7f, 0x2, 0xfffffff6, 0x6a9, 0x5, 0x800, 0x9, 0x7, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x8c94, 0x9, 0xe39, 0x5, 0x13, 0x8, 0x5, 0xc, 0x2, 0x3ff, 0xe3, 0x1ff, 0x5, 0x58, 0x7, 0x101, 0x3, 0x50, 0x4, 0x0, 0x0, 0x3, 0xce, 0x5, 0x8, 0x1f3, 0xc0000000, 0xffffff80, 0x8, 0x7, 0x7, 0x2, 0xa, 0x3, 0x9, 0x3, 0x6, 0xb, 0x200, 0x9, 0xc435, 0x7ff, 0x1, 0x2, 0xe10, 0x1, 0xffff, 0x0, 0x9, 0x0, 0x9, 0x81, 0x2, 0xb, 0xd7, 0x3, 0x2, 0x1, 0xd41, 0xf, 0xffffff89, 0x6, 0x4, 0x4, 0x0, 0x0, 0x8, 0x6, 0xfffffff7, 0x9, 0xf0f, 0xffffff45, 0x2, 0x7, 0x400, 0x8e, 0x6, 0x8, 0x0, 0x4, 0x1, 0x1, 0x4574, 0x6, 0x0, 0x3ff, 0x2, 0x8, 0x0, 0x2, 0x3, 0x4, 0xae0, 0x2, 0x5, 0xffffffff, 0x4, 0x9, 0x2, 0x1000, 0x537b, 0x4, 0x2, 0xb4ba, 0x81, 0x8000, 0x1, 0x6, 0x2, 0x1ff, 0xe12, 0xffffffff, 0x8, 0x4, 0x3, 0x3, 0x7, 0x9, 0x9, 0x400, 0xffff590a, 0xb, 0x0, 0x86500000, 0x5, 0xffffffff, 0x10, 0x0, 0x8, 0x7, 0x10000, 0x3, 0x6, 0x9, 0x4, 0x652, 0x4, 0x7ff, 0x1, 0x3f4, 0xff, 0x3f0, 0xb5c9, 0xbe32, 0x2, 0xdac1, 0x8, 0x6a2, 0x1, 0x7, 0x3, 0x5, 0x7, 0x2, 0xffff, 0x6, 0x6, 0x4, 0xc, 0x1, 0xb080, 0x6ed646d9, 0x1, 0x5, 0x161c8876, 0x8, 0x4, 0x2, 0x7fffffff, 0x5, 0xfffffff9, 0x0, 0x42712e0f, 0x7c, 0x401, 0x4, 0x5, 0xfffff209, 0x1, 0x2, 0x0, 0x20000000, 0xd, 0x2, 0x9, 0x9, 0x6dd5bea6, 0x2, 0x4, 0x5e, 0x4, 0xb, 0x0, 0x5, 0xffff, 0x7, 0x1d, 0x19, 0xa87, 0xfffffff7, 0x8c, 0xe6, 0x1ce0418, 0x9, 0x3, 0x158, 0x8, 0xf, 0x7fff, 0x6, 0xff, 0xfffffff8, 0x200, 0xb, 0x1b4, 0x0, 0x6, 0xf, 0x5, 0x7, 0xffffffff, 0x9, 0x10000, 0x400, 0x3, 0x10001, 0x6d, 0x6, 0xa663, 0x7, 0x2, 0xd, 0x1, 0x3, 0x3, 0x4, 0x3, 0x101, 0x2, 0xea, 0x8, 0x7fffffff, 0x6, 0x0, 0x80000000, 0x7fffffff, 0x7, 0x5, 0x1ec, 0xfffffff7, 0x6, 0x1, 0x1, 0x1, 0x5, 0x800, 0x8, 0x200, 0x4, 0xfffffffe, 0x0, 0x6, 0xa1, 0x1, 0x0, 0xc765, 0x5659, 0x4451, 0x401, 0x6, 0xffffffff, 0x5, 0x9, 0x6, 0x80000000, 0x6, 0x8, 0xa, 0x6, 0x1, 0x3ff, 0x1000, 0x0, 0x8, 0x7, 0x2, 0x3, 0x7fff, 0x7fff, 0xa1, 0x7, 0x4, 0x3ffa, 0xffffffb5, 0x4, 0x9, 0x1, 0x2, 0x2, 0x1000, 0x4, 0x2, 0x9, 0x1, 0xfffffff8, 0x2, 0x2, 0xf, 0x1, 0x0, 0x3, 0x1, 0x0, 0x4, 0x3, 0x6, 0x7, 0xfffffff9, 0x7, 0x0, 0x2f1, 0x4, 0x1f32, 0x33da, 0x322e, 0x9, 0x8, 0x9, 0xdb, 0xffff, 0x1000, 0x4, 0x3, 0x5, 0xa00, 0x5, 0x9, 0x10001, 0x3, 0x8, 0x0, 0x4, 0xfffffff9, 0x3ff, 0x1, 0x80000000, 0x7, 0xffffffff, 0x3, 0x7fff, 0x7, 0x4ed3, 0x9, 0x100, 0x40, 0x5, 0xac1, 0x0, 0x3, 0x0, 0xba, 0x10000, 0xfffff2ab, 0x80, 0x1, 0x88, 0x1, 0xfff, 0x2, 0x5, 0x4, 0x8, 0x1, 0x4, 0xa, 0xff, 0x400, 0xfffffeff, 0xc, 0x3, 0xbd, 0x6, 0x5, 0x9, 0x7, 0xfffffc00, 0x101, 0x3ff, 0xff, 0x4, 0xe59, 0x3, 0x8, 0xf6d, 0x8, 0x0, 0x4, 0x1ff, 0x37d, 0x627e, 0x8, 0x3, 0x35, 0x6c, 0x4, 0x7, 0x0, 0x4, 0x2, 0x101, 0x9, 0x6, 0x1ff, 0x4, 0x4, 0xfffffffe, 0x3ff, 0xdf, 0xd, 0xd, 0xa, 0x2, 0x3, 0x8000, 0x0, 0x4, 0x3, 0xb5, 0x0, 0x2, 0x0, 0x7, 0x0, 0xfffffff7, 0xffff, 0xf56, 0x3, 0x1, 0x81, 0x0, 0x400, 0x1, 0xfffffff2, 0x20000000, 0x6, 0x9, 0xfffff058, 0x10, 0x8000, 0x8, 0x9, 0x100, 0x3ff, 0x0, 0x101, 0xbd, 0xfff, 0x1000, 0x7, 0x1, 0x7fff, 0x2, 0xa, 0x5, 0x4, 0x6, 0x8, 0xffffffff, 0x4, 0xffff0001, 0xa28, 0x6, 0x0, 0x75be660b, 0x3, 0x5, 0x5, 0x1, 0x9, 0xfffe0000, 0x7, 0x6, 0x0, 0x3, 0xe, 0x8, 0x7fffffff, 0x74, 0x0, 0x81, 0x0, 0x6, 0x3, 0x4, 0x80000000, 0x2, 0x7, 0x1, 0x9, 0x8, 0x9, 0x7, 0x4, 0x800, 0xfffffff8, 0x8, 0xb94, 0x3, 0x4, 0x5, 0x81, 0xffffffad, 0xfffffffd, 0x6, 0x9, 0x423, 0xdfd1, 0x5]}) 6m21.893206651s ago: executing program 34 (id=3730): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x18814, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x18814, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}], [], 0x6b}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "e3de3d7b4cd07ec3eea37de77409000000cac4744c35"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f00000000c0)={{0x7, 0x8}, {}, 0x1}) (async) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f00000000c0)={{0x7, 0x8}, {}, 0x1}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r8, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) write(r8, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) ioctl$HIDIOCGUSAGES(r7, 0xd01c4813, &(0x7f0000000d40)={{0x2, 0x200, 0xfffffffd, 0x9, 0x6, 0x2}, 0x395, [0x1, 0x5, 0x7f, 0x6, 0x0, 0xfffffff9, 0x6, 0x3, 0x0, 0x7fff, 0x0, 0x10000, 0x1d6, 0x1, 0xff, 0xb, 0x9, 0x6, 0x1, 0x0, 0x96, 0xffffffff, 0x7, 0x2, 0x4, 0x5, 0x53, 0x5, 0xfe, 0x80, 0xe, 0xb4, 0xffffffff, 0x7, 0x1ff, 0x4, 0xd9, 0x7, 0xff, 0x6, 0x800, 0xa5a, 0x4000, 0x9, 0x71, 0x200, 0x5, 0x9, 0xfffffff7, 0xf, 0x8000, 0x6, 0x9, 0x581500ab, 0x0, 0x3, 0x400, 0x4, 0x1, 0x9, 0x6, 0x1, 0x0, 0x5, 0x6, 0x5, 0x2, 0x4, 0x800, 0x0, 0x2, 0x9, 0x5, 0x4, 0x2, 0x9, 0xe, 0x9, 0x2, 0x81, 0x1, 0xf3, 0x3, 0x209, 0x100, 0x1000, 0x1, 0x6, 0x2, 0xc82a, 0x4000000, 0xa, 0x7, 0x4, 0x3, 0x2, 0x40, 0x100, 0x6, 0x1, 0xffff, 0xfffffffa, 0xf, 0x8f, 0x7, 0x6f81, 0x9, 0x2, 0x3, 0xd0800000, 0x8, 0x9, 0x6, 0x7f, 0x5eba, 0xdcd, 0x68, 0xf, 0x7, 0x5, 0xe, 0x2, 0x2b, 0x4, 0x6eb, 0x4, 0x9, 0x8, 0x6, 0x0, 0x4, 0xffff, 0x7, 0x0, 0xb, 0x5b4a5d87, 0x5, 0x4, 0x4, 0x7, 0x0, 0x4, 0xfffffff5, 0xa, 0x1000, 0x6, 0x30000, 0x1, 0x200b1ea5, 0x7, 0x9, 0xb, 0x7f, 0x7, 0x9, 0xd6, 0xb17, 0xffffffff, 0x4, 0xe, 0x519, 0x5, 0xb, 0x7, 0xa, 0x0, 0x7, 0x0, 0x9, 0x0, 0x7f, 0xffffffff, 0x7ff, 0x5, 0xfffffff5, 0xf, 0x1010, 0x6, 0x3, 0x81, 0x7, 0x8, 0xd, 0x2, 0x3, 0x0, 0x46b, 0x6, 0x54, 0x1, 0xfffffffd, 0x6, 0x5, 0x80000001, 0x7, 0x4, 0x6, 0x1, 0x7, 0x4, 0x3, 0xac, 0x4, 0x8a900000, 0x8, 0xad, 0xfffff801, 0xffffff49, 0x8001, 0x400, 0x5, 0x7e0, 0x1, 0xc, 0x8, 0xffffffff, 0x9, 0x4, 0x20e, 0x4, 0x101, 0x33af, 0x1, 0xb, 0x2, 0xffff, 0x2, 0xe9, 0x6, 0x0, 0xb4b80000, 0x3ff, 0x6, 0x7, 0x13, 0xfffffff7, 0x80000001, 0x6, 0x8, 0x10001, 0x5, 0x8c6, 0x4aa, 0x8, 0xffffffcf, 0x5, 0xff, 0x5, 0x6, 0x8000, 0xe, 0x4, 0x2, 0x2, 0x1, 0x4, 0x9, 0xe2, 0x83, 0x4, 0xfffffffb, 0x5, 0x3, 0x2, 0x4, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6d, 0x8131, 0x10000, 0xa42, 0x8ea, 0x0, 0x9, 0x6ad3d576, 0x80000001, 0x0, 0x3, 0x7fffffff, 0x9, 0x47, 0x4, 0x1, 0xed, 0x3, 0xffffffff, 0x2, 0x3, 0x1, 0x9, 0x3371, 0x1000, 0xfffffffe, 0xfffffff9, 0x6b2f, 0x4e9f, 0x8, 0x0, 0x2, 0x6, 0xae, 0x2, 0x6, 0x7, 0x5, 0x2, 0x7, 0x9, 0x8, 0x83, 0x9, 0x0, 0x134, 0x9, 0x4, 0x4, 0x1, 0x6a4, 0x4, 0xe, 0x35, 0x6, 0x200, 0x7, 0x10001, 0x3, 0x200, 0xc, 0x2, 0xff, 0x0, 0x5, 0xab, 0xfff, 0x2, 0x8, 0x0, 0x6, 0x1, 0x4, 0x81, 0x5, 0x21e85071, 0x0, 0x80000000, 0x0, 0x9, 0x8000000, 0x4, 0x1, 0x5, 0xb, 0x1000, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x5123, 0xb, 0x5, 0x764, 0x2, 0x9, 0xe, 0xc3, 0x78b7, 0x1, 0x7, 0x7, 0x0, 0x5, 0x7, 0x4, 0x854, 0x3, 0x8, 0x1, 0x9, 0x1, 0x2, 0x8, 0x19580000, 0x9, 0x5, 0x5, 0x1ff, 0x7, 0x9, 0x1, 0x8, 0xffff779f, 0x5, 0x6, 0x7fff, 0x5, 0x4, 0x0, 0xb, 0x80, 0x1, 0x6, 0x6, 0x1, 0x6, 0x8, 0x0, 0x0, 0x1, 0xfffff801, 0x7ff, 0x0, 0x555, 0x3ff, 0x2, 0x9, 0x8e07, 0x8daf, 0x8, 0x3, 0xef46, 0x665, 0xd, 0x4ba, 0x80, 0x340, 0x67, 0x2, 0x9, 0x7e, 0x3, 0x8, 0x9, 0x9, 0x1, 0xf2, 0x5, 0x2df, 0x6, 0x1, 0x321, 0x7, 0x4, 0x0, 0xe, 0x6, 0xd9, 0x3, 0xffffffff, 0xffff8000, 0xdb, 0xd12f, 0x3, 0x4, 0x6, 0x2000, 0xc39, 0x2, 0x0, 0x8, 0x7f, 0x400, 0x4, 0x95, 0x4, 0x1ff, 0x5, 0x3ff, 0x100, 0x1, 0x6, 0x17, 0x8, 0x7, 0x2, 0x4, 0x6, 0x81, 0x7, 0x4, 0x9, 0x200, 0x4, 0x6, 0xf, 0x9, 0xfffff801, 0x8, 0x8, 0x6, 0x7f, 0x2, 0xfffffff6, 0x6a9, 0x5, 0x800, 0x9, 0x7, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x8c94, 0x9, 0xe39, 0x5, 0x13, 0x8, 0x5, 0xc, 0x2, 0x3ff, 0xe3, 0x1ff, 0x5, 0x58, 0x7, 0x101, 0x3, 0x50, 0x4, 0x0, 0x0, 0x3, 0xce, 0x5, 0x8, 0x1f3, 0xc0000000, 0xffffff80, 0x8, 0x7, 0x7, 0x2, 0xa, 0x3, 0x9, 0x3, 0x6, 0xb, 0x200, 0x9, 0xc435, 0x7ff, 0x1, 0x2, 0xe10, 0x1, 0xffff, 0x0, 0x9, 0x0, 0x9, 0x81, 0x2, 0xb, 0xd7, 0x3, 0x2, 0x1, 0xd41, 0xf, 0xffffff89, 0x6, 0x4, 0x4, 0x0, 0x0, 0x8, 0x6, 0xfffffff7, 0x9, 0xf0f, 0xffffff45, 0x2, 0x7, 0x400, 0x8e, 0x6, 0x8, 0x0, 0x4, 0x1, 0x1, 0x4574, 0x6, 0x0, 0x3ff, 0x2, 0x8, 0x0, 0x2, 0x3, 0x4, 0xae0, 0x2, 0x5, 0xffffffff, 0x4, 0x9, 0x2, 0x1000, 0x537b, 0x4, 0x2, 0xb4ba, 0x81, 0x8000, 0x1, 0x6, 0x2, 0x1ff, 0xe12, 0xffffffff, 0x8, 0x4, 0x3, 0x3, 0x7, 0x9, 0x9, 0x400, 0xffff590a, 0xb, 0x0, 0x86500000, 0x5, 0xffffffff, 0x10, 0x0, 0x8, 0x7, 0x10000, 0x3, 0x6, 0x9, 0x4, 0x652, 0x4, 0x7ff, 0x1, 0x3f4, 0xff, 0x3f0, 0xb5c9, 0xbe32, 0x2, 0xdac1, 0x8, 0x6a2, 0x1, 0x7, 0x3, 0x5, 0x7, 0x2, 0xffff, 0x6, 0x6, 0x4, 0xc, 0x1, 0xb080, 0x6ed646d9, 0x1, 0x5, 0x161c8876, 0x8, 0x4, 0x2, 0x7fffffff, 0x5, 0xfffffff9, 0x0, 0x42712e0f, 0x7c, 0x401, 0x4, 0x5, 0xfffff209, 0x1, 0x2, 0x0, 0x20000000, 0xd, 0x2, 0x9, 0x9, 0x6dd5bea6, 0x2, 0x4, 0x5e, 0x4, 0xb, 0x0, 0x5, 0xffff, 0x7, 0x1d, 0x19, 0xa87, 0xfffffff7, 0x8c, 0xe6, 0x1ce0418, 0x9, 0x3, 0x158, 0x8, 0xf, 0x7fff, 0x6, 0xff, 0xfffffff8, 0x200, 0xb, 0x1b4, 0x0, 0x6, 0xf, 0x5, 0x7, 0xffffffff, 0x9, 0x10000, 0x400, 0x3, 0x10001, 0x6d, 0x6, 0xa663, 0x7, 0x2, 0xd, 0x1, 0x3, 0x3, 0x4, 0x3, 0x101, 0x2, 0xea, 0x8, 0x7fffffff, 0x6, 0x0, 0x80000000, 0x7fffffff, 0x7, 0x5, 0x1ec, 0xfffffff7, 0x6, 0x1, 0x1, 0x1, 0x5, 0x800, 0x8, 0x200, 0x4, 0xfffffffe, 0x0, 0x6, 0xa1, 0x1, 0x0, 0xc765, 0x5659, 0x4451, 0x401, 0x6, 0xffffffff, 0x5, 0x9, 0x6, 0x80000000, 0x6, 0x8, 0xa, 0x6, 0x1, 0x3ff, 0x1000, 0x0, 0x8, 0x7, 0x2, 0x3, 0x7fff, 0x7fff, 0xa1, 0x7, 0x4, 0x3ffa, 0xffffffb5, 0x4, 0x9, 0x1, 0x2, 0x2, 0x1000, 0x4, 0x2, 0x9, 0x1, 0xfffffff8, 0x2, 0x2, 0xf, 0x1, 0x0, 0x3, 0x1, 0x0, 0x4, 0x3, 0x6, 0x7, 0xfffffff9, 0x7, 0x0, 0x2f1, 0x4, 0x1f32, 0x33da, 0x322e, 0x9, 0x8, 0x9, 0xdb, 0xffff, 0x1000, 0x4, 0x3, 0x5, 0xa00, 0x5, 0x9, 0x10001, 0x3, 0x8, 0x0, 0x4, 0xfffffff9, 0x3ff, 0x1, 0x80000000, 0x7, 0xffffffff, 0x3, 0x7fff, 0x7, 0x4ed3, 0x9, 0x100, 0x40, 0x5, 0xac1, 0x0, 0x3, 0x0, 0xba, 0x10000, 0xfffff2ab, 0x80, 0x1, 0x88, 0x1, 0xfff, 0x2, 0x5, 0x4, 0x8, 0x1, 0x4, 0xa, 0xff, 0x400, 0xfffffeff, 0xc, 0x3, 0xbd, 0x6, 0x5, 0x9, 0x7, 0xfffffc00, 0x101, 0x3ff, 0xff, 0x4, 0xe59, 0x3, 0x8, 0xf6d, 0x8, 0x0, 0x4, 0x1ff, 0x37d, 0x627e, 0x8, 0x3, 0x35, 0x6c, 0x4, 0x7, 0x0, 0x4, 0x2, 0x101, 0x9, 0x6, 0x1ff, 0x4, 0x4, 0xfffffffe, 0x3ff, 0xdf, 0xd, 0xd, 0xa, 0x2, 0x3, 0x8000, 0x0, 0x4, 0x3, 0xb5, 0x0, 0x2, 0x0, 0x7, 0x0, 0xfffffff7, 0xffff, 0xf56, 0x3, 0x1, 0x81, 0x0, 0x400, 0x1, 0xfffffff2, 0x20000000, 0x6, 0x9, 0xfffff058, 0x10, 0x8000, 0x8, 0x9, 0x100, 0x3ff, 0x0, 0x101, 0xbd, 0xfff, 0x1000, 0x7, 0x1, 0x7fff, 0x2, 0xa, 0x5, 0x4, 0x6, 0x8, 0xffffffff, 0x4, 0xffff0001, 0xa28, 0x6, 0x0, 0x75be660b, 0x3, 0x5, 0x5, 0x1, 0x9, 0xfffe0000, 0x7, 0x6, 0x0, 0x3, 0xe, 0x8, 0x7fffffff, 0x74, 0x0, 0x81, 0x0, 0x6, 0x3, 0x4, 0x80000000, 0x2, 0x7, 0x1, 0x9, 0x8, 0x9, 0x7, 0x4, 0x800, 0xfffffff8, 0x8, 0xb94, 0x3, 0x4, 0x5, 0x81, 0xffffffad, 0xfffffffd, 0x6, 0x9, 0x423, 0xdfd1, 0x5]}) (async) ioctl$HIDIOCGUSAGES(r7, 0xd01c4813, &(0x7f0000000d40)={{0x2, 0x200, 0xfffffffd, 0x9, 0x6, 0x2}, 0x395, [0x1, 0x5, 0x7f, 0x6, 0x0, 0xfffffff9, 0x6, 0x3, 0x0, 0x7fff, 0x0, 0x10000, 0x1d6, 0x1, 0xff, 0xb, 0x9, 0x6, 0x1, 0x0, 0x96, 0xffffffff, 0x7, 0x2, 0x4, 0x5, 0x53, 0x5, 0xfe, 0x80, 0xe, 0xb4, 0xffffffff, 0x7, 0x1ff, 0x4, 0xd9, 0x7, 0xff, 0x6, 0x800, 0xa5a, 0x4000, 0x9, 0x71, 0x200, 0x5, 0x9, 0xfffffff7, 0xf, 0x8000, 0x6, 0x9, 0x581500ab, 0x0, 0x3, 0x400, 0x4, 0x1, 0x9, 0x6, 0x1, 0x0, 0x5, 0x6, 0x5, 0x2, 0x4, 0x800, 0x0, 0x2, 0x9, 0x5, 0x4, 0x2, 0x9, 0xe, 0x9, 0x2, 0x81, 0x1, 0xf3, 0x3, 0x209, 0x100, 0x1000, 0x1, 0x6, 0x2, 0xc82a, 0x4000000, 0xa, 0x7, 0x4, 0x3, 0x2, 0x40, 0x100, 0x6, 0x1, 0xffff, 0xfffffffa, 0xf, 0x8f, 0x7, 0x6f81, 0x9, 0x2, 0x3, 0xd0800000, 0x8, 0x9, 0x6, 0x7f, 0x5eba, 0xdcd, 0x68, 0xf, 0x7, 0x5, 0xe, 0x2, 0x2b, 0x4, 0x6eb, 0x4, 0x9, 0x8, 0x6, 0x0, 0x4, 0xffff, 0x7, 0x0, 0xb, 0x5b4a5d87, 0x5, 0x4, 0x4, 0x7, 0x0, 0x4, 0xfffffff5, 0xa, 0x1000, 0x6, 0x30000, 0x1, 0x200b1ea5, 0x7, 0x9, 0xb, 0x7f, 0x7, 0x9, 0xd6, 0xb17, 0xffffffff, 0x4, 0xe, 0x519, 0x5, 0xb, 0x7, 0xa, 0x0, 0x7, 0x0, 0x9, 0x0, 0x7f, 0xffffffff, 0x7ff, 0x5, 0xfffffff5, 0xf, 0x1010, 0x6, 0x3, 0x81, 0x7, 0x8, 0xd, 0x2, 0x3, 0x0, 0x46b, 0x6, 0x54, 0x1, 0xfffffffd, 0x6, 0x5, 0x80000001, 0x7, 0x4, 0x6, 0x1, 0x7, 0x4, 0x3, 0xac, 0x4, 0x8a900000, 0x8, 0xad, 0xfffff801, 0xffffff49, 0x8001, 0x400, 0x5, 0x7e0, 0x1, 0xc, 0x8, 0xffffffff, 0x9, 0x4, 0x20e, 0x4, 0x101, 0x33af, 0x1, 0xb, 0x2, 0xffff, 0x2, 0xe9, 0x6, 0x0, 0xb4b80000, 0x3ff, 0x6, 0x7, 0x13, 0xfffffff7, 0x80000001, 0x6, 0x8, 0x10001, 0x5, 0x8c6, 0x4aa, 0x8, 0xffffffcf, 0x5, 0xff, 0x5, 0x6, 0x8000, 0xe, 0x4, 0x2, 0x2, 0x1, 0x4, 0x9, 0xe2, 0x83, 0x4, 0xfffffffb, 0x5, 0x3, 0x2, 0x4, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6d, 0x8131, 0x10000, 0xa42, 0x8ea, 0x0, 0x9, 0x6ad3d576, 0x80000001, 0x0, 0x3, 0x7fffffff, 0x9, 0x47, 0x4, 0x1, 0xed, 0x3, 0xffffffff, 0x2, 0x3, 0x1, 0x9, 0x3371, 0x1000, 0xfffffffe, 0xfffffff9, 0x6b2f, 0x4e9f, 0x8, 0x0, 0x2, 0x6, 0xae, 0x2, 0x6, 0x7, 0x5, 0x2, 0x7, 0x9, 0x8, 0x83, 0x9, 0x0, 0x134, 0x9, 0x4, 0x4, 0x1, 0x6a4, 0x4, 0xe, 0x35, 0x6, 0x200, 0x7, 0x10001, 0x3, 0x200, 0xc, 0x2, 0xff, 0x0, 0x5, 0xab, 0xfff, 0x2, 0x8, 0x0, 0x6, 0x1, 0x4, 0x81, 0x5, 0x21e85071, 0x0, 0x80000000, 0x0, 0x9, 0x8000000, 0x4, 0x1, 0x5, 0xb, 0x1000, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x5123, 0xb, 0x5, 0x764, 0x2, 0x9, 0xe, 0xc3, 0x78b7, 0x1, 0x7, 0x7, 0x0, 0x5, 0x7, 0x4, 0x854, 0x3, 0x8, 0x1, 0x9, 0x1, 0x2, 0x8, 0x19580000, 0x9, 0x5, 0x5, 0x1ff, 0x7, 0x9, 0x1, 0x8, 0xffff779f, 0x5, 0x6, 0x7fff, 0x5, 0x4, 0x0, 0xb, 0x80, 0x1, 0x6, 0x6, 0x1, 0x6, 0x8, 0x0, 0x0, 0x1, 0xfffff801, 0x7ff, 0x0, 0x555, 0x3ff, 0x2, 0x9, 0x8e07, 0x8daf, 0x8, 0x3, 0xef46, 0x665, 0xd, 0x4ba, 0x80, 0x340, 0x67, 0x2, 0x9, 0x7e, 0x3, 0x8, 0x9, 0x9, 0x1, 0xf2, 0x5, 0x2df, 0x6, 0x1, 0x321, 0x7, 0x4, 0x0, 0xe, 0x6, 0xd9, 0x3, 0xffffffff, 0xffff8000, 0xdb, 0xd12f, 0x3, 0x4, 0x6, 0x2000, 0xc39, 0x2, 0x0, 0x8, 0x7f, 0x400, 0x4, 0x95, 0x4, 0x1ff, 0x5, 0x3ff, 0x100, 0x1, 0x6, 0x17, 0x8, 0x7, 0x2, 0x4, 0x6, 0x81, 0x7, 0x4, 0x9, 0x200, 0x4, 0x6, 0xf, 0x9, 0xfffff801, 0x8, 0x8, 0x6, 0x7f, 0x2, 0xfffffff6, 0x6a9, 0x5, 0x800, 0x9, 0x7, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x8c94, 0x9, 0xe39, 0x5, 0x13, 0x8, 0x5, 0xc, 0x2, 0x3ff, 0xe3, 0x1ff, 0x5, 0x58, 0x7, 0x101, 0x3, 0x50, 0x4, 0x0, 0x0, 0x3, 0xce, 0x5, 0x8, 0x1f3, 0xc0000000, 0xffffff80, 0x8, 0x7, 0x7, 0x2, 0xa, 0x3, 0x9, 0x3, 0x6, 0xb, 0x200, 0x9, 0xc435, 0x7ff, 0x1, 0x2, 0xe10, 0x1, 0xffff, 0x0, 0x9, 0x0, 0x9, 0x81, 0x2, 0xb, 0xd7, 0x3, 0x2, 0x1, 0xd41, 0xf, 0xffffff89, 0x6, 0x4, 0x4, 0x0, 0x0, 0x8, 0x6, 0xfffffff7, 0x9, 0xf0f, 0xffffff45, 0x2, 0x7, 0x400, 0x8e, 0x6, 0x8, 0x0, 0x4, 0x1, 0x1, 0x4574, 0x6, 0x0, 0x3ff, 0x2, 0x8, 0x0, 0x2, 0x3, 0x4, 0xae0, 0x2, 0x5, 0xffffffff, 0x4, 0x9, 0x2, 0x1000, 0x537b, 0x4, 0x2, 0xb4ba, 0x81, 0x8000, 0x1, 0x6, 0x2, 0x1ff, 0xe12, 0xffffffff, 0x8, 0x4, 0x3, 0x3, 0x7, 0x9, 0x9, 0x400, 0xffff590a, 0xb, 0x0, 0x86500000, 0x5, 0xffffffff, 0x10, 0x0, 0x8, 0x7, 0x10000, 0x3, 0x6, 0x9, 0x4, 0x652, 0x4, 0x7ff, 0x1, 0x3f4, 0xff, 0x3f0, 0xb5c9, 0xbe32, 0x2, 0xdac1, 0x8, 0x6a2, 0x1, 0x7, 0x3, 0x5, 0x7, 0x2, 0xffff, 0x6, 0x6, 0x4, 0xc, 0x1, 0xb080, 0x6ed646d9, 0x1, 0x5, 0x161c8876, 0x8, 0x4, 0x2, 0x7fffffff, 0x5, 0xfffffff9, 0x0, 0x42712e0f, 0x7c, 0x401, 0x4, 0x5, 0xfffff209, 0x1, 0x2, 0x0, 0x20000000, 0xd, 0x2, 0x9, 0x9, 0x6dd5bea6, 0x2, 0x4, 0x5e, 0x4, 0xb, 0x0, 0x5, 0xffff, 0x7, 0x1d, 0x19, 0xa87, 0xfffffff7, 0x8c, 0xe6, 0x1ce0418, 0x9, 0x3, 0x158, 0x8, 0xf, 0x7fff, 0x6, 0xff, 0xfffffff8, 0x200, 0xb, 0x1b4, 0x0, 0x6, 0xf, 0x5, 0x7, 0xffffffff, 0x9, 0x10000, 0x400, 0x3, 0x10001, 0x6d, 0x6, 0xa663, 0x7, 0x2, 0xd, 0x1, 0x3, 0x3, 0x4, 0x3, 0x101, 0x2, 0xea, 0x8, 0x7fffffff, 0x6, 0x0, 0x80000000, 0x7fffffff, 0x7, 0x5, 0x1ec, 0xfffffff7, 0x6, 0x1, 0x1, 0x1, 0x5, 0x800, 0x8, 0x200, 0x4, 0xfffffffe, 0x0, 0x6, 0xa1, 0x1, 0x0, 0xc765, 0x5659, 0x4451, 0x401, 0x6, 0xffffffff, 0x5, 0x9, 0x6, 0x80000000, 0x6, 0x8, 0xa, 0x6, 0x1, 0x3ff, 0x1000, 0x0, 0x8, 0x7, 0x2, 0x3, 0x7fff, 0x7fff, 0xa1, 0x7, 0x4, 0x3ffa, 0xffffffb5, 0x4, 0x9, 0x1, 0x2, 0x2, 0x1000, 0x4, 0x2, 0x9, 0x1, 0xfffffff8, 0x2, 0x2, 0xf, 0x1, 0x0, 0x3, 0x1, 0x0, 0x4, 0x3, 0x6, 0x7, 0xfffffff9, 0x7, 0x0, 0x2f1, 0x4, 0x1f32, 0x33da, 0x322e, 0x9, 0x8, 0x9, 0xdb, 0xffff, 0x1000, 0x4, 0x3, 0x5, 0xa00, 0x5, 0x9, 0x10001, 0x3, 0x8, 0x0, 0x4, 0xfffffff9, 0x3ff, 0x1, 0x80000000, 0x7, 0xffffffff, 0x3, 0x7fff, 0x7, 0x4ed3, 0x9, 0x100, 0x40, 0x5, 0xac1, 0x0, 0x3, 0x0, 0xba, 0x10000, 0xfffff2ab, 0x80, 0x1, 0x88, 0x1, 0xfff, 0x2, 0x5, 0x4, 0x8, 0x1, 0x4, 0xa, 0xff, 0x400, 0xfffffeff, 0xc, 0x3, 0xbd, 0x6, 0x5, 0x9, 0x7, 0xfffffc00, 0x101, 0x3ff, 0xff, 0x4, 0xe59, 0x3, 0x8, 0xf6d, 0x8, 0x0, 0x4, 0x1ff, 0x37d, 0x627e, 0x8, 0x3, 0x35, 0x6c, 0x4, 0x7, 0x0, 0x4, 0x2, 0x101, 0x9, 0x6, 0x1ff, 0x4, 0x4, 0xfffffffe, 0x3ff, 0xdf, 0xd, 0xd, 0xa, 0x2, 0x3, 0x8000, 0x0, 0x4, 0x3, 0xb5, 0x0, 0x2, 0x0, 0x7, 0x0, 0xfffffff7, 0xffff, 0xf56, 0x3, 0x1, 0x81, 0x0, 0x400, 0x1, 0xfffffff2, 0x20000000, 0x6, 0x9, 0xfffff058, 0x10, 0x8000, 0x8, 0x9, 0x100, 0x3ff, 0x0, 0x101, 0xbd, 0xfff, 0x1000, 0x7, 0x1, 0x7fff, 0x2, 0xa, 0x5, 0x4, 0x6, 0x8, 0xffffffff, 0x4, 0xffff0001, 0xa28, 0x6, 0x0, 0x75be660b, 0x3, 0x5, 0x5, 0x1, 0x9, 0xfffe0000, 0x7, 0x6, 0x0, 0x3, 0xe, 0x8, 0x7fffffff, 0x74, 0x0, 0x81, 0x0, 0x6, 0x3, 0x4, 0x80000000, 0x2, 0x7, 0x1, 0x9, 0x8, 0x9, 0x7, 0x4, 0x800, 0xfffffff8, 0x8, 0xb94, 0x3, 0x4, 0x5, 0x81, 0xffffffad, 0xfffffffd, 0x6, 0x9, 0x423, 0xdfd1, 0x5]}) 27.82638003s ago: executing program 2 (id=9367): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000040008b404a1bc00000000000109022400010000000009040008010300000009210400020122030009058103"], 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x6c, 0xf9, 0xd3, 0x10, 0x4cb, 0x100, 0x51f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x0, 0xa0, 0x7, [{{0x9, 0x4, 0x2f, 0x6, 0x0, 0x5c, 0xc3, 0x3c, 0x8}}]}}]}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008a04"]) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="402306"], 0x0}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x3d, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/239, 0xef, 0x1, 0x17}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0xfffffffe, &(0x7f00000001c0)=""/21, 0x15, 0x2, 0x38}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 27.266598379s ago: executing program 2 (id=9368): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000003700)=[{&(0x7f0000002300)="390000001300034700bb65e1c3e4ffff010000000100000056000000e5ffff0800040000000000000000a71481faceefb2329b8122b56e9d4d", 0x39}], 0x1) writev(r0, &(0x7f0000000280)=[{&(0x7f00000037c0)="390000001300034700bb65e1c3e4ffff060003000100000045000000250000190011000600d860d8f4ad00020000000000000604007ffffffe", 0x39}], 0x1) 27.265605329s ago: executing program 2 (id=9369): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80282, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x0, 0x401}]}, 0xc, 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'system.', '/dev/rnullb0\x00'}, &(0x7f00000001c0)=""/142, 0x8e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000540)=0xe8) mount$fuseblk(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1001400, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x686}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1200}}, {@allow_other}, {@default_permissions}], [{@fsname={'fsname', 0x3d, ']'}}, {@euid_lt={'euid<', r3}}, {@obj_role={'obj_role', 0x3d, 'system.'}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, 'security.capability\x00'}}, {@permit_directio}]}}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000740)={0x2, 0x7e}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a40)={0x0, &(0x7f0000000780)=[@uexit={0x0, 0x18, 0x452}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x3e, {"3e64650f0118c40161f64a56400f07420f01c36443fcc422b5011eb91e0200000f320f07c403216de27a0f01df"}}, @code={0x1, 0x56, {"0f01c5b9100800000f32c483fd0830480f20d835080000000f22d80f0050db207a00b9710b0000b8b4510000ba000000000f300f07b9ff0a00000f32430f0094cb04b73c17"}}, @cpuid={0x2, 0x18, {0xfffffffa, 0x713}}, @uexit={0x0, 0x18, 0x400000000}, @cpuid={0x2, 0x18, {0x7, 0x4}}, @uexit={0x0, 0x18}, @code={0x1, 0x52, {"b805000000b9265800000f01d9430f01c366b80f008ee0470f01c18fe8a4a2474b008f8978d737450f32b805000000b9ba791d9b0f01c1262e4c0fc71cf00f01df"}}, @uexit={0x0, 0x18, 0x80000000}, @code={0x1, 0x4d, {"c461f96f0bc442999aad00380000b8010000000f01c166ba410066ed660f51681866b85d008ee80f2374f442f7b2195e1747662646c11d92f90000d0"}}, @code={0x1, 0x73, {"b985020000b880230000ba000000000f3036660f3834530c66baf80cb8cea8968cef66bafc0c66b8f3ff66efb8010000000f01c1420f01c566ba4200b071ee440f20c03501000000440f22c066400f3a202b0046ddbb00900000b8010000000f01c1"}}, @code={0x1, 0x5f, {"0f01d141d10daa070000c4c24192049d05000000430f01c2410fc77c8200c7442400a1000000c744240200200000ff2c2426660f388137470feedc642e460f888c54000067400f5fb46587860000"}}], 0x2ad}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000a80)=@arm64={0x5, 0x4, 0x80, '\x00', 0x3}) getresuid(&(0x7f0000000ac0)=0x0, &(0x7f0000000b00), &(0x7f0000000b40)) setreuid(r1, r8) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000b80)=@md0, r8, &(0x7f0000000bc0)) ioctl$EVIOCRMFF(r6, 0x40044581, &(0x7f0000000c00)=0x200) bind$802154_dgram(r6, &(0x7f0000000c40)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14) syz_clone(0x94180, &(0x7f0000000c80)="c1be2c5d5aa086d641fb7b2295e388fd47182c524019d21b400b5ddeaab2579379dbed79ca5c7e4471e9cd8661b029d89004b0b8f85f4c783e8decb9b936090b5e26902296e349d2d94d887e938515e7f7185f751011a2b9b3b7680397df3d6a745785d29732609a32b8e5ea5579e72b40e38798e81a585f2aebf889b2b612c34225a43df0f026d671a249eb223141931749f6edfb5b8e1db62fa905ae98b09fe8536f9c5a16f21c6de550e26ab604a74b6a283096e1b0dbbf6d586bd95397463ce49b6fc053f0fbe2ad0aad25c3a2801db2b6ca74d0082b8ea699bafcdc9126c305cfb9cc83b2", 0xe7, &(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)="d438e8eaa45a69497496627309580bd6f7223cfa99f486ebce764457e46cbd82f935547840e2ee79cf66b919885e9efb8b4fc66c091fab49d7d7ef225773d1ef0290b523f9dc62d1ec31de8db1dfeb15a2279349cbbdb8fe7e07c6674846f6fb0770d772c8b1") r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000e80), 0x40040, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000ec0)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r10, 0xc00c6211, &(0x7f0000000f00)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f0000000f40)={0x0, 0x0, "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", "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"}) mount(&(0x7f0000001f40)=@md0, &(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)='cgroup2\x00', 0x1010020, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002000)={'vxcan1\x00'}) read(r0, &(0x7f0000002040)=""/215, 0xd7) r11 = memfd_secret(0x80000) fchmod(r11, 0x109) 27.261301279s ago: executing program 2 (id=9370): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x14) (async, rerun: 32) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/22) (async, rerun: 32) r2 = epoll_create1(0x0) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x110, r0, 0x5) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x30000008}) (async) dup3(r0, r1, 0x0) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) (rerun: 64) 27.177956641s ago: executing program 2 (id=9374): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4000fffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000003c0)={0x3, {{0xa, 0x6e22, 0x6ed, @mcast2, 0x7fffffff}}, {{0xa, 0x4e22, 0x23f, @mcast1, 0x7f}}}, 0x108) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a0001010000040904000010020600ff0b24060000b89b63212cb5df240000000d240f0100040000c28eb9a4ced911d0d81c6d0001000001a155985dcf3fb288476ccf80ca837d090581037dbb01050e0905820200027500d902a47494"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c859, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={{0x77359400}}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x414780, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 27.097859392s ago: executing program 2 (id=9378): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000003700)=[{&(0x7f0000002300)="390000001300034700bb65e1c3e4ffff010000000100000056000000e5ffff0800040000000000000000a71481faceefb2329b8122b56e9d4d", 0x39}], 0x1) writev(r0, &(0x7f0000000280)=[{&(0x7f00000037c0)="390000001300034700bb65e1c3e4ffff060003000100000045000000250000190011000600d860d8f4ad000200000000000006040000160004", 0x39}], 0x1) 27.057088042s ago: executing program 35 (id=9378): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000003700)=[{&(0x7f0000002300)="390000001300034700bb65e1c3e4ffff010000000100000056000000e5ffff0800040000000000000000a71481faceefb2329b8122b56e9d4d", 0x39}], 0x1) writev(r0, &(0x7f0000000280)=[{&(0x7f00000037c0)="390000001300034700bb65e1c3e4ffff060003000100000045000000250000190011000600d860d8f4ad000200000000000006040000160004", 0x39}], 0x1) 26.917800495s ago: executing program 1 (id=9380): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfdfff034}, {0x6}]}, 0x10) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 26.895370295s ago: executing program 1 (id=9381): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000340)={0x40000, 0x1, 0x10}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000a40)={0xd0, 0x0, &(0x7f0000000880)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x3, 0x1, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/158, 0x9e, 0x0, 0x5}, @flat=@handle={0x73682a85, 0x10a, 0x2}}, &(0x7f0000000840)={0x0, 0x20, 0x48}}}, @dead_binder_done, @acquire={0x40046305, 0x1}, @request_death={0x400c630e, 0x1}], 0xae, 0x0, &(0x7f0000000980)="8de1164b195bd17fa3a6d83aea67d8fd6b26869f2467737a09a4cbf87594602d6a135167798df3c20aa2037683f7c5fddd93ed8e6c130e818ae2ca3253033b56512cb23a66b959e77423623b5b565285dfd3b6c443bec7145da349eb88a3187f477ae02e701b54ed6176357e07276cbc394a2f9bf14ebed71d3c0569427693264001c7d41b6661facc095f755c27d0d1b36f8dace43520f2cedcb86e1fa7020c44b8e4ae0ce1c720763f89d7349b"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005081000418e00000004fcff", 0x58}], 0x1) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000008500)={0x9, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e24, @remote}}}, 0x108) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r11, &(0x7f0000000280)=[{&(0x7f0000000000)="13acef1f564399910b2038fa3d68064bc89ef60f773ac0126f354cc44b2403100dab930540316cd45804fca3bc4d1e37d1d3f0e04d476eff344a666805b111859ecc57c4421ab7b0f8265644378d61ae9cb0a727a3b63d1847e5cad2dfb10f71d0cbe5c7b85e815a7ff6bc9d6c7024d94d1467461039cc8a7721e7797f3ff332249425fc4026227b7473b881a23043907990c4beb7b788ff45a7a388d5ba0c1754c134ef372eedde1889acc190d73bc5fefb2eddde39c70eb63151e2921c27783b1847a73725", 0xc6}, {&(0x7f00000005c0)="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", 0xfffffffffffffe92}, {&(0x7f0000000140)="4a11d416f45fce0a18ad3d0c37f247ae032c17aa5301dedb033f3bb5f7783f5bd8aa598f1b", 0x25}, {&(0x7f00000004c0)="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", 0xfd}, {&(0x7f0000000200)="a9099f6823e56278e1159ffb9208ffd927eaaf90e86b1f3a06d73e", 0x1b}, {&(0x7f0000000100)="8f4d7b3b8dee38b3ba0c82a701e0e27c3d46dfdc8a74b169501bf659c0b5f0c34848805b1046802a8dc69f244b3bfb649851d0", 0x33}], 0x6) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r12, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) ioctl$KVM_SET_CPUID(r10, 0x4188aea7, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 26.629789369s ago: executing program 1 (id=9382): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000000)={"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"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x380020}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x17}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x40, 0xe, 0x4a, {0x4a, 0x9, "ead80ce743c5fd22d51acad7f2f72fb0f6199542781f788525ac49ed8f1656747cb398c609ea0765e97cc48f394dc981d881142a69c8917922ba7c70e6e72558ea0c1b063c52ce41"}}, &(0x7f0000000600)={0x0, 0x3, 0x55, @string={0x55, 0x3, "b8098400dd2e3556a7a55efd9e9374a69d3485211434370c57ec8182b7db51ef51d53fa448355ac5d29547822aa112c73cd6dbb194f66cc413a5ef3f1d14e914f855358b5ec39b3f2ef3a3eb10587b1ccebffd"}}}, &(0x7f0000000900)={0x34, &(0x7f00000006c0)={0x20, 0x8, 0x7b, "e67f80a9f28e65af09d923cecd7e1f7225a879b0d389ab2ecfd78c5ed6cecb840423f7c71f520eee9edc80807fdb59919730e42bbfdad48ed9288578fe8d339d2c3b6b8a64292a1d9cf6e9e1e0f36ff56731a89d317b9de5e5312212266ef80e5d8c12dfc309a30406064c6943563b1ed68956c8c3614eed74715c"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000800)={0x20, 0x0, 0x59, {0x57, "4dcb96fee296a8665e72461ed6835451e465ace3eb109aff4aaa0e9b69dfff126c7ab8c4865323dff9e7184ec2c12b7f5637dbe5e117b6dea117826cf411a194bbdaa47f92041490418a144da1d71a3d2988239c7b8551"}}, &(0x7f0000000880)={0x20, 0x1, 0x1, 0x2a}, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0xbb}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x1, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_NAT_DST={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000a40)={[0xf, 0x0, 0x8001, 0x800, 0x3e31, 0x3, 0x3, 0x0, 0x80000000, 0x1000, 0x8000000000000001, 0x800, 0x4, 0x7, 0x4], 0x8080000, 0x20000}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffff053}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6938}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008010}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) sendmsg$can_bcm(r0, &(0x7f0000000e00)={&(0x7f0000000d00), 0x10, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x2, 0xd80, 0x3, {0x0, 0x2710}, {0x77359400}, {0x1, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x14, 0x0, 0x0, 0x0, "726f81450ccddd5add1705df98b061dffea1fc372aab475102927c7216c456a87f4c7375c2e35f58758b01698434a1a489e41a1ea128e67257da1b67c7ad8684"}}, 0x80}, 0x1, 0x0, 0x0, 0x4010}, 0x24004004) r7 = dup2(r1, r6) r8 = accept$unix(r6, &(0x7f0000000e40), &(0x7f0000000ec0)=0x6e) read(r8, &(0x7f0000000f00)=""/62, 0x3e) r9 = openat(r7, &(0x7f0000000f40)='./file0\x00', 0x140, 0x100) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) listxattr(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)=""/1, 0x1) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, &(0x7f0000001000)={[0xa70c, 0x4, 0x9, 0x1, 0x1, 0x4, 0x8, 0x772, 0x81, 0x7fff, 0x8, 0x4, 0x7fffffff, 0x3, 0x80000001, 0x7, 0x2, 0x48, 0x1, 0x8, 0xd, 0x9, 0x9, 0xb5, 0x6, 0x40, 0x2, 0x8, 0xfffffc01, 0x0, 0x400, 0x2, 0x8, 0x4, 0x2, 0x2, 0xaf0, 0x6, 0x8, 0x7, 0xef3b, 0x2, 0x80, 0xfc, 0x3, 0x7, 0x9, 0x6, 0x97e, 0x8, 0xc, 0x9417, 0xa8e, 0xff, 0x5, 0x40, 0xfffffbff, 0x5, 0x0, 0x5b, 0x8, 0x6, 0x6, 0x5, 0x40, 0x9, 0x5, 0x2, 0x7, 0x2, 0x394, 0x200, 0x4, 0x1, 0x0, 0xfffffffd, 0xf2, 0x9, 0xff, 0x800, 0x1, 0x10, 0x2, 0x1, 0x2, 0x5, 0x2, 0x3, 0x929, 0x40, 0x8, 0x6, 0x7fff, 0x8b1, 0xc, 0x89b, 0x8, 0x4, 0x9, 0x7fff, 0x81, 0x1000, 0x5, 0x0, 0x1, 0x5, 0xe7bd, 0x12, 0x40, 0x0, 0x8, 0x101, 0xf7, 0x81, 0x0, 0x0, 0xb, 0x2, 0x4, 0x4, 0x3, 0x6, 0x9, 0x10, 0x5, 0x80000000, 0x0, 0x6, 0x80000001, 0x200, 0x7fffffff, 0x0, 0x0, 0x4, 0x5, 0x2, 0x2, 0x7, 0xfffffffc, 0xa, 0x5, 0x0, 0x6, 0x1ff, 0x0, 0x0, 0x2, 0x8, 0x45221eb1, 0x6, 0xd9, 0x1302, 0x4, 0x0, 0x871f, 0x3a2, 0x44, 0x1, 0x4, 0xf6f, 0x2, 0x2d, 0x4, 0x1000000, 0xfffffbff, 0x7f, 0x10, 0x80000000, 0x61ad, 0x2, 0xb3fe, 0x0, 0x5, 0xd, 0xcf37, 0x6, 0xf, 0x9, 0xee, 0x3, 0xfffffffa, 0x4, 0x0, 0x2, 0x2, 0x7fff, 0xe, 0x9, 0x1, 0x20000000, 0x0, 0xfff, 0x6, 0x6, 0x3b, 0x2, 0xc012, 0x6, 0x8f, 0x9, 0x8, 0x5, 0x5, 0x7, 0x4, 0x1, 0xdca, 0x1000, 0x3, 0x80000000, 0x3, 0x5, 0x7, 0x3, 0x1, 0x80000000, 0x5, 0xfff, 0x6, 0x7, 0x7fff, 0x8, 0x2, 0xb03b, 0x0, 0x41, 0x3ff, 0x5, 0x400, 0x40000000, 0x4, 0xffffff40, 0x4, 0x7, 0x800, 0xc, 0x6, 0x7, 0xffffffff, 0x861c, 0x8001, 0x7ff, 0xfffffffa, 0x8001, 0x6, 0x4, 0x7, 0xe, 0x7, 0x0, 0x4592, 0x5, 0xad590e1, 0x7, 0x5, 0x1f, 0x1ab7f25f, 0x9, 0x0, 0x5, 0x9, 0x4, 0x9, 0x7, 0x1, 0x39, 0x8, 0xe, 0x2, 0x1, 0xe, 0xa, 0x200, 0x2, 0x8, 0x1, 0x0, 0x9, 0xa906, 0x4, 0xff, 0x8, 0xfffffffd, 0x7, 0x50, 0x5, 0x0, 0x2, 0xb, 0xffffffb0, 0x1, 0x8, 0xaa, 0x1, 0x2, 0x3, 0xcb86, 0x8, 0x7ff, 0x4, 0xc, 0x22, 0x3, 0x8000, 0x0, 0x1, 0x0, 0x3, 0xff, 0x100, 0x8, 0xa6, 0xc980, 0x100, 0x9, 0x2, 0xb5, 0xf8000000, 0x0, 0x7, 0xf4, 0x2, 0x3, 0xe38, 0xff, 0x5, 0x9, 0x9, 0x9, 0xe0, 0xb, 0x0, 0xc, 0x8, 0xf, 0x2, 0x3, 0x679000, 0x0, 0x2, 0x3, 0xfffffffd, 0x2, 0x4, 0x3, 0x7ff, 0xfffffff8, 0x1000, 0x400000, 0x7fffffff, 0xffffff6f, 0x3, 0x80000001, 0x2, 0x3, 0x10, 0x1020000, 0x8, 0x200, 0x7fffffff, 0x1000, 0x7fffffff, 0x1, 0x80000001, 0x8000, 0xf, 0x2, 0x9, 0x80, 0x1ff, 0x5, 0xfffffff1, 0x8, 0x2, 0x8, 0x5, 0x5, 0x7, 0xf, 0x5, 0x3ff, 0x9, 0x401, 0x4, 0x7, 0x5a7, 0xb8e8, 0x8000, 0x80, 0xfff, 0x401, 0xfffffff3, 0x5, 0x7fff, 0x1, 0x8, 0x7850, 0x370, 0xfffffffa, 0x7, 0x2db, 0xe, 0xfffff9a6, 0x7fff, 0xe79, 0xfffffffe, 0x80000000, 0x2, 0x1000, 0x7, 0x400, 0xfffffff8, 0x40, 0xa, 0x6, 0x8, 0x0, 0x2, 0xd, 0x4, 0x1ff, 0x19, 0x3, 0x9, 0x101, 0x3, 0x1, 0x1, 0x1, 0x7599254d, 0x2, 0x2, 0x4, 0x66, 0x2, 0x8, 0x0, 0x8, 0x3, 0x9, 0x121, 0x40, 0x1, 0x0, 0x2, 0x3, 0xaf, 0x14, 0x6, 0x1, 0x3, 0x249a, 0x10000, 0x3a, 0x3, 0x5, 0xfff, 0x3, 0x1000, 0x8, 0xcc, 0x8, 0xffffff81, 0x1, 0x8, 0x1ff, 0x80000000, 0x7, 0x2, 0x0, 0x74c34735, 0x5, 0xff, 0x7f, 0x80, 0x80000000, 0x2e, 0x91, 0xffff0001, 0x400, 0x4, 0x7, 0x80000000, 0x1, 0x7, 0xffff, 0x5, 0x8, 0x1, 0xfffffa7c, 0x5, 0xfffffffa, 0x3, 0x8, 0x2, 0x2, 0x9be, 0x8000, 0xffffffff, 0x1, 0x1, 0xffffffff, 0xd2fd, 0xffffffff, 0x4, 0x8, 0x3, 0x14d, 0x6, 0xffffffff, 0xb, 0x5, 0xc, 0x3, 0x4, 0x401, 0x7fff, 0x8, 0x3, 0x401, 0x7fffffff, 0x8, 0xffff, 0xa, 0x6, 0x6, 0x7000, 0x3, 0xb9f8000, 0xc, 0x7, 0xa, 0x3, 0x400, 0x6, 0x0, 0x8, 0x8, 0x7, 0x5, 0x6b4, 0x7, 0xdd, 0x3, 0xbd, 0x7, 0x40, 0x1, 0x36, 0x8001, 0x4f, 0x0, 0x0, 0x4, 0x5d, 0x5, 0xa, 0xf, 0x5d3a, 0x5, 0x8, 0xfffffff7, 0x0, 0x8, 0x8, 0x5, 0x81, 0x0, 0x9, 0x2, 0x401, 0xffffffff, 0xfffff001, 0x1, 0x8001, 0xc, 0x8, 0xb53b, 0x8, 0x8, 0xb, 0xf37, 0x55cc, 0x9, 0x40, 0x43, 0x238, 0x7fff, 0x0, 0x3, 0x0, 0x4, 0xeda6, 0x5ecf, 0x9, 0x0, 0x9, 0x7fff, 0x9, 0x6, 0x6, 0x2, 0x9, 0x8, 0x0, 0x80000000, 0x80000001, 0x7ff, 0x5, 0x64, 0xf, 0x6, 0x8, 0x8, 0xf, 0x1, 0x8, 0x1, 0xb, 0x3, 0x4, 0x4, 0x0, 0xcd, 0x6, 0x4, 0x8, 0x1, 0x8, 0x9, 0x9, 0x2, 0x4c3, 0x200, 0xfffffbff, 0x919, 0x9, 0x2, 0x1da9, 0x7, 0x359a, 0x1, 0xd9, 0x4, 0x0, 0x6, 0x2, 0x9, 0x40000000, 0x3, 0x3, 0x3, 0x9, 0x40, 0x2, 0x3, 0x4, 0x9, 0xf, 0x6, 0x8, 0x3, 0x9, 0x1, 0x400, 0x2, 0xfffffffe, 0xfffffffc, 0x4, 0x3, 0x99, 0x6, 0x2, 0x4, 0x7, 0x9, 0x0, 0x2, 0x10, 0xc, 0xa, 0x6, 0x6, 0xd5b, 0x8, 0x2, 0x6, 0x46, 0x9, 0x4b, 0xffffffc0, 0xff, 0x7, 0x200, 0x3, 0xcb68, 0x8, 0x400, 0xa, 0x4, 0x4, 0x8, 0x2, 0x5, 0x4, 0x4, 0x1877, 0x2, 0x5, 0x15c0, 0x6, 0x7fffffff, 0x3, 0x2, 0x1, 0xb, 0x4, 0xc, 0x10000, 0x10000, 0x3, 0x7, 0x3, 0x1, 0x3, 0x3, 0xc34, 0x9, 0x1, 0x80000000, 0xf1d, 0x8, 0x75e0, 0xffff, 0x7, 0x5, 0x4, 0xff, 0xd4, 0xfff, 0x7ebb, 0x8, 0x520, 0x4, 0xc24c, 0x7, 0x8, 0x9, 0x3ff, 0x4, 0x1, 0x3, 0x7fff, 0x7, 0x80, 0x9bc, 0x6cc, 0x6, 0x2, 0xea96, 0x0, 0x101, 0x5, 0xf95, 0x9, 0x9, 0x0, 0x200, 0x3, 0x7fffffff, 0x9, 0x1000, 0x6b81, 0x0, 0x7fe00, 0x2, 0x0, 0x3, 0x2, 0x1, 0x4ca, 0x7, 0x6, 0x91, 0xb, 0x926d, 0x0, 0x6, 0x7, 0x0, 0x8, 0x9, 0x5, 0x3, 0x3, 0x0, 0x4, 0x4, 0x2, 0xb, 0x7, 0x8, 0x7, 0x6, 0xfffffff7, 0x1, 0x0, 0x6, 0x2, 0x3, 0x7ff, 0x0, 0x100, 0x7f, 0x9, 0x3, 0x800000, 0x0, 0x449, 0xfffffff9, 0x1, 0x900, 0x6, 0x1, 0x5, 0xd5a, 0x2, 0x6, 0x80, 0x7ae, 0x1ff, 0x3c, 0x7, 0x0, 0x1, 0x9, 0x10, 0x2, 0x7fffffff, 0x1, 0x3, 0x2, 0xfffffffa, 0x7ff, 0x0, 0xa8e, 0x4, 0x8, 0x5, 0x3, 0xd, 0xfffffff0, 0x40000, 0xfffffffc, 0x10001, 0x8, 0x3ff, 0x1, 0x9, 0xdb, 0x2, 0x4, 0x2, 0x8, 0x1, 0x7, 0xecf, 0x3, 0x6, 0x1ff, 0x8001, 0x1, 0x18f, 0x9, 0xffff, 0x7b, 0x5, 0x3, 0x0, 0x4, 0x3, 0x7f, 0x5, 0x5, 0xffffffff, 0x7, 0x101, 0x1ff, 0x8001, 0x4, 0x7f2, 0x7, 0xffffffd0, 0xa91, 0xff, 0x6, 0x9, 0x0, 0xd, 0xffff, 0x400, 0x6, 0x365f, 0x9, 0x1, 0x0, 0xd, 0x9, 0x101, 0x5, 0x81, 0x6e22, 0x2, 0x101, 0x56, 0x4, 0x0, 0x8, 0xfffffff8, 0x9, 0x3, 0x6, 0x5, 0x5, 0x0, 0x1, 0x1f, 0xb368, 0x2, 0xfffffffe, 0x100, 0x33, 0x400, 0x1, 0x40, 0x25, 0x1, 0x2, 0x4, 0x3d46, 0x6, 0x5, 0x5, 0x6, 0xffffffff, 0x8, 0x23, 0x5, 0x9, 0x2, 0x10000, 0xb3f, 0x1, 0x645, 0x9, 0x4, 0x5d, 0x3a8, 0xd9, 0x0, 0xa2f, 0x0, 0xfffffffb, 0x1c000, 0x3, 0x8, 0x3fe00000, 0x8, 0x5, 0x80000001, 0x3ff, 0x81, 0x4ef3, 0x4, 0x6, 0x61f7, 0x6, 0x5, 0x1, 0x4, 0xd96, 0x7fffffff, 0x5, 0x4, 0x6a, 0x2, 0x6, 0x0, 0x8, 0x3, 0x1, 0x4, 0x6, 0x1ad, 0xf, 0x6, 0xc, 0x73, 0x4, 0x7fffffff, 0x6, 0x9, 0x1, 0x1ff, 0x5, 0x248, 0x5, 0x3, 0x40, 0xfffffffe, 0x8001, 0x8, 0x0, 0x0, 0x3, 0x4, 0x5, 0xffffff8f, 0xe000000, 0x8be, 0x4, 0x100, 0x9, 0x9]}) r10 = openat$cgroup_subtree(r9, &(0x7f0000002000), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0xa71, &(0x7f0000002040)={{0x12, 0x1, 0x250, 0xf8, 0x30, 0xc7, 0x20, 0x424, 0x9730, 0x1b45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5f, 0x3, 0x7e, 0x9, 0x10, 0x7, [{{0x9, 0x4, 0x66, 0x7, 0x9, 0xed, 0x58, 0xeb, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x3}}], [{{0x9, 0x5, 0xb, 0x10, 0x8, 0x0, 0x6, 0x1, [@generic={0xc5, 0x4, "1ff9eed57a33025dae39141ee763959c575cacfdcb9222cf8918b6961113af5ce0f6a57fbbaf927777a6f6bf2f3143d1a4737f17ea3a89d81064e3a17479e2585403c500eef13dec17b2546de107a4cfea69ac78ff977e00c2f7a803bfe23be50431ecc6b32068d21e63263d090034046328213435357df95dc6b7a4afe025f94bfb42d60fdeef862f9e3c4e8faab5adc7c00e6e6d36803f1e6104dce46637531f3fdc0e89042f0b2d4e89c3f8951e8293fdfc3f685f84f06bf8a20031378965ad1753"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x3}]}}, {{0x9, 0x5, 0xe, 0x12, 0x200, 0x4, 0x8, 0x81}}, {{0x9, 0x5, 0x7, 0x12, 0x20, 0x80, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x1, 0x2}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0xae, 0x2, 0x40, [@generic={0x61, 0x30, "d76e5a433676da39519c158cefdba29d356011c83b790b9005e57fe8ce7686f0a04ff1dcd97dfe1d1f5b18920e889eff713fba8b41ca2ec37ac38301f8afbab8b1e38781bdfa877c0eaa4a4386acf453d5b4bef22ea19d3122d9ba4d0eb109"}, @generic={0xa5, 0x3, "f6eaf8697c2616dfab6cf119bddea8d6aea05e3ecf6376461ec629b2d454ff18e17ad0e9ba08f2e184016a9b4771764ebb4fb2dfb8abd43258d23c71e0d169f7918aa420984af2361fe7539ad0ee959d87bea6a068ffb41222ee1e805259ec2c00f8f38cdb4e4359f48d4a2dc0840c0e5fbdb57bb3bdf966eaf50fb1afe94898a66fadf2d9e11289b263fe4f6fcfed8cc59eb2e244b9051ef8e1438168db0966e25219"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x5, 0x1, 0x1}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xf, 0x3, 0xba}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x8, 0x1, 0x1, [@generic={0xea, 0x21, "f692cabe65580e37466c77c13cb3e2ef1f43c9f7cdfad6590255b51cfafb9bcf6ba669e41d0e95be0f81d74afbaa90e927733ef4f004d418c535406b48f9ffb9ca04744bfbb81263a816ccd4590474fb467f804b4bd89322e57d68df32ce2abc2bd9faa2d090425e36bcb66fb7b853c13f1fab5db6685f26547f8e4b51986790179dc888daf9086304ac1f09411c35be9cf884979d0bae348774dede1d79773d9d8fa58bad03d319a5c8b78df27a5018af40668e3d050f1bbc4f921dd6ba52849fb20e0337543adf0034a589551b55872766d061b119bd153bedad1c5c761595660af6b9745f69a3"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x4, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3c, 0x3}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x3, 0x0, 0x4}}]}}, {{0x9, 0x4, 0xe6, 0x4, 0x4, 0xbd, 0xc7, 0xf8, 0x2, [], [{{0x9, 0x5, 0x5, 0x1, 0x400, 0xf8, 0x4, 0x8, [@generic={0xa2, 0x9, "b9b2b3373705f146b2fd0627938a0f3cbea4f827be94c632b74966d23a1763314e6cd2ceb7eba5ab73cca904db415f81c9e15d5e15431f67037ad690ad11cbb9b208f7d9661e9b9806cb3ecfbf0d3f0ea4f29e27c59f101babe6e482f3cf946c56a422a85a5bcad992a86e01ce72d29bc7b756f97a09ae6554205413a7c2b3895c00522212529daa0df742d05a8dcbbec3ef01bb8935ef2ed900c3e8eee27ff6"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x5e, 0x6, 0x3, [@generic={0xcb, 0x23, "d5d41bf6d3f9e2c025259bef33ee4b8d8c73eb83b81249af92f24365190f570fede122d06d1bf6afcde5a5aa96cd7027acc7d6272952b51bfe4cf12903b7e99d59a04c89b5a6aade7cb254d04e1d5bca040c5ef5baad4385a8ded6e8d0e08975909dc6945c74753fcddde8f474aca28f8527a25eff340cc9b039f7c7e0f035dced6195b7cf9492745936ecc5c1150ca4f8705fb7cec467375457aa4bbcd97a1306a3bd8a93e88374277e7d98406f4aeb5fe74e442aab58ae685cb0d8aae373a58b97df69b7d8bf0621"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x16}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x6, 0x44, 0x6}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0x4, 0x21, 0x4f, [@generic={0x98, 0x67, "9119b18d46b9243b3a6235f559537637640c4beb2c715e7da32770c05375e401111413d70bd66f320d79d4e2811f26763efb13218b3c8a194e9d646e132065d976c769def7551a811f6901c00beca7f563cad56796ea47086ae17d178197a89cf9ce7172a677754d44a9eab612b5d4ecfac2649368f0b50038a7ccd575d4f9bbbe8c8bb0cb05123e01d60592c111d4b033f0c7de7ab9"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x4}]}}]}}, {{0x9, 0x4, 0x48, 0x5, 0xb, 0xb6, 0x68, 0xbf, 0x2, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "9d7313"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0x8, 0xb6}, [@ncm={0x6, 0x24, 0x1a, 0xbe, 0x30}, @country_functional={0x10, 0x24, 0x7, 0x6, 0xb, [0x1, 0x4, 0xd11, 0x1000, 0x7]}]}, @uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7f, 0xb47, 0x40, "f922fcbe8165579a94"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xb2, 0x14, 0x9, 0x7, "a1c2", "ff6a4e"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x8, 0x3}, @as_header={0x7, 0x24, 0x1, 0x71, 0x1, 0x5}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x2, 0x5, 0x6a}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x4, 0x4, 0x1, "1b0272eb76b9345f2b"}]}], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x8, 0xc, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x662}]}}, {{0x9, 0x5, 0x6, 0x9, 0x8, 0x9, 0x7, 0x40, [@generic={0x29, 0x23, "ff0658b33d881b0031321b963ae663067e6a0e14d0e68375686c3a8b8bfe1c6e978c27e5a82e58"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xa, 0x4, 0xd}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0xa7, 0x3, 0x2, [@generic={0xc7, 0x2, "6dd43ef9c60bc5e8835039eb816835d47e7a067359c5ad0200fa761470d13316ab2a9c0f6109f98e17d0d75ee6391dc8c81c3cbd8ad6d469c1d84de08e2aa488e610665bcf43504ddb148b913618cc8511ed9b6a42c618e407ae3d945c2213383ed595e5f4de7260be1d0457b03e1446956c4a668bafae8e1d8b3fbedb42ae284ef25311b23cbd4f64d51317af943abcc894265b0c4980d8ba97dfe048554cea51596bc3274e7f3326b4e7ec73b038cf8ca163e8bd88c0366499416a811b75f559cf6d4599"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x1}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x2, 0x1, 0x9, [@generic={0xc4, 0x0, "cd1e686e3e67942137be1d876af9892b21b198ad691b6e05ef329a8028ac4bedd2e2f1fcdf3124353fcd4eebd564f3b5d0283cfc2d1cf475d76efedc60b111d900d6c831f3bfd16a2b1296674f6044359cab22866929a024ad5eb8081ff8bbb5dfd13229f1a3005c447bdb7f9a2d457cb2802541560127c65f00f2f6f5cce48e6330087b10e49e3fcd52be786d1ffbb2e2425bddd7b45dba7c6bbfc05c6c57c10745d93c1c572b6f50f14d02c8f26d4b87e686e9071ce711c520e7a3d2535f18f918"}, @generic={0x67, 0x3, "3d841d8a68fe4d301ae6a697bce3c680aede445b465044cae6755a39323c58f25a9c2732d0656fa1591f75b14edb546e9a26c78bb84d40b98114df6c8a7b60aabd741318699ee8db323954c1dcfc8e7149a986866820b7489640dbc20421d28a349a248b88"}]}}, {{0x9, 0x5, 0x9, 0xe, 0x348d400c8b7b3dbd, 0xfe, 0x7, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x11, 0x9, 0x8, [@generic={0xae, 0x2, "087c3c44cbe3c78f03adb932d593d70f54e9dc3c5ceb5b90c8e1d774f9c57ae30c1b5526e65b06dc8245b31d35fe7036af3436f8394959c933cc18868a8deff52955bf0bd51a91611a01aaab2558e2960995f5fbd17f4d66e5a80b8afc4f82a174c19ca035c031c27546bfdf0127a5f5c4183b171dc4927bfdd34fcd372a46b454c9b735ccfcb6e3c0ac30b7a17fc4feefca2a7dbe69928503211e4e1dcd195587dab9c00ee52fb7b646e291"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x0, 0x1, 0x6, [@generic={0x4b, 0xe, "40926c802c60d2b322f8159ce5b65cb64b2537c49938fd006db325c2b207feef40f0d8700411c95bd2266c82af8698d97af27160a993772668adb78c13a8a0eaa284ebe787bf639904"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfc, 0xd}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x7, 0x5, 0x81}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x7, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x63b}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x5, 0xe, 0x2, [@generic={0xbb, 0x21, "1db90da45de7d9083c4831aa54ed8ceb7c5a0c43194b64fdb92665c1d9280e0f90bd990117331e742d910cb4453ce69af0e1bab3c201bee4eb2f6ccaad3082be43bc1a522b8cf7a5cf6ff7e8aca2f3df26f41d6a7c8cf2ef51a1a54e5a2e5ad68f3ee8b7b699d6fb0300cb68ff69b2c1bb4eef2bd31c6ca66cb03eed53d5b28ab41959fc05d3b1362c50ea04623151dd2d2eafc9b5cf0f5c41100972ec0a2cecce7343e7cbdb1f3e24de9c87a49844c80eeae8ca70613248af"}]}}]}}]}}]}}, &(0x7f0000002d80)={0xa, &(0x7f0000002ac0)={0xa, 0x6, 0xd3c55a1f5690d3e7, 0x7f, 0x7a, 0x4, 0x10, 0x2f}, 0x4d, &(0x7f0000002b00)={0x5, 0xf, 0x4d, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x0, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x7, 0xf000, 0x2, [0x0, 0xc0, 0xc000, 0x3f00, 0xff003f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "542bbd1125fc9966e5fa298c10da5c30"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0xff, 0x506b}]}, 0x5, [{0x4, &(0x7f0000002b80)=@lang_id={0x4, 0x3, 0x422}}, {0x57, &(0x7f0000002bc0)=@string={0x57, 0x3, "58ec46c489a63162b45f3458be60dcb548a22fc180bceaa4809854b7e379e11ce4d16e5f0b26ab9eff21a8a00190c13f2eeb28999d3e6c5956babc0c5ebc4b7886c9a8920ec3a14c1ee03fd230e9da966d216c1746"}}, {0x6, &(0x7f0000002c40)=@string={0x6, 0x3, "b54296b4"}}, {0x8f, &(0x7f0000002c80)=@string={0x8f, 0x3, "187236aa67bf9aa22063630b32b97409f785d5d93d5556cf0717fcd7be23053708326580559bba461ee3b5a109b783c5d5f41d89a0ee1d76de29c0eae2d1412e6021161f80cf0cfb019bf246a28e48efefa26ab3043ab9f4daf68ef74d7282a37af3e5de110971a7b656156d02fa895a7e9173efbc7aea2652615536cf2926c02e56ba346c343d22e20ff9488d"}}, {0x7, &(0x7f0000002d40)=@string={0x7, 0x3, "d487e4a6da"}}]}) fcntl$getownex(r10, 0x10, &(0x7f0000002e40)={0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000002fc0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002e80)={0xf8, 0x35, 0x1, 0x70bd25, 0x25dfdbfb, {0x1c}, [@nested={0xd0, 0x22, 0x0, 0x1, [@generic="4f7fec124b58cf064d7c5aac2b6c46c07816487e5a7adfbf5faea5ae50311d005f98a34c3d30c85856337f960546a1100af7d88c2d67d33d51d2320b58df6a2e4d4cd5a31ba651a6d0cd0a0442afbb6e5da1eb40dcc3fe0018b04a", @generic="aedd2bafbd29d60728f97099a78c4b4863266302f5ff54d9763d16120731f0da5f1f99a674be664bae6f8dcc7763be9767f358de9bc45e5104e57422e05f9fbb977238e7b6bd7534c701cc8f6f340603f9f23379fa480e6ddb0ed08dcbe5aee4f5f090810d0d201a1a658a87b2e809e402"]}, @nested={0xc, 0x3c, 0x0, 0x1, [@typed={0x8, 0xfd, 0x0, 0x0, @u32=0x6}]}, @typed={0x8, 0xf7, 0x0, 0x0, @pid=r11}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) recvmmsg(r3, &(0x7f0000008b40)=[{{&(0x7f0000003000)=@isdn, 0x80, &(0x7f0000003600)=[{&(0x7f0000003080)=""/249, 0xf9}, {&(0x7f0000003180)=""/210, 0xd2}, {&(0x7f0000003280)=""/248, 0xf8}, {&(0x7f0000003380)=""/240, 0xf0}, {&(0x7f0000003480)=""/193, 0xc1}, {&(0x7f0000003580)=""/67, 0x43}], 0x6, &(0x7f0000003680)=""/36, 0x24}, 0x8}, {{&(0x7f00000036c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000005a00)=[{&(0x7f0000003740)=""/42, 0x2a}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/193, 0xc1}, {&(0x7f0000004880)=""/149, 0x95}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/149, 0x95}], 0x6, &(0x7f0000005a80)=""/4096, 0x1000}, 0x1cd}, {{&(0x7f0000006a80)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000006d00)=[{&(0x7f0000006b00)=""/194, 0xc2}, {&(0x7f0000006c00)=""/96, 0x60}, {&(0x7f0000006c80)=""/94, 0x5e}], 0x3}, 0x3}, {{&(0x7f0000006d40)=@nfc_llcp, 0x80, &(0x7f0000006f00)=[{&(0x7f0000006dc0)=""/106, 0x6a}, {&(0x7f0000006e40)=""/190, 0xbe}], 0x2, &(0x7f0000006f40)=""/158, 0x9e}, 0x4}, {{0x0, 0x0, &(0x7f00000081c0)=[{&(0x7f0000007000)=""/139, 0x8b}, {&(0x7f00000070c0)=""/141, 0x8d}, {&(0x7f0000007180)=""/4096, 0x1000}, {&(0x7f0000008180)=""/21, 0x15}], 0x4}, 0x1b7}, {{&(0x7f0000008200)=@ax25={{}, [@rose, @netrom, @default, @bcast, @bcast, @rose, @remote, @null]}, 0x80, &(0x7f00000085c0)=[{&(0x7f0000008280)=""/107, 0x6b}, {&(0x7f0000008300)=""/219, 0xdb}, {&(0x7f0000008400)=""/24, 0x18}, {&(0x7f0000008440)=""/106, 0x6a}, {&(0x7f00000084c0)=""/116, 0x74}, {&(0x7f0000008540)=""/83, 0x53}], 0x6, &(0x7f0000008640)=""/252, 0xfc}, 0x9}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000008740)=""/152, 0x98}, {&(0x7f0000008800)=""/134, 0x86}, {&(0x7f00000088c0)=""/158, 0x9e}], 0x3}, 0x2}, {{&(0x7f00000089c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000008ac0)=[{&(0x7f0000008a40)=""/111, 0x6f}], 0x1, &(0x7f0000008b00)=""/34, 0x22}, 0x10}], 0x8, 0x0, &(0x7f0000008d40)={0x0, 0x989680}) 23.581378547s ago: executing program 1 (id=9414): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = timerfd_create(0x4, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x800009, 0x810, r2, 0xd14cf000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x8008770b, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623) 23.568232028s ago: executing program 1 (id=9415): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8911, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xf76]}, 0x8, 0x0) ppoll(&(0x7f0000000080)=[{r2, 0xf542}, {r2, 0x1141}], 0x2, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000080)=[{r2, 0xf542}, {r2, 0x1141}], 0x2, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x200}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x200}) r3 = accept(r2, &(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000240)=0xfe33) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="6ace448bcb275ceb0dd2cae52c5addf5fd4ebe78fc293f820150cb9011501fdeb4b0fea38788708a2b52dcc3dadc856c3ec0b6bbaa79b9c8344b3f934d13f3690b027a6d", @ANYRES64=0x0, @ANYBLOB="2c7766646e2f1d", @ANYRESHEX=r6, @ANYBLOB="bc69"]) read$FUSE(r7, &(0x7f0000001f40)={0x2020}, 0x2020) fcntl$getflags(r5, 0xb) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38690754a00aad00", @ANYRES16=r4, @ANYBLOB="02002dbd70000042000000"], 0x1c}, 0x1, 0x0, 0x0, 0x52}, 0x50) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r10, 0x4020aea5, &(0x7f0000000040)={0xffff1000, 0xd000, 0x1800, 0x1, 0x8}) (async) ioctl$KVM_SIGNAL_MSI(r10, 0x4020aea5, &(0x7f0000000040)={0xffff1000, 0xd000, 0x1800, 0x1, 0x8}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x4000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x9, 0x0, 0xff, '\x00', 0xf7}, {0x0, 0x2a, 0x0, '\x00', 0x7e}, {0xfc, 0x12, 0x5, '\x00', 0xba}, {0x11, 0xb, 0x0, '\x00', 0xfe}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x8f, 0xf7, '\x00', 0xa}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xef}, {0x0, 0x1, 0x5, '\x00', 0x3}, {0x2, 0x0, 0x8, '\x00', 0x3}, {0xc3, 0xfd, 0x0, '\x00', 0x2}, {0x0, 0x21, 0x88, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0xb, 0x9, 0x3, '\x00', 0x2}, {0x1, 0xbb}, {0x0, 0x4, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x6, 0x5}, {0x7f, 0xff, 0x3}]}}) 23.40622605s ago: executing program 1 (id=9416): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000340)=""/205, 0xcd}], 0x3) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000001580)=@ethtool_per_queue_op={0x4b, 0xe, [0x9, 0x1ff, 0x7fff, 0x1c6, 0x0, 0x7, 0x81, 0x7, 0x3, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0xf, 0x10000, 0xe157, 0xfff, 0x65, 0x9, 0x4, 0x8, 0x6, 0xffffffff, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0x3, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x7, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x100091, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x1, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8a, 0x8, 0x101, 0x80000000, 0x8, 0x2, 0x7ff, 0x7, 0x81, 0xa, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x5, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x9, 0x8, 0x3, 0x10000, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x4, 0x5]}}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000017c0)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x1a8xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xe21D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') close(r0) setresgid(0x0, 0xee01, 0xee01) r2 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read(r3, 0x0, 0x0) r4 = syz_open_procfs(r2, 0xfffffffffffffffe) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x8000, &(0x7f0000001540)={0xa, 0x4e24, 0x6, @loopback, 0x3}, 0x1c) fchdir(r4) r5 = socket$inet(0x2, 0x2, 0x1) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_delete(0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$HIDIOCGUSAGE(r7, 0x501c4814, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x1947, 0xf}) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x72}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x20000810) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x0) 23.39038438s ago: executing program 36 (id=9416): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000340)=""/205, 0xcd}], 0x3) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000001580)=@ethtool_per_queue_op={0x4b, 0xe, [0x9, 0x1ff, 0x7fff, 0x1c6, 0x0, 0x7, 0x81, 0x7, 0x3, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0xf, 0x10000, 0xe157, 0xfff, 0x65, 0x9, 0x4, 0x8, 0x6, 0xffffffff, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0x3, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x7, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x100091, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x1, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8a, 0x8, 0x101, 0x80000000, 0x8, 0x2, 0x7ff, 0x7, 0x81, 0xa, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x5, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x9, 0x8, 0x3, 0x10000, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x4, 0x5]}}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000017c0)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x1a8xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xe21D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') close(r0) setresgid(0x0, 0xee01, 0xee01) r2 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read(r3, 0x0, 0x0) r4 = syz_open_procfs(r2, 0xfffffffffffffffe) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x8000, &(0x7f0000001540)={0xa, 0x4e24, 0x6, @loopback, 0x3}, 0x1c) fchdir(r4) r5 = socket$inet(0x2, 0x2, 0x1) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_delete(0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$HIDIOCGUSAGE(r7, 0x501c4814, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x1947, 0xf}) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x72}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x20000810) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x0) 5.354832685s ago: executing program 5 (id=9647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0xfffffffe, 0x9, "ea7174ddb80fc7000002f7ffffffffd2a2d975", 0x2, 0x4}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030109025c00020108007f09358a6a80df6a4500334efcb5b504000001020d00000524060001052400ff0f0d240f010b000000010100040e06241ae4291209058103080002f4000904e5ffff010d00000904010102020d000009"], 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) signalfd(r0, &(0x7f0000000080)={[0x2]}, 0x8) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000000)='\"', 0xfdef) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) 2.286389754s ago: executing program 5 (id=9677): setresuid(0xee01, 0x0, 0x0) r0 = syz_clone(0x28180, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2180203010902120001000001000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)={0x40, 0x12, 0x2, "af7e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @mcast1, 0x5}, 0x1c) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0xb, 0x2, "d036"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x20, 0xe, 0x3, "0a49f7"}, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r3, &(0x7f00000000c0)=""/15, 0xf, 0x4) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 2.284295574s ago: executing program 7 (id=9678): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="540100001000130700000101000000000000000000001300e0000002000010000000000000006ded00000000000000000a002000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb000000000000000000000000000004d532000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000040000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000004000000000000000000000000000000000000082abd70000000000002000400220000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002"], 0x154}}, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 2.264236094s ago: executing program 7 (id=9679): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) r0 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f00000003c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x4, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x80000000, 0xfffffffe, 0x8000, 0x40002, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x7}}}, 0xa0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/59) 2.209634135s ago: executing program 7 (id=9680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 2.156314586s ago: executing program 7 (id=9683): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1c4, 0x4) geteuid() mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x8000, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0x5}}]}) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)={{}, {}, 0x0, 0x6}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x11) read(r4, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x8140aecc, &(0x7f0000000000)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 1.982443799s ago: executing program 7 (id=9685): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x30, r2, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xc}, @void, @val={0xc, 0x99, {0x9, 0x58}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000001040108000000000000e0ffffff0004050001000300"], 0x68}, 0x1, 0x0, 0x0, 0x4000805}, 0x20004900) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r4, 0xa, 0x21) fcntl$setlease(r4, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0640"}, 0x0, 0x0, 0x0, 0x0}) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000380)=[@cpuid={0x2, 0x18, {0x400, 0x5}}, @code={0x1, 0x75, {"c744240023000000c744240200800000ff2c24c7442400b6000000c744240200000000ff2c24c46225004a00c744240092ac8328c74424020f000000c7442406000000000f0114240f201d2e66470f73d2058f8978c7db0fc72867450f53f667450f01ca"}}, @uexit={0x0, 0x18, 0xfff}, @uexit={0x0, 0x18, 0x3}, @code={0x1, 0x5e, {"66b840008ec0420f09c4a16172d100c462fd3f59db660f00d5c441d1159a000000000f011ca4c744240003000100c744240200000000c7442406000000000f011c2466ba4000edc4c141fe4d9a"}}, @cpuid={0x2, 0x18, {0xfffff161, 0x1}}, @cpuid={0x2, 0x18, {0x3, 0x1}}, @code={0x1, 0x61, {"66baf80cb8503b858bef66bafc0cb000ee0f08b9800000c00f3235001000000f3040da2f470f01ba6d0000006536660fc731c4815012fd66bad004b804000080eff20f20450f20c035200000000f22c0"}}, @code={0x1, 0x74, {"b9f60b00000f32c744240091000000c744240200000000c7442406000000000f0114243e0f0f33aa4d0fc7ae0e00000066410f3880b900580000c401d9dee7f2460f1aab41530000b93d0200000f32c443617fe10db9800000c00f3235000100000f30"}}, @cpuid={0x2, 0x18, {0x4}}, @cpuid={0x2, 0x18, {0x1000, 0xffffff68}}, @code={0x1, 0x5c, {"0f20c035040000000f22c0430fc79a0b000000c4823dbe3b2e660f2203b9c9080000b803250000ba000000000f30410f20e33e694d06a66cdbb6b9d20b00000f320f01cb66430f38827003"}}, @code={0x1, 0x62, {"c4c29501e30fc7aefa8f000066b891008ed00f5199d500000048b8e2cd0000000000000f23c00f21f83503000c000f23f8c481d16580d472000066b818010f00d8410f01ca66410f388253a52e260fc72f"}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0xd}, @cpuid={0x2, 0x18, {0x9}}, @code={0x1, 0x5c, {"430f0019c744240061000000c7442402b5000000ff1c240f20d835080000000f22d8f266f2430f01df66bad004ecf3410f01e8c402618c860f00000042839792fe0000bd7b00056a650000"}}, @code={0x1, 0x5a, {"65f3650f2090b9180100000f3236660fc7b1e40000000f01c366b829000f00d866b896008ee0c48155d259f4440f070f3548b8b7000000000000000f23c00f21f835020000000f23f8"}}, @code={0x1, 0x5c, {"66b89d008ee0470fc7ab68942188650f01cf460f00163e40abb9800000c00f3235008000000f30440f20c0350c000000440f22c0c402719c78060f01cfb9800000c00f3235001000000f30"}}, @cpuid={0x2, 0x18, {0x1, 0xa}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x55, {"400f01b700000000640f35c4a1365f15f7ff0000c4c12d73d104440f8495640000c481fb1154c800c4e2f192047bc4034d5e860900000034f2490f2d2c60470f017c5612"}}, @code={0x1, 0x54, {"f22ed8fd450f228642d1ec0f20c035000004000f22c036400f01d1b9800000c00f3235002000000f3066b817000f00d867460f1a7dc1266526360f0865f3410fc77300"}}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x59, {"b932020000b80f030000ba000000000f3066420fc77200430f3067440f076536440f20806564663e660f57f2470f01c8400fbf620dc402fdb79f0000000066460f3820ab11123e7c"}}, @cpuid={0x2, 0x18, {0x9, 0x8}}, @uexit={0x0, 0x18, 0x9}], 0x5e2}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000980)=@arm64={0x6, 0x4, 0xd, '\x00', 0x7}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000100)={0x40, 0x18, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) read$rfkill(r6, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1000c890}, 0x1) 1.410345668s ago: executing program 8 (id=9704): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x4000000e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.406645168s ago: executing program 8 (id=9705): r0 = syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = getpgid(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) kcmp(r4, r5, 0x0, r1, r3) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x36, 0x2, @thr={&(0x7f0000000440)="985f3dcce268f4748138b4ccdc3ed9006ac0a7a1f175e887589a670cf19b7d4268d76ee5a8e1de2759f3c1a3cbff1d211196cd8a0a24738a3647f0ba5d9385425b5375423edaba846606938d29703b590dc5094d56d09b307ea84bf5771ee73fa026e946818c9214dd10c1097fe78dcf59092e607c1eeaa6a6dba6f69199a7fc12141504e17489d7766a218d10dc436efb37b72af4ee0e469006c9d4d013a6976748994d6e7735f44ba0fd732ae5b0438d78d700", &(0x7f0000000100)="8c5047c855fda0620d4518a47086658a9edd65d9f20bab7dd7ce33"}}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r6, 0x0) 1.317086909s ago: executing program 6 (id=9708): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 1.31160889s ago: executing program 6 (id=9709): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x20) close(r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$cgroup_int(r0, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x2, 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x22201, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40000120, 0x0) 1.28157556s ago: executing program 6 (id=9710): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000200)='./file0\x00', r2, r3) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x76e1c523, 0x401, 0x4, 0x3, 0x0, 0x0, 0x0, 0x100, 0xa4001f7e}}, 0x50) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = fcntl$dupfd(r5, 0x406, r6) pidfd_send_signal(r7, 0x1e, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000000)={0xffffffff, 0x0, 0x0, 0xfffffffe, 0xfe, "cf0da7087b9539556f7ab2a8bf68b63bfcbea9"}) ioctl$TIOCPKT(r11, 0x5420, &(0x7f0000000100)=0x8683) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000080)={0x7ff, 0x5, 0x3, 0x1, 0x4, "efd36c8697e67f323922c0a0614bfab679f142"}) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xffff1000, 0x3000}}, "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", "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"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000140)={0x0, 0x3}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) 1.27585669s ago: executing program 8 (id=9711): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder-control\x00', 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5381}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x1, 0xcc01, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x266, 0x0, 0x6, 0x29, 0x0, @multicast1, @broadcast}}}}) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="020000"], 0x48}}, 0x40884) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x4}, 0x10) clock_getres(0xa, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0xfffffffc}}, 0x10) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x801}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x3, 0x1}, 0x10) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000540)={'binder1\x00'}) 1.206467281s ago: executing program 6 (id=9712): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xba, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffff9) rt_sigtimedwait(&(0x7f0000000440)={[0x40]}, 0x0, 0xfffffffffffffffe, 0x8) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0xef, {0x9, 0x21, 0x70cd, 0x0, 0x1, {0x22, 0x558}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x70, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0x9, 0x9}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x650, 0xae, 0x44, 0x40, 0x20, 0x99}, 0x1c, &(0x7f0000000240)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "524597acdb28bcdeaadb8dc4069e2b4c"}, @ptm_cap={0x3}]}, 0x8, [{0xf3, &(0x7f0000000280)=@string={0xf3, 0x3, "e7ae0cd1d5c2e2b111f024df241a5f0735ea6c802d82e9afe8a5ab968df859b70896a3b13fbd59867b54b43103f4626ea19c45feb65122d4a62fad10250c7bbd144aa19e149d6360dfd357d8311798df67814ba148a5d6daf261467d2bcf7d6ee355af67a078d452b13316f93f74f10443a984fd97c80f140ba2d5540b9f36205fe0f5d5724db84ae700093e522756574aad795d1e801e595d9fe03b39f9308e2fba1bca8f2d392c66872ec6dffb2339f8471df00ee084a0d1282c3b6e475c6b42e087795616220bba5a3ea53bd1b18ebc3714dd065aad555d9daf7368d6c4661ac58893529b1efefc2e0164df8007dff5"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x91, &(0x7f0000000480)=@string={0x91, 0x3, "cb3105227cc97ab4f60c8187457548f45b3fe1655b1469571fb4ed60ee76cdd6f7a321351589a63c77fb0c72e4a9f65c6b20d64932a82cea84c0e73795c7a4a85c271939e276231fe1ee8ff3fb95accc4bcb2e083bb247247d6787970df2633fc5eb38672d366e56f6a2d72fe7dd6c54d24c98897c073b9ad795d0b6575a36089bf28f2ee4c896054c7b70b7801eee"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3009}}, {0xe5, &(0x7f00000005c0)=@string={0xe5, 0x3, "6e6770f2532c826ee83c5fb7d92541b545b18ba3a0d37f98e2f40f189072b493f5c144b8f4caf631eb9590c8852734b636d90995df12f3db40cbbb3da318a4f870206f9cd543a25ce66736a8e79142fc14675dddce65642fa50d390510fe69b911d45accfd20b504e0a5c24a8a92738ce54e08cdb63d8839b0e9b9d9b88795cb3d80cf99daee312a59e981301c107edb02a7151f373ad7636e4272d5b8309858094645c5e364197c132cce42a2cd653ad1f5c7a77cc24b2ea8c0838db0a5b4fad8ffdefe95f8366d8b67bb28526b75af58b994af201e3f9c4e6ebce036245d68ef49c8"}}]}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) syz_usb_control_io$hid(r2, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2980dd8d9aac1e", @ANYRES16=r0, @ANYRES32=0x0, @ANYRES8=r1], 0x0}, 0x0) clock_adjtime(0x41, &(0x7f00000000c0)={0x6, 0x9, 0x4, 0x100080001, 0x8000000000000009, 0xfffffffffffffffd, 0x10, 0x4, 0x7, 0x1, 0x800002, 0x5, 0x1000, 0x4, 0x20000004, 0x9, 0x5, 0x5, 0x79, 0x20000009, 0x3, 0x6, 0x7, 0xffffffffffffffff, 0x10000, 0x4}) 1.205769141s ago: executing program 8 (id=9713): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x42, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x36}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000440)={0x0, 0x98, "2c08be0e35dbe8fde461bc159b68a749f19596e251454e5638e92064acb5809c46bfb86dd4425f2f24691678aea61e3cdc435e502ef4bf26a03cd08f77fa48e220a6fd8e29d4fa6f037d2da2b3153957fa3fbaa19b0f6088ce1368dc6eb9db45aaca01cf652bd29485c64de66d47257c0687f69ae693938416797e69f192ad2cf9c346620de98711435721a89cf04848e42f800ae161b47c"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x2, 0x80a0000, 0x2}) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x32001, 0x88) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000002000040"]) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r15 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) 722.837299ms ago: executing program 6 (id=9714): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x24, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @flat=@handle={0x73682a85, 0x1100, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)=0x6) 706.804139ms ago: executing program 6 (id=9715): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'bond_slave_1\x00', @random="f7ff3a711070"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) fsetxattr(r2, &(0x7f0000000080)=@known='trusted.overlay.opaque\x00', &(0x7f0000000100)='./binderfs/binder1\x00', 0x13, 0x2) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r5, 0x1, 0x28, 0x0, &(0x7f00000001c0)) pread64(r2, &(0x7f0000000000)=""/65, 0x41, 0xffffffffffffc31b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x40, 0x1c0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xb3, 0x10, 0x2}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x0, 0x9, 0x7c, 0xff, 0x5}, 0x8b, &(0x7f0000000380)={0x5, 0xf, 0x8b, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x4, 0xf00, 0x3, [0xc03f]}, @generic={0x68, 0x10, 0x1, "4a4a487da86e5fb5e943071d9a9fd8f843a872734a4acde04b640d17adc557b763aa210f80467c8d8c836c1421da1bdde09c27d8d2922d406ae1d2933b42f88da3056eb38b6114e1660e37793c73537ca9afb3cf3f487d93e9f41b938f92432236e17d51ae"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x7, 0x5, 0x1, 0x1}, @ptm_cap={0x3}]}, 0x7, [{0x7d, &(0x7f0000000440)=@string={0x7d, 0x3, "b9ac97fe5a1b195e166fdc177bf7fb414f7557b7ec1f08a16a259dec400ec8dd711f5f53927163c2b2039e729dd54babbabfe5b6bcb12fc9c10164009c7e1400decc465807c3d589fb7a3a86b1257c85c924aaa82548e8f589dc5c0c8d65faa6a1fcdbb57279eb03d5142ae5d21a32905756dcab471f6cae9ffa3a"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x39, &(0x7f0000000500)=@string={0x39, 0x3, "329887f3a3a47c76c2c7ee95f8f2763372f1c11a6d0d9134194e944cc7e40cf957bdc7b0b14a9133ee540c54e10882d13f9d303d87d140"}}, {0x2d, &(0x7f0000000540)=@string={0x2d, 0x3, "65405c4cef6ccc260ed11933e95e285d238cbc1a7c964dffb9ec099840617f113d4cff36a0bb839ffa5afe"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1c09}}]}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50}}, 0x20004010) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r6, &(0x7f0000000340)=@other={'trylock', ' ', 'io+mem'}, 0xf) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee2, 0x0) r11 = syz_open_dev$ptys(0xc, 0x3, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x100}, {r4, 0x102}, {r5, 0xc000}, {r7, 0x11}, {r10, 0x10}, {r11}], 0x6, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={[0x2]}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 590.308091ms ago: executing program 7 (id=9716): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0xfffb, 0xd, 0x1, 0x4}]}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0502103, &(0x7f00000001c0)={0x0, 0xfff, 0x10101}) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r4, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000002d00)='cgroup.threads\x00', 0x2, 0x0) read$FUSE(r6, &(0x7f0000000c80)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 372.785004ms ago: executing program 5 (id=9717): syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x2) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[], 0x24, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = gettid() r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000009e020000000000000e00000000000000fd1aa09e590779a5ea401d35682a387647468a946db3f59af8671c3c4f71e098a48e539879292220cc90214e0bfbd7d9becde6f2a73b6bf299288039bd2d99c3c7cfa9c849d18db1a8613e70675760f844ae1ea90a3fec33e500cadf0659e2569acd25194ce87028a48bf3e2521db3c72e730c8e79327a560887ab10648452c9f37e3950b5dbf9aa64898f8fa0355c4271"]) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e1d, 0x1000001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x20f, 0x0, 0x3}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) madvise(&(0x7f00004af000/0x3000)=nil, 0x3000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r9, 0x0) 199.434018ms ago: executing program 5 (id=9718): mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x1006a83, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@arp={@remote, @rand_addr=0x64010100, 0xff, 0x0, 0xf, 0xa, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x4000, 0x6, 0xb, 0xc41, 0x6, 0x7, 'team0\x00', 'pimreg\x00', {0xff}, {0xff}, 0x0, 0x34d}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2, 0x3, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000001600)) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000240)={&(0x7f0000000200)=""/14, 0xe}) ftruncate(r2, 0x398a0bdb) (async) pread64(r1, &(0x7f0000001b80)=""/4084, 0xff4, 0x10000000000007f) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@loopback, @multicast1, 0x0}, &(0x7f00000000c0)=0xc) (async) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001640)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) (async) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000000)=""/55, 0x37}, {&(0x7f0000001940)=""/197, 0xc5}, {&(0x7f0000001a40)=""/124, 0x7c}, {&(0x7f0000000380)=""/202, 0xca}], 0x8}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x40002100, 0x0) (async) io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r7, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000180)={0x0, 0x989680}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x20, 0x40, 0x2, 0x9, {{0xc, 0x4, 0x1, 0x2, 0x30, 0x66, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@end, @ssrr={0x89, 0x17, 0x6e, [@dev={0xac, 0x14, 0x14, 0xc}, @loopback, @loopback, @broadcast, @rand_addr=0x64010101]}, @end]}}}}}) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xfffffffffffffdaf) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000015c0), 0x4) (async) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) (async) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x400, 0x80, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) (async) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f0000001840)={[{@uid={'uid', 0x3d, r11}}], [{@fsname={'fsname', 0x3d, 'sit0\x00'}}, {@euid_eq={'euid', 0x3d, r10}}, {@fowner_gt={'fowner>', r10}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '-)+L(}'}}]}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r12, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18, 0x81}, 0x4c800) (async) setsockopt$sock_int(r13, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async) recvmmsg(r13, &(0x7f0000001140), 0x700, 0x2, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001540)={&(0x7f0000000340)=@report={0x11f4, 0x20, 0x208, 0x70bd25, 0x25dfdbfe, {0x2b, {@in=@loopback, @in=@local, 0x4e20, 0x0, 0x4e22, 0x7ff, 0x2, 0x20, 0x80, 0x2, r4, r5}}, [@sa={0xe4, 0x6, {{@in=@rand_addr=0x64010100, @in=@multicast2, 0x4e23, 0x9, 0x4e24, 0xffff, 0xb, 0x20, 0xa0, 0x2f, r8, r10}, {@in=@private=0xa010100, 0x4d2, 0x2b}, @in=@remote, {0x3, 0x8000000000000000, 0x4, 0x1, 0x6, 0xa, 0x3, 0xfffffffffffffffa}, {0x8000000000000001, 0x3, 0xfffffffffffffffe, 0x4}, {0x0, 0x52, 0x6}, 0x70bd29, 0x34ff, 0xa, 0x4, 0xd4, 0x22}}, @lifetime_val={0x24, 0x9, {0x0, 0x1, 0x3, 0xfffffffffffffffc}}, @algo_aead={0x104c, 0x12, {{'rfc7539esp(ctr-serpent-avx,md5-generic)\x00'}, 0x8000, 0x180, "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"}}, @proto={0x5, 0x19, 0x32}, @algo_aead={0x4c, 0x12, {{'aegis128l-aesni\x00'}, 0x0, 0x80}}]}, 0x11f4}}, 0x840) 15.67856ms ago: executing program 8 (id=9719): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r5], 0x1c}}, 0x804) fchdir(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) (async) sendfile(r1, r1, 0x0, 0x7ffff000) 15.2276ms ago: executing program 8 (id=9720): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x80106725, &(0x7f00000000c0)) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009302"]) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x2, 0x0, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x1a}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 14.71841ms ago: executing program 5 (id=9721): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) getrusage(0xfffffffffffffffe, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') lseek(r0, 0x0, 0x3) syz_open_dev$ttys(0xc, 0x2, 0x0) 0s ago: executing program 5 (id=9722): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000440)="0f", 0x1}], 0x1, 0x3, 0x5) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000180)="900000001c001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f3fac8da1a297e0099c5ac0000c5b068d0bf46d3234565a0016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x20000000, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x5], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239]}, 0x45c) (async) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x2000) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000000000080ffffffff000000006f5e00000700000000000000080000807f0000d33755"]) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) (async) write$uinput_user_dev(r6, &(0x7f0000001080)={'syz0\x00', {0x10, 0x7, 0xe, 0x7}, 0x52, [0x7, 0x401, 0x466, 0xbe1, 0x6, 0x4, 0x8, 0x7, 0x1, 0x3, 0x50, 0x2, 0x9, 0x7, 0x0, 0x0, 0x8, 0x0, 0x8, 0x9ad9, 0xb500, 0xffffffff, 0x5, 0x7, 0x6, 0x1, 0x8506, 0x4, 0x6, 0xe3f5, 0x1, 0x9a8, 0x8000, 0xffff8000, 0xfffffffb, 0x5, 0x892, 0x2, 0x6, 0x800000, 0x35b4, 0x30, 0x2, 0x4, 0x8000, 0x3, 0x7fffffff, 0x1, 0x1, 0x7, 0x2, 0x8, 0x8b, 0x9, 0x0, 0xfffffff9, 0x5, 0x2, 0x7fffffff, 0x10001, 0x9, 0x60000000, 0x7, 0x8], [0x1, 0x8, 0xff, 0xf, 0x6, 0x35a, 0x0, 0x7fe7a585, 0x7a, 0x200, 0x10000, 0x80, 0x7, 0xab, 0x40, 0xa, 0x7, 0x2472, 0x8, 0x7ff, 0x9, 0x6, 0x7ff, 0xb, 0x0, 0x3ff, 0x6, 0x1, 0x4, 0xfffffff9, 0x9, 0x9, 0xfffffff7, 0x8, 0x89f, 0x8, 0x0, 0x9, 0xf, 0x1, 0xfffff801, 0x1, 0x5, 0xc48, 0x541, 0x4, 0x1, 0xa0, 0x627, 0x800, 0xffff, 0x2, 0x1ff, 0x9ba, 0xfffffff3, 0x9, 0xfffffff8, 0xfb5f, 0x3, 0xfff, 0x4, 0x5, 0x9, 0x8000], [0x8, 0xe, 0xfffff402, 0x6, 0x8, 0x57c, 0x1ff, 0x6, 0x31, 0x6f3, 0x0, 0x5, 0x9, 0x7f, 0x3, 0xee21, 0xe00000, 0x5, 0x4a, 0x89, 0x9, 0xda56, 0x1000, 0x6, 0x7f, 0x6, 0x2, 0xba7, 0x2, 0x5, 0xfffffffd, 0x0, 0xf, 0x5, 0xbfb, 0x5, 0x10001, 0x6, 0x8, 0xcb, 0xf1, 0x7, 0x2, 0x5, 0x4c5a, 0x0, 0x3, 0x8, 0x61c3, 0x800, 0x5, 0xffff366e, 0x6245, 0x9, 0x7, 0x9, 0x7, 0x40f, 0x1000, 0x1, 0x8, 0x0, 0x1, 0x1], [0x35, 0x6, 0x5, 0xd0c, 0x8, 0x5, 0x3, 0x8, 0x4, 0x3, 0x8, 0x8, 0x9, 0x1, 0x4065, 0x5, 0x3, 0x9, 0x4, 0x4, 0x7, 0x0, 0xac8, 0x3, 0x4, 0x4, 0xc, 0x4, 0x9, 0x8, 0x2, 0xfffffff7, 0x5, 0x9, 0x0, 0x6, 0x0, 0x3, 0x1, 0x9, 0x8000, 0x3, 0x1, 0x2, 0x1, 0x10001, 0x7, 0xff, 0x0, 0x6, 0x800, 0x9, 0x6, 0x3, 0x1ff, 0x800, 0xc, 0x16d, 0x3, 0x4, 0x1e, 0x887c600, 0x1abe, 0x4]}, 0x45c) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) (async) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback, 0x7ff}, 0x1c) (async) listen(r12, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) kernel console output (not intermixed with test programs): omm="syz.1.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826338e929 code=0x7ffc0000 [ 576.131737][ T36] audit: type=1326 audit(1750848424.817:154915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25943 comm="syz.1.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f826338d290 code=0x7ffc0000 [ 576.158827][ T36] audit: type=1326 audit(1750848424.817:154916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25943 comm="syz.1.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f826338d290 code=0x7ffc0000 [ 576.224529][T25952] exFAT-fs (rnullb0): invalid boot record signature [ 576.233297][T25952] exFAT-fs (rnullb0): failed to read boot sector [ 576.240567][T25952] exFAT-fs (rnullb0): failed to recognize exfat type [ 576.623441][T25963] netlink: 25 bytes leftover after parsing attributes in process `syz.2.8301'. [ 576.636940][T25963] netlink: 25 bytes leftover after parsing attributes in process `syz.2.8301'. [ 576.838463][T25969] netlink: 'syz.5.8304': attribute type 11 has an invalid length. [ 576.848074][T25969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8304'. [ 576.997344][T25983] kvm: kvm [25982]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 577.148733][T25986] netlink: 25 bytes leftover after parsing attributes in process `syz.6.8310'. [ 577.164344][T25986] netlink: 25 bytes leftover after parsing attributes in process `syz.6.8310'. [ 577.267774][T26001] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 577.410859][T26011] input: syz0 as /devices/virtual/input/input70 [ 577.434918][T26011] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 577.446169][T26014] rust_binder: Error while translating object. [ 577.452666][T26014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 577.461043][T26014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1072 [ 577.491189][T26016] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8320'. [ 577.512537][T26016] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8320'. [ 577.536562][T26018] FAT-fs (rnullb0): bogus number of reserved sectors [ 577.543824][T26018] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 577.551489][T26019] FAT-fs (rnullb0): bogus number of reserved sectors [ 577.558617][T26019] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 577.574853][T26018] bpf: Bad value for 'uid' [ 577.574885][T26019] bpf: Bad value for 'uid' [ 577.672000][T26023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 577.910875][T26037] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 577.927966][ T31] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 577.933865][T26037] overlayfs: failed to set xattr on upper [ 577.944476][T26037] overlayfs: ...falling back to redirect_dir=nofollow. [ 577.954773][T26037] overlayfs: ...falling back to uuid=null. [ 578.051001][T26045] binder: Unknown parameter '' [ 578.057734][T26045] binder: Unknown parameter '' [ 578.084853][ T31] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 578.094530][ T31] usb 2-1: config 0 has no interface number 0 [ 578.101668][ T31] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 578.118876][ T31] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 578.134326][ T31] usb 2-1: config 0 interface 230 has no altsetting 0 [ 578.143835][ T31] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 578.153136][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.162313][ T31] usb 2-1: Product: syz [ 578.166893][ T31] usb 2-1: Manufacturer: syz [ 578.171967][ T31] usb 2-1: SerialNumber: syz [ 578.177378][ T31] usb 2-1: config 0 descriptor?? [ 578.182841][T26023] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 578.190603][T26023] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 578.199420][ T31] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 578.208576][ T31] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 578.240215][T26061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 578.240318][T26060] rust_binder: Write failure EINVAL in pid:33 [ 578.480033][T26076] rust_binder: Error while translating object. [ 578.487190][T26076] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 578.494227][T26076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:48 [ 578.773941][ T1287] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 578.945046][ T1287] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.959153][ T1287] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.971642][ T1287] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 578.982156][ T1287] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.994209][ T1287] usb 7-1: config 0 descriptor?? [ 579.106756][ T13] tipc: Subscription rejected, illegal request [ 579.116721][T26094] overlayfs: failed to clone lowerpath [ 579.116730][T26096] overlayfs: failed to clone lowerpath [ 579.404252][ T1287] lenovo 0003:17EF:6047.0038: item fetching failed at offset 3/5 [ 579.417916][ T1287] lenovo 0003:17EF:6047.0038: hid_parse failed [ 579.436277][ T1287] lenovo 0003:17EF:6047.0038: probe with driver lenovo failed with error -22 [ 579.617000][T26080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:52 [ 579.617549][ T1837] usb 7-1: USB disconnect, device number 52 [ 579.947670][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 579.947687][ T36] audit: type=1400 audit(1750848428.747:154945): avc: denied { bind } for pid=26108 comm="syz.1.8352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 580.140289][T26124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:54 [ 580.180511][T26131] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 580.181207][T26133] overlayfs: failed to clone lowerpath [ 580.193345][T26131] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 580.209877][T26133] overlayfs: failed to clone lowerpath [ 580.211047][T26129] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 580.237093][T26129] rust_binder: Write failure EINVAL in pid:1105 [ 580.240476][T26133] overlayfs: failed to clone lowerpath [ 580.256899][T26129] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 580.265035][T26133] overlayfs: failed to clone lowerpath [ 580.265782][T26129] rust_binder: Write failure EINVAL in pid:1105 [ 580.271809][T26133] overlayfs: failed to clone lowerpath [ 580.285902][T26133] overlayfs: failed to clone lowerpath [ 580.300826][T26133] overlayfs: failed to clone lowerpath [ 580.307315][T26133] overlayfs: failed to clone lowerpath [ 580.315545][T26133] overlayfs: failed to clone lowerpath [ 580.322820][T26133] overlayfs: failed to clone lowerpath [ 580.338387][T26133] overlayfs: failed to clone lowerpath [ 580.345808][T26133] overlayfs: failed to clone lowerpath [ 580.352439][T26133] overlayfs: failed to clone lowerpath [ 580.359482][T26133] overlayfs: failed to clone lowerpath [ 580.366125][T26133] overlayfs: failed to clone lowerpath [ 580.373552][T26133] overlayfs: failed to clone lowerpath [ 580.382214][T26133] overlayfs: failed to clone lowerpath [ 580.389361][T26133] overlayfs: failed to clone lowerpath [ 580.399731][T26133] overlayfs: failed to clone lowerpath [ 580.406868][T26133] overlayfs: failed to clone lowerpath [ 580.416889][T26133] overlayfs: failed to clone lowerpath [ 580.426132][T26133] overlayfs: failed to clone lowerpath [ 580.433468][T26133] overlayfs: failed to clone lowerpath [ 580.439980][T26133] overlayfs: failed to clone lowerpath [ 580.446693][T26133] overlayfs: failed to clone lowerpath [ 580.454153][T26133] overlayfs: failed to clone lowerpath [ 580.460656][T26133] overlayfs: failed to clone lowerpath [ 580.484564][T26133] overlayfs: failed to clone lowerpath [ 580.491374][T26133] overlayfs: failed to clone lowerpath [ 580.498728][ T31] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 580.502407][T26149] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 580.510560][ T31] usb 2-1: USB disconnect, device number 25 [ 580.526726][T26133] overlayfs: failed to clone lowerpath [ 580.534488][T26133] overlayfs: failed to clone lowerpath [ 580.543361][T26133] overlayfs: failed to clone lowerpath [ 580.550973][T26133] overlayfs: failed to clone lowerpath [ 580.559305][ T36] audit: type=1326 audit(1750848429.357:154946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26150 comm="syz.6.8370" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6a538e929 code=0x0 [ 580.692435][T26158] rust_binder: Error while translating object. [ 580.692481][T26158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 580.700572][T26158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1116 [ 580.913757][T26174] can0: slcan on ttyS3. [ 581.003415][T26174] can0 (unregistered): slcan off ttyS3. [ 581.088464][T26194] tipc: Enabling of bearer rejected, media not registered [ 581.103311][T26194] cgroup: Unknown subsys name '#' [ 581.124243][T26200] __nla_validate_parse: 11 callbacks suppressed [ 581.124266][T26200] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8382'. [ 581.146451][T26200] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8382'. [ 581.244825][T26215] rust_binder: Error while translating object. [ 581.244850][T26215] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 581.253408][T26215] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 581.265095][T26215] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1127 [ 581.296192][T26223] rust_binder: Error while translating object. [ 581.306722][T26223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 581.314184][T26223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1130 [ 581.594029][ T31] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 581.763921][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 581.770856][ T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 581.780333][ T31] usb 2-1: config 0 has no interface number 0 [ 581.790109][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 581.800959][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.810238][ T31] usb 2-1: Product: syz [ 581.815189][ T31] usb 2-1: Manufacturer: syz [ 581.820242][ T31] usb 2-1: SerialNumber: syz [ 581.826124][ T31] usb 2-1: config 0 descriptor?? [ 581.834558][ T31] smsc95xx v2.0.0 [ 582.042723][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 582.057897][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 582.062891][T26242] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8394'. [ 582.080988][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 582.082480][T26242] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8394'. [ 582.093342][ T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 582.117288][ T31] usb 2-1: USB disconnect, device number 26 [ 582.238724][T26261] GUP no longer grows the stack in syz.5.8401 (26261): 200000004000-200000005000 (200000001000) [ 582.254150][T26261] CPU: 1 UID: 0 PID: 26261 Comm: syz.5.8401 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 582.254186][T26261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 582.254200][T26261] Call Trace: [ 582.254206][T26261] [ 582.254215][T26261] __dump_stack+0x21/0x30 [ 582.254269][T26261] dump_stack_lvl+0x10c/0x190 [ 582.254291][T26261] ? __cfi_dump_stack_lvl+0x10/0x10 [ 582.254311][T26261] ? find_vma+0xcd/0x110 [ 582.254336][T26261] dump_stack+0x19/0x20 [ 582.254357][T26261] __get_user_pages+0x1e34/0x22d0 [ 582.254375][T26261] ? post_alloc_hook+0x3b9/0x3f0 [ 582.254398][T26261] ? prep_new_page+0x1c/0x120 [ 582.254417][T26261] ? __kasan_check_write+0x18/0x20 [ 582.254445][T26261] ? down_read_killable+0x79/0xf0 [ 582.254470][T26261] ? populate_vma_page_range+0x230/0x230 [ 582.254489][T26261] ? kasan_unpoison+0x4a/0x70 [ 582.254510][T26261] __gup_longterm_locked+0xcb1/0x1580 [ 582.254532][T26261] ? try_get_folio+0x249/0x2a0 [ 582.254552][T26261] gup_fast_fallback+0x12ae/0x14a0 [ 582.254575][T26261] ? get_user_pages_fast_only+0xc0/0xc0 [ 582.254594][T26261] ? __kasan_check_read+0x15/0x20 [ 582.254613][T26261] ? static_key_count+0x45/0x70 [ 582.254632][T26261] get_user_pages_fast+0x73/0xb0 [ 582.254650][T26261] __iov_iter_get_pages_alloc+0x38e/0x9f0 [ 582.254679][T26261] iov_iter_get_pages2+0x68/0xb0 [ 582.254706][T26261] sk_msg_zerocopy_from_iter+0x1db/0x830 [ 582.254734][T26261] ? __cfi_sk_msg_zerocopy_from_iter+0x10/0x10 [ 582.254770][T26261] tls_sw_sendmsg+0xa1d/0x20d0 [ 582.254804][T26261] ? __cfi_tls_sw_sendmsg+0x10/0x10 [ 582.254825][T26261] ? avc_has_perm_noaudit+0x1c7/0x360 [ 582.254844][T26261] ? inet_send_prepare+0x64/0x4f0 [ 582.254863][T26261] ? __cfi_tls_sw_sendmsg+0x10/0x10 [ 582.254885][T26261] inet6_sendmsg+0x113/0x120 [ 582.254904][T26261] sock_write_iter+0x2cb/0x4f0 [ 582.254926][T26261] ? __cfi_sock_write_iter+0x10/0x10 [ 582.254950][T26261] ? selinux_file_permission+0x88b/0xb30 [ 582.254977][T26261] do_iter_readv_writev+0x4f2/0x6a0 [ 582.255002][T26261] ? vfs_iter_read+0x5f0/0x5f0 [ 582.255026][T26261] ? bpf_lsm_file_permission+0xd/0x20 [ 582.255048][T26261] vfs_writev+0x485/0xcf0 [ 582.255064][T26261] ? do_writev+0x2d0/0x2d0 [ 582.255078][T26261] ? __se_sys_mremap+0x8d6/0x1010 [ 582.255098][T26261] do_writev+0x14d/0x2d0 [ 582.255113][T26261] ? vfs_readv+0xa50/0xa50 [ 582.255129][T26261] ? __kasan_check_write+0x18/0x20 [ 582.255149][T26261] ? fpregs_restore_userregs+0x11d/0x260 [ 582.255166][T26261] __x64_sys_writev+0x81/0x90 [ 582.255188][T26261] x64_sys_call+0x1fbb/0x2ee0 [ 582.255212][T26261] do_syscall_64+0x58/0xf0 [ 582.255229][T26261] ? clear_bhb_loop+0x50/0xa0 [ 582.255266][T26261] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 582.255285][T26261] RIP: 0033:0x7f8c7c38e929 [ 582.255301][T26261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.255318][T26261] RSP: 002b:00007f8c7d193038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 582.255348][T26261] RAX: ffffffffffffffda RBX: 00007f8c7c5b5fa0 RCX: 00007f8c7c38e929 [ 582.255363][T26261] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 582.255378][T26261] RBP: 00007f8c7c410b39 R08: 0000000000000000 R09: 0000000000000000 [ 582.255391][T26261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.255402][T26261] R13: 0000000000000000 R14: 00007f8c7c5b5fa0 R15: 00007fffe51cbb98 [ 582.255415][T26261] [ 582.423859][ T36] audit: type=1400 audit(1750848431.207:154947): avc: denied { create } for pid=26266 comm="syz.5.8404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 582.668530][T26271] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8406'. [ 582.679356][T26271] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8406'. [ 582.726532][T26277] 9p: Unknown access argument : -22 [ 583.019649][T26302] 9pnet_fd: Insufficient options for proto=fd [ 583.266467][T26306] netlink: 25 bytes leftover after parsing attributes in process `syz.2.8419'. [ 583.277941][T26306] netlink: 25 bytes leftover after parsing attributes in process `syz.2.8419'. [ 583.335635][ T36] audit: type=1400 audit(2000000000.390:154948): avc: denied { read write } for pid=26317 comm="syz.2.8423" name="rnullb0" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:random_device_t:s0" [ 583.370138][ T36] audit: type=1400 audit(2000000000.390:154949): avc: denied { open } for pid=26317 comm="syz.2.8423" path="/dev/rnullb0" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:random_device_t:s0" [ 583.398350][ T36] audit: type=1400 audit(2000000000.420:154950): avc: denied { map } for pid=26317 comm="syz.2.8423" path="/dev/rnullb0" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:random_device_t:s0" [ 583.503583][T26338] netlink: 492 bytes leftover after parsing attributes in process `syz.2.8429'. [ 583.513536][T26340] netlink: 'syz.2.8429': attribute type 4 has an invalid length. [ 583.533374][T26342] netlink: 25 bytes leftover after parsing attributes in process `syz.5.8430'. [ 583.582468][ T36] audit: type=1400 audit(2000000000.630:154951): avc: denied { ioctl } for pid=26351 comm="syz.1.8434" path="socket:[129982]" dev="sockfs" ino=129982 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 583.792628][T26371] fuse: Bad value for 'fd' [ 583.798179][T26371] overlayfs: failed to clone upperpath [ 583.840484][T26382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26382 comm=syz.1.8447 [ 583.863863][ T31] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 584.033899][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 584.040743][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.052191][ T31] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.064118][ T31] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.075811][ T31] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 584.090024][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 584.096833][ T31] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 584.108242][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.117484][ T36] audit: type=1400 audit(2000000001.170:154952): avc: denied { name_bind } for pid=26391 comm="syz.1.8450" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 584.140684][T26399] cgroup2: Unknown parameter 'mory_hugetlb_a1;ѾՌ ' [ 584.144157][ T31] usb 7-1: config 0 descriptor?? [ 584.363853][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 584.372449][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 584.383215][ T31] usb 7-1: USB disconnect, device number 53 [ 584.675149][ T36] audit: type=1400 audit(2000000001.730:154953): avc: denied { sys_nice } for pid=26413 comm="syz.5.8459" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 584.721088][T26412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=618 sclass=netlink_route_socket pid=26412 comm=syz.1.8458 [ 584.763863][ T31] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 584.913891][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 584.922082][ T31] usb 7-1: config 247 has an invalid interface number: 214 but max is 0 [ 584.931194][ T31] usb 7-1: config 247 has no interface number 0 [ 584.939290][ T31] usb 7-1: too many endpoints for config 247 interface 214 altsetting 116: 252, using maximum allowed: 30 [ 584.951261][ T31] usb 7-1: config 247 interface 214 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 252 [ 584.967749][ T31] usb 7-1: config 247 interface 214 has no altsetting 0 [ 584.979256][ T31] usb 7-1: New USB device found, idVendor=03eb, idProduct=2002, bcdDevice= 0.18 [ 584.992540][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.001766][ T31] usb 7-1: Product: syz [ 585.006585][ T31] usb 7-1: Manufacturer: syz [ 585.012235][ T31] usb 7-1: SerialNumber: syz [ 585.224969][ T31] usb 7-1: USB disconnect, device number 54 [ 585.395880][T26450] overlayfs: failed to resolve './file1': -2 [ 585.413691][T26452] overlayfs: failed to resolve '/P': -2 [ 585.743992][T26498] rust_binder: Write failure EFAULT in pid:82 [ 585.773913][T26502] fuseblk: Bad value for 'fd' [ 585.799535][T26502] fuseblk: Bad value for 'fd' [ 585.811811][T26502] fuseblk: Bad value for 'fd' [ 585.827422][T26502] fuseblk: Bad value for 'fd' [ 585.860221][T26505] rust_binder: Write failure EFAULT in pid:89 [ 586.551195][T26519] __nla_validate_parse: 12 callbacks suppressed [ 586.551212][T26519] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8493'. [ 586.578152][T26519] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8493'. [ 586.902875][T26535] overlayfs: failed to clone upperpath [ 586.933938][ T64] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 587.086154][ T64] usb 7-1: Using ep0 maxpacket: 32 [ 587.092991][ T64] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 587.105158][ T64] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 587.121567][ T64] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 587.131235][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 587.145472][ T64] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 587.145494][T26546] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8502'. [ 587.165541][ T64] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 587.181050][T26546] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8502'. [ 587.181243][ T64] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 587.203014][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.235666][ T64] usb 7-1: config 0 descriptor?? [ 587.451114][ T64] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 587.495388][T26571] netlink: 25 bytes leftover after parsing attributes in process `syz.5.8512'. [ 587.507641][T26571] netlink: 25 bytes leftover after parsing attributes in process `syz.5.8512'. [ 587.614430][T26598] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8521'. [ 587.625401][T26598] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8521'. [ 587.652631][ T1835] usb 7-1: USB disconnect, device number 55 [ 587.660193][ T1835] usblp0: removed [ 587.756554][T26625] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8530'. [ 587.768818][T26625] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8530'. [ 587.965394][T26652] overlayfs: failed to clone upperpath [ 588.004595][T26661] netlink: 'syz.1.8544': attribute type 4 has an invalid length. [ 588.014574][T26660] netlink: 'syz.1.8544': attribute type 4 has an invalid length. [ 588.529459][ T36] audit: type=1326 audit(2000000005.580:154954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26693 comm="syz.6.8555" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6a538e929 code=0x0 [ 588.673901][T26702] overlayfs: failed to clone upperpath [ 603.014188][T26715] Dead loop on virtual device ip6_vti0, fix it urgently! [ 603.022952][T26719] batadv_slave_1: entered promiscuous mode [ 603.036447][T26715] Dead loop on virtual device ip6_vti0, fix it urgently! [ 603.043623][T26715] Dead loop on virtual device ip6_vti0, fix it urgently! [ 603.050911][T26715] Dead loop on virtual device ip6_vti0, fix it urgently! [ 603.058259][T26715] Dead loop on virtual device ip6_vti0, fix it urgently! [ 603.066129][T26715] Dead loop on virtual device ip6_vti0, fix it urgently! [ 603.077813][ T36] audit: type=1400 audit(2000000020.130:154955): avc: denied { execstack } for pid=26712 comm="syz.2.8563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 603.127850][T26736] __nla_validate_parse: 6 callbacks suppressed [ 603.127872][T26736] netlink: 25 bytes leftover after parsing attributes in process `syz.6.8570'. [ 603.145349][T26736] netlink: 25 bytes leftover after parsing attributes in process `syz.6.8570'. [ 603.443870][ T64] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 603.593867][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 603.600622][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.611685][ T64] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 603.624692][ T64] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 603.633727][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.642913][ T64] usb 7-1: config 0 descriptor?? [ 603.752615][T26767] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8581'. [ 603.764553][T26767] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8581'. [ 603.820231][T26769] overlayfs: failed to resolve './file0': -2 [ 603.854675][ T64] usbhid 7-1:0.0: can't add hid device: -71 [ 603.855318][T26718] batadv_slave_1: left promiscuous mode [ 603.865544][ T36] audit: type=1326 audit(2000000020.910:154956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26718 comm="syz.5.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7c38e929 code=0x7fc00000 [ 603.892588][ T64] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 603.918638][ T64] usb 7-1: USB disconnect, device number 56 [ 603.932427][ T36] audit: type=1326 audit(2000000020.910:154957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26718 comm="syz.5.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c7c38e929 code=0x7fc00000 [ 603.989286][ T36] audit: type=1326 audit(2000000020.910:154958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26718 comm="syz.5.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7c38e929 code=0x7fc00000 [ 604.030625][ T36] audit: type=1326 audit(2000000020.910:154959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26718 comm="syz.5.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7c38e929 code=0x7fc00000 [ 604.061000][ T36] audit: type=1326 audit(2000000020.910:154960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26718 comm="syz.5.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7c38e929 code=0x7fc00000 [ 604.105766][ T36] audit: type=1326 audit(2000000020.910:154961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26718 comm="syz.5.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7c38e929 code=0x7fc00000 [ 604.142234][ T36] audit: type=1326 audit(2000000020.910:154962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26718 comm="syz.5.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7c38e929 code=0x7fc00000 [ 604.196886][ T36] audit: type=1326 audit(2000000020.910:154963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26718 comm="syz.5.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7c38e929 code=0x7fc00000 [ 604.205381][T26791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48517 sclass=netlink_route_socket pid=26791 comm=syz.6.8588 [ 604.242802][ T36] audit: type=1326 audit(2000000020.910:154964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26718 comm="syz.5.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7c38e929 code=0x7fc00000 [ 604.418567][T26799] netlink: 25 bytes leftover after parsing attributes in process `syz.6.8591'. [ 604.429497][T26799] netlink: 25 bytes leftover after parsing attributes in process `syz.6.8591'. [ 604.881976][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 604.889253][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 604.897134][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 604.904602][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 605.436643][T26837] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8605'. [ 605.446800][T26837] FAT-fs (rnullb0): bogus number of reserved sectors [ 605.453886][T26837] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 605.560409][T26846] overlayfs: failed to clone upperpath [ 605.601443][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 605.829604][T26898] /dev/rnullb0: Can't lookup blockdev [ 606.176183][T26909] overlayfs: failed to clone upperpath [ 606.242480][T26923] /dev/rnullb0: Can't lookup blockdev [ 606.277445][T26930] 9pnet_fd: Insufficient options for proto=fd [ 606.932041][T26980] overlay: Unknown parameter 'subj_role' [ 607.125636][T27007] overlayfs: failed to clone upperpath [ 607.475367][T27051] overlayfs: failed to clone upperpath [ 607.482366][T27051] fuse: Unknown parameter 'N [ 607.482366][T27051] d' [ 607.502598][T27054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8688'. [ 607.512566][T27054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8688'. [ 607.521827][T27054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8688'. [ 607.654051][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 607.660343][ T653] Bluetooth: hci0: command 0x1003 tx timeout [ 607.913906][ T64] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 607.997955][T27076] binder: Bad value for 'max' [ 608.065072][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.079598][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.090266][ T64] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 608.104843][ T64] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 608.114648][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.123967][ T64] usb 7-1: config 0 descriptor?? [ 608.144953][T27088] __nla_validate_parse: 64 callbacks suppressed [ 608.144976][T27088] netlink: 25 bytes leftover after parsing attributes in process `syz.2.8701'. [ 608.165748][T27088] netlink: 25 bytes leftover after parsing attributes in process `syz.2.8701'. [ 608.271651][T27097] binder: Unknown parameter 'fscontext?}' [ 608.446645][T27112] netlink: 25 bytes leftover after parsing attributes in process `syz.2.8711'. [ 608.457192][T27112] netlink: 25 bytes leftover after parsing attributes in process `syz.2.8711'. [ 608.485990][T27118] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8713'. [ 608.534592][ T64] plantronics 0003:047F:FFFF.0039: No inputs registered, leaving [ 608.560338][ T64] plantronics 0003:047F:FFFF.0039: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 608.584339][T27131] mmap: syz.5.8717 (27131): VmData 29208576 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 608.600666][ T64] usb 7-1: USB disconnect, device number 57 [ 608.607324][T27134] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8718'. [ 608.632331][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 608.632351][ T36] audit: type=1400 audit(2000000025.680:155010): avc: denied { map } for pid=27133 comm="syz.2.8718" path="socket:[134151]" dev="sockfs" ino=134151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 608.710050][T27150] overlayfs: failed to clone upperpath [ 608.738987][T27158] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8729'. [ 608.790554][T27173] overlayfs: failed to clone upperpath [ 608.804249][T27174] /dev/rnullb0: Can't lookup blockdev [ 608.973898][ T64] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 609.123874][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 609.130326][ T64] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 609.140078][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.149102][ T64] usb 7-1: config 0 descriptor?? [ 609.496463][T27211] overlayfs: failed to clone upperpath [ 609.593760][ T36] audit: type=1326 audit(2000000026.640:155011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27213 comm="syz.1.8747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f826338e929 code=0x0 [ 609.758865][ T64] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 609.769840][ T64] asix 7-1:0.0: probe with driver asix failed with error -61 [ 610.476186][T27224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8751'. [ 610.660845][ T36] audit: type=1400 audit(2000000027.710:155012): avc: denied { append } for pid=27229 comm="syz.2.8752" name="rnullb0" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:random_device_t:s0" [ 610.908366][T27242] /dev/loop5: Can't lookup blockdev [ 610.984362][T27255] netlink: 25 bytes leftover after parsing attributes in process `syz.5.8760'. [ 610.996370][T27255] netlink: 25 bytes leftover after parsing attributes in process `syz.5.8760'. [ 611.017389][ T36] audit: type=1326 audit(2000000028.070:155013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27256 comm="syz.5.8761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c7c38e929 code=0x0 [ 611.119503][ T36] audit: type=1326 audit(2000000028.170:155014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27256 comm="syz.5.8761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c7c38e929 code=0x0 [ 611.862733][T27289] 9pnet_fd: Insufficient options for proto=fd [ 612.067382][ T1837] usb 7-1: USB disconnect, device number 58 [ 612.156631][T27332] overlayfs: missing 'lowerdir' [ 612.418689][T27338] net_ratelimit: 28 callbacks suppressed [ 612.418704][T27338] Dead loop on virtual device ip6_vti0, fix it urgently! [ 612.431981][T27338] Dead loop on virtual device ip6_vti0, fix it urgently! [ 612.439576][T27338] Dead loop on virtual device ip6_vti0, fix it urgently! [ 612.447015][T27338] Dead loop on virtual device ip6_vti0, fix it urgently! [ 612.455614][T27338] Dead loop on virtual device ip6_vti0, fix it urgently! [ 612.463187][T27338] Dead loop on virtual device ip6_vti0, fix it urgently! [ 612.499427][T27346] overlayfs: failed to clone upperpath [ 613.504709][T27387] 9pnet_fd: Insufficient options for proto=fd [ 613.529496][T27391] rust_binder: Error while translating object. [ 613.529519][T27391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 613.536161][T27391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:192 [ 613.793980][ T1287] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 613.953854][ T1287] usb 7-1: Using ep0 maxpacket: 32 [ 613.960447][ T1287] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 613.969445][ T1287] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 613.978309][ T1287] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 613.988277][ T1287] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 613.998432][ T1287] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 614.008522][ T1287] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 614.024268][ T1287] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 614.033857][ T1287] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.044451][ T1287] usb 7-1: config 0 descriptor?? [ 614.113534][T27423] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8815'. [ 614.130746][T27423] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8815'. [ 614.173553][T27430] syz.1.8818: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 614.189066][T27430] CPU: 1 UID: 0 PID: 27430 Comm: syz.1.8818 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 614.189093][T27430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 614.189104][T27430] Call Trace: [ 614.189111][T27430] [ 614.189118][T27430] __dump_stack+0x21/0x30 [ 614.189145][T27430] dump_stack_lvl+0x10c/0x190 [ 614.189166][T27430] ? __cfi_dump_stack_lvl+0x10/0x10 [ 614.189187][T27430] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 614.189215][T27430] dump_stack+0x19/0x20 [ 614.189233][T27430] warn_alloc+0x1bc/0x2a0 [ 614.189251][T27430] ? stack_depot_save_flags+0x38/0x800 [ 614.189273][T27430] ? __cfi_warn_alloc+0x10/0x10 [ 614.189290][T27430] ? kasan_save_track+0x4f/0x80 [ 614.189312][T27430] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 614.189333][T27430] ? xskq_create+0x68/0x2a0 [ 614.189351][T27430] ? xsk_init_queue+0xb6/0x120 [ 614.189369][T27430] ? xsk_setsockopt+0x43f/0x6f0 [ 614.189385][T27430] ? do_sock_setsockopt+0x26d/0x400 [ 614.189403][T27430] ? __x64_sys_setsockopt+0x1b8/0x250 [ 614.189421][T27430] ? x64_sys_call+0x2adc/0x2ee0 [ 614.189443][T27430] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 614.189464][T27430] __vmalloc_node_range_noprof+0x135/0x1420 [ 614.189488][T27430] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 614.189508][T27430] ? avc_has_perm+0x144/0x220 [ 614.189528][T27430] ? kasan_save_alloc_info+0x40/0x50 [ 614.189547][T27430] ? __kasan_kmalloc+0x96/0xb0 [ 614.189571][T27430] vmalloc_user_noprof+0x77/0x90 [ 614.189590][T27430] ? xskq_create+0xdb/0x2a0 [ 614.189609][T27430] xskq_create+0xdb/0x2a0 [ 614.189628][T27430] xsk_init_queue+0xb6/0x120 [ 614.189647][T27430] xsk_setsockopt+0x43f/0x6f0 [ 614.189665][T27430] ? __cfi_xsk_setsockopt+0x10/0x10 [ 614.189685][T27430] ? do_futex+0x309/0x500 [ 614.189710][T27430] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 614.189729][T27430] ? security_socket_setsockopt+0x33/0xd0 [ 614.189751][T27430] ? __cfi_xsk_setsockopt+0x10/0x10 [ 614.189769][T27430] do_sock_setsockopt+0x26d/0x400 [ 614.189788][T27430] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 614.189809][T27430] __x64_sys_setsockopt+0x1b8/0x250 [ 614.189829][T27430] x64_sys_call+0x2adc/0x2ee0 [ 614.189850][T27430] do_syscall_64+0x58/0xf0 [ 614.189866][T27430] ? clear_bhb_loop+0x50/0xa0 [ 614.189895][T27430] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 614.189913][T27430] RIP: 0033:0x7f826338e929 [ 614.189929][T27430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.189945][T27430] RSP: 002b:00007f82642b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 614.189965][T27430] RAX: ffffffffffffffda RBX: 00007f82635b5fa0 RCX: 00007f826338e929 [ 614.189979][T27430] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 614.189991][T27430] RBP: 00007f8263410b39 R08: 0000000000000004 R09: 0000000000000000 [ 614.190003][T27430] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 614.190016][T27430] R13: 0000000000000000 R14: 00007f82635b5fa0 R15: 00007ffe8b6dba58 [ 614.190032][T27430] [ 614.190040][T27430] Mem-Info: [ 614.265537][ T1287] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 614.272431][T27430] active_anon:7420 inactive_anon:76 isolated_anon:0 [ 614.272431][T27430] active_file:11306 inactive_file:57707 isolated_file:0 [ 614.272431][T27430] unevictable:15372 dirty:56 writeback:0 [ 614.272431][T27430] slab_reclaimable:8545 slab_unreclaimable:78623 [ 614.272431][T27430] mapped:30153 shmem:579 pagetables:1422 [ 614.272431][T27430] sec_pagetables:0 bounce:0 [ 614.272431][T27430] kernel_misc_reclaimable:0 [ 614.272431][T27430] free:1428949 free_pcp:6374 free_cma:0 [ 614.470741][ T1287] usb 7-1: USB disconnect, device number 59 [ 614.474177][T27430] Node 0 active_anon:29764kB inactive_anon:304kB active_file:45224kB inactive_file:230828kB unevictable:61488kB isolated(anon):0kB isolated(file):0kB mapped:120612kB dirty:224kB writeback:0kB shmem:2316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5728kB pagetables:5688kB sec_pagetables:0kB all_unreclaimable? no [ 614.486279][ T1287] usblp0: removed [ 614.490676][T27430] DMA32 free:2952148kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966020kB mlocked:0kB bounce:0kB free_pcp:13872kB local_pcp:3208kB free_cma:0kB [ 614.625378][T27430] lowmem_reserve[]: 0 3921 3921 [ 614.630277][T27430] Normal free:2769848kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29796kB inactive_anon:304kB active_file:45224kB inactive_file:230828kB unevictable:61488kB writepending:224kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:6148kB local_pcp:5924kB free_cma:0kB [ 614.662457][T27430] lowmem_reserve[]: 0 0 0 [ 614.666827][T27430] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (M) 717*4096kB (M) = 2952148kB [ 614.682476][T27430] Normal: 924*4kB (UME) 1725*8kB (UME) 1372*16kB (UME) 1016*32kB (UME) 801*64kB (UME) 484*128kB (UME) 384*256kB (UME) 202*512kB (UME) 97*1024kB (UME) 49*2048kB (UME) 533*4096kB (UM) = 2769752kB [ 614.701819][T27430] 85031 total pagecache pages [ 614.706767][T27430] 73 pages in swap cache [ 614.711088][T27430] Free swap = 124076kB [ 614.715259][T27430] Total swap = 124996kB [ 614.719403][T27430] 2097051 pages RAM [ 614.723188][T27430] 0 pages HighMem/MovableOnly [ 614.727914][T27430] 351516 pages reserved [ 614.732152][T27430] 0 pages cma reserved [ 614.737548][T27430] Memory allocations: [ 614.741528][T27430] 0 B 0 init/main.c:1370 func:do_initcalls [ 614.748757][T27430] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 614.756948][T27430] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 614.764705][T27430] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 614.772689][T27430] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 614.781027][T27430] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 614.789843][T27430] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 614.797978][T27430] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 614.805920][T27430] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 614.814187][T27430] 0 B 0 init/initramfs.c:101 func:find_link [ 614.930169][T27445] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8824'. [ 614.944471][T27445] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8824'. [ 614.966671][T27447] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8825'. [ 614.976037][T27447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8825'. [ 615.015953][T27458] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 615.015981][T27458] rust_binder: Read failure Err(EFAULT) in pid:202 [ 615.032949][T27458] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 615.047254][T27458] rust_binder: Write failure EINVAL in pid:202 [ 615.062920][T27468] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 615.069550][T27468] rust_binder: Error while translating object. [ 615.080418][T27468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 615.086717][T27468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:204 [ 615.115932][T27476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 615.256235][T27506] 9pnet_fd: Insufficient options for proto=fd [ 615.274346][ T36] audit: type=1400 audit(2000000032.330:155015): avc: denied { setattr } for pid=27507 comm="syz.1.8847" name="NETLINK" dev="sockfs" ino=133636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 615.303369][ T36] audit: type=1400 audit(2000000032.350:155016): avc: denied { setattr } for pid=27503 comm="syz.6.8845" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 616.196364][ T36] audit: type=1400 audit(2000000033.250:155017): avc: denied { map } for pid=27556 comm="syz.6.8866" path="socket:[134833]" dev="sockfs" ino=134833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 616.426951][T27579] netlink: 124 bytes leftover after parsing attributes in process `syz.5.8872'. [ 616.444195][T27580] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8872'. [ 616.462425][T27579] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8872'. [ 617.034694][T27623] netlink: 25 bytes leftover after parsing attributes in process `syz.5.8887'. [ 617.120997][T27636] overlayfs: failed to clone upperpath [ 617.443745][T27656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:251 [ 617.478239][T27674] overlayfs: failed to clone lowerpath [ 618.210962][ T36] audit: type=1326 audit(2000000035.260:155018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27709 comm="syz.2.8917" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f960598e929 code=0x0 [ 618.564741][T27680] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34 sclass=netlink_audit_socket pid=27680 comm=syz.1.8905 [ 618.784136][ T31] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 618.935227][ T31] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 618.946631][ T31] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 618.957731][ T31] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.976549][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 618.991457][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.999877][ T31] usb 7-1: Product: syz [ 619.004981][ T31] usb 7-1: Manufacturer: syz [ 619.010112][ T31] usb 7-1: SerialNumber: syz [ 619.024012][ T31] hub 7-1:1.0: bad descriptor, ignoring hub [ 619.038325][ T31] hub 7-1:1.0: probe with driver hub failed with error -5 [ 619.220702][ T31] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 619.274679][T27782] __nla_validate_parse: 8 callbacks suppressed [ 619.274693][T27782] netlink: 25 bytes leftover after parsing attributes in process `syz.2.8943'. [ 619.292721][T27782] netlink: 25 bytes leftover after parsing attributes in process `syz.2.8943'. [ 619.345189][T27794] overlayfs: failed to clone upperpath [ 619.523963][ T31] usb 7-1: USB disconnect, device number 60 [ 619.531765][ T31] usblp0: removed [ 619.596145][ T36] audit: type=1326 audit(2000000036.650:155019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27747 comm="syz.1.8931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826338e929 code=0x7fc00000 [ 619.697918][T27808] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8953'. [ 619.709051][T27808] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8953'. [ 619.853846][ T64] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 620.025041][ T64] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 620.036775][ T64] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 620.048066][ T64] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.065387][ T64] usb 7-1: string descriptor 0 read error: -22 [ 620.071906][ T64] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 620.082626][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.094774][ T64] hub 7-1:1.0: bad descriptor, ignoring hub [ 620.101379][ T64] hub 7-1:1.0: probe with driver hub failed with error -5 [ 620.370447][ T64] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 620.557467][T27835] netlink: 25 bytes leftover after parsing attributes in process `syz.5.8962'. [ 620.592158][T27835] netlink: 25 bytes leftover after parsing attributes in process `syz.5.8962'. [ 620.673864][ T36] audit: type=1400 audit(2000000037.710:155020): avc: denied { getopt } for pid=27842 comm="syz.2.8966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 620.774091][ T64] usb 7-1: USB disconnect, device number 61 [ 620.783808][ T64] usblp0: removed [ 620.840047][T27865] overlayfs: failed to clone upperpath [ 620.862877][T27870] netlink: 25 bytes leftover after parsing attributes in process `syz.5.8976'. [ 620.874518][T27870] netlink: 25 bytes leftover after parsing attributes in process `syz.5.8976'. [ 621.233893][ T1835] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 621.305363][T27888] netlink: 'syz.2.8983': attribute type 64 has an invalid length. [ 621.313386][T27888] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8983'. [ 621.325145][T27889] netlink: 'syz.2.8983': attribute type 64 has an invalid length. [ 621.333422][T27889] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8983'. [ 621.384896][ T1835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.396196][ T1835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.406380][ T1835] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 621.416207][ T1835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.426491][ T1835] usb 7-1: config 0 descriptor?? [ 621.721398][T27908] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.733877][T27908] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.743886][T27908] bridge_slave_0: entered allmulticast mode [ 621.751784][T27908] bridge_slave_0: entered promiscuous mode [ 621.761442][T27908] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.770934][T27908] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.779220][T27908] bridge_slave_1: entered allmulticast mode [ 621.787113][T27908] bridge_slave_1: entered promiscuous mode [ 621.798776][T27921] can: request_module (can-proto-0) failed. [ 621.845406][ T1835] cp2112 0003:10C4:EA90.003A: item fetching failed at offset 5/7 [ 621.855098][ T1835] cp2112 0003:10C4:EA90.003A: parse failed [ 621.861546][ T1835] cp2112 0003:10C4:EA90.003A: probe with driver cp2112 failed with error -22 [ 621.879878][T27908] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.887868][T27908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.896533][T27908] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.904854][T27908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.927920][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.938772][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.954476][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.961682][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.969812][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.977196][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.015410][T27908] veth0_vlan: entered promiscuous mode [ 622.026855][T27908] veth1_macvtap: entered promiscuous mode [ 622.050285][ T1835] usb 7-1: USB disconnect, device number 62 [ 622.108774][T27941] binder: Unknown parameter 'fscontext?}' [ 622.314490][T27958] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 622.314512][T27958] rust_binder: Error while translating object. [ 622.325913][T27958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 622.332417][T27958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 622.344400][T27960] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 622.366091][T27959] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 622.366148][T27959] rust_binder: Error while translating object. [ 622.380994][T27959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 622.387720][T27959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 622.533917][ T64] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 622.694019][ T64] usb 7-1: Using ep0 maxpacket: 32 [ 622.701400][ T64] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 622.710408][ T64] usb 7-1: config 0 has no interface number 0 [ 622.719779][ T64] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 622.729579][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.738234][ T64] usb 7-1: Product: syz [ 622.742768][ T64] usb 7-1: Manufacturer: syz [ 622.748281][ T64] usb 7-1: SerialNumber: syz [ 622.753932][ T64] usb 7-1: config 0 descriptor?? [ 622.759825][ T64] smsc95xx v2.0.0 [ 623.161363][ T64] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 623.173061][ T64] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 623.419316][T27996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.430153][T27996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.585108][T27954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.594497][T27954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.664043][ T1287] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 623.824047][ T1287] usb 2-1: Using ep0 maxpacket: 8 [ 623.830701][ T1287] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 623.840658][ T1287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.849903][ T1287] usb 2-1: config 0 descriptor?? [ 623.930714][T28002] can0: slcan on ttyS3. [ 623.994294][T28002] can0 (unregistered): slcan off ttyS3. [ 624.094690][ T1287] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 624.106017][ T1287] asix 2-1:0.0: probe with driver asix failed with error -71 [ 624.114737][ T1287] usb 2-1: USB disconnect, device number 27 [ 624.137582][ T64] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 624.150384][ T64] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 624.160802][ T64] usb 7-1: USB disconnect, device number 63 [ 624.389790][T28005] __nla_validate_parse: 10 callbacks suppressed [ 624.389903][T28005] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9019'. [ 624.676519][T28028] input: syz1 as /devices/virtual/input/input73 [ 624.684801][T28019] can0: slcan on ttyS3. [ 624.846612][T28019] can0 (unregistered): slcan off ttyS3. [ 624.910864][T28059] tmpfs: Unknown parameter '@por]B' [ 624.942707][T28061] rust_binder: Write failure EFAULT in pid:45 [ 624.994175][T28070] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 625.008945][T28070] rust_binder: Write failure EINVAL in pid:52 [ 625.059043][T28094] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 625.168235][T28097] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 625.182069][T28097] rust_binder: Error while translating object. [ 625.227289][T28097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 625.244957][T28097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 625.268591][T28107] : renamed from bond_slave_0 [ 625.307685][T28109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9045'. [ 625.428455][T28122] rust_binder: Error while translating object. [ 625.428491][T28122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 625.448541][T28122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:66 [ 625.491852][ T36] audit: type=1400 audit(2000000042.540:155021): avc: denied { read } for pid=28108 comm="syz.1.9045" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 625.751397][T28132] binder: Bad value for 'max' [ 625.821800][T28134] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 625.841463][T28134] rust_binder: Write failure EINVAL in pid:72 [ 625.937815][T28148] binder: Bad value for 'max' [ 626.107161][T28158] binder: Unknown parameter '00000000000000000000' [ 626.338155][T28182] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9069'. [ 626.615777][T28185] binder: Unknown parameter 'eײ [ 626.615777][T28185] 'S*q99#OJدM]jƵnl{O%hrbD֗P ynL~ltĜT.7;' [ 626.636129][T28189] netlink: 'syz.5.9071': attribute type 4 has an invalid length. [ 626.665184][T28189] netlink: 'syz.5.9071': attribute type 4 has an invalid length. [ 626.700207][T28191] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 627.130208][ T36] audit: type=1400 audit(2000000044.180:155022): avc: denied { execute } for pid=28213 comm="syz.2.9080" path="/dev/rnullb0" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:random_device_t:s0" [ 627.157978][ T1835] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 627.236123][T28220] fuse: Unknown parameter '}\' [ 627.241663][T28220] fuse: Unknown parameter '}\' [ 627.248766][T28220] fuse: Unknown parameter '}\' [ 627.254319][T28220] fuse: Unknown parameter '}\' [ 627.259648][T28220] fuse: Unknown parameter '}\' [ 627.264783][T28220] fuse: Unknown parameter '}\' [ 627.269763][T28220] fuse: Unknown parameter '}\' [ 627.274784][T28220] fuse: Unknown parameter '}\' [ 627.280192][T28220] fuse: Unknown parameter '}\' [ 627.285383][T28220] fuse: Unknown parameter '}\' [ 627.290374][T28220] fuse: Unknown parameter '}\' [ 627.295464][T28220] fuse: Unknown parameter '}\' [ 627.300380][T28220] fuse: Unknown parameter '}\' [ 627.306170][T28220] fuse: Unknown parameter '}\' [ 627.311073][T28220] fuse: Unknown parameter '}\' [ 627.316067][T28220] fuse: Unknown parameter '}\' [ 627.321100][T28220] fuse: Unknown parameter '}\' [ 627.326005][ T1835] usb 7-1: Using ep0 maxpacket: 8 [ 627.331150][T28220] fuse: Unknown parameter '}\' [ 627.336781][T28220] fuse: Unknown parameter '}\' [ 627.341777][T28220] fuse: Unknown parameter '}\' [ 627.341865][ T1835] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 627.355829][ T1835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.355921][T28220] fuse: Unknown parameter '}\' [ 627.366582][ T1835] usb 7-1: config 0 descriptor?? [ 627.369284][T28220] fuse: Unknown parameter '}\' [ 627.378717][T28220] fuse: Unknown parameter '}\' [ 627.383885][T28220] fuse: Unknown parameter '}\' [ 627.389005][T28220] fuse: Unknown parameter '}\' [ 627.394160][T28220] fuse: Unknown parameter '}\' [ 627.399120][T28220] fuse: Unknown parameter '}\' [ 627.404330][T28220] fuse: Unknown parameter '}\' [ 627.409261][T28220] fuse: Unknown parameter '}\' [ 627.415237][T28220] fuse: Unknown parameter '}\' [ 627.420408][T28220] fuse: Unknown parameter '}\' [ 627.425691][T28220] fuse: Unknown parameter '}\' [ 627.430749][T28220] fuse: Unknown parameter '}\' [ 627.436006][T28220] fuse: Unknown parameter '}\' [ 627.440929][T28220] fuse: Unknown parameter '}\' [ 627.446060][T28220] fuse: Unknown parameter '}\' [ 627.451019][T28220] fuse: Unknown parameter '}\' [ 627.456182][T28220] fuse: Unknown parameter '}\' [ 627.461194][T28220] fuse: Unknown parameter '}\' [ 627.466349][T28220] fuse: Unknown parameter '}\' [ 627.473907][T28220] fuse: Unknown parameter '}\' [ 627.481526][T28220] fuse: Unknown parameter '}\' [ 627.486862][T28220] fuse: Unknown parameter '}\' [ 627.492230][T28220] fuse: Unknown parameter '}\' [ 627.497907][T28220] fuse: Unknown parameter '}\' [ 627.503676][T28220] fuse: Unknown parameter '}\' [ 627.509163][T28220] fuse: Unknown parameter '}\' [ 627.514417][T28220] fuse: Unknown parameter '}\' [ 627.519377][T28220] fuse: Unknown parameter '}\' [ 627.524462][T28220] fuse: Unknown parameter '}\' [ 627.529509][T28220] fuse: Unknown parameter '}\' [ 627.545706][T28220] fuse: Unknown parameter '}\' [ 627.550811][T28220] fuse: Unknown parameter '}\' [ 627.562749][T28220] fuse: Unknown parameter '}\' [ 627.568121][T28220] fuse: Unknown parameter '}\' [ 627.573164][T28220] fuse: Unknown parameter '}\' [ 627.588726][T28220] fuse: Unknown parameter '}\' [ 627.594137][T28220] fuse: Unknown parameter '}\' [ 627.599278][T28220] fuse: Unknown parameter '}\' [ 627.606212][ T36] audit: type=1400 audit(2000000044.640:155023): avc: denied { append } for pid=28231 comm="syz.1.9087" name="001" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 627.629582][ T1835] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 627.644187][T28220] fuse: Unknown parameter '}\' [ 627.652496][T28220] fuse: Unknown parameter '}\' [ 627.663891][T28220] fuse: Unknown parameter '}\' [ 627.679089][T28220] fuse: Unknown parameter '}\' [ 627.689206][T28220] fuse: Unknown parameter '}\' [ 627.696558][T28220] fuse: Unknown parameter '}\' [ 628.016478][T28256] overlayfs: failed to clone upperpath [ 628.022755][T28257] overlayfs: failed to clone upperpath [ 628.592587][T28291] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9106'. [ 628.633432][T28296] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 628.647623][T28296] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 628.929001][T28299] binder: Unknown parameter '>iDec' [ 628.974242][ T1835] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 628.988469][ T1835] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 629.000896][ T1835] asix 7-1:0.0: probe with driver asix failed with error -71 [ 629.012319][ T1835] usb 7-1: USB disconnect, device number 64 [ 629.042442][T28304] overlayfs: failed to clone upperpath [ 629.412220][T28294] overlayfs: statfs failed on './file0' [ 629.412235][T28296] overlayfs: statfs failed on './file0' [ 629.434400][T28322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:102 [ 629.440195][T28322] SELinux: failed to load policy [ 629.470587][T28324] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 629.478353][T28324] rust_binder: Write failure EINVAL in pid:104 [ 629.478721][ T36] audit: type=1400 audit(2000000046.540:155024): avc: denied { execute } for pid=28323 comm="syz.1.9116" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 629.511052][T28324] rust_binder: Write failure EFAULT in pid:104 [ 629.568615][T28328] cgroup: fork rejected by pids controller in /syz1 [ 629.763872][ T1835] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 629.783456][T28391] overlayfs: missing 'lowerdir' [ 629.837564][T28395] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9122'. [ 629.847710][T28395] gretap0: entered promiscuous mode [ 629.854255][T28395] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9122'. [ 629.877842][T28395] 0{X: renamed from gretap0 [ 629.888832][T28395] 0{X: left promiscuous mode [ 629.894050][T28395] 0{X: entered allmulticast mode [ 629.900841][T28395] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 629.954061][ T1835] usb 7-1: Using ep0 maxpacket: 32 [ 629.960886][ T1835] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.974973][ T1835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 629.982266][ T1835] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 629.995546][ T1835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.012582][ T1835] usb 7-1: config 0 descriptor?? [ 630.799045][ T1835] hid-picolcd 0003:04D8:F002.003B: No report with id 0xf3 found [ 630.807326][ T1835] hid-picolcd 0003:04D8:F002.003B: No report with id 0xf4 found [ 630.816457][ T1835] usb 7-1: USB disconnect, device number 65 [ 630.894029][T28449] netlink: 25 bytes leftover after parsing attributes in process `syz.5.9137'. [ 630.905614][T28449] netlink: 25 bytes leftover after parsing attributes in process `syz.5.9137'. [ 630.961610][T28442] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.971090][T28442] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.978762][T28442] bridge_slave_0: entered allmulticast mode [ 630.993141][T28442] bridge_slave_0: entered promiscuous mode [ 631.006862][T28442] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.023856][T28442] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.030982][T28442] bridge_slave_1: entered allmulticast mode [ 631.032983][T28463] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 631.037383][T28464] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 631.037842][T28442] bridge_slave_1: entered promiscuous mode [ 631.085099][T28466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:194 [ 631.127593][T28442] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.146675][T28442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.154358][T28442] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.161934][T28442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.197420][ T2546] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.224264][ T2546] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.245592][ T2546] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.252794][ T2546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.261616][ T2546] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.268993][ T2546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.308050][T28442] veth0_vlan: entered promiscuous mode [ 631.323180][T28442] veth1_macvtap: entered promiscuous mode [ 631.924061][ T36] audit: type=1326 audit(2000000048.970:155025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28467 comm="syz.5.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7c38e929 code=0x7fc00000 [ 632.276000][T28494] overlayfs: failed to clone upperpath [ 632.370565][ T36] audit: type=1400 audit(2000000049.420:155026): avc: denied { create } for pid=28503 comm="syz.5.9156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 632.395610][T28507] netlink: 25 bytes leftover after parsing attributes in process `syz.5.9157'. [ 632.408389][T28507] netlink: 25 bytes leftover after parsing attributes in process `syz.5.9157'. [ 632.638807][T28528] overlayfs: failed to clone upperpath [ 632.690022][T28540] netlink: 25 bytes leftover after parsing attributes in process `syz.1.9168'. [ 632.726019][T28540] netlink: 25 bytes leftover after parsing attributes in process `syz.1.9168'. [ 632.809792][T28556] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 633.185908][T28573] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 633.189525][T28571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:345 [ 633.313837][ T1835] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 633.383939][ T36] audit: type=1400 audit(2000000050.430:155027): avc: denied { write } for pid=28583 comm="syz.2.9183" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 633.417929][T28585] rust_binder: Write failure EINVAL in pid:28 [ 633.493888][ T1835] usb 2-1: Invalid ep0 maxpacket: 64 [ 633.530599][T28588] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9184'. [ 633.549127][T28588] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9184'. [ 633.633884][ T1835] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 633.803880][ T10] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 633.803880][ T1835] usb 2-1: Invalid ep0 maxpacket: 64 [ 633.828194][ T1835] usb usb2-port1: attempt power cycle [ 633.855568][T28596] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.862825][T28596] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.872303][T28596] bridge_slave_0: entered allmulticast mode [ 633.879685][T28596] bridge_slave_0: entered promiscuous mode [ 633.887610][T28596] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.895462][T28596] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.903059][T28596] bridge_slave_1: entered allmulticast mode [ 633.910043][T28596] bridge_slave_1: entered promiscuous mode [ 633.953826][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 633.962867][ T10] usb 3-1: config 1 has too many interfaces: 34, using maximum allowed: 32 [ 633.979880][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.000396][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 34 [ 634.011859][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 634.034259][T28596] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.041366][T28596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.048730][T28596] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.056410][T28596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.071324][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.094285][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.115283][ T10] usb 3-1: Product: syz [ 634.119757][ T10] usb 3-1: Manufacturer: syz [ 634.127476][ T10] usb 3-1: SerialNumber: syz [ 634.147765][ T10] cdc_ncm 3-1:1.0: invalid descriptor buffer length [ 634.155444][T28596] veth0_vlan: entered promiscuous mode [ 634.162899][ T10] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 634.171340][ T10] cdc_ncm 3-1:1.0: bind() failure [ 634.174571][T28596] veth1_macvtap: entered promiscuous mode [ 634.203951][ T1835] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 634.224222][ T1835] usb 2-1: Invalid ep0 maxpacket: 64 [ 634.284305][T28603] rust_binder: Failed copying remainder into alloc: EFAULT [ 634.284332][T28603] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 634.292095][T28603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 634.303194][T28603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:352 [ 634.353992][ T1835] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 634.366026][ T10] usb 3-1: USB disconnect, device number 105 [ 634.384235][ T1835] usb 2-1: Invalid ep0 maxpacket: 64 [ 634.390589][ T1835] usb usb2-port1: unable to enumerate USB device [ 634.583944][ T31] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 634.734141][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 634.740591][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.753906][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 634.771388][ T31] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 634.781282][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.795441][ T31] usb 6-1: config 0 descriptor?? [ 634.985584][T28624] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9194'. [ 634.997869][T28624] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9194'. [ 635.003822][ T31] usbhid 6-1:0.0: can't add hid device: -32 [ 635.015506][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 635.067822][T28638] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9198'. [ 635.085891][ T36] audit: type=1400 audit(2000000052.140:155028): avc: denied { map } for pid=28637 comm="syz.2.9198" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 635.111598][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/61.tmp-b7:8' failed: Read-only file system [ 635.136762][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/61.tmp-b7:8' failed: Read-only file system [ 635.149967][ T1837] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 635.168115][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/61.tmp-b7:8' failed: Read-only file system [ 635.192110][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/61.tmp-b7:8' failed: Read-only file system [ 635.213695][ T1835] usb 6-1: USB disconnect, device number 70 [ 635.286845][T28645] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 635.302287][T28649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:14 [ 635.317410][ T1837] usb 7-1: Using ep0 maxpacket: 32 [ 635.336328][ T1837] usb 7-1: config 0 has an invalid descriptor of length 212, skipping remainder of the config [ 635.351624][ T1837] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 635.364714][ T1837] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 635.364788][ T36] audit: type=1326 audit(2000000052.420:155029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28650 comm="syz.5.9202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc02ed8e929 code=0x0 [ 635.374584][ T1837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.407248][ T1837] usb 7-1: Product: syz [ 635.411692][ T1837] usb 7-1: Manufacturer: syz [ 635.418322][ T1837] usb 7-1: SerialNumber: syz [ 635.425489][ T1837] usb 7-1: config 0 descriptor?? [ 635.944699][T28654] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9203'. [ 635.955441][T28654] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9203'. [ 635.973198][T28656] rust_binder: Failed copying remainder into alloc: EFAULT [ 635.973215][T28656] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 635.981462][T28656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 635.990135][T28656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:57 [ 636.000805][T28656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 636.017872][T28663] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 636.232824][T28681] FAT-fs (rnullb0): invalid media value (0x9f) [ 636.247981][T28681] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 636.263891][T28683] netlink: 25 bytes leftover after parsing attributes in process `syz.5.9212'. [ 636.274966][T28683] netlink: 25 bytes leftover after parsing attributes in process `syz.5.9212'. [ 636.325886][T28692] rust_binder: Write failure EFAULT in pid:39 [ 636.333500][T28693] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 636.344075][T28692] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 636.349878][T28693] overlayfs: missing 'lowerdir' [ 636.359817][T28692] overlayfs: missing 'lowerdir' [ 636.888334][T28698] can0: slcan on ttyS3. [ 637.026447][T28698] can0 (unregistered): slcan off ttyS3. [ 637.073420][T28733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9223'. [ 637.413839][ T1287] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 637.423986][ T64] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 637.564953][ T1287] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 637.577566][ T1287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 637.589524][ T1287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 637.607696][ T64] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 637.620333][ T1287] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 637.633803][ T64] usb 2-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 637.646110][ T1287] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 637.655845][ T64] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 637.669093][ T1287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.677403][ T64] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 637.688096][ T64] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 637.697709][ T1287] usb 3-1: config 0 descriptor?? [ 637.708948][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.725955][ T64] usb 2-1: invalid MIDI out EP 0 [ 637.744829][ T64] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 637.759162][T26720] udevd[26720]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 637.927786][T28749] overlay: ./bus is not a directory [ 637.934482][ T64] usb 2-1: USB disconnect, device number 32 [ 638.110239][ T1287] plantronics 0003:047F:FFFF.003C: ignoring exceeding usage max [ 638.119798][ T1287] plantronics 0003:047F:FFFF.003C: No inputs registered, leaving [ 638.131266][ T1287] plantronics 0003:047F:FFFF.003C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 638.398647][ T1835] usb 3-1: USB disconnect, device number 106 [ 638.430988][ T36] audit: type=1326 audit(2000000055.480:155030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28765 comm="syz.2.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb98e929 code=0x7ffc0000 [ 638.456613][ T36] audit: type=1326 audit(2000000055.480:155031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28765 comm="syz.2.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb98e929 code=0x7ffc0000 [ 638.483891][ T36] audit: type=1326 audit(2000000055.510:155032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28765 comm="syz.2.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6beb98e929 code=0x7ffc0000 [ 638.491704][ T1837] usb 7-1: USB disconnect, device number 66 [ 638.531888][T28771] netlink: 25 bytes leftover after parsing attributes in process `syz.1.9232'. [ 638.533877][ T36] audit: type=1326 audit(2000000055.510:155033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28765 comm="syz.2.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb98e929 code=0x7ffc0000 [ 638.567598][T28771] netlink: 25 bytes leftover after parsing attributes in process `syz.1.9232'. [ 638.577071][ T36] audit: type=1326 audit(2000000055.510:155034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28765 comm="syz.2.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb98e929 code=0x7ffc0000 [ 638.606615][T28772] fuse: Unknown parameter '' [ 638.612930][ T36] audit: type=1326 audit(2000000055.510:155035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28765 comm="syz.2.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f6beb98e929 code=0x7ffc0000 [ 638.616822][T28772] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 638.639490][ T36] audit: type=1326 audit(2000000055.510:155036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28765 comm="syz.2.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb98e929 code=0x7ffc0000 [ 638.676620][ T36] audit: type=1326 audit(2000000055.510:155037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28765 comm="syz.2.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6beb98e929 code=0x7ffc0000 [ 638.703410][ T36] audit: type=1326 audit(2000000055.510:155038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28765 comm="syz.2.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb98e929 code=0x7ffc0000 [ 638.728127][ T36] audit: type=1326 audit(2000000055.510:155039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28765 comm="syz.2.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6beb98e929 code=0x7ffc0000 [ 638.873885][ T1833] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 639.025110][ T1833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.035017][ T1833] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 639.044290][ T1833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.054619][ T1833] usb 2-1: config 0 descriptor?? [ 639.461943][ T1833] logitech 0003:046D:C623.003D: unknown main item tag 0x3 [ 639.470005][ T1833] logitech 0003:046D:C623.003D: unknown main item tag 0x2 [ 639.477941][ T1833] logitech 0003:046D:C623.003D: unknown main item tag 0x0 [ 639.485361][ T1833] logitech 0003:046D:C623.003D: unknown main item tag 0x0 [ 639.493076][ T1833] logitech 0003:046D:C623.003D: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.1-1/input0 [ 639.778866][ T1287] usb 2-1: USB disconnect, device number 33 [ 640.043842][T22544] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 640.248219][T22544] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 640.256655][T22544] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 640.268766][T22544] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 640.279745][T22544] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 640.289608][T22544] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 640.303243][T22544] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 640.313889][T22544] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.334292][T22544] usb 7-1: config 0 descriptor?? [ 640.375593][T28832] __nla_validate_parse: 3 callbacks suppressed [ 640.375613][T28832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9255'. [ 640.742299][T22544] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 640.763950][T22544] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 640.784162][T22544] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 640.807341][T22544] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 640.845390][T22544] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 640.864043][T22544] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 640.876563][T22544] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 640.898750][T22544] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 640.911816][T22544] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 640.920301][T22544] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 641.043945][T28871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9269'. [ 641.054748][T28871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9269'. [ 641.249555][T28877] binder: Bad value for 'stats' [ 641.482728][T22544] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 641.490644][T22544] plantronics 0003:047F:FFFF.003E: No inputs registered, leaving [ 641.499460][T22544] plantronics 0003:047F:FFFF.003E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 641.504028][ T1833] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 641.514225][T22544] usb 7-1: USB disconnect, device number 67 [ 641.535775][T28878] fido_id[28878]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 641.558912][T28880] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 641.703900][ T1833] usb 6-1: Invalid ep0 maxpacket: 64 [ 641.793900][ T1837] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 641.843859][ T1833] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 641.946378][ T1837] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 641.955584][ T1837] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 641.964053][ T1837] usb 2-1: Product: syz [ 641.968217][ T1837] usb 2-1: Manufacturer: syz [ 641.972813][ T1837] usb 2-1: SerialNumber: syz [ 641.978392][ T1837] usb 2-1: config 0 descriptor?? [ 641.993901][ T1833] usb 6-1: Invalid ep0 maxpacket: 64 [ 641.999332][ T1833] usb usb6-port1: attempt power cycle [ 642.182965][T28900] netlink: 25 bytes leftover after parsing attributes in process `syz.6.9279'. [ 642.193890][T28900] netlink: 25 bytes leftover after parsing attributes in process `syz.6.9279'. [ 642.242678][T28907] /dev/sg0: Can't lookup blockdev [ 642.343840][ T1833] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 642.364183][ T1833] usb 6-1: Invalid ep0 maxpacket: 64 [ 642.493845][ T1833] usb 6-1: new low-speed USB device number 74 using dummy_hcd [ 642.514262][ T1833] usb 6-1: Invalid ep0 maxpacket: 64 [ 642.519824][ T1833] usb usb6-port1: unable to enumerate USB device [ 642.593379][ T1837] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 642.794401][ T1837] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 642.804448][ T1837] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 642.814691][ T1837] asix 2-1:0.0: probe with driver asix failed with error -71 [ 642.823380][ T1837] usb 2-1: USB disconnect, device number 34 [ 643.053293][T28924] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9289'. [ 643.064836][T28924] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9289'. [ 643.313066][T28935] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 643.563872][T22544] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 643.725140][T22544] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 643.736385][T22544] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 643.746920][T22544] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 643.756237][T22544] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 643.764458][T22544] usb 2-1: SerialNumber: syz [ 643.771424][T22544] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 643.780236][T22544] usb-storage 2-1:1.0: USB Mass Storage device detected [ 643.788215][T22544] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 643.796804][T22544] scsi host1: usb-storage 2-1:1.0 [ 643.921770][T28949] netlink: 25 bytes leftover after parsing attributes in process `syz.6.9299'. [ 643.932155][T28949] netlink: 25 bytes leftover after parsing attributes in process `syz.6.9299'. [ 644.341831][T28967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.352270][T28967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.379188][T28975] netlink: 25 bytes leftover after parsing attributes in process `syz.5.9308'. [ 644.490397][T28982] overlayfs: failed to clone lowerpath [ 644.580047][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 644.580064][ T36] audit: type=1326 audit(2000000061.630:155067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28992 comm="syz.2.9315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6beb98e929 code=0x0 [ 644.639820][T29002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 644.641099][T29002] rust_binder: Read failure Err(EFAULT) in pid:106 [ 644.681429][ T36] audit: type=1326 audit(2000000061.730:155068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28992 comm="syz.2.9315" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6beb98e929 code=0x0 [ 644.720787][T29007] syzkaller0: entered promiscuous mode [ 644.727659][T29007] syzkaller0: entered allmulticast mode [ 644.920036][T29055] SELinux: failed to load policy [ 645.203891][ T1833] usb 6-1: new low-speed USB device number 75 using dummy_hcd [ 645.353872][ T1833] usb 6-1: Invalid ep0 maxpacket: 32 [ 645.423043][T29061] sit0: entered promiscuous mode [ 645.429104][T29061] netlink: 'syz.2.9334': attribute type 1 has an invalid length. [ 645.443862][T29061] __nla_validate_parse: 5 callbacks suppressed [ 645.443884][T29061] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9334'. [ 645.483949][T29066] can: request_module (can-proto-0) failed. [ 645.490697][T29068] can: request_module (can-proto-0) failed. [ 645.493860][ T1833] usb 6-1: new low-speed USB device number 76 using dummy_hcd [ 645.521527][T29072] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9338'. [ 645.540073][T29072] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9338'. [ 645.609770][T29082] tmpfs: Unknown parameter 'fsname' [ 645.645125][T29091] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9347'. [ 645.653953][ T1833] usb 6-1: Invalid ep0 maxpacket: 32 [ 645.665685][ T1833] usb usb6-port1: attempt power cycle [ 645.674041][T29091] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9347'. [ 645.694498][T29095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 645.699044][T29095] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 645.738446][T29109] overlayfs: failed to clone upperpath [ 645.784053][T29117] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9359'. [ 645.796667][T29117] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9359'. [ 646.013864][ T1833] usb 6-1: new low-speed USB device number 77 using dummy_hcd [ 646.034202][ T1833] usb 6-1: Invalid ep0 maxpacket: 32 [ 646.163903][ T1833] usb 6-1: new low-speed USB device number 78 using dummy_hcd [ 646.184179][ T1833] usb 6-1: Invalid ep0 maxpacket: 32 [ 646.189661][ T1833] usb usb6-port1: unable to enumerate USB device [ 646.443519][T29148] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9368'. [ 646.461327][T29148] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9368'. [ 646.654490][ T6831] bridge_slave_1: left allmulticast mode [ 646.660261][ T6831] bridge_slave_1: left promiscuous mode [ 646.665964][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.674196][ T6831] bridge_slave_0: left allmulticast mode [ 646.679862][ T6831] bridge_slave_0: left promiscuous mode [ 646.685728][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.793983][ T6831] veth1_macvtap: left promiscuous mode [ 646.799742][ T6831] veth0_vlan: left promiscuous mode [ 646.837050][T29176] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 646.837283][T29176] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 646.860193][T29180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 646.869515][T29180] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 646.879773][T29173] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.899094][T29173] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.907070][T29173] bridge_slave_0: entered allmulticast mode [ 646.913342][T29173] bridge_slave_0: entered promiscuous mode [ 646.929277][T29173] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.936460][T29173] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.944938][T29173] bridge_slave_1: entered allmulticast mode [ 646.951726][T29173] bridge_slave_1: entered promiscuous mode [ 647.028535][T29146] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.036367][T29146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.047219][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.055230][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.089523][T29182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.096289][T29173] veth0_vlan: entered promiscuous mode [ 647.109329][T29182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.122928][T29173] veth1_macvtap: entered promiscuous mode [ 647.155284][T29186] can: request_module (can-proto-0) failed. [ 647.240617][T29200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 648.006586][T29215] input: syz1 as /devices/virtual/input/input75 [ 648.050288][ T36] audit: type=1400 audit(2000000065.100:155069): avc: denied { mounton } for pid=29216 comm="syz.7.9395" path="/7/file0" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 648.343835][ T1835] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 648.495491][ T1835] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 648.503716][ T1835] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 648.514229][ T1835] usb 8-1: config 0 has no interface number 0 [ 648.521894][ T1835] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 648.531216][ T1835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.539379][ T1835] usb 8-1: Product: syz [ 648.543619][ T1835] usb 8-1: Manufacturer: syz [ 648.548434][ T1835] usb 8-1: SerialNumber: syz [ 648.553700][ T1835] usb 8-1: config 0 descriptor?? [ 648.967761][T29232] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 648.976727][T29232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 648.976757][T29232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:21 [ 649.000765][ T1835] usb 8-1: Found UVC 0.00 device syz (046d:0823) [ 649.008617][ T1835] usb 8-1: No valid video chain found. [ 649.018477][ T1835] usb 8-1: USB disconnect, device number 2 [ 649.073944][T22544] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 649.224959][T22544] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 649.236558][T22544] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 649.247526][T22544] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 649.257963][T22544] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 649.271924][T22544] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 649.281553][T22544] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.290422][T22544] usb 6-1: config 0 descriptor?? [ 649.514790][ T36] audit: type=1326 audit(2000000066.570:155070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29243 comm="syz.7.9404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe44c58e929 code=0x0 [ 649.616634][T29245] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000100000000 not found [ 649.624940][T29245] rust_binder: Write failure EINVAL in pid:25 [ 649.698533][T22544] plantronics 0003:047F:FFFF.003F: ignoring exceeding usage max [ 649.714287][T22544] plantronics 0003:047F:FFFF.003F: No inputs registered, leaving [ 649.726197][T22544] plantronics 0003:047F:FFFF.003F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 649.904378][ T1835] usb 6-1: USB disconnect, device number 79 [ 649.967503][T29257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9408'. [ 650.198669][T22544] usb 2-1: USB disconnect, device number 35 [ 650.287302][ T2546] bridge_slave_1: left allmulticast mode [ 650.293034][ T2546] bridge_slave_1: left promiscuous mode [ 650.299529][ T2546] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.307409][ T2546] bridge_slave_0: left allmulticast mode [ 650.313335][ T2546] bridge_slave_0: left promiscuous mode [ 650.320012][ T2546] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.443646][ T2546] veth1_macvtap: left promiscuous mode [ 650.455541][ T2546] veth0_vlan: left promiscuous mode [ 650.585097][T29280] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.592604][T29280] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.600175][T29280] bridge_slave_0: entered allmulticast mode [ 650.607188][T29280] bridge_slave_0: entered promiscuous mode [ 650.616230][T29280] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.624499][T29280] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.632101][T29280] bridge_slave_1: entered allmulticast mode [ 650.638700][T29280] bridge_slave_1: entered promiscuous mode [ 650.683983][T29280] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.691290][T29280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.698812][T29280] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.706127][T29280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.729890][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.737769][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.747175][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.754358][ T6831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.764961][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.772055][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.796889][T29280] veth0_vlan: entered promiscuous mode [ 650.803867][T22544] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 650.815912][T29280] veth1_macvtap: entered promiscuous mode [ 650.844671][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 650.869985][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 650.963863][T22544] usb 8-1: Using ep0 maxpacket: 8 [ 650.973025][T22544] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 650.983539][T22544] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.992556][T22544] usb 8-1: config 0 descriptor?? [ 651.055141][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 651.081075][T29308] rust_binder: Write failure EFAULT in pid:8 [ 651.090373][T29310] tipc: Started in network mode [ 651.102641][T29310] tipc: Node identity 7f000001, cluster identity 4711 [ 651.110442][T29310] tipc: Enabled bearer , priority 10 [ 651.175673][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 651.199577][T22544] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 651.289929][ T36] audit: type=1400 audit(2000000068.340:155071): avc: denied { getopt } for pid=29317 comm="syz.5.9432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 651.342390][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 651.438540][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 651.459358][T29328] overlayfs: missing 'lowerdir' [ 651.491156][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 651.598637][T29344] overlayfs: failed to clone upperpath [ 651.633995][T29350] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9442'. [ 651.744307][T29356] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ [ 651.843913][ T1835] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 652.004121][ T1835] usb 6-1: Using ep0 maxpacket: 32 [ 652.010575][ T1835] usb 6-1: config 4 has an invalid interface number: 60 but max is 0 [ 652.018856][ T1835] usb 6-1: config 4 has no interface number 0 [ 652.025318][ T1835] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=da.8d [ 652.035275][ T1835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.103915][ T10] tipc: Node number set to 2130706433 [ 652.406634][T29375] netlink: 'syz.6.9452': attribute type 4 has an invalid length. [ 652.417966][T29375] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.9452'. [ 652.446636][ T1287] usb 6-1: USB disconnect, device number 80 [ 652.485101][T22544] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 652.496259][T22544] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 652.507690][T22544] asix 8-1:0.0: probe with driver asix failed with error -71 [ 652.518850][T22544] usb 8-1: USB disconnect, device number 3 [ 653.263878][ T1287] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 653.423895][ T1287] usb 8-1: Using ep0 maxpacket: 8 [ 653.431086][ T1287] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.442276][ T1287] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.452410][ T1287] usb 8-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 653.461674][ T1287] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.470352][ T1287] usb 8-1: config 0 descriptor?? [ 653.874429][T29417] netlink: 25 bytes leftover after parsing attributes in process `syz.5.9467'. [ 653.885434][T29417] netlink: 25 bytes leftover after parsing attributes in process `syz.5.9467'. [ 653.886617][ T1287] wacom 0003:056A:0000.0040: unknown main item tag 0x1 [ 653.905560][ T1287] wacom 0003:056A:0000.0040: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 653.917588][ T1287] wacom 0003:056A:0000.0040: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.7-1/input0 [ 653.933165][ T1287] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:0000.0040/input/input76 [ 654.092047][T29402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.101789][T29402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.112641][ T1287] usb 8-1: USB disconnect, device number 4 [ 654.212432][T29424] binder: Bad value for 'defcontext' [ 654.271788][T29443] netlink: 25 bytes leftover after parsing attributes in process `syz.6.9476'. [ 654.517412][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 654.634629][T29476] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 654.634661][T29476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 654.657385][T29478] netlink: 25 bytes leftover after parsing attributes in process `syz.7.9487'. [ 654.678976][T29478] netlink: 25 bytes leftover after parsing attributes in process `syz.7.9487'. [ 654.719373][T29482] kvm: pic: non byte read [ 654.724272][T29482] kvm: pic: single mode not supported [ 654.724428][T29482] kvm: pic: non byte read [ 654.734885][T29482] kvm: pic: level sensitive irq not supported [ 654.735789][T29482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 654.744634][T29482] rust_binder: Error while translating object. [ 654.751365][T29482] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 654.757603][T29482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 654.858738][T29488] binder: Bad value for 'defcontext' [ 655.014085][ T1835] usb 6-1: new low-speed USB device number 81 using dummy_hcd [ 655.143897][ T1835] usb 6-1: device descriptor read/64, error -71 [ 655.264025][ T1837] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 655.383870][ T1835] usb 6-1: device descriptor read/64, error -71 [ 655.413843][ T1837] usb 8-1: Using ep0 maxpacket: 8 [ 655.420487][ T1837] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 655.430683][ T1837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.439574][ T1837] usb 8-1: config 0 descriptor?? [ 655.623868][ T1835] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 655.753879][ T1835] usb 6-1: device descriptor read/64, error -71 [ 655.993897][ T1835] usb 6-1: device descriptor read/64, error -71 [ 656.103976][ T1835] usb usb6-port1: attempt power cycle [ 656.443853][ T1835] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 656.464911][ T1835] usb 6-1: device descriptor read/8, error -71 [ 656.516651][T29507] overlayfs: failed to clone upperpath [ 656.595594][ T1835] usb 6-1: device descriptor read/8, error -71 [ 656.833887][ T1835] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 656.855187][ T1835] usb 6-1: device descriptor read/8, error -71 [ 656.985717][ T1835] usb 6-1: device descriptor read/8, error -71 [ 657.094278][ T1835] usb usb6-port1: unable to enumerate USB device [ 657.547992][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 657.624577][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 657.644355][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 657.770985][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 657.806353][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 657.978839][ T1837] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 657.991898][ T1837] asix 8-1:0.0: probe with driver asix failed with error -71 [ 658.000581][ T1837] usb 8-1: USB disconnect, device number 5 [ 658.173030][ T36] audit: type=1400 audit(2000000075.220:155072): avc: denied { read } for pid=29543 comm="syz.6.9514" path="socket:[145478]" dev="sockfs" ino=145478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 658.617660][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 658.621603][T29564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 658.629283][T29564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:38 [ 658.648953][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 658.691523][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 658.715750][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 658.811400][ T36] audit: type=1326 audit(2000000075.860:155073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.6.9530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6a538e929 code=0x0 [ 658.976329][T29600] binder: Unknown parameter '00000000000000000009' [ 659.099700][T29607] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 659.333897][ T1833] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 659.494292][ T1833] usb 8-1: Using ep0 maxpacket: 32 [ 659.501507][ T1833] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 659.511483][ T1833] usb 8-1: config 1 has no interface number 1 [ 659.518027][ T1833] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 659.531687][ T1833] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 659.544889][ T1833] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 659.554643][ T1833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.563161][ T1833] usb 8-1: Product: syz [ 659.567633][ T1833] usb 8-1: Manufacturer: syz [ 659.573043][ T1833] usb 8-1: SerialNumber: syz [ 659.780114][T29607] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 659.780157][T29607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 659.789762][T29607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:73 [ 659.813935][ T653] Bluetooth: hci0: command 0x1003 tx timeout [ 659.832701][ T1833] usb 8-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 659.841878][ T1833] usb 8-1: found format II with max.bitrate = 0, frame size=7 [ 659.849888][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 659.904799][ T1833] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 659.988750][ T1833] usb 8-1: USB disconnect, device number 6 [ 660.024370][T29623] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 660.024397][T29623] rust_binder: Error while translating object. [ 660.037775][T29623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 660.044792][T29623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 660.303892][T22544] usb 6-1: new low-speed USB device number 85 using dummy_hcd [ 660.414522][T29630] binder: Unknown parameter '' [ 660.473869][T22544] usb 6-1: Invalid ep0 maxpacket: 16 [ 660.603884][T22544] usb 6-1: new low-speed USB device number 86 using dummy_hcd [ 660.753877][T22544] usb 6-1: Invalid ep0 maxpacket: 16 [ 660.759477][T22544] usb usb6-port1: attempt power cycle [ 660.842465][T29633] netlink: 'syz.6.9542': attribute type 4 has an invalid length. [ 660.853458][T29633] netlink: 'syz.6.9542': attribute type 4 has an invalid length. [ 660.989936][T29656] tmpfs: Unknown parameter 'usrquota' [ 661.103898][T22544] usb 6-1: new low-speed USB device number 87 using dummy_hcd [ 661.124187][T22544] usb 6-1: Invalid ep0 maxpacket: 16 [ 661.254538][T22544] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 661.274366][T22544] usb 6-1: Invalid ep0 maxpacket: 16 [ 661.279835][T22544] usb usb6-port1: unable to enumerate USB device [ 661.745156][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 661.767399][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 661.799702][T29667] can0: slcan on ttyS3. [ 661.845064][T29667] can0 (unregistered): slcan off ttyS3. [ 662.404998][ T36] audit: type=1326 audit(2000000079.460:155074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.6.9562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6a538e929 code=0x0 [ 662.446043][ T36] audit: type=1326 audit(2000000079.490:155075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.6.9562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6a538e929 code=0x0 [ 662.534734][T29726] bridge0: port 3(vlan0) entered blocking state [ 662.542582][T29726] bridge0: port 3(vlan0) entered disabled state [ 662.553895][T29726] vlan0: entered allmulticast mode [ 662.559236][T29726] veth0_vlan: entered allmulticast mode [ 662.574246][T29726] vlan0: entered promiscuous mode [ 662.579605][T29726] bridge0: port 3(vlan0) entered blocking state [ 662.586254][T29726] bridge0: port 3(vlan0) entered forwarding state [ 662.685107][T29737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9569'. [ 663.260700][T26720] udevd[26720]: symlink '../../loop9' '/dev/disk/by-diskseq/63.tmp-b7:9' failed: Read-only file system [ 663.272542][T29805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:241 [ 663.276872][T26720] udevd[26720]: symlink '../../loop9' '/dev/disk/by-diskseq/63.tmp-b7:9' failed: Read-only file system [ 663.305297][T26720] udevd[26720]: symlink '../../loop9' '/dev/disk/by-diskseq/63.tmp-b7:9' failed: Read-only file system [ 663.504465][T29820] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 663.564061][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 663.717101][ T10] usb 8-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 663.727672][ T10] usb 8-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 663.737007][ T10] usb 8-1: Product: syz [ 663.741625][ T10] usb 8-1: Manufacturer: syz [ 663.746430][ T10] usb 8-1: SerialNumber: syz [ 663.752031][ T10] usb 8-1: config 0 descriptor?? [ 663.753928][ T1837] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 663.915168][ T1837] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.925737][ T1837] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 663.935578][ T1837] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 663.944797][ T1837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 663.953045][ T1837] usb 6-1: SerialNumber: syz [ 664.165851][ T1837] usb 6-1: 0:2 : does not exist [ 664.172427][ T1837] usb 6-1: unit 5: unexpected type 0x03 [ 664.178425][ T1837] usb 6-1: unit 4 not found! [ 664.186699][ T1837] usb 6-1: USB disconnect, device number 89 [ 664.194943][T26779] udevd[26779]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 664.364686][ T10] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 664.566877][ T10] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 664.577607][ T10] asix 8-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 664.588580][ T10] asix 8-1:0.0: probe with driver asix failed with error -71 [ 664.602249][ T10] usb 8-1: USB disconnect, device number 7 [ 664.709326][T29845] can0: slcan on ttyS3. [ 664.754629][T29845] can0 (unregistered): slcan off ttyS3. [ 664.769592][T29847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:261 [ 664.771282][T29847] rust_binder: Read failure Err(EFAULT) in pid:261 [ 664.820232][ T36] audit: type=1326 audit(2000000081.870:155076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29839 comm="syz.6.9606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a538e929 code=0x7fc00000 [ 664.898105][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 665.033896][ T10] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 665.183921][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 665.190912][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.203002][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 665.215162][ T10] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 665.224351][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.232326][ T10] usb 6-1: Product: syz [ 665.236957][ T10] usb 6-1: Manufacturer: syz [ 665.241597][ T10] usb 6-1: SerialNumber: syz [ 665.247491][ T10] usb 6-1: config 0 descriptor?? [ 665.461303][T29849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.470277][T29849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.482875][ T10] usb 6-1: USB disconnect, device number 90 [ 665.700357][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 665.762682][T29865] netlink: 'syz.8.9614': attribute type 4 has an invalid length. [ 665.825052][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 665.861908][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 666.253921][T29891] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 666.513896][ T1833] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 666.663871][ T1833] usb 6-1: Using ep0 maxpacket: 32 [ 666.670696][ T1833] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 666.679474][ T1833] usb 6-1: config 0 has no interface number 0 [ 666.686257][ T1833] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.697460][ T1833] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.707914][ T1833] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 666.715345][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 666.717544][ T1833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.737259][ T1833] usb 6-1: config 0 descriptor?? [ 666.750627][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 666.917523][T29910] rust_binder: Write failure EFAULT in pid:74 [ 667.153872][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 667.313882][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 667.320652][ T10] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 667.330212][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.341692][ T10] usb 8-1: config 0 descriptor?? [ 667.368633][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 667.376518][ T1833] usbhid 6-1:0.1: can't add hid device: -71 [ 667.383438][ T1833] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 667.395734][ T1833] usb 6-1: USB disconnect, device number 91 [ 667.981237][ T36] audit: type=1326 audit(2000000085.030:155077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29932 comm="syz.8.9638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f082a58e929 code=0x0 [ 668.663941][ T64] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 668.752576][ T10] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 668.763164][ T10] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 668.774818][ T10] asix 8-1:0.0: probe with driver asix failed with error -71 [ 668.783271][ T10] usb 8-1: USB disconnect, device number 8 [ 668.815409][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 668.825512][ T64] usb 6-1: config 1 has an invalid interface number: 229 but max is 1 [ 668.835400][ T64] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 668.845908][ T64] usb 6-1: config 1 has no interface number 0 [ 668.853125][ T64] usb 6-1: too many endpoints for config 1 interface 229 altsetting 255: 255, using maximum allowed: 30 [ 668.865918][ T64] usb 6-1: config 1 interface 229 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 668.882409][ T64] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 668.896508][ T64] usb 6-1: config 1 interface 229 has no altsetting 0 [ 668.903469][ T64] usb 6-1: config 1 interface 1 has no altsetting 0 [ 668.911568][ T64] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 668.921365][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.930030][ T64] usb 6-1: Product: syz [ 668.934384][ T64] usb 6-1: Manufacturer: syz [ 668.939016][ T64] usb 6-1: SerialNumber: syz [ 669.283051][T30125] /dev/rnullb0: Can't lookup blockdev [ 669.645349][T30143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 669.646177][T30143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138 [ 669.726325][T30146] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 670.449162][ T6831] veth1_macvtap: left promiscuous mode [ 670.463187][ T6831] veth0_vlan: left promiscuous mode [ 671.399895][ T10] usb 6-1: USB disconnect, device number 92 [ 671.498133][T30191] SELinux: security_context_str_to_sid () failed with errno=-22 [ 671.582820][T30200] can0: slcan on ptm0. [ 671.695192][T30199] can0 (unregistered): slcan off ptm0. [ 671.771940][T30230] netlink: 76 bytes leftover after parsing attributes in process `syz.7.9685'. [ 671.793950][ T10] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 671.831385][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 671.845925][T30232] rust_binder: Write failure EINVAL in pid:93 [ 671.855560][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 671.922872][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 671.937148][T30241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100 [ 671.946340][T26720] udevd[26720]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 671.968689][ T10] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 671.977968][ T10] usb 6-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 671.987852][ T10] usb 6-1: Product: syz [ 671.993215][ T10] usb 6-1: Manufacturer: syz [ 671.998582][ T10] usb 6-1: SerialNumber: syz [ 672.004525][ T10] usb 6-1: config 0 descriptor?? [ 672.063829][T26779] udevd[26779]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 672.159504][T26779] udevd[26779]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 672.189254][T26779] udevd[26779]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 672.221801][T26779] udevd[26779]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 672.244387][T30269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 672.263767][T26779] udevd[26779]: symlink '../../loop8' '/dev/disk/by-diskseq/62.tmp-b7:8' failed: Read-only file system [ 672.447468][T30294] 9pnet_fd: Insufficient options for proto=fd [ 672.567546][T30303] rust_binder: Error while translating object. [ 672.567611][T30303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 672.593836][T30303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:125 [ 672.623694][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 672.825329][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 672.836164][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 672.863872][ T10] asix 6-1:0.0: probe with driver asix failed with error -71 [ 672.874795][ T10] usb 6-1: USB disconnect, device number 93 [ 673.120556][ T36] audit: type=1326 audit(2000000090.170:155078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30309 comm="syz.7.9716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe44c58e929 code=0x0 [ 673.551057][T30315] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 673.734955][T30330] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9722'. [ 673.769418][T30331] ------------[ cut here ]------------ [ 673.775331][T30331] WARNING: CPU: 1 PID: 30331 at mm/page_alloc.c:5159 __alloc_pages_noprof+0xe4/0x6c0 [ 673.784879][T30331] Modules linked in: [ 673.788788][T30331] CPU: 1 UID: 0 PID: 30331 Comm: syz.5.9722 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 673.802389][T30331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 673.812568][T30331] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 673.819178][T30331] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 34 32 ee 05 00 0f 85 c4 00 00 00 c6 05 27 32 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 673.839792][T30331] RSP: 0018:ffffc90004a87680 EFLAGS: 00010246 [ 673.845931][T30331] RAX: 0000000000000000 RBX: 1ffff92000950ed4 RCX: 0000000000000000 [ 673.853953][T30331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004a87728 [ 673.862118][T30331] RBP: ffffc90004a877a8 R08: ffffc90004a87727 R09: 0000000000000000 [ 673.870677][T30331] R10: ffffc90004a87710 R11: fffff52000950ee5 R12: ffffc90004a876c0 [ 673.878705][T30331] R13: 0000000000000016 R14: dffffc0000000000 R15: 0000000000000000 [ 673.886804][T30331] FS: 00007fc02fb5e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 673.895992][T30331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 673.902599][T30331] CR2: 0000200000001000 CR3: 000000016c400000 CR4: 00000000003526b0 [ 673.910727][T30331] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144 [ 673.918839][T30331] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 673.927051][T30331] Call Trace: [ 673.930340][T30331] [ 673.933274][T30331] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 673.939043][T30331] ? __kasan_slab_alloc+0x73/0x90 [ 673.944109][T30331] ? hashtab_init+0xdb/0x1f0 [ 673.948818][T30331] ___kmalloc_large_node+0x9c/0x1d0 [ 673.954153][T30331] ? ebitmap_read+0x21d/0x990 [ 673.959033][T30331] ? hashtab_init+0xdb/0x1f0 [ 673.963672][T30331] __kmalloc_large_node_noprof+0x1e/0xe0 [ 673.969561][T30331] ? hashtab_init+0xdb/0x1f0 [ 673.974216][T30331] __kmalloc_noprof+0x26d/0x450 [ 673.979080][T30331] hashtab_init+0xdb/0x1f0 [ 673.983506][T30331] ? policydb_read+0x86f/0x28c0 [ 673.988483][T30331] symtab_init+0x44/0x70 [ 673.992750][T30331] policydb_read+0x8fe/0x28c0 [ 673.997655][T30331] ? kasan_save_alloc_info+0x40/0x50 [ 674.002970][T30331] ? __cfi_policydb_read+0x10/0x10 [ 674.008138][T30331] ? security_load_policy+0x128/0x12f0 [ 674.013619][T30331] security_load_policy+0x162/0x12f0 [ 674.018973][T30331] ? irqentry_exit+0x4a/0x60 [ 674.023588][T30331] ? exc_page_fault+0x66/0xc0 [ 674.028414][T30331] ? asm_exc_page_fault+0x2b/0x30 [ 674.033460][T30331] ? __cfi_security_load_policy+0x10/0x10 [ 674.039315][T30331] ? rep_movs_alternative+0x4a/0xa0 [ 674.044569][T30331] sel_write_load+0x298/0x5e0 [ 674.049264][T30331] ? __cfi_sel_write_load+0x10/0x10 [ 674.054559][T30331] ? bpf_lsm_file_permission+0xd/0x20 [ 674.060132][T30331] ? __cfi_sel_write_load+0x10/0x10 [ 674.065453][T30331] vfs_write+0x3c0/0xe80 [ 674.069730][T30331] ? __kasan_slab_free+0x6a/0x80 [ 674.074716][T30331] ? __cfi_vfs_write+0x10/0x10 [ 674.079580][T30331] ? __kasan_check_write+0x18/0x20 SYZFAIL: failed to send rpc fd=3 want=560 sent=0 n=-1 (errno 32: Broken pipe) [ 674.084737][T30331] ? mutex_lock+0x92/0x1c0 [ 674.089164][T30331] ? __cfi_mutex_lock+0x10/0x10 [ 674.094095][T30331] ? __fget_files+0x2c5/0x340 [ 674.099234][T30331] ksys_write+0x141/0x250 [ 674.103559][T30331] ? xfd_validate_state+0x68/0x150 [ 674.108733][T30331] ? __cfi_ksys_write+0x10/0x10 [ 674.108828][ T36] audit: type=1400 audit(2000000091.140:155079): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2459]" dev="pipefs" ino=2459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 674.113626][T30331] ? __kasan_check_write+0x18/0x20 [ 674.142471][T30331] ? fpregs_restore_userregs+0x11d/0x260 [ 674.148174][T30331] __x64_sys_write+0x7f/0x90 [ 674.152791][T30331] x64_sys_call+0x271c/0x2ee0 [ 674.157507][T30331] do_syscall_64+0x58/0xf0 [ 674.162024][T30331] ? clear_bhb_loop+0x50/0xa0 [ 674.166751][T30331] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 674.172645][T30331] RIP: 0033:0x7fc02ed8e929 [ 674.177092][T30331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.196848][T30331] RSP: 002b:00007fc02fb5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 674.205497][T30331] RAX: ffffffffffffffda RBX: 00007fc02efb6080 RCX: 00007fc02ed8e929 [ 674.213491][T30331] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000007 [ 674.221817][T30331] RBP: 00007fc02ee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 674.230168][T30331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.238216][T30331] R13: 0000000000000000 R14: 00007fc02efb6080 R15: 00007ffd476e3ad8 [ 674.246336][T30331] [ 674.249465][T30331] ---[ end trace 0000000000000000 ]--- [ 674.300945][T30331] SELinux: failed to load policy [ 674.333537][ T6831] bridge_slave_1: left allmulticast mode [ 674.339295][ T6831] bridge_slave_1: left promiscuous mode [ 674.373906][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.426517][ T6831] bridge_slave_0: left allmulticast mode [ 674.432194][ T6831] bridge_slave_0: left promiscuous mode [ 674.442929][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.547117][ T6831] veth1_macvtap: left promiscuous mode [ 674.552806][ T6831] veth0_vlan: left promiscuous mode [ 674.947080][ T6831] bridge_slave_1: left allmulticast mode [ 674.952954][ T6831] bridge_slave_1: left promiscuous mode [ 674.958766][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.966413][ T6831] bridge_slave_0: left allmulticast mode [ 674.972053][ T6831] bridge_slave_0: left promiscuous mode [ 674.977808][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.985562][ T6831] vlan0: left allmulticast mode [ 674.990413][ T6831] veth0_vlan: left allmulticast mode [ 674.995832][ T6831] vlan0: left promiscuous mode [ 675.000789][ T6831] bridge0: port 3(vlan0) entered disabled state [ 675.007888][ T6831] bridge_slave_1: left allmulticast mode [ 675.013643][ T6831] bridge_slave_1: left promiscuous mode [ 675.019868][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.027739][ T6831] bridge_slave_0: left allmulticast mode [ 675.033578][ T6831] bridge_slave_0: left promiscuous mode [ 675.039352][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.046999][ T6831] bridge_slave_1: left allmulticast mode [ 675.052715][ T6831] bridge_slave_1: left promiscuous mode [ 675.058409][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.065910][ T6831] bridge_slave_0: left allmulticast mode [ 675.071551][ T6831] bridge_slave_0: left promiscuous mode [ 675.077277][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.306755][ T6831] tipc: Disabling bearer [ 675.313504][ T6831] tipc: Left network mode [ 675.319912][ T6831] veth1_macvtap: left promiscuous mode [ 675.326138][ T6831] veth0_vlan: left promiscuous mode [ 675.331578][ T6831] veth1_macvtap: left promiscuous mode [ 675.337225][ T6831] veth0_vlan: left promiscuous mode [ 675.342598][ T6831] veth1_macvtap: left promiscuous mode [ 675.348262][ T6831] veth0_vlan: left promiscuous mode