last executing test programs: 5m19.066976719s ago: executing program 0 (id=2460): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r4, &(0x7f00000001c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x61, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x34000) 5m18.909485741s ago: executing program 0 (id=2465): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) setuid(0xee00) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) (async) setsockopt$sock_linger(r1, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) (async) listen(r2, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@remote, 0x0, 0x3, 0x4e1d, 0x0, 0xa, 0x0, 0x80, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x1}}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xfffffffd, 0x2}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502, 0x3, 0x2}, {{@in6=@mcast1, 0x0, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0x1, 0x3}, {{@in6=@local, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x1bc}}, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x5423, 0x0) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x28b5455b) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ff6000/0xa000)=nil, 0xa000}, 0x1}) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) close(0x3) 5m18.908835111s ago: executing program 0 (id=2467): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) (async, rerun: 32) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000000940)) (async, rerun: 32) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c8", 0xa7}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4", 0x1e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56e", 0x3}], 0x1}}], 0x2, 0xc0) (async, rerun: 32) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0xdf8, 0x16) (async) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008034, 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (rerun: 64) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000005740), 0x22, 0x0) pwritev2(r3, &(0x7f0000005a00)=[{&(0x7f0000005780)="74f9f1", 0x3}], 0x1, 0x80, 0x1, 0x30) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) (rerun: 32) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r8]) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4be}, 0x1c) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r9]) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000500)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 5m18.846812582s ago: executing program 0 (id=2469): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 5m18.769917263s ago: executing program 0 (id=2472): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="849baf6b815c20ab5c75b9ce828f71151524a4eba2bf04b6ad2631763b1075c7f10f6c180afe26862c63c0a2171ef86f6bc8301d59c2df1866a72fdbf217c01dde3741ea78f3e6197c54834875713d50623dec5eb0b47d519c47aacec7878d3f5eeb701ce96913e2f0b9a700d0d7dd0593cffadb6ac2573cfae3feebfed848eb230d717bfdb37c00f90b2e1e595e209ae3b5fd2dc6fe77e3c72b1114f72705b3f3f193c10c99eff9986da697a4c747da0906adcc86204e89e867dbfb1fb5249b90db773f6b7a6038346c9e7b3a631375c76d9d90398d14b5e87c4530ad8dc4ea3e3de61057550bde255401", 0xeb}], 0x1) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m18.608813666s ago: executing program 0 (id=2475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x4008af25, &(0x7f0000000080)) keyctl$describe(0x6, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x4, &(0x7f00000001c0)=""/64, 0x40, 0x0, 0x32}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 5m18.545267817s ago: executing program 32 (id=2475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x4008af25, &(0x7f0000000080)) keyctl$describe(0x6, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x4, &(0x7f00000001c0)=""/64, 0x40, 0x0, 0x32}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 4m59.132874501s ago: executing program 3 (id=2688): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) userfaultfd(0x80801) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m59.066981872s ago: executing program 3 (id=2689): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2000077c, &(0x7f0000e68000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000011c0), 0x65101, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() getdents(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00004f7000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000f20000400000000000000000000000007cf9085133a2f88a977cfe0020df1d91c8d9265736e2ec3832a0285611b1f909774855bef490a070d2d99f752c97fdbd609ecfe3a02b1778521a"]) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000440)={0x8140, 0x6, 0x5}, 0x18) getdents(r8, &(0x7f0000000580)=""/244, 0xf4) mount$binderfs(0x0, 0x0, 0x0, 0x4800, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0xfffffffffffffd86, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/138, 0x0, 0x0, 0x18}, @flat=@weak_binder={0x77622a85, 0x1, 0x4}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000400)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 4m57.579233125s ago: executing program 3 (id=2697): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) ptrace$cont(0x18, r0, 0x4, 0x1) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x80000008, 0xffffffff, 0x2, 0xd3, 0x101, 0x6, 0xd}, {0x80000000, 0x81, 0x8, 0xfffffffe, 0x2, 0xd663, 0x9}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x205, 0x0, 0x27ed}]}) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) 4m57.376448528s ago: executing program 3 (id=2698): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4000010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() ioprio_set$pid(0x3, r1, 0x0) r2 = userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000415000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x10, r0, 0x2000) madvise(&(0x7f0000ab8000/0x1000)=nil, 0x1000, 0x4) 4m56.471131681s ago: executing program 3 (id=2701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a40), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000080)=0x8) (async) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000080)=0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000006800), 0x2, 0x0) socket$tipc(0x1e, 0x4, 0x0) (async) r5 = socket$tipc(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(r4, &(0x7f0000009c80)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000009f40)=""/86, 0x56}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000001640)=""/120, 0x78}, {&(0x7f00000016c0)=""/236, 0xec}, {&(0x7f00000017c0)=""/68, 0x44}], 0x9, &(0x7f0000001900)=""/108, 0x6c}, 0xfffffffd}, {{&(0x7f0000001980)=@rc={0x1f, @none}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000009fc0)=""/156, 0x9c}], 0x2}, 0x1}, {{&(0x7f0000001b40)=@ax25={{0x3, @netrom}, [@rose, @bcast, @rose, @netrom, @null, @remote, @null]}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000001bc0)=""/118, 0x76}, {&(0x7f0000001c40)=""/172, 0xac}, {&(0x7f0000001d00)=""/194, 0xc2}, {&(0x7f0000001e00)=""/120, 0x78}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/45, 0x2d}, {&(0x7f0000002ec0)=""/145, 0x91}], 0x7, &(0x7f0000003000)=""/4096, 0x1000}, 0x395f}, {{&(0x7f0000004000)=@ax25={{0x3, @bcast}, [@null, @default, @netrom, @bcast, @default, @bcast, @remote, @rose]}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004080)=""/15, 0xf}, {&(0x7f00000040c0)=""/38, 0x26}, {&(0x7f0000004100)=""/24, 0x18}, {&(0x7f0000004140)=""/117, 0x75}, {&(0x7f00000041c0)=""/52, 0x34}, {&(0x7f0000004200)=""/112, 0x70}, {&(0x7f0000004280)=""/62, 0x3e}], 0x7, &(0x7f0000004340)=""/56, 0x38}, 0x2}, {{&(0x7f0000004380)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000005600)=[{&(0x7f0000004400)=""/226, 0xe2}, {&(0x7f0000004500)=""/77, 0x4d}, {&(0x7f0000004580)=""/86, 0x56}, {&(0x7f0000004600)=""/4096, 0x1000}], 0x4, &(0x7f0000005640)=""/154, 0x9a}, 0x8}, {{&(0x7f0000005700)=@ax25={{0x3, @netrom}, [@netrom, @null, @bcast, @netrom, @default, @netrom, @remote, @netrom]}, 0x80, &(0x7f0000006d40)=[{&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000006780)=""/109, 0x6d}, {&(0x7f0000006800)}, {&(0x7f0000006840)=""/1, 0x1}, {&(0x7f0000006880)=""/209, 0xd1}, {&(0x7f0000006980)=""/178, 0xb2}, {&(0x7f0000006a40)=""/199, 0xc7}, {&(0x7f0000006b40)=""/245, 0xf5}, {&(0x7f000000a080)=""/224, 0xe0}], 0x9, &(0x7f0000006e00)=""/140, 0x8c}, 0x7ff}, {{&(0x7f0000006ec0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000006f40)=""/67, 0x43}, {&(0x7f0000006fc0)=""/137, 0x89}, {&(0x7f0000007080)=""/126, 0x7e}], 0x3, &(0x7f0000007140)=""/19, 0x13}, 0x9}, {{&(0x7f0000007180)=@hci, 0x80, &(0x7f0000007480)=[{&(0x7f0000007200)=""/134, 0x86}, {&(0x7f00000072c0)=""/133, 0x85}, {&(0x7f0000007380)=""/22, 0x16}, {&(0x7f00000073c0)=""/190, 0xbe}], 0x4, &(0x7f00000074c0)=""/118, 0x76}, 0x8}, {{0x0, 0x0, &(0x7f0000008780)=[{&(0x7f0000007540)=""/52, 0x34}, {&(0x7f0000007580)=""/4096, 0x1000}, {&(0x7f0000008580)=""/32, 0x20}, {&(0x7f00000085c0)=""/163, 0xa3}, {&(0x7f0000008680)=""/193, 0xc1}], 0x5, &(0x7f0000008800)=""/58, 0x3a}, 0x8}, {{&(0x7f0000008840)=@tipc=@id, 0x80, &(0x7f0000009b00)=[{&(0x7f00000088c0)=""/59, 0x3b}, {&(0x7f0000008900)=""/4096, 0x1000}, {&(0x7f0000009900)=""/224, 0xe0}, {&(0x7f00000015c0)=""/3, 0x3}, {&(0x7f0000009a40)=""/42, 0x2a}, {&(0x7f0000009a80)=""/34, 0x22}, {&(0x7f0000009ac0)=""/40, 0x28}], 0x7, &(0x7f0000009b80)=""/246, 0xf6}, 0xffff}], 0xa, 0x40002000, &(0x7f0000009f00)={0x0, 0x3938700}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$poke(0x5, r8, &(0x7f0000000000), 0x2) (async) ptrace$poke(0x5, r8, &(0x7f0000000000), 0x2) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="000001000037b93b63e74210b000"], 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000000) (async) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="000001000037b93b63e74210b000"], 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c1f99", @ANYRES16=r6, @ANYBLOB="010027bd7000ffdbdf250100000004000680"], 0x18}, 0x1, 0x0, 0x0, 0x4000014}, 0x8008) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000001600)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 4m56.396308492s ago: executing program 3 (id=2702): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000080)={0x0, 0x3}) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d75c5da8c5c4dada466bf73ee60295d1d133135d5c7", 0x14}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, r1) setrlimit(0x40000000000008, &(0x7f0000000000)) mlockall(0x7) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0x9, 0x0, 0x0, 0xf}) read(r0, &(0x7f00000002c0)=""/200, 0x39) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000180)=@x86={0xc, 0xd, 0x10, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10, 0x2, 0x0, 0x0, 0x2, 0x4d, 0x7, 0x6, 0x2, '\x00', 0xfe, 0x100}) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000300)={0xe0001}) setuid(r4) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3f}}}}, [@key_params=[@NL80211_ATTR_MAC={0xa}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}}, 0x4004) keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0x770a, 0x2) 4m56.357028323s ago: executing program 33 (id=2702): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000080)={0x0, 0x3}) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d75c5da8c5c4dada466bf73ee60295d1d133135d5c7", 0x14}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, r1) setrlimit(0x40000000000008, &(0x7f0000000000)) mlockall(0x7) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0x9, 0x0, 0x0, 0xf}) read(r0, &(0x7f00000002c0)=""/200, 0x39) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000180)=@x86={0xc, 0xd, 0x10, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10, 0x2, 0x0, 0x0, 0x2, 0x4d, 0x7, 0x6, 0x2, '\x00', 0xfe, 0x100}) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000300)={0xe0001}) setuid(r4) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3f}}}}, [@key_params=[@NL80211_ATTR_MAC={0xa}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}}, 0x4004) keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0x770a, 0x2) 3m30.72265915s ago: executing program 4 (id=3605): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x1, 0x2000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000020c0)={0x50, 0x0, r2, {0x7, 0x2b, 0x7f, 0x200, 0x8, 0x8, 0x4, 0x5, 0x0, 0x0, 0x10, 0x8000}}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000002140)={0x4, 0x3, 0x100000, 0x1000, &(0x7f0000ffe000/0x1000)=nil, 0x6}) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) io_setup(0xedd, &(0x7f0000002240)=0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000002540), 0x4000, 0x0) io_submit(r7, 0x7, &(0x7f00000027c0)=[&(0x7f0000002300)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000002280)="f3aec182e072fe4108fd58cb7085f062d10ac3c261146aa64287cd54fa6e58521446af93202ec48c1428d40d0328d6a2481d52a9ee69ff9dbf094d3e430434a83e96d72c709a3d56aad1d37726022212d244159da49e22007e1fa18a228ace", 0x5f, 0x5, 0x0, 0x2, r5}, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x3, 0xc, 0xffffffffffffffff, &(0x7f0000002340)="e4a5e06e310421f89f08fca7a68f80be3a9ee04182f0fe5d3e65fba4a17f0e88d5f13488de93078990983b07738b8a959ca552f8072487ed9f0882189973ff573d5dfac1a1ef6f2241a2e3b0b015b6e4514e44b00639dcc813041151825b855ddedc3e87b777264eeab48ee1599f012a1ff52261aeeb8ec41c1136e68fc8eef5fe961a3a8269c4e46ffdcc0e91cd7d087f153e6948c2bfcf1a7256b19370a9bdc2f42bcc0071f68b15bb6d9eb9174fc5e8300d0ad9d7863e70f86693a68322172dc097ffae3e511c50de4512046f99f74c9ce3271b6c0c572b07d4fc8e803bf9cccc79115909f2f26a196795de6a6d034a", 0xf1, 0x7, 0x0, 0x2, r1}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x7ff, r1, &(0x7f0000002480), 0x0, 0x0, 0x0, 0x1}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x3, 0x9, r5, &(0x7f0000002500)="17181741ced39da633fb575d0101b299c1651da1b312831cede7ef0826de32d6349b08", 0x23, 0x2, 0x0, 0x1, r8}, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x8, 0x8, r1, &(0x7f00000025c0)="77056f73535e37bd595358ea7d51d5c8e18f7238bd038c51", 0x18, 0x7, 0x0, 0x2, r5}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x2, 0x7, r6, &(0x7f0000002640)="4ec73ad2646d4fa2", 0x8, 0x1, 0x0, 0x3, r5}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x1, 0x7, r6, &(0x7f00000026c0)="b0a9aabcfdb74bc59ddaff79bdaaa0a9bcdc969d066ae0f63e4a1611581cdd95cee3f01724f3ed9a0488f77e6c588ef33ba72e58e6148e2f261f909a27d74941a6e220cbc5861541bb0f2bc27c67ad43c4be7358259966793b45452f9329d7cc47b82dd72e27a5fda06b86ee5c01758469b9b5d8f3300226e7e0ec19958460d10be4c132bf20b2e01f5f7ae86f547686b79bf01eb0e13787586f893f", 0x9c, 0x1, 0x0, 0x2, r5}]) (async) io_submit(r7, 0x7, &(0x7f00000027c0)=[&(0x7f0000002300)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000002280)="f3aec182e072fe4108fd58cb7085f062d10ac3c261146aa64287cd54fa6e58521446af93202ec48c1428d40d0328d6a2481d52a9ee69ff9dbf094d3e430434a83e96d72c709a3d56aad1d37726022212d244159da49e22007e1fa18a228ace", 0x5f, 0x5, 0x0, 0x2, r5}, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x3, 0xc, 0xffffffffffffffff, &(0x7f0000002340)="e4a5e06e310421f89f08fca7a68f80be3a9ee04182f0fe5d3e65fba4a17f0e88d5f13488de93078990983b07738b8a959ca552f8072487ed9f0882189973ff573d5dfac1a1ef6f2241a2e3b0b015b6e4514e44b00639dcc813041151825b855ddedc3e87b777264eeab48ee1599f012a1ff52261aeeb8ec41c1136e68fc8eef5fe961a3a8269c4e46ffdcc0e91cd7d087f153e6948c2bfcf1a7256b19370a9bdc2f42bcc0071f68b15bb6d9eb9174fc5e8300d0ad9d7863e70f86693a68322172dc097ffae3e511c50de4512046f99f74c9ce3271b6c0c572b07d4fc8e803bf9cccc79115909f2f26a196795de6a6d034a", 0xf1, 0x7, 0x0, 0x2, r1}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x7ff, r1, &(0x7f0000002480), 0x0, 0x0, 0x0, 0x1}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x3, 0x9, r5, &(0x7f0000002500)="17181741ced39da633fb575d0101b299c1651da1b312831cede7ef0826de32d6349b08", 0x23, 0x2, 0x0, 0x1, r8}, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x8, 0x8, r1, &(0x7f00000025c0)="77056f73535e37bd595358ea7d51d5c8e18f7238bd038c51", 0x18, 0x7, 0x0, 0x2, r5}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x2, 0x7, r6, &(0x7f0000002640)="4ec73ad2646d4fa2", 0x8, 0x1, 0x0, 0x3, r5}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x1, 0x7, r6, &(0x7f00000026c0)="b0a9aabcfdb74bc59ddaff79bdaaa0a9bcdc969d066ae0f63e4a1611581cdd95cee3f01724f3ed9a0488f77e6c588ef33ba72e58e6148e2f261f909a27d74941a6e220cbc5861541bb0f2bc27c67ad43c4be7358259966793b45452f9329d7cc47b82dd72e27a5fda06b86ee5c01758469b9b5d8f3300226e7e0ec19958460d10be4c132bf20b2e01f5f7ae86f547686b79bf01eb0e13787586f893f", 0x9c, 0x1, 0x0, 0x2, r5}]) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r10 = dup3(r6, r9, 0x80000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r10, 0x118, 0x1, &(0x7f0000002840)=0x366, 0x4) vmsplice(r5, &(0x7f0000002c80)=[{&(0x7f0000002880)="1e5892136124afa5810e3eb695c5b5059836286d932b197a8bd60ca9b82c4d3994d1c628090f77cd72d78efaf8a46c7536edefa6f95d4b10a6e0f57bc61f2826331c8e387e647ac9375ee6fc631b82683640ff89aa2ee39c23e81acaf010cdea41cd06d276874ba213cb5644839a674f93a6", 0x72}, {&(0x7f0000002900)="6381592b14f0228763c60ef41391a79817f0b43470979d91d9b1968cd1cdf034fed5c38d13e871f2856283a4a6264f60d4c5643c4c61d7787a54b98ecf8b27ebb88228e782a48eab2f396d522b7d9bc5bef1a2ec63e58b2d61d95160522f0a26ab33a0068d5ed3a1045e60a3a6da5be1a0012548c5dd7446396b2c1f792bd90a9d1ac9ffc993", 0x86}, {&(0x7f00000029c0)="e09fc55a23ae7c18fdf0af99c449b80b19a0b9d296a4c3d75aa2e0c576bc181081a44e7096c959a6ca4acbce291916aaef0a5c695bb39fd82905e9b27a600101f233b008525df59be3d558d203e80f083075df70f774762a7ff6606ad19585a71cb9e266810f524674a7a35e0750cc8dc17694fdcabe1e3b2526a18c8801e42d5743e631ad12e77da2cc6f3d6d0d001d32aafe0c378595321b78abb3ddf02c841558c5e4b7e27f6325f454273bbfbb332c44a4706bad64a190d48fffc9c984bb3e132ce6f5258d65f4c7", 0xca}, {&(0x7f0000002ac0)="cd667876f19a295aa441c35f5c28dbbfe600b2ca9207", 0x16}, {&(0x7f0000002b00)="0c4d92138c1f22e33472104221d565fb0dc2c060a0303432ebccf1061c3e2a0c1192f589523f7e6cbd632471fc45b3da6f9e8a8f5e5bde62bb4c9a9d27ae7261798f5ec67babd2cd30792158cd19b2b94eb5b6358aaedffa2f02b1f130c600a4", 0x60}, {&(0x7f0000002b80)="99449962c7efccfe6cc7eb4cad575af9d6fe5b1675a08b7b4fce71", 0x1b}, {&(0x7f0000002bc0)="25d000059e21675b3aacb4f00ad4143a6bc1ff7eb008c07c1ac755485b26d3ce960997fd308780a551a28d30d6d7a670328d48ad65b9342d284365c78d44b6ea0ffb53d792b0400baeec4c98c46e621062ff49dc6ff22cd0881d6e12ab42e235b043a39fe6434d64eb0bd2b9d4ed7c890fbe20dc5f399d312c866b042cd1f2bc317793cdc07950c0b1485763d42a7a5ee11020277591156996", 0x99}], 0x7, 0x0) (async) vmsplice(r5, &(0x7f0000002c80)=[{&(0x7f0000002880)="1e5892136124afa5810e3eb695c5b5059836286d932b197a8bd60ca9b82c4d3994d1c628090f77cd72d78efaf8a46c7536edefa6f95d4b10a6e0f57bc61f2826331c8e387e647ac9375ee6fc631b82683640ff89aa2ee39c23e81acaf010cdea41cd06d276874ba213cb5644839a674f93a6", 0x72}, {&(0x7f0000002900)="6381592b14f0228763c60ef41391a79817f0b43470979d91d9b1968cd1cdf034fed5c38d13e871f2856283a4a6264f60d4c5643c4c61d7787a54b98ecf8b27ebb88228e782a48eab2f396d522b7d9bc5bef1a2ec63e58b2d61d95160522f0a26ab33a0068d5ed3a1045e60a3a6da5be1a0012548c5dd7446396b2c1f792bd90a9d1ac9ffc993", 0x86}, {&(0x7f00000029c0)="e09fc55a23ae7c18fdf0af99c449b80b19a0b9d296a4c3d75aa2e0c576bc181081a44e7096c959a6ca4acbce291916aaef0a5c695bb39fd82905e9b27a600101f233b008525df59be3d558d203e80f083075df70f774762a7ff6606ad19585a71cb9e266810f524674a7a35e0750cc8dc17694fdcabe1e3b2526a18c8801e42d5743e631ad12e77da2cc6f3d6d0d001d32aafe0c378595321b78abb3ddf02c841558c5e4b7e27f6325f454273bbfbb332c44a4706bad64a190d48fffc9c984bb3e132ce6f5258d65f4c7", 0xca}, {&(0x7f0000002ac0)="cd667876f19a295aa441c35f5c28dbbfe600b2ca9207", 0x16}, {&(0x7f0000002b00)="0c4d92138c1f22e33472104221d565fb0dc2c060a0303432ebccf1061c3e2a0c1192f589523f7e6cbd632471fc45b3da6f9e8a8f5e5bde62bb4c9a9d27ae7261798f5ec67babd2cd30792158cd19b2b94eb5b6358aaedffa2f02b1f130c600a4", 0x60}, {&(0x7f0000002b80)="99449962c7efccfe6cc7eb4cad575af9d6fe5b1675a08b7b4fce71", 0x1b}, {&(0x7f0000002bc0)="25d000059e21675b3aacb4f00ad4143a6bc1ff7eb008c07c1ac755485b26d3ce960997fd308780a551a28d30d6d7a670328d48ad65b9342d284365c78d44b6ea0ffb53d792b0400baeec4c98c46e621062ff49dc6ff22cd0881d6e12ab42e235b043a39fe6434d64eb0bd2b9d4ed7c890fbe20dc5f399d312c866b042cd1f2bc317793cdc07950c0b1485763d42a7a5ee11020277591156996", 0x99}], 0x7, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002d00), 0x0, 0x0) (async) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002d00), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r11, 0x4c04, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xa, 0x0, "4077f343e60bc3949efbf056b8990dad2f6554da7e73d18edac4ffa774935a4fdafefa682325339a2ed06a5ca00a428afa1b63d7a0fc91d06bc4c7eb99c8c554", "c2a4ce81ba2c342164154731f3c7b0c57b5b3a78dcdefa2586d32eba04b68ccea8ca1f6a6c2523bfa30ec5acf89bf24978908882988552958234cd425308e51b", "3d5d9e22d6bf01bae16a055cbda92735e82768cfb319d3c1a9840aa3a7e4bfbe", [0x80000000000, 0xfffffffffffffffa]}) fallocate(r0, 0x8, 0xffffffffa12d4e13, 0x4) (async) fallocate(r0, 0x8, 0xffffffffa12d4e13, 0x4) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002e40), 0x8000, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x509201, 0x0) fcntl$setpipe(r13, 0x407, 0x4) (async) fcntl$setpipe(r13, 0x407, 0x4) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) setsockopt$inet_int(r8, 0x0, 0xc, &(0x7f0000002ec0)=0x1, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x3810, r6, 0x1ff000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x3810, r6, 0x1ff000) r14 = dup2(r12, r1) lseek(r14, 0x8, 0x3) ioctl$BLKSECTGET(r9, 0x1267, &(0x7f0000002f00)) lchown(&(0x7f0000002f40)='./file0\x00', r3, r4) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r11) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000004280)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004240)={&(0x7f0000003000)={0x1204, r15, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x40, 0x68}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x7}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x3}}, @NL80211_ATTR_IE={0x8e, 0x2a, [@challenge={0x10, 0x1, 0xca}, @chsw_timing={0x68, 0x4, {0x40, 0x8}}, @preq={0x82, 0x46, {{0x0, 0x1, 0x1}, 0x6, 0x9, 0xfff, @device_a, 0x5, @void, 0x2, 0x7, 0x4, [{{}, @broadcast, 0x9}, {{0x0, 0x0, 0x1}, @device_a, 0xb}, {{0x1}, @broadcast, 0xfffffffe}, {{0x1}, @device_a, 0x5}]}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @broadcast}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x4, 0x45}}, @ht={0x2d, 0x1a, {0x8, 0x0, 0x3, 0x0, {0x0, 0xc, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x300, 0x0, 0x5}}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1138, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_5GHZ={0x55, 0x1, "b39e6d9636cfc799dfc60bd4cb96d99271060009b5b314bffe94b64f5f219888189abb60c6f8bbc9088aceb7244d24417fadceba0dce8dcfef7155b79bd09bf7a912340d7240e53755234d1b3764964e6a"}, @NL80211_BAND_5GHZ={0xd6, 0x1, "b18a04a74ce91cc7d54387cde3122e6c991f7fd83f00772eab0e83566d19785015fcc76d32dc430c4389078b7b1df48adc6f13775fbcd1563bd0777f3759fad8db22a1eba23499e98769f1eb0fc1a97cecb8de2995e1e1980dbecf7a1e72167d5ac0b0a197301a1f2c165ff34681231942823adfa7e104ab468f3b368cf938c97e2479ad5acb1106479c441fef1b9321f1e8636c4945556fe5ad9d90dceed6aeca15f5c893ac1e15d22bc36eb48603e495cd791c3a2f6ecaacc4b3899320d5167c2f5e470628da357ee9170f2eb3903295a5"}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x1204}, 0x1, 0x0, 0x0, 0x8800}, 0x2404c805) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000004280)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004240)={&(0x7f0000003000)={0x1204, r15, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x40, 0x68}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x7}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x3}}, @NL80211_ATTR_IE={0x8e, 0x2a, [@challenge={0x10, 0x1, 0xca}, @chsw_timing={0x68, 0x4, {0x40, 0x8}}, @preq={0x82, 0x46, {{0x0, 0x1, 0x1}, 0x6, 0x9, 0xfff, @device_a, 0x5, @void, 0x2, 0x7, 0x4, [{{}, @broadcast, 0x9}, {{0x0, 0x0, 0x1}, @device_a, 0xb}, {{0x1}, @broadcast, 0xfffffffe}, {{0x1}, @device_a, 0x5}]}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @broadcast}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x4, 0x45}}, @ht={0x2d, 0x1a, {0x8, 0x0, 0x3, 0x0, {0x0, 0xc, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x300, 0x0, 0x5}}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1138, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_5GHZ={0x55, 0x1, "b39e6d9636cfc799dfc60bd4cb96d99271060009b5b314bffe94b64f5f219888189abb60c6f8bbc9088aceb7244d24417fadceba0dce8dcfef7155b79bd09bf7a912340d7240e53755234d1b3764964e6a"}, @NL80211_BAND_5GHZ={0xd6, 0x1, "b18a04a74ce91cc7d54387cde3122e6c991f7fd83f00772eab0e83566d19785015fcc76d32dc430c4389078b7b1df48adc6f13775fbcd1563bd0777f3759fad8db22a1eba23499e98769f1eb0fc1a97cecb8de2995e1e1980dbecf7a1e72167d5ac0b0a197301a1f2c165ff34681231942823adfa7e104ab468f3b368cf938c97e2479ad5acb1106479c441fef1b9321f1e8636c4945556fe5ad9d90dceed6aeca15f5c893ac1e15d22bc36eb48603e495cd791c3a2f6ecaacc4b3899320d5167c2f5e470628da357ee9170f2eb3903295a5"}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x1204}, 0x1, 0x0, 0x0, 0x8800}, 0x2404c805) 3m30.595144122s ago: executing program 4 (id=3606): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) flock(0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) (async) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f0000000600)="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", 0xfd) (async, rerun: 64) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0x5, 0x4) (async, rerun: 64) io_setup(0x200fffd, &(0x7f0000000040)) 3m30.590693041s ago: executing program 4 (id=3607): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0x40}, 0x4) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8e0000b535277602c8be9a8567828f711330ff2bb17b550800", "dc5db43f", "80031f0000000200"}, 0x38) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r3) (async) socket$igmp6(0xa, 0x3, 0x2) (async) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) (async) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) (async) rmdir(&(0x7f0000000280)='./file0\x00') (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) 3m30.590392621s ago: executing program 4 (id=3608): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @dev={0xfe, 0x80, '\x00', 0xc}}, 0x1c) sendto$inet6(r1, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b00), 0x0, 0x140, 0x0) 3m30.587014432s ago: executing program 4 (id=3609): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 3m30.586286412s ago: executing program 4 (id=3610): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) (async) write$vga_arbiter(r2, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES64=r2, @ANYRES32=r0, @ANYRES8=r2, @ANYRES8, @ANYRES8=r1, @ANYRES64=r3, @ANYRES16=r3, @ANYRES32=r1], 0xc) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) splice(0xffffffffffffffff, &(0x7f0000000000)=0x8000004, 0xffffffffffffffff, 0x0, 0x1, 0x5) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000080)=0x1) (async) ioctl$PPPIOCSMAXCID(r8, 0x4004743c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) listxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 3m6.125239382s ago: executing program 34 (id=3610): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) (async) write$vga_arbiter(r2, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES64=r2, @ANYRES32=r0, @ANYRES8=r2, @ANYRES8, @ANYRES8=r1, @ANYRES64=r3, @ANYRES16=r3, @ANYRES32=r1], 0xc) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) splice(0xffffffffffffffff, &(0x7f0000000000)=0x8000004, 0xffffffffffffffff, 0x0, 0x1, 0x5) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000080)=0x1) (async) ioctl$PPPIOCSMAXCID(r8, 0x4004743c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) listxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1m49.535138094s ago: executing program 6 (id=5056): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e4, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x5c4cb000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r3, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x2e}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x48010) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 1m49.534838825s ago: executing program 6 (id=5057): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c238a68a5914568553d11902bddb7704ddd36e20b406da16e14ccc4921c657e38ab1572e9b790f2cb41405a93463e36ef40beb93db7b5fa5b34181537ac1b5dacd26548f9faf9d7eff10e43a983f6eb1ecf3d698cbeed6efaf41492940fe05fe873e4e19d27bcb3f1c548", 0x6b}, {&(0x7f0000000280)="ed94d4c54afc69e85362b09f81702ab715f9d97f0da9fda91d4d4f83e3ec25eb9a7fca57ec81dbb2fb9892329d70c7e64a2a86bcae6cbb24ee2fe349c1b8dd3e3ecb17f067b256778cb348347d094db5381f21ad8e1bdd90a6b98175b0df0b589adca7a7860753713f438109b1bf1ee9eee2d97d559215189f942c37360590467fe8b298fc80726b05277537fef43dfc0213b70befe9e3cd4e4a7670fc9443bf328203133b55bae032f06d52c63f34a54d2dcec116e6bc9dcf64da20", 0xbc}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x125082, 0x0) preadv2(r2, 0x0, 0x0, 0x9111, 0xa, 0x1) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000002440)=ANY=[@ANYBLOB="0800000000000000010400000000000007000000000000002900000000000000e920000000000000080008000000000000000000000000000400000500"/72]) fallocate(r2, 0x20, 0x10, 0x1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg$unix(r4, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000740)={0x1}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000000400)={0x2020}, 0x1f8c) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff99) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000006140)={0x2020}, 0x2020) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) 1m49.478311785s ago: executing program 6 (id=5058): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @dev={0xfe, 0x80, '\x00', 0xc}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="7e6989d69fef83d0a78d21c222d50ad3422ac81f45e738c4909b2f8d9fe5f772cc807a7531027a8d68cc2fd3e92a67d3", 0x30, 0x40000, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m49.401573787s ago: executing program 6 (id=5059): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000640)={@remote, @dev={0xfe, 0x80, '\x00', 0x10}, @empty, 0x9, 0x40, 0x8000, 0x100, 0x0, 0x110227}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bff000/0x400000)=nil) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x17, 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x5, 0x2, 0x0, 0x6, 0x1, 0x6779}, 0x20) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x99b33000) (async) io_setup(0x4, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f0000000080)='THAWED\x00', 0x7) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000000)={0x8, 'team_slave_1\x00', {'macvlan0\x00'}, 0x133d}) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x7405e000) 1m49.342278177s ago: executing program 6 (id=5061): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) capset(&(0x7f0000000040)={0x20071026, r1}, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x10, 0x7, 0x40003}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 1m49.341967197s ago: executing program 6 (id=5062): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x23) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0x840000000002, 0x3, 0x100) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES8=r1, @ANYRESDEC], 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) splice(0xffffffffffffffff, &(0x7f0000000000)=0x8000004, 0xffffffffffffffff, 0x0, 0x1, 0x5) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x402, 0x0) socket$inet(0x2, 0x80000, 0xb35) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x400c620e, 0xfffffffffffffffe) 1m32.840556128s ago: executing program 35 (id=5062): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x23) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0x840000000002, 0x3, 0x100) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES8=r1, @ANYRESDEC], 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) splice(0xffffffffffffffff, &(0x7f0000000000)=0x8000004, 0xffffffffffffffff, 0x0, 0x1, 0x5) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x402, 0x0) socket$inet(0x2, 0x80000, 0xb35) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x400c620e, 0xfffffffffffffffe) 6.630924049s ago: executing program 5 (id=6493): mount$overlay(0x0, &(0x7f0000002ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000), 0x80, &(0x7f0000000900)={[{@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_off}, {@index_on}, {@redirect_dir_on}], [{@subj_role={'subj_role', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@subj_type={'subj_type', 0x3d, '/-\xc5@.{\x00'}}, {@hash}, {@context={'context', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)={0x48, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000c0c1}, 0x640480c4) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001200)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24008093}, 0x11) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x100000001, 0x2000, 0x3, r5, 0x6}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x0, 0x90}, {0x19, 0x6, 0x0, '\x00', 0x10}, {0xfc}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x7}, {0x77}, {0x0, 0x85, 0xbe}, {0x0, 0xc2}, {0x0, 0x2, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfa, '\x00', 0x42}, {0x0, 0x5, 0x6}, {0x0, 0x50, 0x0, '\x00', 0x1}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e, 0x0, '\x00', 0xd}, {0x2, 0x2, 0x4, '\x00', 0x9}, {}, {0x1, 0xfd, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0xfc, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x83, 0xe, '\x00', 0x3}]}}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) ioctl$RTC_PIE_ON(r8, 0x7005) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)={0x3, 0x0, [{0x40000001, 0x10001, 0x0, 0x9, 0x7, 0x80, 0x8}, {0x80000019, 0x7, 0x0, 0x10, 0x401, 0x9, 0xfff}, {0xc0000000, 0x2, 0x2, 0x9, 0x40000000, 0x3c7e, 0x5}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) 5.741481893s ago: executing program 5 (id=6496): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x10000000000000bf, 0x0, [{0x8d, 0x0, 0xffffffffffffff8f}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2542, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000840)={0x1, 0x0, @pic={0x1, 0xfb, 0xc, 0x3, 0x6, 0x3, 0x4, 0x6, 0xfd, 0x8, 0x4, 0xe4, 0x0, 0x3, 0x7f, 0x3}}) (async) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000840)={0x1, 0x0, @pic={0x1, 0xfb, 0xc, 0x3, 0x6, 0x3, 0x4, 0x6, 0xfd, 0x8, 0x4, 0xe4, 0x0, 0x3, 0x7f, 0x3}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000180)) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=@acquire={0x128, 0x17, 0x1, 0xfbfffffe, 0x0, {{@in=@private=0xa0100ff}, @in=@broadcast, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x84}, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x10, 0x4, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x34, 0x8000000, 0x9}, {0x10, 0x0, 0x0, 0xa}, 0x9, 0x6e6bba, 0x2}, 0x400}}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=@acquire={0x128, 0x17, 0x1, 0xfbfffffe, 0x0, {{@in=@private=0xa0100ff}, @in=@broadcast, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x84}, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x10, 0x4, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x34, 0x8000000, 0x9}, {0x10, 0x0, 0x0, 0xa}, 0x9, 0x6e6bba, 0x2}, 0x400}}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r8, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x3, "a343ed"}, 0xfffffffffffffffd}) 4.693956479s ago: executing program 2 (id=6508): sync() r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000064d564b", @ANYBLOB="6103332529d83c"]) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, 0x0, 0x1, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0xb4b, 0x6, [0x5, 0x8, 0xd, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x5}, 0x0, 0x2, 0x5, 0x0, 0xba, 0x1, 0x0, @usage=0x1, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x66, 0xf, 0x4]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0x2, 0x1ff}, 0x1, 0x800, [0x1ff, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 4.513699961s ago: executing program 2 (id=6513): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x80d804}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0046686, &(0x7f0000000340)={'\x00', 0x2, 0xc55, 0xfffffff7, 0xfffffffffffffffa, 0x5, r3}) io_setup(0x0, &(0x7f0000000240)=0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r5, 0x3, &(0x7f00000004c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x5, r4, &(0x7f0000000280)="d78f3bb31e41dde8d2b65ab66082fc80c2c23e33591645548e81809706f46b89cdab18abedce041ae6c4839ee06a182aceddd3d4917059cde2d957efe079700de45d15b60cdbf456c9d2c31bc30b70344193", 0x52, 0x1, 0x0, 0x2, r4}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x2, r0, &(0x7f00000003c0)="f729e5cf9d74dd4549c22a95a2e38d253389cb60ef5385b6db489756d559f92bd6f514ab90352af7ef689941ba1a8fea3e465b6798bd05360e9f", 0x3a, 0x9, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1, r6, &(0x7f0000000540)="028e8ae3a8e4fdb6295452cf1980af796a985f3f8eaad13df4e78cdb6dfb21013594d74f3a6c092c5ff5bede55bd6c12f195ed36fea2176bb9337ea0a069fb9c9feb863e21cd48beada07524e91d28b0c3d9daa61a7b580653a1bf91b8fac50194edcfd29995846873368a07f209ebf2ded09039ad42b5abda45fce1f129553b4866fdfa15895047524b3ce6232447567ca367c112f724e0c5", 0x99, 0x0, 0x0, 0x3, r4}]) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000f00)={0x0, 0xfb, 0x1015, 0x7, 0x1, "590468f4b5ae2744a4e3d1f26d0baaf1", "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"}, 0x1015, 0x0) 3.543724346s ago: executing program 1 (id=6516): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x10000, @empty}, 0x1c) (async, rerun: 32) listen(r0, 0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 3.520627056s ago: executing program 1 (id=6517): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x7b9, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f00000000c0)={&(0x7f0000000000)="7d5a1214d2e8e6d177f38ae349638f39f8558552a9fbf046e962eea7", 0x1c, &(0x7f0000000080)=""/63, 0x3f}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r1, 0x4d75d000) 3.509046136s ago: executing program 1 (id=6518): clock_gettime(0x9, &(0x7f0000000080)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LIST_IFACE(r0, 0x0, 0x20000000) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40880241}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='Da\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fc50bde1059a446bb67bad546ed0e8dbdf252100000009001f0070687932000000000a0001007770616e34350500000001007770616e340000000a0001007770616e30000000"], 0x44}, 0x1, 0x0, 0x0, 0x48854}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000200)) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x38d080, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816"], 0x65) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r7 = dup(r3) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x200004, &(0x7f0000000180)={[{@default_permissions}, {@uuid_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r8, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000380)={0x2, 0x1, 0x0, 0x0, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) read(r5, &(0x7f0000000080)=""/93, 0xffffff6c) 2.359113034s ago: executing program 2 (id=6529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@delchain={0x24, 0x65, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xc}, {0x7, 0x1}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x1400037e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) read(r1, &(0x7f00000001c0)=""/46, 0x2e) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x3210860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 2.349512574s ago: executing program 5 (id=6530): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a00040000000000008000f4"], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket(0x80000000000000a, 0x2, 0x0) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1.580455406s ago: executing program 5 (id=6533): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@dstopts={{0x12, 0x29, 0x37, {0x2e}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x40}, 0x0) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="737d61299b88cf2c4b9648000000"]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0xfffffde0) 1.552251426s ago: executing program 5 (id=6534): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x18, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0xb, 0xfb, 0x8, 0x6}, {0x9, 0x2, 0x9, 0x8}, {0x3, 0x5, 0x3, 0x7}, {0x401, 0x4, 0x78, 0x48a8a0a9}, {0x3, 0x8, 0x6, 0x9}, {0x7fff, 0x5, 0x2, 0x9fb6}, {0x0, 0x7, 0x9, 0x3}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000140)={r1, 0x245a6e05, 0x35}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000f00)={0x2020}, 0x2020) 1.491129358s ago: executing program 5 (id=6535): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x252300, 0x78) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x101, 0x400, 0xe}, {0x6, 0x24, 0x1a, 0x29e4, 0x12}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0xf4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x90, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xdc, 0x9, 0x3}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000003280)={0x44, 0x0, 0x0, 0x0, &(0x7f0000003140)={0x20, 0x80, 0x1c, {0x9, 0x7832, 0x3ff, 0xf, 0x82a9, 0x0, 0xafc, 0x2, 0x94a7, 0xfffc, 0x501a, 0x4}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000680)={'veth1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x40, 0x2}}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000200)="8d75edb83bc40c082b38b011c01f8a82de525ff35858653e64a15e6679c94d10be94e36840cb5f15bd1337717f13c5fe60a3e2e8f713e2b63938bda9c89d856cc7089810be8501a8c88841e5d32a59a3310fbe526804398d425d4d3fba9d7b16193138fdf4a59984ef5bb6b1a00103676ff0afa10c5e8d72c4e49aad1fbeb3e60da505ae970cf48c28e61324a3592d622019cb94df6d9c0ec4652d8afc967f93436e79e0a6c8f0d3ea7c63ece92434665fd7173aab1ff3d4e39bac0f104b50dfe51e1c725740ce86979aab0f2fd5e4af7a319e96aea3815a78a8d6be349610ea7ff4bffe38c20687cafe", 0xea}, {&(0x7f0000000300)="3894244df16b3c01a56fc7723b8e90ec4f7dd1cd9739881b9c6c11a583f9d56812c7fca277f4f40abaa88290ed5bb15fbeb4ae61afaa68861feeb15b30ec46324414421a1aa9bea9aeb3d6ec38f06c6314e323", 0x53}, {&(0x7f0000000380)="d0ced59a74791bf989ddc7f5d375aee1c42dd67fe0abb90b2f4ff0acea38de452706494f6737e331a81271ce5f6babec2be65cc7e4f802c1ad7f49fe7a6df76e1d886a68efb329e78846cdb600bca0fb305f6a584b14dcf07f56a2697499cc4e9a47f6512260962f4c4b5984bcc1c23b6e95b6b369f329134118ffede27a01ceed72c7b65908e60e0f49d7155d4dc146dee6f80b86164175b8c3135a1843bb2c2d2ce179a258e56c8842e0d2a3023610693e26", 0xb3}, {&(0x7f0000000440)="9b5931da56e588ec73ae984112e59bb226d7173a72a51963cdb4f725fcd22e071e801a223ed7e17f81dc681677f3979f94e85e28a7a65aa7a74704cfd8595807049ea78200778d4e868f7092044a0c30944f1a60b0b41dcdb9f209cff8", 0x5d}, {&(0x7f00000004c0)="ce9f4c2aa2b2824862671c8839deab195bcbcc4ed9738a3d97d29d7f6b88b4099649aa7160818df44f132cf7457185f7307441c144475e1d50e066306a21a22770d3b026cc397e0854b0b9b5611321d456c1c4a9af459a83581fb79f8183947faed5eae9c66f9dedfabf30142f3aa2c4aadab3431c675cd32aa2db4b003a7b3ea2942ecdfcbe2203526fddeadb84346d2a661811f0767a320f500b9bc8f03d078670691f", 0xa4}], 0x5, &(0x7f0000000600)="7b16b7322ff90bfec08843560fbc445f03ae", 0x12, 0x4004041}, 0x8000) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r6, 0x3c, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'netpci0\x00', &(0x7f0000000100)=@ethtool_regs={0x4, 0x8, 0x2b, "eab39c89a985569b92ff1dbd9ce135c2f679fc204dd5c51a83de6573216d38ef1c03fa027747e7a5f84697"}}) 1.490711567s ago: executing program 2 (id=6536): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000006040)={&(0x7f0000005fc0)=""/114, 0x300000, 0x800, 0xc9b, 0x2}, 0x20) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000040)={[0x3ff]}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f0009240202000000000007240100000110090582"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000100)={'filter\x00', 0xb001, 0x4, 0x408, 0x238, 0x130, 0x238, 0x320, 0x320, 0x320, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10001, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8000, 0x101}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd2a, 0x0, {{@in, @in6=@remote, 0x4e20, 0x8000, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x4007, 0x3, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x2, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in6=@mcast2, 0x3505, 0x0, 0x2, 0x7, 0x5, 0x1, 0x80000001}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d5, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3502, 0x2, 0x3, 0x8, 0x3, 0x4, 0xa58}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4d2, 0x33}, 0x2, @in6=@mcast1, 0x3502, 0x4, 0x1, 0x7f, 0x6, 0x0, 0x55}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000600)=[@release={0x40046306, 0x1}, @increfs_done], 0x0, 0x0, 0x0}) 1.27896043s ago: executing program 1 (id=6537): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000e3e95b676a9f62b231110000082abd7000fedbdf25ffffffff000000000000000000000000000004d2020066a4776fc9a524ff0000"], 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000500)={'filter\x00', 0xb001, 0x4, 0x4a0, 0x2d0, 0x0, 0x1e8, 0x3b8, 0x3b8, 0x3b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0xff, 0x2a, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@random="2cf13e95ae84", {[0x0, 0xff]}}, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffc0, 'system_u:object_r:getty_exec_t:s0\x00'}}}, {{@arp={@remote, @empty, 0x0, 0xff, 0x3, 0x4, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfff9, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x4f0) mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x7}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r4) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="fc010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x800}, 0x40) r7 = socket$packet(0x11, 0x3, 0x300) openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x802, 0x0) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 1.121013933s ago: executing program 1 (id=6540): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) chroot(&(0x7f00000001c0)='./file0\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc0000001b0001002cbd7000ffdbdf250a010100000000000000000000000000fe8000000000000000000000000000aa4e2280004e210005020020063c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0b0000000000000008000000000000000000000000000000000000000100000000000000060000000000000070160000000000000a0000000000000007000000000000000600000000000000ff0f0000000000002e0c000000000000ff030000bb6b6e00020101010000000002000000000000000a0010000100"/132], 0xcc}}, 0x40000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 949.412646ms ago: executing program 7 (id=6545): r0 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440260000010109024a000101000001090400001202ef0600030b"], 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000340)={0x50, 0x0, 0x40, {0x7, 0x28, 0x7f, 0x9010, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x10001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6, 0x1000) syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2b, 0x1, 0x300900, 0x0, 0x3, 0x5, 0xded, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/4, 0x4}, 0x7ff}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000040)={0x18, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x810}, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000000)='-+\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1588fd", 0x42, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000028c0)={'tunl0\x00', &(0x7f0000002840)={'sit0\x00', r5, 0x8, 0x80, 0x4, 0x2, {{0x10, 0x4, 0x1, 0x6, 0x40, 0x66, 0x0, 0x4, 0x4, 0x0, @empty, @remote, {[@ssrr={0x89, 0xb, 0xee, [@dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @lsrr={0x83, 0x1f, 0x64, [@loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010102]}]}}}}}) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000001c0)='!{[\x00') r6 = getpid() ptrace$setsig(0x4203, r6, 0xb, &(0x7f00000027c0)={0x36, 0x1, 0xffffffff}) r7 = syz_usb_connect$uac1(0x1, 0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000086b1d01014000010203010902ac0003010640010904000000010100000a240105000702010209240602020105000209040100000102000009040101010102000011240202cf0a02001059723ecaa336908f0b2402010701084012302109050109000403051c072501800805000904020000010200000904020101010200000a2402014002030845be072401070901100b240202010100000168910c240201060101f19a15c5f63b0ca409080004051007250101060700"], &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x3, 0xfe, 0xaf, 0x10, 0x9}, 0x12, &(0x7f0000000180)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xe, 0x8, 0xfffb}]}, 0x5, [{0x52, &(0x7f0000000200)=@string={0x52, 0x3, "8f667b2b974b50445a8206239636745c48cd93dffddfc76b864526134a3f112a550d5ec55f0baace8300c17cf5c91f59e8a2a6e9d61c31a5333e7ad2fb21ea5306d19c2f5a75f0b5ab46e8dca1264b6b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x409}}, {0x7b, &(0x7f00000002c0)=@string={0x7b, 0x3, "3b00b3ec276c94ff9f5cfe438b1b76ffc660c044d9c31b7b8fd7d84b882d74cf985945bed3ab716028c6e4dcc19c490315a7d63e099b6b9870821af962bc3674f716247f0f7c13566d67a09dd2cbb314dd0c397fa65535cf595279f10dac4d61861bc02ccd135ad69f91178d0ba73037e46b972c888dfac830"}}, {0x22, &(0x7f0000000340)=@string={0x22, 0x3, "1ff8c238d1c8df9e67cb02e34868ba7a6401a68b8adab0cdb49c565695ac9d50"}}, {0x6, &(0x7f0000000380)=@string={0x6, 0x3, "9b02d488"}}]}) syz_usb_control_io$uac1(r7, &(0x7f00000005c0)={0x14, &(0x7f0000000440)={0x20, 0x23, 0xdc, {0xdc, 0x21, "d309e788623726eb8c9bc39af6d8e9257968b642bfe7e5ee99b29b1ef35bea3e84c74b2868959b39c71f818adfacbe2da91c916804a3e0862c40cb5c7d6db2406637b6ad707b1c42dda7cefcb8866f94d627a798bed0320dc763543f0ee13417dd1177a430033ed3c6237740fc739a85b4df017013873e4190e4468f69d8e67efb757a0935fe0319397ab53e3de2cbe12a727d736ee3342c37aae1e77e45b6c771e9e5643e413697fd019f8b86624997210a22bb0a939f75d1dc046cf1074c2cbf5f203be08fdf40ad66af22cfe222a2aa8983df63b179d0c718"}}, &(0x7f0000000540)={0x0, 0x3, 0x51, @string={0x51, 0x3, "c3802b93cd36e77e1d4244f42e0e2f60a96396424da6dcff4a3fa64f399e022f135ddaa5f557ebd501e90cc3d89eba1baa99f2c1df44dfb8dc5a10f8404f851be384832fb6a787eae07a51016898ff"}}}, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x0, 0xc, 0x5a, "f203a96070ebab98fe8ff80bc1f6f0a40a1915b941a7e1624df8c1c076c4e4cb65332ce3b8616a06a578863bb952ed779f7f200c89243bd6d6afdbd1c2d488a06d091bcd83285bc8d88c442d717f0bb741b0532bed5097a5d57f"}, &(0x7f0000000680)={0x0, 0xa, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000700)={0x20, 0x81, 0x1, '%'}, &(0x7f0000000740)={0x20, 0x82, 0x1, 'g'}, &(0x7f0000000780)={0x20, 0x83, 0x3, "eadab6"}, &(0x7f00000007c0)={0x20, 0x84, 0x1, "f0"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "5ec1e4"}}) r8 = syz_clone(0x12001000, &(0x7f00000008c0)="4ebb122ca47d421fe7eec8de3d2b341e90ac31e7cb319f029a93fb4e7d74d564652f03b60f345b522961d15b667b06b15c05b2eff23301fe1b0ce554a4ef602bb5e4dab26446bd63d77b152bd8d8dfb6511dc6ccecea300c89916b052cb1354c9b232d7160e9c29f6554", 0x6a, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="0c407baec31eb1e4e706d82e40b5fedca06108a09f") syz_open_procfs(r8, &(0x7f0000000a00)='map_files\x00') 344.011034ms ago: executing program 7 (id=6546): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x100000002) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') ioctl$AUTOFS_IOC_READY(r0, 0xc1086201, 0x20002000) 295.099805ms ago: executing program 7 (id=6547): socket$xdp(0x2c, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) lseek(r3, 0x10001, 0x0) 291.434275ms ago: executing program 7 (id=6548): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x50000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000600)='./file0\x00', 0x1000, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x220) read$FUSE(r1, &(0x7f00000064c0)={0x2020}, 0xfffffffffffffda7) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) read$FUSE(r1, &(0x7f0000002940)={0x2020}, 0x2020) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r4, 0x0, 0x0, 0x0, 0x6) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="28000000000000000000000007000000441714"], 0x28}}], 0x1, 0x40) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/44) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x58b9808bbcfa107b, 0x12, r5, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf5e8d0b131c6a560) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 291.305335ms ago: executing program 7 (id=6549): ioprio_set$pid(0x1, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 288.914316ms ago: executing program 7 (id=6550): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0x5, {{0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}}, {{0xa, 0x4e21, 0x7, @remote, 0x2}}}, 0x108) (async) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x400, 0x20) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x70}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xbd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40991}, 0x800) write$cgroup_subtree(r0, &(0x7f0000000380)={[{0x2d, 'net'}, {0x2d, 'hugetlb'}, {0x2d, 'net_cls'}, {0x2b, 'net'}, {0x2b, 'rlimit'}, {0x2b, 'net_cls'}, {0x2b, 'freezer'}, {0x2b, 'cpuacct'}]}, 0x3f) sendmsg(r0, &(0x7f0000001900)={&(0x7f00000003c0)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="1a3e60b49a888c10dad0d2f44b6851239edc14504ccffc78b381037b992d8f11df86a4e719f8b29c1433c6b62efa8c4d2e0962ffbde062d70a3a7aeeb9356c194b9091b7196a464d3b0b4c60c0156ddc9b46180c7090f3df2a7be87e1e1cc5c61c8d23cde171cd43a5146bb04393ca8388e48d30836e2a38e7d5e34d9da26bd75d992bc144c3c3ad7f3f975b6870da090fac", 0x92}, {&(0x7f0000000500)="457d16ea607aed758f48d9f9e9efa6285cd22c0ecfdc45f44a01b105bf2a9560eb5ad770838596b1512a7bcb0f6a856987f0be364621dfaf0a3ff5bc407457ba46bc282fec52690aed46f830e714e45f85335207b729a5ee7a02db42e86886f58d1d6e60962af0e76428e398e11f3777813c57a4241a0d8216d24a217488076d0b4b509bdd894c62de2b83ed29a090424dc23b3f396a57785f548ea36257a72396ab150f8e0244", 0xa7}, {&(0x7f00000005c0)="289ceac0f81d5295a7758181c5ce2454fd898a2780cf23c5cb6fdb9125093897ed22e1fb5a4f2302a336f75d97b7", 0x2e}, {&(0x7f0000000600)="0033dd8ce7c4f22afcf925f98425ff5e56b38b3aeb27a07cbfd9d0bb16d965c4de2c2d22c07a68da1bdfa056f45e8cf740fca0f1234d751866565e08887f563107f9a13815153d8860a8fed61e87f29c99ed614c6d12ee87d094bd8d24039e9b8838ca097d0cfeed6cb16023421c6ea78898d4503f0a788662f3dc154b00cfd9e24cea6062593781b59982f6fc1f579b1f8075e75aab9431c6280cfaf0281c3437f380225a07099f12f0ed2d609959a57fb723b4d97b05086862434b206d908122dfa702b0963df6ba050b167f48c941892fba84b0f5f80b1d8d9f110b3201961f0e", 0xe2}], 0x4, &(0x7f0000000740)=[{0x100, 0x3a, 0x6, "3ec1095b33a09b42cfdc8e5b5c35c93732472a4c9bb6243972f7c5472b4168a41af7859a60065ec3b054f311722e68b8b3481b4dfeabb63ac88af082f2b1546fe3468c06c7a4e66840616c613b283d59081082162d9f944fd47c244e4572be2bc682aae259e29dcc58416ae80b7a81261ee4bb984bd55db3e25b308fdbfc34b4fa0ecc40ba7d2d030dc9931d267e54189e7b96bd2063e6dde051a494dac9c3d2f312bc3486465092de7740fdd15d5b4915d6d3b58204b44cbebd4b1aa3e743a178eaaa4bc540e633cf9d389f8f15e6f30eddfb95a435f5bbcc4e386765c16836c40787e3e845ade3ab"}, {0x1010, 0xf2, 0x0, "f1abcd55acce7d248e31bab9df495f69c87495ed87dbf08f91ea5619d6cfa3c04b3d8d31af70956007593421390f1929b0d09ab0f4742c37ff97ae457f7b3b7bf0b26951d1377f778d4a99034e5e0a39b4573385ba6396f2e78c96863046a59bb7ad479c0d55dcc2c5dd666a47612e0c61090c5c150aaf2d6ef8349553b92862d7ba88351bd55dcd5a01282014667af409c1c90bd687b944e569d1fac5e1c2640b0928fabde7ef4f69fcfe329a6a4bbd9683e8c13d529972dae2c1eab62c200eaaf6f7a83831f1465712b9a64717aeba434ee8741c0628d1d0184f0840480e53972660bf649ede2fdaa719e91d438b9fda105ba6fe2a81ae426eaf92684c8cf861a097d899763993a9d836cff15e8f077aca27d35d1531c16faf9f4b3b0129066c780ad3e341e1fba610331f5b5ffe5d44fb33863dcdfd3572128b35b8591d32776edc403155df4797782c65b4bb64793df90e9df16d7a4e531ca5f63918953c81dea3cf3bdf9d09e9acd4c2c799eac0923d48a7a36c188d17b8efd998b01ae1547c560b07cb4477b85f7a2747a7290ca864c150d9013d9d2ec663634852c083048bd8f6aa6ad78ec109b7166d830d88e7b5ec82dc5bb34791d4e50aad1b9169a1511b34969a067ccd0a729ce6eae11a1c7737b1256635ff10eb2fe0249b2f4c35da0b09d703e3092375ac29d1041b0165535be706b531bca71aa5ea46798da175adc6deabb376406b8e89537aaced05e30beb5c1880aa0931e178c5e5d8529ee57560cb0853d0fd0fa716050ca338ed0ef35bf31890248cf53792572b8452b40d56c997e0df167abce747a1cf309863c247694089d6d158e30ec50c3c988056240b4fbb6b6f9109800ed5843f98815eb116cb2baa2b6e2ef43fc6aa926a5a36fd206ef81739cd20e64bd929e8b2d9cbb1ef2c4b7f3403440e67a4faa282231abe12b693885879cbe8c8cab2c1528b74db3710925a415cbe1a5890e85d121fc4362e52fad7b91d7825f73e2d6bdb27f273aead303e45c8747401a0c6560f4cb8d5a5ac528783338f00380b44469f90380dfee5e1919148c873f46f710b9368260b8e4d19cef5049bb9a64d3f55913624245e6e0430452550232c783f809aba98fbdab3248e0ac6011bea87bfdc939396eccee97dd13125a1155faf574d1af6cf136fb3c091f7c0fe340f20b09bb7242cc569fcc8c1618d59e96c7aafed5c29f903591f03b7c36a7a3019deb76bcc9ffa214bdeacd19c3001b81f5a1186689feed7bce9ae6c8b27143f275f210a91c89f3131a7abc5156e3f327280918205e451398e2f5ea15f7b9bbd3bcc59b607fc6114cdafa80003a7cde78dbe04ca568f0d527f064c71f74a466aef1b588247d2b2017ed6f666f046353014d1d7dd86bc7c6ecab9b5fc83bd80d4ef29e76e7f1bf51d97f68654c4216256649b5396062395c4e5f5904c681f09d22b0bddf5181c50dbf7102a74813d956f9eb0fb5be6fbd8764092059e37c1f25a95c95f2a61b5d70f328cd98ac409d7ec4bcbac5b0cdfc970f8d7c180b43a4816c289815b681c5c236f56b975c3b46719d9f9662a285899d98c47a87b38a1f9e772bff45cdb610c05efb6388361cc9b5ca8dfc48fbe6a85708217e6ffa19a40a9cf2466b4be55aee133af023f91181c4bd27e8aa55c46d6f5fbc8878bdb8f2b2679134fc21b68a698a3cfb93472b75faa824709f1375d206c63891b17920c28dbbd12fe9d4cb540231eaab177e0263f853099adc2dc7dd0d27076ee2f33102d810a3db989b6516e6b9b1539e900c7cce878eacb69919ada08d32a7fdecd90092b20175ca6227bfecdd5774fd2a9263a61621368f014dd537e2ef2e8e392f9628dadcc1cd683d86f862370d14b67ac36f4fb5b1f6e771a8b7cbc85135cbe540a0ff78f114ceb44edc856da6952c97dae3d86349415c48f28eb708824ae7a5e6d0d67194ef8604d7df8489078eda088c52660b2408f16735de7b91345424a62e886e468bc572355575359ffe8172442b09f59267281aa8d691d94f341f9008f4d2b6b831942ca890b3ff2c38ae918347997a02901abec156c00b7a7867c9eede8788839b3d591327f6c4a0f5ab84893c54736ce98663d3a8cfc0dcd163d9ef46566e451a33f8b7caf017a1c3c039d72439f019cc0bf6e078afc9af9b699659b8407b5d1a1d366f2aea8b87b2b82869a7896ea25e1b3352fcd7dd421e9471cef91297cbb96b0c2c6dfd2542458d92ac72a775e85a9a293ff473940d96d5408e880261de2c99f896d37227342d9d87d21aa6faa4b25186f8109d2bde626d171d24fd9496329ad31146b20fc9bfda6eb10cd0cbe627534f439c3bd8b4d2fafaf93e35aefbfdca144ed838f73929e094c214f335190c3c837edc54f2b1b809d526d597229da82db9e07b0d9734e6904ae67a92625d2ad429b646398879b3ec28b111ceb579585dc0df81a5bb6f02ae7493a4991584cc9714016a20183310ffc52883c946c9d8356bceb1cbfac0f0ca756bb4037e56ff700856172aaca02a71892c899bdb3515fdb28149f2ecc532e2950c446064fbec3d831865f1131d393be8fae7635a9e8c22e687653ec278598c96d5c74c1c32a7d732e9399504942538ce9574835b5180f5ff3026ae34e79c36d1bd5d0f811e94c5b3964750b4cf221a668874ccb8606f148936d4ede4a0db8d0f8ab34b2edb2533e8b85939912e47f8fa04e9d7bd8da39f80d63bfe62e5c98965be688deb60f2d53bcd06a3f1486ef5c5d563047c363ddaf0d24b51c29946d491a01abdfa6bdef466bc7f2216198fce4621b75104074cb0e8f185cab28ff88df4b50377c9d97249c4f6ae0d36ffb33754a31c02df914a4ecc69769fc006c49343e032895bbdf1f2ee42608b1b3ee090c37a3e7acbbffb1c18a91a1646e54ebbf4d0c603ae7b4fd4bf0941557d552d0cd16393dce3f0294540bb0f3a9218b8cdb5154f6ac04424fff69f47360b93ec237bed3c25913676909efdd95146c8545f1ff2df64ad276d77d677eff05dd051228099fdc85cab2bdb24ee80c2d867875a741e01e36f067ba277761eb22ff3454d5bf89d5b16d836216046a57e8be6abda957cac6fc00827ccdf7549c00c09bb0a17edb0ca6c180aeb7c0f3f2dd82ee5e6d7d08c5db92e97b4c3016f773035066de1b6adaf442d06b215ad6e7eebc5e3ee8f430283372b6a8bf4752d6e7f957ae38732eaa273c7a38698ad2fa53660d047f969a6511bebcdcdbd98ce7951780099ca2987551703dbbbd3594ff7cff1df2b774e0ca0c7f68414d26ee292800ad1677d169f7b7cf6c900b440bf0cb47003a190760ca951b0873d56badb177db3187df648ee9634987990ceb86b41f6fc6e619f2fe0aa7c90a67ee6b61885f16149dd8ba99eaa99c3151ff9207accb580b2e63ec4fa62c448e8aee39adfa3d0119360456b816c71eb296229dca4d13a798fdc232344a98dbebf690a99ebaa02a11f7a700a0007c140fe16fcf6237ea798309cc764fd41d8f0ddbe81b36fe3fd0a395c7f4cad34be284310fba7ef44280bc205e8a501cc7a6960ef6a6ed6ff9d33beede3792ab010eabaeb6220739044491ee0a1efb0d61366acef439f4120fda566a62d6c7e128749b6ce9008fa8112984c9249d4d771c0f5f83268527b56115fc0155d3eaf10a814a76d16582995128898c61c709e6954ef409df7524df60c67b75854bc88dc4aac0f53a6cd5aab2e32466c6e28d24a44268b57d33f338680e79d21ebcdaabc6a77accf2800dc6f6b401d4ebe51ad3d15d9a7c4293a75e821d29d9459d2a1ee52ed9e3959f2d571bc98df588594c651a0a6eb20017112b07516acfbb95f48e5eff45f5e56e3fb227267003f6d4f6ebd2f2eb8d49eece6714f08cab126c53d59fd04cc029d1276485b7454bd6a81200c3b39caba971a5a1f477d592e0e760018a4b09ac1361fed62e6490e545a9fd8eac838a78a60abf07f9a0f4336ce52ba1cee1e5218ee82bd294fd39c3e86a9ca37411f0e89cfff802ac618f63e58e7741baec7b80defc6c1672c053e5f685fb1d63c12a09be243c6a93a9d6c1009072302310875d93b27078466dcbfa0c1fb1d94c80869ccec6546ac232edc1085e58df94e1fe26ea1232703885013047ff86e72a2ee8c8f2e0a935c6a3cb78a555dcd1a33eeda5c04e8473a6825842e1a567c039eea2ae4e4350a4324d506c591642afafa1a37a9d86cc319acd3883c2baa09c576867346047f69fc83bc449bd8fbfa0870344ea1f509a99c0201ef09861127f192d5b3bf9d7cb64659eee4aa18fbeda1f764abf4973beb8488c7497c41532f8dd75419a56b11c9f01405b38e5e6aa7aa2bc65fa480842aa817ca9c0aabcba4931dcbcce3dc5e76aa3389300b8b23ee885f843ffa21bf43b836882eeee36ab3fe850fb7227cc6c65e9aeaf321c8831fc2c0f6fe02cc55d41ae2597e1e0fb9ed3668dde7c9688c57f529cd82ed0d300d94ee7ed709c5e6f659347fc115e55d674eff36524ab12c894853486560331f0916874a5ba2e757afb5e4f302d40ae3b72209747cd1ae52ee43921f7dd8da9332c6af9e3dc1b23ee038857b3174fe63ae6f2175721ad91be343f13a056409c656643d23559b46d0dec53ca0faf2ed76391fe2180877ec7af1cb7e9fa638dc37ff8aef210f0da262ee72ef39376a3edf4d8e48d284ad65a9ec60ab35b302cb9a391f7236a2708956443c67243520ddcd17c6c8d49aee81670579a0e28bc2cfe9159197e9ce69f64296c22e88369a8cab3019b22a4ec7148bce8b259fa62d64e37358af2fc0ed426a29ac97a93f5dc1a16dd80b68815eaebcc57e1a35804c60b9d6cb54caf6d65c25a5a7d8b60c0986c7774eb3ecf8a6f95611bc723aae2a0d69790616a74432118283b55d9197cdcfe4f5452927e63de6adf0da5351130beb2de5e82a7f5db808a5d7452051c03fc3f837facf096b2a36f8db0357618bb75a7c5cec8f03e4133e001f6b94044e755c6848f942c9a283a5ea3d4901f43b4040ba807d0ecc641d5033a569f0f2cdc09f583b9e651a15f342bcb60347e60ed8ce59da37a8708c6d0a28b399342371eeacc55faf95f57cb6efe352d7e8abb00e2cd7c5880b07869ff83af3077b8fec11d3f7dab8674b995bd6ac98f0b103324f966a5d278e6e1ee602f00057426f0bf77084715abcc8c53bff0c6a3da25b279db8694b999e5b1d11e2d954ed48b6403c08154cf48721aec324c2dfe92108b1873d655fc6d2e3e72a664d0e4834a1199184b1580e05cdd9c108d7d12e9040c36050efb7b64c272aa283cab8e323c16f12c5c8645ec60248c63460aaf102b33edd7fd19d2679a60321012d521f7328777114b1cb4c22d15ea54fb75872b409747194557ec0439e6c89db5590123c04c8463407ec99e17bae12603e7747896ecba853c21edb3ca2ebc82222e54b8e796afd3c7cc8fbbd1a8b6578fd6cb4d339977bb4f3299cc2fb90c397ceb88f88d3aead7455e7b7a0137f730afa0671a721c8c849d372c9d966593bcec52f7839e86d612ed3f8960a130b749fff60bb9d0571d781b993f3816f494e924338c151e77c055ac030147e3949ae78e842f5cfc48900151da6e4de558b9515bb84fe6157a34e326d8f11e111bafba624c833e7eace7e85081a072dd6ab1c2b228478c7df9e8511bec7b32edd85d96f5938d318b41ddfdcac93b919bcd894ebea0873a70eccc5a4e7104113724d0c8712e9d45a215284da8dc7e1f367136027d37ca6044bd73466899aa7f829dc5327dc2ff"}, {0xa8, 0x29, 0x6, "f33a6c83773a79949ae9f909bccedd497dd12c10d264cad0a30b5799969480fa13dc975885900b911aee3e3fdfc7c66657f36adc507ba83c423ff6804c2e6741420dfa6b063f76464e258207561e7e3ff599be884d8676e38c13bcaf90b9116967015ad439894ef1ee41eacd15939e90e262931e51b217d11e598dd20584b2bf4c941d97bffce85bbd65d07ffd60e2067b1624"}], 0x11b8}, 0x20000810) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000001b00)={0x3, &(0x7f0000001940)=[{@fixed}, {@fixed}, {}]}) r2 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000001b40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x10, 0xd, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x668, 0x2, 0x7, 0xc}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0xe, 0x4}}]}}}]}}]}}, &(0x7f0000001c80)={0xa, &(0x7f0000001b80)={0xa, 0x6, 0x250, 0x4b, 0x9, 0xe, 0xff, 0x6}, 0xf, &(0x7f0000001bc0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0xa9, 0xfff9}]}, 0x2, [{0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x412}}, {0x2, &(0x7f0000001c40)=@string={0x2}}]}) syz_usb_ep_write(r2, 0x7, 0x44, &(0x7f0000001cc0)="ec4e8085eab67d43befed96e04e7410307ab9af7489a370376136e62e5f04c60da1159f108b7497ad5c62291014cb63f8a6e9e4460931a4ed5146b21e3ff4d8173e71c69") r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) r4 = syz_clone(0x40400, &(0x7f0000001d80)="00642d811c9431943f247ef5039b9a45ae9534edc71c9ec855ccde6ebd17eb444fc2bb956b3c807d2a24e830f919272f1e6e1521fe6df95179dcc05816ed5b8d0f44ff129f786cab7a955d33f26e8f", 0x4f, &(0x7f0000001e00), &(0x7f0000001e40), &(0x7f0000001e80)="e7e50fd740f58e161f9ccd40ab659e7261726cc315aa2dfff7e81f76ba7f395c8eec881c5913704bf9de1e72d253657e28898f51a7d61218eaf9711dbf469e96b61616c1ab18d7d6a7e971e42d481b4b06f830fa4f858290b377eb1ab5c1c8f7b1e949fd741fbd2a694859262adaede259c050fd8a51eef9acfcf19422c25809111db35f151380433683551e0c2f26c326389f872b3d403c8d1f87f799dbb6899c3d440c43fc22c7f60e5198a3ed721d8af547512abd828596f47ecc7769f1cadf1f9642c6c36eb83053e423709acb6f4f1e8bf0335b969dc5b2b3f41efba93bdaeefffd85d20f7f88768142a7c5af30f3ead153963482b01d8b0c374a3d055843dd55c586cfa8d9eef886f0cc6a62b690687530a5ad7150986181ccac9d9264733f7d61ff61d14b66b570abd84f9f90dd051f11820795e2320bba42db10cff3632abb5ae7f91ec6705e48c9e0552b056fc3f6c7924df10b0a3d1654e6da7710f4cbd6a5364345281028c0d761d7e3310893c9c8d3d71f918c0d3d630ed6d6659e469d556c96e54fd4353c3e1edce2179a43bd3a1cfd7c2ad553eb37e264cb42a3a4dfe9c77dfa36db796e077d839234cd5a3b1e7a48e364cafebaeb90eb88aa200108b5b410aecfe67105d8be7f213a45b5e6b8d4c70f25f8bbc18267d12ee5be2533f712165be31e3899cf5d14794fc0ea49a062e7f89ed3c0366839ae2b898c82b5759ca82fee36982b7628993d6986c5faeaf61b0ecc57e4fb228a1218f8eb7e2f91cf6e033d2e061f98b7f1ed551f09abbae27d8cf53496ae8ad2076e0ea5fe038c0ad38171a38a22a79d692014f275ca33c79374b324a450b659142113eb7e9a37bc206310a8d87ec1ba854cd982618feb4f64433d11309e7b579b34721d91af23dc4423186faa7f0fb67455feef2e97442c7eafd0484552fb84bc73992eb0056952f4d324144638187ffdb0d23ad49e2e6f4a0eadadc79423c8457a431d1758b03d38734dad2424e4c67dcde26a71ff9207a3095accd805289b17893357f915fccc540a45a84dd9ceb28e95541e5ead5f345253e803a53033aa149d158c05f68d9c84aeefad2459d955acccb67ed3d3df331f2dc6e2b565a3e019641d891d07c0ad64d43e203b076cbd56826816766e63ed650bc8f0e2fa3d93612cc8431f06318df1fc146bb5d95650823862f877529ac18c849efdafc16ce5a3c263f2483a51036f6c63acaa941d21bbcbb27b60af40e42d71fb7229a42b5f4ce9c01900c28e4d20b0aaf282db76caf62b11773ca2312a7226552329ed5b208668b829aa887f3e4b451f2f910f3251b0c2e25d247797b64400dd612a9b1ef2f70da59d1079d572b5731fd56e9ff5fbab7683d7e7df2b885dc9ff5aea8733ba9ce36b2908c76b29edf2dd8f081623047d2e2376153431f9487fe0989484bc337dd038f9fd4875dc2e882f6271adaeb63d486a70c82371d67fe879ed6710e9c5de56edb7878988efe1ef1437e88d23230153a9d36fd5dc87bc89ccfae1be6f3deb3b408e496d81794949290189b158510db0edb28dbf68188590d0d5a21d12047c0cc4e4adecef42f17abb362926e906230d4829ec33306c113cc447a7cd1f2f3ab3b630abf27faee76ba00291c25b1c4ca209c9c5bba50cd916e440a10cae7e3804d1107bc9ac05abe4cae046d18ac4409b5b2ef3de4f13b2fe69c48047684772c3ae61f75b34b81a55a8b5e0ec55a33fd090062cfcc93ab6f2854f74e9f6912f1e9414860abc6fac7538aadafa3ea8109ad29ac14cf3e9d9bd3b23e2049ae077175cd47b7f8725cc6c9326d1ac04b9e3500a0c982cb7bfebdc36f7f69475f331816681c87861a949cd959d124bd66792c0c15eb61a912bf93bbbec3c10283aad35aba3e86ba2309202321ad3b070fdd23f599f3ba9a2d3cd324ccf32bc5c6cef223cf2a81a5cedc6753df52f7c73bed1328b98b78c1f0e70b75d709bcc06036a41966531ace09540505d004f138a75b2a2c92c9e0edfe5b9b05b82fccf55bd4914e529d0f6489709ee829a19f75c31b79afc4863158b398a49e179a1b2b72e86a48da46944e1bf8015aa14599d682312243f0e103840622916c7d25a0b4ba28dffea90c9bb49e9ea60e5072bebb4ecbd4095d1b6b8342e9602996297361ac510c8c37d22408a3e2ff9edcc3214554aa35a74814b1335cb25aacebec2ef9ffbc788ed1b866d9f6c330bb1a496ec90216ab4584d61f401be72492880254506724afee9c92521447f1dd7cbc4026015a668d1abc1d71a65ebb0739bc69f90e3eece0b3957e7b085d05bfc94bd7ce07399b55993051519f1dcd64063a40518415115bee91222407c01fd84ee45fdbff008561414053b0d349d1f0d4a3ebebe5176b1f230139a2088282ee3b1e5335420626d36c772e8390ece27d9c325b82cfcd93d7b7eaa3552587cb346800aa08bb9db3bcfcd7ad79ab1f3fc445c52e279cda2d6c854ea0090e627cdca185994b628984496c9af4b6ec72300cfa08613da6aedf18e51119a63bee01260e2df3422fa5b606bf6b75b71533d3d98bd6d139a5cc80e51bb6cdd80cb5021ce60aeaa1793decc578f1a174fa8555fb85a268d8c7ebf3fffc9df581d63ad33abf3027a63ee160d1d98aa16190b1d3c58faadc99d418dbdc5a527405e40315744996c73a349c63ed818d1839e7071ad92f38b52f2d4a41b1bda5b7d77c23aa96cdd76f0dc80d312d71da02db46b753cb9712b5626f99d3d02b8fd71dd3ec7a052271eee2fbc23b60b926cbc3cf3555b7ab3e4a290c10f85aa286f8d4426d54365cef2a12bebcd0bc91436365561c93311b61cd7a68f241cd135ff27b82ff1445944ac666def8045a0f5f3f8e075a0d8294c1428ea7371ad2abf9aa59405d1118269ba7d700b2187eed7b527269c4929f4da8392ec508100ee105ffc3d31d352e8ad160b7bbe6eec4d60cca41de2f566e9a0babaf6ba20deb7e858d6613993b544c0861242793b00d5d080988c4cfaafcd0e8b389529fedfd19abaeba1583b162a252cc21fe8e5e73246f13a762a66dc26025b5c129f104f2cf39e3f230ba37c5e368978e2133f5974693c4f7e353584d1ec02bbf64fcbd1fba143c27133894c087e738b6bcc626fe9c38f18d6c8ee3a3b19c6aed21d8a2fef62791c420d4f52ef3830c5152a766918af3e897e21fc15a70ad40be37c008cf5db3676b3565f4d2256b4dbc8aee63931d7700c5c554ffe8f98036bb7e3a07276b48f138109a384890e8069494ce0a8749ca8d3b4622daad5a721e77949499d06980c087fa2508faaff7a0f4bc78c51ce69e7f9ad312d18af3b8f8fd81e95374138615c8b45b0bf7e423570e28fffb7a86634c69e84396256cad3607c2f6ac952e66be3566c5f5a91ac43ad33f18a6ad589f62c3fde95d4d49738c71ee7f636a29e247106c64b343cd5ad73eff16c68df470bede7796a5cd785c416f6a2533e2253c159b32b68e177d36766a90d5de86aa6b75cce8f70e247b54810ccf88927141004ee58082033d4a88d6af8995c6347c1e6188cb4bae1457b8b2399ba459244742db64cb9ca68f31dfab08bb78ed7a99509ebe2289318bf4dacdad566ece8f12f484e4a24f6a226ae873327db99ab05e271cc06d6641e386eb0102a59d28bd1e42aedf98aa69279c7494dd2475512b13dcf626948d66145c6d7219e70e45d86cd909f299e75865d5ba1fc7e5863352c343141d12c1dd90c936a1fe3543c2977420cc8cc6f96bccc1148446c9eb659a0070e91809f965335153f2ffeb5f1797a3585345d13307e81eaa2b4858dd444976e424154fb2c34d5f68fa32e0fcf2350371d6c267a2eaf1c5d97068f31a2280fa2eb4ea6addb36ef030cfc8fa8ec2e83249259b409a59a07747768f8b2e0bb6e054a7a18bfe447353004a00908e88857e500092330301917cff36e36d914b9fc80c4aceb813d9b55f5d9f10057898a79ec587a1e6c759b9732d918a637d5d5ac81471f17395e31bced5d5951b20a890e7efeb3d9562854576933c63aa1c2ea3b106ea80ef6a04d9c4dd32dcad3d34aeee8b482b9c896f8b8faa29fcf84a91534f6d9edf5799d051f60c659e01fcbd9eabc48b24a75b1a7e78cfcb36cc4fcb1c62015c02af91a6b64eef8c28eb63bbdf1ad0f8e34d12e4053af248af68a06c0e2612f32658b2be0b9117a7bd21bc4157cf8cbce8704bbaa760b6672332dc6778984febcf060dd8579f0be1435fafbf40f7a8642bb05086ce232b040ee1a12c1b77a51d1374add7a31403b964fefe8835a9277514063f3201ce3a4f3917671c7cf62d2e8828e8c089fdbe5ea108918370dbdda77d85462b56fbc5b83fe5d3ff331304926098f4ebc51e043a611305fe9e5b06fa027376c33d9495755f2ad15514af4968b6794376ecfe28ccd808033065f68c6ba62d95f936a96fe5fe459ab7ce0f7d397ab4ce1554665d47706bc6d9a447d452411eb1cc3b4a694ee3479cbd0bb5b884f89af94e916989d270c3e4fcd96f00e0f4bd08b9332ae3bcb09e3c8ecfbc10f78d60a3274072ad0c3fadae78c8d730158d1db12883c5b0df9d43551f14aad3a9cfaa5ddc73ee12a49c66f573eba964ccb2b861ca997c2342bb2ec539cfb1d0c07e251593d812162aff5df938df73daeafe468c85f65d4f4c123243380f29dd4cb4c6d98c917ac87d2036199c1ffedcef963b13da96536e2751cb2b227d9f90c8025b38a52b87cb9eb2bea8bc317c389fe30af295630c9483c58f1ecceef302a885f0c7fa263dee9615edb356c364bfebabb98ad4f3ec350c3a695392f872315b13c9f74b5884387feb66de324693872f20320e779881f7d7bafdb91191c8c9d5c5e6f1cd8b011ffe5a03e03d94fba0f62a5b203eb52495fd7c8cf288bdd04991c06eb1e28e105db069edc2eb7d5af43c8416d02eb6ea9caa048a4f01c836760f6d26ee131e902b4ee199f0f3bad93608512ab4cc5543a95970dc3211d5ecf5777c445f180989084c3e1eda945490aab40d81091aceca6ac5939fc9f75ef266f143a10488270e04fc6dce83ab079bd6b5ccf08170ed57d1eba00cad92345fea9bf594037b799244a177017a6c1a2603bc7852d1f6d8569bca7053eac433d6995c1480e2a5b966c5f972b4174466067816beb532d9b8507d17bd7cfa205cf0933814847a04c2b24ad604dbecc47ed619aed059f54e471e4c6865bf6611555b25f7c8152dd3959ccc58fac0fc577ca8b2cc494caa3f6220867f192b5904dcee64577f6dc20d2cdde16df58fcd688f3a4befbf6657e89bee065bf5f49590eafa846ee1522c349504321d05cb53f359ac88c71e1ee3295d77df0e868e570ca9736e2e934a694635ef162a2d55d90b70e6cdea24850d9242fd45b8da7aadaa5065983824a0a8599d6bd6aa73421882de9f07f40f04d9984dd7eda23fc2ed9855db3596501add055f0ffc7e42a570893b992c9d54676eace79ce50fd03c4b3a2dfae671d18df6ba18fe718b28798cba380ec187a29116d8f2f8a2e83bc5fc167e33532ced8831c44470ddad4dd7091a2f29d03973385f006830d9aca13ffe6a640fae2c0a08ff10c602bcff270e7b979d8dfb18f2caba80e02a1081e8098ddb5a7f4138cd1136d07d40c69c6ccc822c799cda0000fa42b5f961ea1bd75922c5dab0855fa9b6b1a07cc46de1b2d436dc347219b4a0ffd9b4c68cebfd1abeecf5bc13725eae1fec7e3a6d76291276bbec085a698889b3891e7acbdc92a71fee86ebba789e48d6678bb2a0adaf96ad562af544a") ptrace$cont(0x7, r4, 0xc1f, 0x7) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002f00)=[@text64={0x40, &(0x7f0000002e80)="420f07660f74f50f216d66b87a000f00d066410f3881be00000100440f20c03503000000440f22c00f01d1b9bb0a00000f32c4c10dd5776e8f0ad012428807000000", 0x42}], 0x1, 0x20, &(0x7f0000002f40), 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000003080)=@buf={0xf5, &(0x7f0000002f80)="df3d1c2960ffdffeaff30fa68741956fcef1d0cc4fe948b0f15783437fee7c41d91abf46f65a99ef4f8ceb93cc3a118f58c376a69d1c9cec36f4182e5e6be0716599e6eefcb9b584f5e9eb0ec8f547b7b98da6ca1d8f65bc0b5fc6c39d21274786dc127aa37f4a0cef379b8fca3943c4e411589b3937e7b39747376571ba688b59d8d521bac840e1675600787ad4d833d600bcfaa76d12a6b1d116f2276c33380383d341b252def45d2657b98b38dcc4521056310e3a4ab4446215b3e374733655f7ab4931f29f24f7715c49a24d39447b6dee7eb592b0a74682f1884af131a7494c696a71a3d3c239b6587bcb28ce955ca1376e99"}) (async) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000030c0)={[0x7f, 0x4, 0x5, 0xffff, 0x2, 0x6, 0x0, 0x0, 0xc, 0x6, 0xc845, 0x1, 0x8001, 0xf, 0x0, 0x7], 0x1, 0x389805}) (async) mmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x20010, r5, 0x63c34000) r6 = syz_usb_connect$uac1(0x0, 0xf4, &(0x7f0000003180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x40, 0x50, 0x88, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x5}, [@processing_unit={0x8, 0x24, 0x7, 0x2, 0x4, 0x2, '\''}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x5, 0x0, "dccb4697b3ea"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0xc, "df"}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x3, 0x8, "2916ee"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x2, 0x23, 0x7f, "5a4ec2", "21d4"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x5, 0x1002}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xb, 0x2, 0x3, 0x6, "fd538d6d6477dbc30f"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0x5, 0x1, "d1cc090d"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x3, 0x5}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x0, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x6, 0x4, {0x7, 0x25, 0x1, 0xf1aee7e062a52b69, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x48, 0x1, 0x7, 0x6, "c6d780", 'Q'}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xec, 0x2, 0x1, 0xe, "ed973410449f5768ed"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0xcb, 0xd7, {0x7, 0x25, 0x1, 0x1, 0x5, 0x6}}}}}}}]}}, &(0x7f0000003400)={0xa, &(0x7f0000003280)={0xa, 0x6, 0x300, 0x14, 0xf, 0x6d, 0x8, 0xae}, 0x3a, &(0x7f00000032c0)={0x5, 0xf, 0x3a, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "a04e949b4cbdf28e45603aa682057e72"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x8, 0x8, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "05f18b16bbd84b80e2f2f219791c527f"}]}, 0x4, [{0x3e, &(0x7f0000003300)=@string={0x3e, 0x3, "22de22af0dc6d560660bc4c2f3e8a8421f83c02adde65fb21f9ed72391d606a10e9a13179821e3863ba20a011fdcad8d8b4ade11163a9ffaf085c3e7"}}, {0x3d, &(0x7f0000003340)=@string={0x3d, 0x3, "553d1450802e30c022cf053431c9efd044633138ea392450383ac3dbad04f7c1b5f570af9c0c3eb3130ddcbcc19060fb3c71ea8e77274146a169ea"}}, {0x4, &(0x7f0000003380)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f00000033c0)=@lang_id={0x4, 0x3, 0x409}}]}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) syz_usb_ep_read(r6, 0x2e, 0x49, &(0x7f0000003480)=""/73) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000003500)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3b1}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4c, 0xd, 0x2}, {0x6, 0x24, 0x1a, 0x8b, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x80, 0x97}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xfa, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x1, 0x1}}}}}}}]}}, &(0x7f0000003b80)={0xa, &(0x7f0000003580)={0xa, 0x6, 0x201, 0x1, 0x6, 0x5, 0x40, 0x5}, 0x27, &(0x7f00000035c0)={0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "043dac689296a08e10ccb24f4c70c880"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x94, 0x29, 0xfd, 0x6, 0x39}]}, 0x9, [{0xc0, &(0x7f0000003600)=@string={0xc0, 0x3, "c6c2e61332cf3df1ce7c666320907ddc0cfb13d0c064189d72b48309e873c12d249f77963ec66220f6e87a695bbd42ae2ed5ed86dc68844670846b085ec18209fe9d56174b42fd20ef602c6574bcc1ae99c4bea077f55af4408b82763f34b46f0ecce346e4eca8f0024ced58b45464daad792a0a5900cdea88f0192c935966eb6f1a8edd51060ac43367fceda97543f6e404ca66a210d50237359d8249bb6665bb3c49247a0e5121520ba401dd72323d220bb4f17bc42f7384afe932df5a"}}, {0x97, &(0x7f00000036c0)=@string={0x97, 0x3, "1124a431449d7c3eb5fb6e9d295fdc603e3e9837af2924e44a7130f70423f0acb0879fe37d7ec79c274087f6faa3e7f799be2999371cec154f231c0c67e6b216895b603082fc6521f0973a974f8f0186c2c037c7fea7c3ec15ff2cce31f019d7d09251c513dae39e128110b507ce8d89118cda957410d2ffd5d62d0201c435e1b30eab8038c3bb8d623e80c1e644fe7d707ec8aea3"}}, {0xb1, &(0x7f0000003780)=@string={0xb1, 0x3, "40841d6a02978d50041e0eafb37180c7d478c73feb15e943727b739bdba2ac740066dbb9825e0ce64f4cf626e0fe8cf528f703a4a2661dbe765085698caed9a951c1e935c093f38eeee1ce5585f77b2946b4ae5c1fd8a4b41d257a8b7e1fabd11dd4ee749e1f5384bfca1a0e3e94a86de0215c491db91a8ce2c17236f04debc84d46687872179b5f2470a5c7d1ecbc044f042d5cbb53ff295d710c2f8e8a963e2c29450b56ad23420fce267141059a"}}, {0x4, &(0x7f0000003840)=@lang_id={0x4, 0x3, 0x409}}, {0x75, &(0x7f0000003880)=@string={0x75, 0x3, "ec96d47930dba0fb9c8c3c69185861c5d8cb59133986c8adb4dc81c3c9268385ae9eeae9850d8a2ed9189fec05d8c4a145751075edb17cf0e512195f77f3bf6382287b688ed53dd888a82b12b040bbb97c1f1fdeb3b62d1d90197dd257f269a290c232bc5af388019d66b68253afa693725b16"}}, {0x4, &(0x7f0000003900)=@lang_id={0x4, 0x3, 0x444}}, {0x94, &(0x7f0000003940)=@string={0x94, 0x3, "6a95bd7a92e95d4d7831f6a0fabab260bb9740e595f222966aff5badf3600be8e9e2225ad8fc37afdeb6c37b4065bc915d0e27c778d6d30036f881679ea9795452a9530a276b2702d4cb9077d7fa0a2197a6f4d932def6600b442a6c43d8b9ab3526a7db655335786ab5bf6aa5dfce0d7a7ec417d48f6809716a4b50bf4728e8728253d55b73e5f4e9dfa0c7da1612b7a9c5"}}, {0x8b, &(0x7f0000003a00)=@string={0x8b, 0x3, "9f79ca5b78ed7aa8b19010eefcafa384697dccd0a488314b68090004753a112a0c0485d1c01038aa2e71fbbd318a609809bee3d69729a2bbd8244160e74a6bffc96c8d67892eedd2e707b9613f0c35dedf855e0eaaf04e65a9b87d7c7461453e6aa890d02bf0c80e2e451ba4455beb1b2b6db873cb925a18e6f5a3597807f428de0f5e76f41e6b387b"}}, {0x8d, &(0x7f0000003ac0)=@string={0x8d, 0x3, "bba1631b88695d4581b10f06f891d5cc58c40b28a5f5ae9129a92f0dd0aa036a254bd46712b204c6ab8fc8a148d03309b36150fad77033def5b981711c0f80870c874822f57aeaff3667a78d047c2dd2e07c7b2d1912df424a94eb32f50a42377f6185dd5fdee97013cce8b28c90916904e1c5154628bd80f5a3f4791bfc08b7c053c2e5e142cd8f88dacc"}}]}) openat$urandom(0xffffffffffffff9c, &(0x7f0000003c40), 0x109241, 0x0) (async) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000003c80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x81, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x7, 0x2}}}}}]}}]}}, &(0x7f0000003d80)={0xa, &(0x7f0000003cc0)={0xa, 0x6, 0x201, 0x5, 0xa9, 0x7, 0x8, 0x9}, 0x19, &(0x7f0000003d00)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "1ab197bac492264c4c0dc60bac30e4d9"}]}, 0x1, [{0x4, &(0x7f0000003d40)=@lang_id={0x4, 0x3, 0x412}}]}) r7 = syz_usb_connect$cdc_ecm(0x2, 0x5f, &(0x7f0000003dc0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x8, 0x24, 0x6, 0x0, 0x0, "dbf1fa"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0xf1, 0x2, 0x5}, [@ncm={0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x31, 0x3, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xf, 0xc9, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x8, 0x3}}}}}]}}]}}, &(0x7f0000004040)={0xa, &(0x7f0000003e40)={0xa, 0x6, 0x300, 0x6, 0xf, 0x3, 0x40, 0xc2}, 0x49, &(0x7f0000003e80)={0x5, 0xf, 0x49, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3, 0xd, 0x7fff}, @generic={0x1d, 0x10, 0x9, "b2ad96ca8ca4790af82e8f56923595462c982e0b1c09d091f5dd"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x10, 0x81, 0x9b, 0x0, 0x66}, @wireless={0xb, 0x10, 0x1, 0x8, 0x5c, 0xfc, 0x7, 0x0, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0xc, 0xfd18}]}, 0x2, [{0xe8, &(0x7f0000003f00)=@string={0xe8, 0x3, "b7209f6b0a643c7ecf78cde3d6cd53e22e7def3f8df3948d6ddefe73326e1298ffa2adee1090f8671a0c1c5cc4a006ab1ce59ce9d84b1b61fc931ac5db27c8df2aa0de92b0ed217b22a93c8cf33f613a33a19ece702f48243583f2dec1918881243f0ec1147dd50d639132511dd260209733691ec44caa7e7493b39569035b992a77864d09f11512e2a8fb1d80d049fab14f8482f45f02fe308d698bb86021acfaa84099ec64801941ee54d808a6d3e38f6a1d980c846317ccbd04de1752f93b237e0bd3cf0b553df369ee65a58f386662e46c89708e491b10682ac457066c3864f1046cc62d"}}, {0x24, &(0x7f0000004000)=@string={0x24, 0x3, "5a506126de623ec2f6ee4559db5f797172c421edadeacb01c1ee5257f5f1ad2287b4"}}]}) syz_usb_ep_read(r7, 0x21, 0x5b, &(0x7f0000004080)=""/91) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000004100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) fchdir(r8) 191.105787ms ago: executing program 1 (id=6551): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x100) linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x1000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0xaf01, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYRES16=r4]) syz_usb_connect(0x2, 0x24, &(0x7f0000001300)={{0x12, 0x1, 0x300, 0xc4, 0xb1, 0xc2, 0x20, 0x1a0a, 0x104, 0x5a51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x20, 0x8, [{{0x9, 0x4, 0x79, 0xa, 0x0, 0xc4, 0x7a, 0xb2, 0x2}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x820}}, {0x6e, &(0x7f0000000dc0)=@string={0x6e, 0x3, "2c00caa3675afdc5914b60d7f49c29c2a7e733e132a584d0a918ac8f58c8afa6edba0f33d499c8c9f826d54a830fe3d975fcb6850774c413ec805b339d138279982b127d226801d0704a7bfca54bf298c00998cf688059d58fc93917255b3df8913a070d02300980cf6868de"}}]}) mmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 184.298487ms ago: executing program 2 (id=6552): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x3, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0x0, 0x10, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0xb, 0x0, 0xf1, 0x0, 0x8000000000000, 0x200000000000005, 0x1, 0x9, 0x85, 0x0, 0xc5dc, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843209100fe800c00080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmmsg$sock(r4, 0x0, 0x0, 0x824) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000400000020001000000000000000a16ff00000005000500000000000a"], 0x70}}, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) move_mount(r4, &(0x7f00000001c0)='./file0/file0\x00', r7, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0) 0s ago: executing program 2 (id=6553): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f6906ba8f1fb30474f410c62dad341c643d", @ANYRESDEC=0x0, @ANYBLOB=',fsmagic=0x00000000000000ff,obj_user=^!!$%*(,uid<', @ANYRESDEC=r3, @ANYBLOB=',mask=MAY_EXEC,smackfstransmute=(*!,smackfshat=fd,uid>', @ANYRESDEC=r3, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',\x00']) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async) sendmmsg$inet6(r6, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="901240c26659aa57acb9e3d346635b8eef5a402800000c00000000000044a8b4e34a7a03174053bbbdfbfe1a67b393a01c767dd5c1c1a3dfb3938e3fb03f8c9f0fe8233600", 0x45}], 0x1}}], 0x1, 0xc8040) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000180)={0x3, 0xae}) (async) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) (async) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000000000000d0000000700000029000000000040003600000001000000030000000000000000000000000000000800008009000000060000000f39"]) (async) r12 = accept4$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10, 0x80800) writev(r12, &(0x7f0000000180), 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0x6) (async) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r13, 0x8004e500, &(0x7f0000000080)=r0) (async) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r14, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): t_binder: BINDER_SET_CONTEXT_MGR already set [ 411.141791][T15318] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 411.155475][T15318] rust_binder: Write failure EINVAL in pid:415 [ 411.233817][ T804] usb 3-1: Using ep0 maxpacket: 16 [ 411.248613][ T804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 411.255588][ T804] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 411.264839][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.275805][ T804] usb 3-1: config 0 descriptor?? [ 411.447428][ T64] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 411.586447][ T64] usb 2-1: device descriptor read/64, error -71 [ 411.623654][ T8326] tipc: Subscription rejected, illegal request [ 411.720705][ T804] hid (null): unknown global tag 0xc [ 411.726121][ T804] hid (null): invalid report_size 53633 [ 411.731770][ T804] hid (null): bogus close delimiter [ 411.737218][ T804] hid (null): unknown global tag 0xe [ 411.742693][ T804] hid (null): unknown global tag 0xc [ 411.748209][ T804] hid (null): global environment stack underflow [ 411.754624][ T804] hid (null): unknown global tag 0xe [ 411.760195][ T804] hid (null): report_id 4160080533 is invalid [ 411.766597][ T804] hid (null): report_id 29837 is invalid [ 411.772580][ T804] hid (null): invalid report_size 57783 [ 411.780282][ T804] hid (null): usage index exceeded [ 411.843095][ T64] usb 2-1: device descriptor read/64, error -71 [ 411.925955][ T804] usb 3-1: USB disconnect, device number 101 [ 412.099630][ T64] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 412.208383][T15379] overlayfs: failed to clone upperpath [ 412.238595][ T64] usb 2-1: device descriptor read/64, error -71 [ 412.474452][T15384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 412.474477][T15384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:273 [ 412.495109][ T64] usb 2-1: device descriptor read/64, error -71 [ 412.623501][ T64] usb usb2-port1: attempt power cycle [ 412.771246][T15401] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 412.773107][ T31] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 412.782974][T15401] overlayfs: missing 'lowerdir' [ 413.335036][T15413] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4918'. [ 413.361062][ T64] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 413.378981][T15421] fuse: Bad value for 'fd' [ 413.383560][ T64] usb 2-1: device descriptor read/8, error -71 [ 413.389829][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.400986][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.410844][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 413.424073][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 413.433452][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.443401][ T31] usb 3-1: config 0 descriptor?? [ 413.462443][T15432] overlayfs: failed to clone lowerpath [ 413.533134][ T64] usb 2-1: device descriptor read/8, error -71 [ 413.788689][ T64] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 413.811152][ T64] usb 2-1: device descriptor read/8, error -71 [ 413.880440][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 413.886558][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 413.895434][ T31] usb 3-1: USB disconnect, device number 102 [ 413.950145][ T64] usb 2-1: device descriptor read/8, error -71 [ 414.071717][ T64] usb usb2-port1: unable to enumerate USB device [ 414.095283][T15460] overlayfs: failed to clone upperpath [ 414.139757][T15469] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4936'. [ 414.428626][T15479] Invalid ELF header len 16 [ 414.475540][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 414.475560][ T36] audit: type=1326 audit(1750737415.024:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15485 comm="syz.1.4941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35d478e929 code=0x0 [ 414.586804][T15494] tmpfs: Unknown parameter 'sʰېe' [ 414.900498][ T9] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 415.071574][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 415.077949][ T9] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 415.086106][ T9] usb 3-1: config 0 has no interface number 0 [ 415.092275][ T9] usb 3-1: config 0 interface 49 has no altsetting 0 [ 415.100437][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=500b, bcdDevice= 5.19 [ 415.109519][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.117545][ T9] usb 3-1: Product: syz [ 415.121732][ T9] usb 3-1: Manufacturer: syz [ 415.126358][ T9] usb 3-1: SerialNumber: syz [ 415.131602][ T9] usb 3-1: config 0 descriptor?? [ 415.139538][ T9] snd-usb-audio 3-1:0.49: probe with driver snd-usb-audio failed with error -2 [ 415.155543][T12621] udevd[12621]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.49/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 415.352032][ T64] usb 3-1: USB disconnect, device number 103 [ 415.559316][T15534] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 415.819982][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 415.984860][ T36] audit: type=1326 audit(1750737416.437:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15580 comm="syz.5.4974" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9cd18e929 code=0x0 [ 416.008288][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 416.015309][ T9] usb 2-1: config 1 interface 0 altsetting 19 endpoint 0x81 has an invalid bInterval 107, changing to 10 [ 416.031973][ T9] usb 2-1: config 1 interface 0 altsetting 19 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 416.045805][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 416.055118][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.064505][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.068963][T15591] fuse: Unknown parameter '00000000000000000000007' [ 416.080675][ T9] usb 2-1: Product: syz [ 416.084954][ T9] usb 2-1: Manufacturer: syz [ 416.090325][ T9] usb 2-1: SerialNumber: syz [ 416.096179][T15534] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 416.491652][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 416.501339][ T9] usb 2-1: USB disconnect, device number 75 [ 417.139108][T15638] netlink: 'syz.5.4994': attribute type 4 has an invalid length. [ 417.270215][T15669] rust_binder: Write failure EFAULT in pid:456 [ 417.295187][ T64] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 417.319958][T15678] netlink: 'syz.5.5007': attribute type 6 has an invalid length. [ 417.327930][T15677] netlink: 'syz.5.5007': attribute type 6 has an invalid length. [ 417.456103][ T64] usb 3-1: device descriptor read/64, error -71 [ 417.541135][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 417.702461][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 417.716349][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 417.722847][ T64] usb 3-1: device descriptor read/64, error -71 [ 417.725669][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 417.739734][ T9] usb 2-1: SerialNumber: syz [ 417.979439][ T64] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 418.118421][ T64] usb 3-1: device descriptor read/64, error -71 [ 418.307821][T15691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5012'. [ 418.357574][T15698] netlink: 'syz.6.5015': attribute type 4 has an invalid length. [ 418.365391][T15698] netlink: 'syz.6.5015': attribute type 6 has an invalid length. [ 418.373149][T15698] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.5015'. [ 418.385690][ T64] usb 3-1: device descriptor read/64, error -71 [ 418.398241][ T9] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 418.507254][ T64] usb usb3-port1: attempt power cycle [ 418.671738][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5026'. [ 418.877444][ T64] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 418.899884][ T64] usb 3-1: device descriptor read/8, error -71 [ 419.038872][ T64] usb 3-1: device descriptor read/8, error -71 [ 419.047354][T15673] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer. [ 419.066930][ T311] usb 2-1: USB disconnect, device number 76 [ 419.073441][ T311] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 419.301839][ T64] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 419.327542][ T64] usb 3-1: device descriptor read/8, error -71 [ 419.466628][ T64] usb 3-1: device descriptor read/8, error -71 [ 419.584204][ T64] usb usb3-port1: unable to enumerate USB device [ 419.623615][T15811] overlayfs: failed to clone upperpath [ 419.740747][T15818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15818 comm=syz.1.5040 [ 419.814276][T15825] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 419.814307][T15825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:463 [ 420.371983][ T36] audit: type=1400 audit(2000000001.814:1466): avc: denied { map } for pid=15843 comm="syz.2.5050" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 420.665487][ T64] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=64 comm=kworker/1:2 [ 420.678664][ T64] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=104 sclass=netlink_xfrm_socket pid=64 comm=kworker/1:2 [ 420.691370][ T311] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 420.837762][ T311] usb 3-1: device descriptor read/64, error -71 [ 420.857656][T15879] overlayfs: failed to resolve './file0': -2 [ 420.898005][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 421.028756][T15883] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.035847][T15883] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.043236][T15883] bridge_slave_0: entered allmulticast mode [ 421.049831][T15883] bridge_slave_0: entered promiscuous mode [ 421.058006][T15883] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.065152][T15883] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.072290][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 421.072677][T15883] bridge_slave_1: entered allmulticast mode [ 421.078668][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 421.084013][T15883] bridge_slave_1: entered promiscuous mode [ 421.092213][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 421.101064][ T311] usb 3-1: device descriptor read/64, error -71 [ 421.106550][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 421.121459][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 421.131196][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 421.144145][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 421.157286][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 421.166383][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.175245][ T9] usb 2-1: config 0 descriptor?? [ 421.218661][T15883] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.225744][T15883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.233098][T15883] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.240186][T15883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.265283][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.272661][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.284142][ T8326] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.291221][ T8326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.300390][ T8326] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.307470][ T8326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.338386][T15883] veth0_vlan: entered promiscuous mode [ 421.351557][T15883] veth1_macvtap: entered promiscuous mode [ 421.379440][ T311] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 421.395897][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 421.528724][ T311] usb 3-1: device descriptor read/64, error -71 [ 421.542040][T15903] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 421.542076][T15903] rust_binder: Read failure Err(EFAULT) in pid:16 [ 421.685806][T15910] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 421.756344][ T713] usb 2-1: USB disconnect, device number 77 [ 421.766016][ T713] usblp0: removed [ 421.851018][ T311] usb 3-1: device descriptor read/64, error -71 [ 422.046686][ T311] usb usb3-port1: attempt power cycle [ 422.416164][ T311] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 422.449172][ T311] usb 3-1: device descriptor read/8, error -71 [ 422.592374][ T311] usb 3-1: device descriptor read/8, error -71 [ 422.719238][T15926] rust_binder: Write failure EINVAL in pid:31 [ 422.866365][ T311] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 422.898143][ T311] usb 3-1: device descriptor read/8, error -71 [ 423.037150][ T311] usb 3-1: device descriptor read/8, error -71 [ 423.164485][ T311] usb usb3-port1: unable to enumerate USB device [ 423.447662][T15938] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 423.447692][T15938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:480 [ 423.499391][T15941] rust_binder: Error while translating object. [ 423.508679][T15941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 423.514914][T15941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:483 [ 423.881497][ T713] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 424.083726][ T713] usb 2-1: Using ep0 maxpacket: 32 [ 424.092745][ T713] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 424.107578][ T713] usb 2-1: config 0 has no interface number 0 [ 424.113705][ T713] usb 2-1: config 0 interface 184 has no altsetting 0 [ 424.130429][ T713] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 424.139828][ T713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.148084][ T713] usb 2-1: Product: syz [ 424.152352][ T713] usb 2-1: Manufacturer: syz [ 424.156999][ T713] usb 2-1: SerialNumber: syz [ 424.162784][ T713] usb 2-1: config 0 descriptor?? [ 424.170766][ T713] smsc75xx v1.0.0 [ 424.554788][T15972] rust_binder: Error while translating object. [ 424.554819][T15972] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 424.561159][T15971] rust_binder: Error while translating object. [ 424.570658][T15972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:344 [ 424.577224][T15971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 424.586978][T15971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:344 [ 424.842750][ T36] audit: type=1400 audit(2000000005.995:1467): avc: denied { listen } for pid=15976 comm="syz.2.5096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 425.913995][ T8325] bridge_slave_1: left allmulticast mode [ 425.920090][T15947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 425.920127][T15947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:487 [ 425.929833][ T8325] bridge_slave_1: left promiscuous mode [ 425.945453][ T713] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 425.947906][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.961700][ T713] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 425.972952][ T8325] bridge_slave_0: left allmulticast mode [ 425.973741][ T713] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 425.981415][ T8325] bridge_slave_0: left promiscuous mode [ 425.995104][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.005369][ T713] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 426.015474][ T713] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 426.026100][ T713] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 426.035768][ T713] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 426.047736][ T713] usb 2-1: USB disconnect, device number 78 [ 426.107569][ T8325] veth1_macvtap: left promiscuous mode [ 426.113114][ T8325] veth0_vlan: left promiscuous mode [ 426.162292][T15986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:355 [ 426.162922][T15986] rust_binder: Error while translating object. [ 426.172263][T15986] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 426.178471][T15986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:355 [ 426.388433][T15993] rust_binder: Write failure EFAULT in pid:50 [ 426.399019][T15993] rust_binder: Write failure EFAULT in pid:50 [ 426.453394][T16002] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5105'. [ 426.799220][ T713] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 426.938133][ T713] usb 3-1: device descriptor read/64, error -71 [ 427.194725][ T713] usb 3-1: device descriptor read/64, error -71 [ 427.462094][ T713] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 427.600948][ T713] usb 3-1: device descriptor read/64, error -71 [ 427.868207][ T713] usb 3-1: device descriptor read/64, error -71 [ 427.985916][ T713] usb usb3-port1: attempt power cycle [ 428.349303][ T713] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 428.371730][ T713] usb 3-1: device descriptor read/8, error -71 [ 428.510739][ T713] usb 3-1: device descriptor read/8, error -71 [ 428.659320][ T45] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 428.766259][ T713] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 428.788658][ T713] usb 3-1: device descriptor read/8, error -71 [ 428.820707][ T45] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 428.828840][ T45] usb 2-1: config 0 has no interface number 0 [ 428.835052][ T45] usb 2-1: config 0 interface 41 has no altsetting 0 [ 428.843441][ T45] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 428.852642][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.860652][ T45] usb 2-1: Product: syz [ 428.864843][ T45] usb 2-1: Manufacturer: syz [ 428.869452][ T45] usb 2-1: SerialNumber: syz [ 428.874914][ T45] usb 2-1: config 0 descriptor?? [ 428.927828][ T713] usb 3-1: device descriptor read/8, error -71 [ 429.044321][ T713] usb usb3-port1: unable to enumerate USB device [ 429.523086][T16021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 429.523117][T16021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:500 [ 429.533299][ T45] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 429.551934][ T45] usb 2-1: USB disconnect, device number 79 [ 429.820250][T16026] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 429.839973][T16028] rust_binder: Write failure EFAULT in pid:371 [ 429.928607][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 429.934905][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 429.941337][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 429.947836][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 429.954708][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 429.961174][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 429.967699][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 429.974414][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 429.981041][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 429.987553][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 429.994069][T16035] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 429.994092][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.008495][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.014987][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.021542][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.028028][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.034525][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.041077][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.047563][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.054046][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.060571][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.067101][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.073666][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.080182][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.086891][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.093700][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.100228][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.106759][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.113292][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.119799][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.126334][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.132834][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.139404][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.145931][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.152462][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.159001][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.165543][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.172069][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.178607][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.185119][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.191672][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.198196][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.204920][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.211586][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.218140][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.224849][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.231557][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.238081][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.244802][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.251310][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.258095][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.264746][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.271295][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.278108][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.284779][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.291312][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.298081][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.304600][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.311366][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.318024][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.324576][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.331204][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.337945][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.344461][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.351204][T16034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.357713][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.616803][T16050] loop2: detected capacity change from 0 to 16384 [ 430.687356][T16050] I/O error, dev loop2, sector 1720 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 431.469143][T16072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:396 [ 431.530373][T16074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:398 [ 431.568620][T16081] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 431.774590][T16092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 431.774618][T16092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:525 [ 431.784082][T16092] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 431.793267][T16092] rust_binder: Read failure Err(EFAULT) in pid:525 [ 431.849267][T16104] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 431.864275][T16104] rust_binder: Write failure EINVAL in pid:531 [ 431.864522][T16104] rust_binder: Write failure EFAULT in pid:531 [ 431.983067][T16122] overlay: Unknown parameter 'fsmagic' [ 432.029676][T16124] overlay: Unknown parameter 'uid>00000000000000000000' [ 432.081807][ T36] audit: type=1400 audit(2000000012.777:1468): avc: denied { lock } for pid=16132 comm="syz.1.5150" path="socket:[90734]" dev="sockfs" ino=90734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 432.208607][ T45] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 432.370096][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 432.381144][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.390954][ T45] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 432.399999][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.408760][ T45] usb 3-1: config 0 descriptor?? [ 432.629531][ T45] zydacron 0003:13EC:0006.002A: unknown main item tag 0x6 [ 432.638090][ T45] zydacron 0003:13EC:0006.002A: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 432.964443][T16143] syzkaller0: entered promiscuous mode [ 432.970041][T16143] syzkaller0: entered allmulticast mode [ 433.048520][T16145] rust_binder: Write failure EINVAL in pid:65 [ 433.062120][T16147] rust_binder: Error while translating object. [ 433.068282][T16147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 433.074660][T16147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 433.125322][T16153] binder: Unknown parameter 'fscontext?}' [ 433.802495][ T713] usb 3-1: USB disconnect, device number 116 [ 434.955873][T16246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:437 [ 435.240208][T16253] netlink: 22 bytes leftover after parsing attributes in process `syz.1.5193'. [ 436.086039][T16259] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5195'. [ 436.095136][T16259] tipc: Started in network mode [ 436.100045][T16259] tipc: Node identity 7, cluster identity 4711 [ 436.106228][T16259] tipc: Node number set to 7 [ 436.135207][T16267] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16267 comm=syz.1.5197 [ 436.273188][T16288] overlayfs: failed to clone upperpath [ 436.644584][T16301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 436.644624][T16301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 436.698649][ T311] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 436.869695][ T311] usb 3-1: Using ep0 maxpacket: 8 [ 436.876402][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 436.885169][ T311] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 436.894219][ T311] usb 3-1: config 1 has no interface number 1 [ 436.900492][ T311] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 436.913751][ T311] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 436.926641][ T311] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.936042][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.944121][ T311] usb 3-1: Product: $魲롎鬍쉀혁|騔ﳙꎪ쁀ꉿ뵓ᗯ趕颖˰덒隙휓≡땡ꝑꙔ夺榻ꃀ똃탙跘ዧ僈䆟掽ꂗ·㜿僟狰苗瘠꽬ਉ赭᥽ј읡ㆲ኱峒츠⌄贈ၒ⑖胃㈦䙍뗨Ꟑ궏킓쬻ᬯꮤ鉐鵷ڡ├企날흝㕄ඍ彄摢ۍꇚ䖯⪻ [ 436.972784][ T311] usb 3-1: Manufacturer: П [ 436.977519][ T311] usb 3-1: SerialNumber: 䲸ᎃ羽织ﴥ폊殖㓶蔡譏萢鈦ꁤ섉࿫﹉뺖靋ᓤ軔䑐헣 [ 437.212722][T16298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.221316][T16298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.233826][T16298] binder: Bad value for 'max' [ 437.254448][ T311] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 437.265228][ T311] usb 3-1: 2:1 : invalid channels 0 [ 437.286827][ T311] usb 3-1: USB disconnect, device number 117 [ 437.292076][T16314] overlayfs: failed to clone upperpath [ 437.299349][T16315] overlayfs: failed to clone upperpath [ 437.317196][T12621] udevd[12621]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 437.392918][T16316] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.400044][T16316] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.407283][T16316] bridge_slave_0: entered allmulticast mode [ 437.413564][T16316] bridge_slave_0: entered promiscuous mode [ 437.420212][T16316] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.427289][T16316] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.434356][T16316] bridge_slave_1: entered allmulticast mode [ 437.440809][T16316] bridge_slave_1: entered promiscuous mode [ 437.490889][T16316] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.497942][T16316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.505245][T16316] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.512302][T16316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.533809][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.541232][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.551411][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.558495][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.567773][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.574835][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.601195][T16316] veth0_vlan: entered promiscuous mode [ 437.612845][T16316] veth1_macvtap: entered promiscuous mode [ 437.645486][T16321] netlink: 'syz.7.5211': attribute type 4 has an invalid length. [ 437.670865][T16323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 438.001027][T16330] overlayfs: conflicting options: userxattr,redirect_dir=on [ 438.227507][ T311] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 438.388006][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 438.395833][ T311] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 438.405216][ T311] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 438.412442][ T36] audit: type=1400 audit(2000000018.698:1469): avc: denied { shutdown } for pid=16352 comm="syz.1.5225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 438.436835][ T311] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 438.447776][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 438.455573][ T36] audit: type=1400 audit(2000000018.717:1470): avc: denied { setattr } for pid=16352 comm="syz.1.5225" path="socket:[93087]" dev="sockfs" ino=93087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 438.483715][ T311] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 438.494390][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 438.510261][ T311] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 438.520171][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.537765][ T311] usb 3-1: config 0 descriptor?? [ 438.699676][T16361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 438.699712][T16361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:12 [ 438.728010][T16367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 438.737184][T16367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:14 [ 438.760866][ T311] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 118 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 438.795445][T16371] rust_binder: Write failure EFAULT in pid:16 [ 438.864551][T16384] batadv_slave_0: entered promiscuous mode [ 438.877884][T16384] batadv_slave_0: left promiscuous mode [ 438.979266][ T9] usb 3-1: USB disconnect, device number 118 [ 438.988203][ T9] usblp0: removed [ 439.006114][T16388] fuse: Unknown parameter 'B-w' [ 439.099252][T16391] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 439.107934][T16391] rust_binder: Write failure EINVAL in pid:25 [ 439.108574][T16393] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 439.129204][T16396] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 439.136573][T16396] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 439.527318][T16403] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5245'. [ 439.571131][T16409] can: request_module (can-proto-0) failed. [ 439.779170][ T36] audit: type=1400 audit(2000000019.980:1471): avc: denied { accept } for pid=16414 comm="syz.2.5250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 439.936254][ T36] audit: type=1400 audit(2000000020.120:1472): avc: denied { remount } for pid=16431 comm="syz.5.5255" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 439.967466][T16434] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 440.668878][T16454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5264'. [ 440.719067][T16459] 9pnet_fd: Insufficient options for proto=fd [ 440.725453][T16459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:481 [ 440.791077][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 440.800523][T16465] rust_binder: Write failure EINVAL in pid:485 [ 440.812868][T16465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:485 [ 440.845598][T16479] binder: Bad value for 'max' [ 440.872277][T16481] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 441.167344][ T9] usb 3-1: new low-speed USB device number 119 using dummy_hcd [ 441.327679][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 441.466668][ T9] usb 3-1: new low-speed USB device number 120 using dummy_hcd [ 441.627031][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 441.632503][ T9] usb usb3-port1: attempt power cycle [ 442.001256][ T9] usb 3-1: new low-speed USB device number 121 using dummy_hcd [ 442.023010][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 442.086299][T16507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=16507 comm=syz.1.5282 [ 442.099245][T16507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=16507 comm=syz.1.5282 [ 442.112069][T16507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=16507 comm=syz.1.5282 [ 442.124838][T16507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=16507 comm=syz.1.5282 [ 442.161590][ T9] usb 3-1: new low-speed USB device number 122 using dummy_hcd [ 442.183268][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 442.188668][ T9] usb usb3-port1: unable to enumerate USB device [ 442.699771][T16515] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@q [ 442.743172][T16517] overlayfs: failed to clone upperpath [ 444.211242][T16559] binder: Bad value for 'max' [ 444.232375][ T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 444.246033][ T9] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 444.415778][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.415811][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.428169][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.434640][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.450422][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.462682][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.475216][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.487460][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.502788][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.518922][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.534004][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.546231][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.558452][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.565226][T16587] can: request_module (can-proto-0) failed. [ 444.569652][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.584576][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.595746][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.606932][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.620404][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.628525][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.639757][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.650107][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.660876][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.667746][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.684552][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.691103][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.697627][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.704259][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.715039][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.725822][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.732385][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.748699][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.755294][T16582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.793081][T16595] rust_binder: Write failure EFAULT in pid:517 [ 444.929932][T16605] /dev/rnullb0: Can't open blockdev [ 444.954980][T16605] fuse: Bad value for 'user_id' [ 444.959953][T16605] fuse: Bad value for 'user_id' [ 445.014220][T16609] rust_binder: Write failure EFAULT in pid:524 [ 445.016113][T16609] rust_binder: Write failure EFAULT in pid:524 [ 445.114847][T16623] overlayfs: failed to resolve './file0': -2 [ 445.274977][T16634] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5333'. [ 445.291205][T16633] rust_binder: Error while translating object. [ 445.291251][T16633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 445.297607][T16633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:536 [ 445.583689][T16649] rust_binder: Error while translating object. [ 445.592938][T16649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 445.599856][T16649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 445.807309][T16667] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5340'. [ 445.827296][T16672] binder: Unknown parameter 'fscontext?}' [ 445.866724][T16674] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 446.877573][ T311] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 446.890397][ T311] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 447.479239][T16705] netlink: 'syz.2.5357': attribute type 15 has an invalid length. [ 447.487126][T16705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5357'. [ 447.636482][ T36] audit: type=1400 audit(2000000027.323:1473): avc: denied { execute } for pid=16714 comm="syz.2.5360" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 447.713582][ T36] audit: type=1326 audit(2000000027.397:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.1.5365" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35d478e929 code=0xffff0000 [ 447.845041][T16737] rust_binder: Error while translating object. [ 447.845078][T16737] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 447.851635][T16737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:585 [ 447.899825][T16742] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 447.935538][T16746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:594 [ 447.991788][T16746] netlink: 'syz.2.5370': attribute type 4 has an invalid length. [ 448.008988][T16746] netlink: 'syz.2.5370': attribute type 4 has an invalid length. [ 448.019766][T16746] netlink: 'syz.2.5370': attribute type 4 has an invalid length. [ 448.124928][T16748] binder: Binderfs stats mode cannot be changed during a remount [ 449.041970][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.042005][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.049667][T16758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:144 [ 449.056296][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.072494][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.085618][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.107147][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.135815][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.153657][T16765] overlayfs: failed to clone upperpath [ 449.165824][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.165852][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.179520][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.203393][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.222635][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.249751][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.267515][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.277824][ T36] audit: type=1400 audit(2000000028.857:1475): avc: denied { create } for pid=16772 comm="syz.7.5380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 449.313710][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.313740][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.334983][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.358554][T16777] input: syz0 as /devices/virtual/input/input43 [ 449.370951][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.371514][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.389353][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.389379][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.404193][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.420487][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.428537][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.447927][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.455114][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.461999][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.468913][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.480067][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.487215][T16786] rust_binder: Failed copying remainder into alloc: EFAULT [ 449.494195][T16786] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 449.501686][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.510083][T16786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 449.516603][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.526347][T16786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:60 [ 449.533055][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.547968][T16757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 450.093252][T16806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 450.114013][T16806] rust_binder: Error while translating object. [ 450.143406][T16806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 450.153420][ T36] audit: type=1400 audit(2000000029.596:1476): avc: denied { shutdown } for pid=16796 comm="syz.7.5390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 450.195156][T16806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 450.195249][T16806] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 450.267306][ T36] audit: type=1400 audit(2000000029.605:1477): avc: denied { mounton } for pid=16796 comm="syz.7.5390" path="/22/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 450.749195][T16835] netlink: 'syz.2.5397': attribute type 4 has an invalid length. [ 450.886746][T16847] /dev/rnullb0: Can't open blockdev [ 450.994658][T16852] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 451.024104][T16852] rust_binder: Write failure EINVAL in pid:610 [ 451.271432][T16867] overlayfs: failed to resolve './file0': -2 [ 451.271704][T16869] overlayfs: failed to resolve './file0': -2 [ 451.344864][ T577] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 451.355486][T16871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:174 [ 451.355768][T16871] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 451.526531][ T577] usb 3-1: Using ep0 maxpacket: 32 [ 451.562201][ T577] usb 3-1: config 21 has an invalid interface number: 204 but max is 0 [ 451.570584][ T577] usb 3-1: config 21 has no interface number 0 [ 451.576806][ T577] usb 3-1: config 21 interface 204 altsetting 7 endpoint 0x9 has invalid maxpacket 20154, setting to 1024 [ 451.618380][ T577] usb 3-1: config 21 interface 204 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 1024 [ 451.647809][ T577] usb 3-1: config 21 interface 204 has no altsetting 0 [ 451.656401][ T577] usb 3-1: New USB device found, idVendor=0403, idProduct=ee18, bcdDevice=d0.44 [ 451.666764][ T577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.674797][ T577] usb 3-1: Product: syz [ 451.686872][ T577] usb 3-1: Manufacturer: syz [ 451.693503][ T577] usb 3-1: SerialNumber: syz [ 451.711459][T16856] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 451.945850][T16856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.965036][T16856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.998342][T16856] rust_binder: Got transaction with invalid offset. [ 451.998395][T16856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 452.005086][T16856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:612 [ 452.034204][ T577] ftdi_sio 3-1:21.204: FTDI USB Serial Device converter detected [ 452.065217][ T577] ftdi_sio ttyUSB0: unknown device type: 0xd044 [ 452.077236][ T577] usb 3-1: USB disconnect, device number 123 [ 452.090667][ T577] ftdi_sio 3-1:21.204: device disconnected [ 452.275705][T16903] SELinux: failed to load policy [ 452.324401][T16903] rust_binder: Error while translating object. [ 452.324434][T16903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 452.339003][T16903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 452.439254][T16907] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 452.603185][T16926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:217 [ 452.683957][T16928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219 [ 452.731622][T16928] netlink: 'syz.5.5436': attribute type 4 has an invalid length. [ 452.748646][T16928] netlink: 'syz.5.5436': attribute type 4 has an invalid length. [ 452.758910][T16930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5437'. [ 452.759776][T16928] netlink: 'syz.5.5436': attribute type 4 has an invalid length. [ 453.010787][T16949] binder: Bad value for 'max' [ 453.262289][T16958] overlayfs: failed to clone upperpath [ 453.748022][T16988] netlink: 'syz.2.5457': attribute type 4 has an invalid length. [ 453.755869][T16988] netlink: 'syz.2.5457': attribute type 7 has an invalid length. [ 453.763692][T16988] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5457'. [ 453.928285][T16993] netlink: 'syz.2.5459': attribute type 4 has an invalid length. [ 453.936100][T16993] netlink: 'syz.2.5459': attribute type 4 has an invalid length. [ 453.943919][T16993] netlink: 'syz.2.5459': attribute type 4 has an invalid length. [ 455.448768][ T36] audit: type=1400 audit(2000000034.628:1478): avc: denied { rename } for pid=17039 comm="syz.2.5478" name="file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 455.449683][T17040] exFAT-fs (rnullb0): invalid boot record signature [ 455.477733][T17040] exFAT-fs (rnullb0): failed to read boot sector [ 455.484121][T17040] exFAT-fs (rnullb0): failed to recognize exfat type [ 455.504847][T17045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 455.505423][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5479'. [ 455.521016][T17044] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 455.521034][T17044] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 455.529581][T17044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:652 [ 455.554536][T17047] rust_binder: Error while translating object. [ 455.563828][T17047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 455.570101][T17047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:655 [ 455.779096][T17068] rust_binder: Error while translating object. [ 455.792779][T17068] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 455.801736][T17068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:674 [ 455.820486][ T36] audit: type=1400 audit(2000000034.974:1479): avc: denied { accept } for pid=17069 comm="syz.1.5488" path="socket:[96962]" dev="sockfs" ino=96962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 456.064872][T17084] rust_binder: Error while translating object. [ 456.064906][T17084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 456.071352][T17084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:686 [ 456.258904][T17090] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 456.381850][T17101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:249 [ 456.385427][T17103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65205 sclass=netlink_route_socket pid=17103 comm=syz.1.5501 [ 456.444710][T17106] rust_binder: Write failure EINVAL in pid:249 [ 456.444971][T17106] binder: Unknown parameter 'defcontext01777777777777777777777' [ 456.968384][T17115] rust_binder: Failed copying remainder into alloc: EFAULT [ 456.968406][T17115] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 456.975764][T17115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 456.984141][T17115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:694 [ 457.176367][T17121] 9pnet_fd: Insufficient options for proto=fd [ 457.283569][T17126] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 457.283598][T17126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:252 [ 457.397756][T17132] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17132 comm=syz.2.5513 [ 457.419533][T17132] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17132 comm=syz.2.5513 [ 457.560158][T17169] FAT-fs (rnullb0): bogus number of reserved sectors [ 457.566968][T17169] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 457.605996][T17184] syzkaller0: entered promiscuous mode [ 457.611551][T17184] syzkaller0: entered allmulticast mode [ 457.808619][T17205] overlay: Unknown parameter 'mounts' [ 458.242765][T17210] rust_binder: inc_ref_done called when no active inc_refs [ 458.331372][T17216] exFAT-fs (rnullb0): invalid boot record signature [ 458.346190][T17216] exFAT-fs (rnullb0): failed to read boot sector [ 458.352621][T17216] exFAT-fs (rnullb0): failed to recognize exfat type [ 458.359406][ T36] audit: type=1400 audit(2000000037.350:1480): avc: denied { getopt } for pid=17219 comm="syz.2.5543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 459.381049][T17286] overlayfs: failed to resolve './bus': -2 [ 459.511571][T17295] overlayfs: failed to clone upperpath [ 459.576031][T17318] batadv_slave_1: entered promiscuous mode [ 459.592486][T17316] batadv_slave_1: left promiscuous mode [ 460.198444][T17341] overlayfs: failed to clone upperpath [ 460.325562][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5592'. [ 460.480873][T17371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 460.480987][T17370] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 460.504125][ T36] audit: type=1400 audit(2000000039.352:1481): avc: granted { setsecparam } for pid=17372 comm="syz.2.5599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 460.531498][ T36] audit: type=1400 audit(2000000039.352:1482): avc: granted { setsecparam } for pid=17372 comm="syz.2.5599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 460.550957][ T36] audit: type=1400 audit(2000000039.352:1483): avc: granted { setsecparam } for pid=17372 comm="syz.2.5599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 460.571220][ T36] audit: type=1400 audit(2000000039.352:1484): avc: granted { setsecparam } for pid=17372 comm="syz.2.5599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 460.590611][ T36] audit: type=1400 audit(2000000039.352:1485): avc: granted { setsecparam } for pid=17372 comm="syz.2.5599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 460.609921][ T36] audit: type=1400 audit(2000000039.352:1486): avc: granted { setsecparam } for pid=17372 comm="syz.2.5599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 460.629188][ T36] audit: type=1400 audit(2000000039.352:1487): avc: granted { setsecparam } for pid=17372 comm="syz.2.5599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 460.838053][ T64] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 460.892271][T17383] tipc: New replicast peer: 255.255.255.255 [ 460.898273][T17383] tipc: Enabled bearer , priority 10 [ 460.998418][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 461.004679][ T64] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 461.013101][ T64] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 461.021747][ T64] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 461.030734][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 461.040841][ T64] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 461.050519][ T64] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 461.063575][ T64] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 461.072623][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.081268][ T64] usb 3-1: config 0 descriptor?? [ 461.302167][ T64] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 124 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 461.363097][ T64] usb 3-1: USB disconnect, device number 124 [ 461.370403][ T64] usblp0: removed [ 461.503805][T17400] sit0: entered promiscuous mode [ 461.509791][T17400] netlink: 'syz.1.5609': attribute type 1 has an invalid length. [ 461.517666][T17400] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5609'. [ 461.549306][T17410] can: request_module (can-proto-0) failed. [ 461.550091][T17412] /dev/rnullb0: Can't lookup blockdev [ 462.907572][T17435] cgroup: Unknown parameter './binderfs/binder0' [ 462.914516][T17435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.229225][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 463.229248][ T36] audit: type=1400 audit(2000000041.905:1546): avc: denied { shutdown } for pid=17450 comm="syz.1.5624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 463.328082][ T36] audit: type=1326 audit(2000000041.999:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17457 comm="syz.1.5626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35d478e929 code=0x0 [ 463.553500][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 463.553501][ T1828] Bluetooth: hci0: command 0x1003 tx timeout [ 463.671031][ T36] audit: type=1400 audit(2000000042.317:1548): avc: denied { link } for pid=17467 comm="syz.2.5630" name="#7f" dev="tmpfs" ino=1500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 463.672032][T17468] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=4 [ 463.693530][T17468] rust_binder: Error while translating object. [ 463.702254][T17468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 463.708594][T17468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:781 [ 463.844950][T17475] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2354665208 (301397146624 ns) > initial count (223288954112 ns). Using initial count to start timer. [ 464.160348][T17489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 464.160390][T17489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:801 [ 464.181808][ T36] audit: type=1400 audit(2000000042.794:1549): avc: denied { listen } for pid=17490 comm="syz.2.5639" path=2F3238302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 465.518940][T17511] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 465.528225][T17512] netlink: 'syz.1.5647': attribute type 1 has an invalid length. [ 465.536029][T17512] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5647'. [ 466.265226][T17530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 466.319676][T17533] rust_binder: Error in use_page_slow: ESRCH [ 466.326206][T17533] rust_binder: use_range failure ESRCH [ 466.332225][T17533] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 466.337812][T17533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 466.345872][T17533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:310 [ 466.827598][T17548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 466.891644][T17549] rust_binder: Write failure EINVAL in pid:109 [ 467.254519][T17557] rust_binder: Error while translating object. [ 467.254732][T17558] rust_binder: Error while translating object. [ 467.260871][T17557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 467.267170][T17558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 467.273352][T17557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:319 [ 467.282670][T17558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:319 [ 467.635414][T17592] rust_binder: Write failure EINVAL in pid:811 [ 467.657260][T17594] fuse: Unknown parameter 'rootmide' [ 467.734189][T17596] overlayfs: failed to clone lowerpath [ 467.908478][T17608] overlayfs: failed to clone upperpath [ 467.928056][T17608] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5681'. [ 468.364233][ T1440] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 468.527107][ T1440] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 468.536350][ T1440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.544352][ T1440] usb 3-1: Product: syz [ 468.548592][ T1440] usb 3-1: Manufacturer: syz [ 468.553200][ T1440] usb 3-1: SerialNumber: syz [ 468.560471][ T1440] r8152-cfgselector 3-1: Unknown version 0x0000 [ 468.566729][ T1440] r8152-cfgselector 3-1: config 0 descriptor?? [ 468.773684][ T46] bridge_slave_1: left allmulticast mode [ 468.779388][ T46] bridge_slave_1: left promiscuous mode [ 468.785093][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.794300][ T46] bridge_slave_0: left allmulticast mode [ 468.800032][ T46] bridge_slave_0: left promiscuous mode [ 468.805855][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.814078][ T46] tipc: Resetting bearer [ 468.842460][ T46] tipc: Disabling bearer [ 468.943117][ T46] tipc: Left network mode [ 468.948464][ T46] veth1_macvtap: left promiscuous mode [ 468.954052][ T46] veth0_vlan: left promiscuous mode [ 468.961411][T17630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=17630 comm=syz.1.5691 [ 468.974450][T17630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=17630 comm=syz.1.5691 [ 468.987373][T17630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=17630 comm=syz.1.5691 [ 469.000244][T17630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=17630 comm=syz.1.5691 [ 469.015492][T17594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.029196][T17594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.039163][ T45] r8152-cfgselector 3-1: USB disconnect, device number 125 [ 469.679339][T17637] netlink: 'syz.2.5694': attribute type 1 has an invalid length. [ 469.946462][ T45] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 470.107923][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.118880][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.128665][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.141588][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.150704][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.159426][ T45] usb 3-1: config 0 descriptor?? [ 470.542470][T17647] binder: Unknown parameter 'fscontext?}' [ 470.548475][T17648] netlink: 424 bytes leftover after parsing attributes in process `syz.5.5698'. [ 470.595196][ T45] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 470.604252][ T45] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 470.661234][T17661] overlay: filesystem on ./bus not supported as upperdir [ 470.975653][T17673] exFAT-fs (rnullb0): invalid boot record signature [ 470.982341][T17673] exFAT-fs (rnullb0): failed to read boot sector [ 470.988786][T17673] exFAT-fs (rnullb0): failed to recognize exfat type [ 471.002134][T17673] tmpfs: Unknown parameter 'grpquota' [ 471.050678][T17680] netlink: 'syz.7.5708': attribute type 1 has an invalid length. [ 471.075208][ T36] audit: type=1326 audit(2000000049.248:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17681 comm="syz.7.5709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cc5d8e929 code=0x0 [ 471.235785][T17685] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17685 comm=syz.1.5710 [ 471.977829][ C1] plantronics 0003:047F:FFFF.002D: usb_submit_urb(ctrl) failed: -1 [ 472.004177][T17713] SELinux: security_context_str_to_sid () failed with errno=-22 [ 472.047823][ T36] audit: type=1400 audit(2000000050.156:1551): avc: denied { unmount } for pid=16316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 472.196590][ T8325] Bluetooth: hci0: Frame reassembly failed (-84) [ 472.630060][ T36] audit: type=1400 audit(2000000050.708:1552): avc: denied { getopt } for pid=17739 comm="syz.2.5730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 472.707858][T17747] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 472.719215][T17749] No source specified [ 472.802321][T17752] netlink: 'syz.2.5735': attribute type 4 has an invalid length. [ 472.810105][T17752] netlink: 'syz.2.5735': attribute type 4 has an invalid length. [ 472.812120][T15887] usb 3-1: USB disconnect, device number 126 [ 473.039673][T17759] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 473.049379][T17759] SELinux: failed to load policy [ 473.054790][T17759] binder: Unknown parameter 'fscontext?}Linux!' [ 473.698124][T17774] netlink: 316 bytes leftover after parsing attributes in process `syz.1.5743'. [ 473.814168][ T36] audit: type=1326 audit(2000000051.802:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17757 comm="syz.2.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b6d8e929 code=0x7fc00000 [ 473.980989][T17801] netlink: 'syz.5.5753': attribute type 4 has an invalid length. [ 473.988832][T17801] netlink: 'syz.5.5753': attribute type 4 has an invalid length. [ 474.136406][T17817] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 474.169327][T17817] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 474.231005][T17818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 474.238410][T17818] rust_binder: Error in use_page_slow: ESRCH [ 474.248705][T17818] rust_binder: use_range failure ESRCH [ 474.254776][T17818] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 474.260253][T17818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 474.268495][T17818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:358 [ 474.297523][T15887] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 474.415118][ T1828] Bluetooth: hci0: command 0x1003 tx timeout [ 474.415114][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 474.469832][T15887] usb 3-1: config 4 has an invalid interface number: 95 but max is 0 [ 474.477976][T15887] usb 3-1: config 4 has no interface number 0 [ 474.484129][T15887] usb 3-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 474.495335][T15887] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 474.504497][T15887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.512525][T15887] usb 3-1: Product: syz [ 474.516710][T15887] usb 3-1: Manufacturer: syz [ 474.521314][T15887] usb 3-1: SerialNumber: syz [ 474.527081][T17803] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 474.722806][T17827] 9pnet_fd: Insufficient options for proto=fd [ 474.750446][T15887] usb 3-1: MIDIStreaming interface descriptor not found [ 474.762271][T15887] usb 3-1: USB disconnect, device number 127 [ 474.776079][T12603] udevd[12603]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.95/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 474.978040][T17832] netlink: 'syz.7.5764': attribute type 4 has an invalid length. [ 474.999867][T17834] netlink: 5 bytes leftover after parsing attributes in process `syz.7.5765'. [ 475.040794][T17838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=17838 comm=syz.5.5767 [ 475.103974][T17840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 475.112607][T17840] rust_binder: Error while translating object. [ 475.121953][T17840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 475.128157][T17840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 475.212550][T17843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 475.462087][T17864] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 475.498256][T17866] fuse: Unknown parameter '000000000000000000000000x0000000000000048' [ 475.836982][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 475.886019][ T36] audit: type=1326 audit(2000000053.748:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17874 comm="syz.1.5783" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35d478e929 code=0x0 [ 475.998357][ T45] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 476.006702][ T45] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 476.017018][ T45] usb 3-1: config 220 has no interface number 2 [ 476.023457][ T45] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 476.036896][ T45] usb 3-1: config 220 interface 0 has no altsetting 0 [ 476.040299][T17879] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 476.044064][ T45] usb 3-1: config 220 interface 76 has no altsetting 0 [ 476.058718][T17879] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 476.065001][ T45] usb 3-1: config 220 interface 1 has no altsetting 0 [ 476.072039][T17879] rust_binder: Write failure EINVAL in pid:371 [ 476.074325][ T45] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 476.090059][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.098286][ T45] usb 3-1: Product: syz [ 476.102561][ T45] usb 3-1: Manufacturer: syz [ 476.113593][ T45] usb 3-1: SerialNumber: syz [ 476.334725][T17903] rust_binder: Write failure EFAULT in pid:175 [ 476.338047][ T45] usb 3-1: selecting invalid altsetting 0 [ 476.350318][ T45] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 476.356692][ T45] usb 3-1: No valid video chain found. [ 476.364709][ T45] usb 3-1: USB disconnect, device number 2 [ 476.401860][T17907] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 476.401883][T17907] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 476.410075][T17907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:180 [ 476.893194][T17941] netlink: 'syz.2.5802': attribute type 4 has an invalid length. [ 476.950162][T17952] rust_binder: Error while translating object. [ 476.950194][T17952] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 476.956472][T17952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:873 [ 477.226752][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 477.378653][T17976] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 477.398881][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 477.415142][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 477.426588][ T45] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 477.435884][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.443994][ T45] usb 3-1: Product: syz [ 477.448185][ T45] usb 3-1: Manufacturer: syz [ 477.452920][ T45] usb 3-1: SerialNumber: syz [ 477.458119][ T45] usb 3-1: config 0 descriptor?? [ 477.463411][T17954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 477.470660][T17954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 477.692582][T17954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 477.699991][T17954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 477.754977][T17986] overlayfs: failed to clone upperpath [ 479.069293][T18013] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5831'. [ 479.748631][T18026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.042952][T18041] FAULT_INJECTION: forcing a failure. [ 480.042952][T18041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.091871][T18041] CPU: 1 UID: 0 PID: 18041 Comm: syz.5.5841 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 480.091912][T18041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 480.091936][T18041] Call Trace: [ 480.091945][T18041] [ 480.091960][T18041] __dump_stack+0x21/0x30 [ 480.091993][T18041] dump_stack_lvl+0x10c/0x190 [ 480.092019][T18041] ? __cfi_dump_stack_lvl+0x10/0x10 [ 480.092055][T18041] ? kstrtoull+0x13b/0x1e0 [ 480.092079][T18041] dump_stack+0x19/0x20 [ 480.092104][T18041] should_fail_ex+0x3d9/0x530 [ 480.092131][T18041] should_fail+0xf/0x20 [ 480.092155][T18041] should_fail_usercopy+0x1e/0x30 [ 480.092182][T18041] _copy_from_user+0x22/0xb0 [ 480.092213][T18041] ___sys_sendmsg+0x159/0x2a0 [ 480.092237][T18041] ? __sys_sendmsg+0x280/0x280 [ 480.092261][T18041] ? proc_fail_nth_write+0x17e/0x210 [ 480.092284][T18041] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 480.092314][T18041] __x64_sys_sendmsg+0x1eb/0x2c0 [ 480.092336][T18041] ? fput+0x1a5/0x240 [ 480.092357][T18041] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 480.092379][T18041] ? ksys_write+0x1ef/0x250 [ 480.092410][T18041] ? __kasan_check_read+0x15/0x20 [ 480.092436][T18041] x64_sys_call+0x2a4c/0x2ee0 [ 480.092465][T18041] do_syscall_64+0x58/0xf0 [ 480.092496][T18041] ? clear_bhb_loop+0x50/0xa0 [ 480.092518][T18041] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 480.092544][T18041] RIP: 0033:0x7f2721b8e929 [ 480.092567][T18041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.092586][T18041] RSP: 002b:00007f2722928038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.092610][T18041] RAX: ffffffffffffffda RBX: 00007f2721db5fa0 RCX: 00007f2721b8e929 [ 480.092628][T18041] RDX: 0000000000004000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 480.092642][T18041] RBP: 00007f2722928090 R08: 0000000000000000 R09: 0000000000000000 [ 480.092656][T18041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.092670][T18041] R13: 0000000000000000 R14: 00007f2721db5fa0 R15: 00007fff17d17428 [ 480.092688][T18041] [ 480.564408][ T45] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 480.579039][ T45] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 480.592853][ T45] usb 3-1: USB disconnect, device number 3 [ 480.599272][ T45] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 480.653479][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.690768][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.709326][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.732529][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.752447][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.774068][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.786908][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.806301][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.818984][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.837302][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.851084][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.869141][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.883104][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.902556][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.920669][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.931486][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.939065][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.946388][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.953875][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.961322][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.968774][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.976043][T18046] overlay: filesystem on ./bus not supported as upperdir [ 480.984104][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.013859][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.032037][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.039480][T18049] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 481.042792][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.057222][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.075891][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.083592][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.104826][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.120448][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.137125][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.153283][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.162861][T18053] fuse: Unknown parameter '0x00000000000000080x0000000000000007' [ 481.170953][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.180634][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.197283][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.217357][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.227730][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.238429][ T36] audit: type=1400 audit(2000000058.752:1555): avc: denied { mounton } for pid=18054 comm="syz.2.5847" path="/proc/883/task" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 481.261185][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.268713][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.286874][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.294590][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.300005][T18057] binder: Bad value for 'max' [ 481.307218][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.318294][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.331449][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.349517][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.357222][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.373383][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.381295][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.395219][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.404308][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.418889][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.433042][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.441755][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.449836][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.458196][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.471141][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.482070][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.500165][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.507642][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.525200][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.532614][T18046] overlay: filesystem on ./bus not supported as upperdir [ 481.667832][T18067] netlink: 'syz.2.5852': attribute type 4 has an invalid length. [ 481.719036][T18071] overlay: filesystem on ./bus not supported as upperdir [ 481.916685][T18086] overlayfs: failed to resolve './file1': -2 [ 481.949366][ T36] audit: type=1326 audit(2000000059.416:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18093 comm="syz.1.5860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35d478e929 code=0x0 [ 481.977987][ T45] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 481.988043][ T45] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 482.999714][ T577] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 483.182568][ T577] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 483.190885][ T577] usb 3-1: config 220 has an invalid descriptor of length 72, skipping remainder of the config [ 483.201588][ T577] usb 3-1: config 220 has no interface number 2 [ 483.208080][ T577] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 483.221651][ T577] usb 3-1: config 220 interface 0 has no altsetting 0 [ 483.228740][ T577] usb 3-1: config 220 interface 76 has no altsetting 0 [ 483.235932][ T577] usb 3-1: config 220 interface 1 has no altsetting 0 [ 483.246659][ T577] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 483.255814][ T577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.263970][ T577] usb 3-1: Product: syz [ 483.268313][ T577] usb 3-1: Manufacturer: syz [ 483.272983][ T577] usb 3-1: SerialNumber: syz [ 483.289563][ T36] audit: type=1326 audit(2000000060.679:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18116 comm="syz.7.5869" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cc5d8e929 code=0x0 [ 483.401223][ T36] audit: type=1326 audit(2000000060.772:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18116 comm="syz.7.5869" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cc5d8e929 code=0x0 [ 483.499247][T18110] overlayfs: missing 'workdir' [ 483.721134][ T577] usb 3-1: selecting invalid altsetting 0 [ 483.727105][ T577] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 483.733455][ T577] usb 3-1: No valid video chain found. [ 483.744087][ T577] usb 3-1: USB disconnect, device number 4 [ 484.291967][T18138] rust_binder: Error while translating object. [ 484.292025][T18138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 484.301330][T18138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:913 [ 484.316203][T18140] overlayfs: missing 'lowerdir' [ 484.340891][T18142] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 484.340930][T18142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:915 [ 484.443690][T18160] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 484.453927][T18160] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 484.460407][T18160] rust_binder: Read failure Err(EFAULT) in pid:421 [ 484.468935][T18160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:421 [ 484.643986][T18172] syzkaller0: entered promiscuous mode [ 484.658734][T18172] syzkaller0: entered allmulticast mode [ 484.665289][T18172] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 484.674770][T18173] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5887'. [ 484.988363][T18183] vcan0: entered allmulticast mode [ 484.994492][T18183] rust_binder: got new transaction with bad transaction stack [ 484.994518][T18183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:434 [ 485.078021][ T577] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 485.107920][ T577] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 485.266508][T18201] overlayfs: failed to clone upperpath [ 485.461031][T18186] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=9695 sclass=netlink_xfrm_socket pid=18186 comm=syz.5.5890 [ 485.992011][T18208] SELinux: security_context_str_to_sid () failed with errno=-22 [ 486.185350][T18219] netlink: 'syz.7.5901': attribute type 4 has an invalid length. [ 486.193271][T18219] netlink: 'syz.7.5901': attribute type 27 has an invalid length. [ 486.201384][T18219] netlink: 3609 bytes leftover after parsing attributes in process `syz.7.5901'. [ 486.274820][T18231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5905'. [ 486.363849][T18238] overlayfs: failed to clone upperpath [ 487.501077][T18262] overlayfs: failed to clone upperpath [ 487.770404][T18318] exFAT-fs (rnullb0): invalid boot record signature [ 487.777167][T18318] exFAT-fs (rnullb0): failed to read boot sector [ 487.783589][T18318] exFAT-fs (rnullb0): failed to recognize exfat type [ 488.260820][T18345] binder: Unknown parameter 'fowner' [ 488.778752][T18352] binder: Bad value for 'stats' [ 489.091114][T18363] rust_binder: Write failure EINVAL in pid:947 [ 489.661001][T18375] tipc: Started in network mode [ 489.672162][T18375] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 489.681132][T18375] tipc: Enabling of bearer rejected, failed to enable media [ 490.075974][T18398] tipc: Enabling of bearer rejected, failed to enable media [ 490.375833][T18446] overlay: Unknown parameter 'mounts' [ 490.414285][T18453] overlayfs: failed to clone lowerpath [ 490.536592][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 490.675544][ T45] usb 3-1: device descriptor read/64, error -71 [ 490.932132][ T45] usb 3-1: device descriptor read/64, error -71 [ 491.071611][T18481] /dev/rnullb0: Can't lookup blockdev [ 491.188706][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 491.327721][ T45] usb 3-1: device descriptor read/64, error -71 [ 491.584248][ T45] usb 3-1: device descriptor read/64, error -71 [ 491.704074][ T45] usb usb3-port1: attempt power cycle [ 491.907765][T18537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2552 sclass=netlink_route_socket pid=18537 comm=syz.1.6014 [ 492.075995][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 492.098493][ T45] usb 3-1: device descriptor read/8, error -71 [ 492.237463][ T45] usb 3-1: device descriptor read/8, error -71 [ 492.492958][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 492.515361][ T45] usb 3-1: device descriptor read/8, error -71 [ 492.654366][ T45] usb 3-1: device descriptor read/8, error -71 [ 492.685585][T18551] batadv_slave_1: entered promiscuous mode [ 492.770992][ T45] usb usb3-port1: unable to enumerate USB device [ 492.838529][T18554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18554 comm=syz.1.6021 [ 493.429522][T18567] rust_binder: Write failure EFAULT in pid:955 [ 493.564812][T18550] batadv_slave_1: left promiscuous mode [ 494.563031][T18634] netlink: 'syz.2.6048': attribute type 4 has an invalid length. [ 494.919707][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 495.090765][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 495.100573][ T45] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 495.112324][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.133797][ T45] usb 3-1: config 0 descriptor?? [ 495.365189][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 495.447206][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 495.459960][ T45] usb 3-1: USB disconnect, device number 9 [ 495.566320][T18692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6062'. [ 496.076556][T18696] netlink: 'syz.2.6067': attribute type 11 has an invalid length. [ 496.391810][T18704] overlayfs: failed to clone lowerpath [ 496.532678][T18702] overlayfs: failed to clone upperpath [ 497.214904][T18737] binder: Unknown parameter '' [ 497.269474][ T36] audit: type=1326 audit(2000000073.746:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.7.6083" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f3cc5d8e929 code=0x0 [ 497.299352][T18747] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 497.504767][T18756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 497.504797][T18756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:992 [ 497.552987][T18762] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 497.552992][T18760] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 497.553012][T18762] rust_binder: Error while translating object. [ 497.553041][T18762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 497.562624][T18760] rust_binder: Error while translating object. [ 497.571132][T18762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:483 [ 497.580060][T18760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 497.610753][T18760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:483 [ 497.845561][T18783] rust_binder: Error while translating object. [ 497.854835][T18783] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 497.861049][T18783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1003 [ 497.870925][T18784] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 498.180061][T18812] 9pnet_fd: Insufficient options for proto=fd [ 498.292516][ T311] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 498.389078][T18814] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.396304][T18814] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.403393][T18814] bridge_slave_0: entered allmulticast mode [ 498.410214][T18814] bridge_slave_0: entered promiscuous mode [ 498.416847][T18814] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.423969][T18814] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.431368][T18814] bridge_slave_1: entered allmulticast mode [ 498.433943][T18823] overlay: Unknown parameter 'dont_hash' [ 498.438023][T18814] bridge_slave_1: entered promiscuous mode [ 498.468830][T18825] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6108'. [ 498.468999][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 498.482962][T18825] gretap0: entered promiscuous mode [ 498.486438][ T311] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 498.496588][ T311] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 498.505483][ T311] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 498.514654][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 498.524548][ T311] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 498.525623][T18825] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6108'. [ 498.543139][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 498.543720][T18825] 0{X: renamed from gretap0 [ 498.556827][ T311] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 498.570775][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.570883][T18825] 0{X: left promiscuous mode [ 498.579866][ T311] usb 3-1: config 0 descriptor?? [ 498.584414][T18825] 0{X: entered allmulticast mode [ 498.595344][T18825] net_ratelimit: 22 callbacks suppressed [ 498.595364][T18825] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 498.617737][ T46] veth0_vlan: left allmulticast mode [ 498.623393][ T46] bridge0: port 3(veth0_vlan) entered disabled state [ 498.630738][ T46] bridge_slave_1: left allmulticast mode [ 498.636402][ T46] bridge_slave_1: left promiscuous mode [ 498.642258][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.649798][ T46] bridge_slave_0: left allmulticast mode [ 498.655742][ T46] bridge_slave_0: left promiscuous mode [ 498.661483][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.761541][T18828] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ4 [ 498.808682][T18805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.817285][ T311] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 498.817917][T18805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.839553][T18805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.853660][T18805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.878830][ T46] tipc: Disabling bearer [ 498.884304][ T46] tipc: Left network mode [ 498.885266][T18836] overlayfs: failed to clone lowerpath [ 498.903152][ T46] veth1_macvtap: left promiscuous mode [ 498.908959][ T46] veth0_vlan: left promiscuous mode [ 498.988386][T18852] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@qkp [ 498.988386][T18852] C< [ 499.020963][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.028074][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.038044][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.045125][ T8325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.075086][T18814] veth0_vlan: entered promiscuous mode [ 499.084129][ T311] usb 3-1: USB disconnect, device number 10 [ 499.090393][T18814] veth1_macvtap: entered promiscuous mode [ 499.094599][ T311] usblp0: removed [ 499.283101][T18872] SELinux: security_context_str_to_sid () failed with errno=-22 [ 499.307203][T18874] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.316373][T18874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:509 [ 499.377721][ T31] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 499.549151][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 499.555441][ T31] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 499.563981][ T31] usb 2-1: config 0 has no interface number 0 [ 499.571487][ T31] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 499.580556][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.588605][ T31] usb 2-1: Product: syz [ 499.592855][ T31] usb 2-1: Manufacturer: syz [ 499.597449][ T31] usb 2-1: SerialNumber: syz [ 499.603137][ T31] usb 2-1: config 0 descriptor?? [ 499.609099][ T31] ftdi_sio 2-1:0.128: FTDI USB Serial Device converter detected [ 499.617303][ T31] usb 2-1: Detected FT232H [ 499.826932][ T31] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 500.262532][ T31] ftdi_sio 2-1:0.128: GPIO initialisation failed: -5 [ 500.269888][ T31] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 500.916480][T18925] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=18925 comm=syz.7.6139 [ 501.041344][T18936] 9pnet_fd: Insufficient options for proto=fd [ 501.154960][T18947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=18947 comm=syz.7.6145 [ 501.176050][T18947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=18947 comm=syz.7.6145 [ 501.189381][T18947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=18947 comm=syz.7.6145 [ 501.202826][T18947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=18947 comm=syz.7.6145 [ 502.403995][ T45] usb 2-1: USB disconnect, device number 80 [ 502.417914][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 502.472450][ T45] ftdi_sio 2-1:0.128: device disconnected [ 502.751724][ T8325] Bluetooth: hci0: Frame reassembly failed (-84) [ 502.851529][ T36] audit: type=1400 audit(2000000078.966:1560): avc: denied { setattr } for pid=19015 comm="syz.5.6168" name="binder1" dev="binder" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 502.969743][ T45] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 503.130113][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 503.136431][ T45] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 503.144670][ T45] usb 2-1: config 0 has no interface number 0 [ 503.150771][ T45] usb 2-1: config 0 interface 184 has no altsetting 0 [ 503.159012][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 503.168119][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.176153][ T45] usb 2-1: Product: syz [ 503.180330][ T45] usb 2-1: Manufacturer: syz [ 503.184969][ T45] usb 2-1: SerialNumber: syz [ 503.190300][ T45] usb 2-1: config 0 descriptor?? [ 503.196268][ T45] smsc75xx v1.0.0 [ 503.332801][T19025] overlayfs: failed to clone upperpath [ 504.033510][T19053] overlayfs: failed to clone upperpath [ 504.045653][ T36] audit: type=1400 audit(2000000080.088:1561): avc: denied { setattr } for pid=19054 comm="syz.5.6182" name="HIDP" dev="sockfs" ino=106087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 504.780553][T19088] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6193'. [ 504.887265][T19102] tmpfs: Bad value for 'nr_inodes' [ 504.941062][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 504.954265][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 504.963784][ T1828] Bluetooth: hci0: command 0x1003 tx timeout [ 504.970031][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 504.981062][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 504.990810][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 505.001366][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 505.008115][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 505.017762][ T45] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 505.032233][ T45] usb 2-1: USB disconnect, device number 81 [ 505.353021][T19111] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 505.393213][ T36] audit: type=1400 audit(2000000081.304:1562): avc: denied { relabelfrom } for pid=19110 comm="syz.7.6199" name="UNIX" dev="sockfs" ino=106255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 505.417137][ T36] audit: type=1400 audit(2000000081.314:1563): avc: denied { relabelto } for pid=19110 comm="syz.7.6199" name="UNIX" dev="sockfs" ino=106255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 505.448012][T19116] 9pnet_fd: Insufficient options for proto=fd [ 505.515052][ T36] audit: type=1326 audit(2000000081.463:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19117 comm="syz.1.6202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5a298e929 code=0x0 [ 505.834812][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 505.996380][ T45] usb 3-1: config 4 has an invalid interface number: 95 but max is 0 [ 506.004678][ T45] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 506.016044][ T45] usb 3-1: config 4 has no interface number 0 [ 506.022365][ T45] usb 3-1: config 4 interface 95 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 506.032386][ T45] usb 3-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 506.044149][ T45] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 506.053448][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.061824][ T45] usb 3-1: Product: syz [ 506.066074][ T45] usb 3-1: Manufacturer: syz [ 506.070920][ T45] usb 3-1: SerialNumber: syz [ 506.246984][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6206'. [ 506.308151][ T45] usb 3-1: MIDIStreaming interface descriptor not found [ 506.320690][ T45] usb 3-1: USB disconnect, device number 11 [ 506.331581][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6207'. [ 506.351528][T12603] udevd[12603]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.95/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 506.441556][ T36] audit: type=1400 audit(2000000082.324:1565): avc: denied { accept } for pid=19145 comm="syz.7.6210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 506.491256][T19148] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 506.850437][ T577] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 506.890441][ T36] audit: type=1400 audit(2000000082.745:1566): avc: denied { getattr } for pid=19176 comm="syz.2.6221" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=106492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 507.021492][ T577] usb 2-1: device descriptor read/64, error -71 [ 507.045438][T19194] fuse: Unknown parameter 'fuse' [ 507.278058][ T577] usb 2-1: device descriptor read/64, error -71 [ 507.352943][T19208] bond_slave_0: entered allmulticast mode [ 507.439512][T19215] wg2: entered promiscuous mode [ 507.444600][T19215] wg2: entered allmulticast mode [ 507.534635][ T577] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 507.673614][ T577] usb 2-1: device descriptor read/64, error -71 [ 507.699980][T19220] /dev/rnullb0: Can't lookup blockdev [ 507.718749][T19222] netlink: 'syz.7.6239': attribute type 2 has an invalid length. [ 507.718755][T19223] netlink: 'syz.7.6239': attribute type 2 has an invalid length. [ 507.930246][ T577] usb 2-1: device descriptor read/64, error -71 [ 508.048816][ T577] usb usb2-port1: attempt power cycle [ 508.411287][ T577] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 508.455203][ T577] usb 2-1: device descriptor read/8, error -71 [ 508.594042][ T577] usb 2-1: device descriptor read/8, error -71 [ 508.821953][T19253] netlink: 57 bytes leftover after parsing attributes in process `syz.7.6251'. [ 508.871408][ T577] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 508.904106][ T577] usb 2-1: device descriptor read/8, error -71 [ 508.959828][T19261] rust_binder: Error while translating object. [ 508.959861][T19261] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 508.966138][T19261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:603 [ 509.031077][T19265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 509.046151][ T577] usb 2-1: device descriptor read/8, error -71 [ 509.061319][T19265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 509.061452][T19265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1091 [ 509.134989][T19271] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 509.144522][T19271] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 509.151033][T19271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1093 [ 509.181078][ T577] usb usb2-port1: unable to enumerate USB device [ 509.303597][T19297] rust_binder: Write failure EFAULT in pid:1101 [ 509.429458][T19314] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 509.437205][T19316] 9pnet_fd: Insufficient options for proto=fd [ 509.468755][T19322] overlayfs: failed to resolve 'index=on': -2 [ 509.493081][ T36] audit: type=1400 audit(2000000085.186:1567): avc: denied { map } for pid=19326 comm="syz.5.6278" path="/proc/646/net/pfkey" dev="proc" ino=4026533252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 509.494823][T19327] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 509.647582][T19332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:651 [ 509.647980][T19332] rust_binder: Error while translating object. [ 509.657282][T19332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 509.663894][T19332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:651 [ 509.688867][T19334] binder: Binderfs stats mode cannot be changed during a remount [ 509.759589][T19336] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 509.759970][T19336] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 509.775124][T19336] rust_binder: Write failure EINVAL in pid:655 [ 510.399723][ T577] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 510.449315][ T36] audit: type=1400 audit(2000000086.075:1568): avc: denied { write } for pid=19354 comm="syz.1.6289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 510.549473][ T577] usb 3-1: device descriptor read/64, error -71 [ 510.805976][ T577] usb 3-1: device descriptor read/64, error -71 [ 510.848719][T15887] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 511.009073][T15887] usb 2-1: Using ep0 maxpacket: 32 [ 511.015365][T15887] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 511.023776][T15887] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 511.032414][T15887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 511.041418][T15887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 511.051064][T15887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 511.060741][T15887] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 511.073770][T15887] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 511.082828][T15887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.090850][ T577] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 511.099445][T15887] usb 2-1: config 0 descriptor?? [ 511.233625][ T577] usb 3-1: device descriptor read/64, error -71 [ 511.321816][T15887] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 86 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 511.373784][ T45] usb 2-1: USB disconnect, device number 86 [ 511.380521][ T45] usblp0: removed [ 511.490231][ T577] usb 3-1: device descriptor read/64, error -71 [ 511.607872][ T577] usb usb3-port1: attempt power cycle [ 511.826853][T19387] netlink: 340 bytes leftover after parsing attributes in process `syz.7.6300'. [ 511.856319][T19392] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6302'. [ 511.865393][T19392] bridge_slave_1: left allmulticast mode [ 511.871069][T19392] bridge_slave_1: left promiscuous mode [ 511.877294][T19392] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.885119][T19392] bridge_slave_0: left allmulticast mode [ 511.891748][T19392] bridge_slave_0: left promiscuous mode [ 511.897637][T19392] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.971240][ T577] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 511.993617][ T577] usb 3-1: device descriptor read/8, error -71 [ 512.056298][T19402] overlayfs: failed to clone lowerpath [ 512.074482][T19406] @: renamed from vlan0 (while UP) [ 512.082921][T19408] tmpfs: Unknown parameter 's9' [ 512.132609][ T577] usb 3-1: device descriptor read/8, error -71 [ 512.198343][T19412] input: syz0 as /devices/virtual/input/input46 [ 512.361715][ T36] audit: type=1400 audit(2000000087.862:1569): avc: denied { accept } for pid=19421 comm="syz.1.6313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 512.398856][ T577] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 512.421370][ T577] usb 3-1: device descriptor read/8, error -71 [ 512.440479][T19430] rust_binder: Error while translating object. [ 512.440522][T19430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 512.446751][T19430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 512.561327][ T577] usb 3-1: device descriptor read/8, error -71 [ 512.687589][ T577] usb usb3-port1: unable to enumerate USB device [ 512.743515][T19433] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 513.582684][T19446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 513.595310][T19446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 513.611842][T19446] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 513.627148][T19446] rust_binder: Read failure Err(EFAULT) in pid:1106 [ 513.648380][T19446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 513.720689][T19462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 513.884645][T19470] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 513.958110][T19477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 513.964687][T19478] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 514.094638][T19483] rust_binder: Write failure EFAULT in pid:1118 [ 514.187640][ T36] audit: type=1400 audit(2000000089.573:1570): avc: denied { lock } for pid=19486 comm="syz.2.6335" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 514.211039][T19489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 514.218187][T19489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:665 [ 514.268137][T19493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=19493 comm=syz.2.6337 [ 514.281084][T19493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=19493 comm=syz.2.6337 [ 514.293884][T19493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=19493 comm=syz.2.6337 [ 514.306827][T19493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=19493 comm=syz.2.6337 [ 514.417250][T19499] /dev/rnullb0: Can't open blockdev [ 514.435269][ T8326] Bluetooth: hci0: Frame reassembly failed (-84) [ 514.599972][ T36] audit: type=1400 audit(2000000089.957:1571): avc: denied { mount } for pid=19514 comm="syz.7.6343" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 514.629929][T19517] netlink: 'syz.7.6344': attribute type 11 has an invalid length. [ 514.637972][T19517] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.6344'. [ 514.733132][T19538] overlayfs: failed to clone upperpath [ 515.035620][T19568] bpf: Bad value for 'mode' [ 515.243807][T19576] overlayfs: conflicting options: metacopy=off,verity=on [ 516.207239][T19619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 516.207274][T19619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:89 [ 516.228114][T19623] overlayfs: overlapping lowerdir path [ 516.254183][T19626] /dev/rnullb0: Can't open blockdev [ 516.273960][T19628] rust_binder: Error while translating object. [ 516.274007][T19628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 516.280248][T19628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 516.325352][T19630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6383'. [ 516.578884][ T1828] Bluetooth: hci0: command 0x1003 tx timeout [ 516.579001][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 517.273597][T19649] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 517.338668][ T36] audit: type=1326 audit(2000000092.529:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19648 comm="syz.1.6390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5a298e929 code=0x0 [ 517.375200][ T36] audit: type=1400 audit(2000000092.557:1573): avc: denied { attach_queue } for pid=19652 comm="syz.5.6391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 517.397596][T19649] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 517.703052][T19665] 9pnet_fd: Insufficient options for proto=fd [ 517.753519][T19670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 517.754353][T19670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 517.761264][T19670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1130 [ 517.785313][T19672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6399'. [ 517.804590][T19672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=19672 comm=syz.2.6399 [ 518.392725][ T36] audit: type=1400 audit(2000000093.502:1574): avc: denied { execute } for pid=19696 comm="syz.5.6408" name="file0" dev="ramfs" ino=110488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 518.415809][ T36] audit: type=1400 audit(2000000093.502:1575): avc: denied { execute_no_trans } for pid=19696 comm="syz.5.6408" path="/file0" dev="ramfs" ino=110488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 518.503201][ T713] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 518.666369][ T713] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 518.676017][ T713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.685283][ T713] usb 2-1: Product: syz [ 518.689630][ T713] usb 2-1: Manufacturer: syz [ 518.694286][ T713] usb 2-1: SerialNumber: syz [ 518.707614][ T713] usb 2-1: config 0 descriptor?? [ 519.005672][ T311] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 519.362679][T19689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.371440][T19689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.389302][ T713] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 519.405692][ T713] asix 2-1:0.0: probe with driver asix failed with error -71 [ 519.413394][T19782] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 519.420614][ T713] usb 2-1: USB disconnect, device number 87 [ 519.631832][T19799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.640457][T19799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.697090][T19799] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 520.072211][T19806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119 [ 520.072914][T19807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119 [ 520.316986][T19824] binder: Bad value for 'max' [ 520.344203][T19826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 521.265882][T19850] rust_binder: Write failure EINVAL in pid:143 [ 521.472056][T19857] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6460'. [ 521.591811][ T36] audit: type=1400 audit(2000000096.495:1576): avc: denied { ioctl } for pid=19860 comm="syz.1.6462" path="socket:[111280]" dev="sockfs" ino=111280 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 521.709264][T19880] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 522.059701][T19882] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 522.060059][T19882] rust_binder: Error in use_page_slow: ESRCH [ 522.066553][T19882] rust_binder: use_range failure ESRCH [ 522.072543][T19882] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 522.078059][T19882] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 522.086123][T19882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1164 [ 522.307648][T19901] overlayfs: failed to resolve './file0': -2 [ 523.081312][T19929] binder: Unknown parameter 'fsuuid' [ 523.088722][T19929] syzkaller0: entered promiscuous mode [ 523.094275][T19929] syzkaller0: entered allmulticast mode [ 523.101125][T19929] binder: Unknown parameter 'fsuuid' [ 523.276675][T19949] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaa [ 523.848482][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 524.067795][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6495'. [ 524.076805][T19967] bridge_slave_1: left allmulticast mode [ 524.082562][T19967] bridge_slave_1: left promiscuous mode [ 524.088458][T19967] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.096474][T19967] bridge_slave_0: left allmulticast mode [ 524.102181][T19967] bridge_slave_0: left promiscuous mode [ 524.108285][T19967] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.131324][T19968] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 524.404970][T19974] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 524.413713][T19974] rust_binder: Got transaction with invalid offset. [ 524.420254][T19974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 524.427012][T19974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 524.449968][T19976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 524.459228][T19976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:160 [ 524.468815][T19976] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 524.478003][T19976] rust_binder: Read failure Err(EFAULT) in pid:160 [ 524.497222][T19978] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 524.504554][T19978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:162 [ 524.523944][T19980] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 524.984349][T19985] tipc: Enabling of bearer rejected, failed to enable media [ 525.025262][T19992] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 525.025892][T19993] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1219 [ 525.095030][T19995] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 525.107393][T19995] netlink: 'syz.2.6505': attribute type 4 has an invalid length. [ 525.121681][T19995] netlink: 'syz.2.6505': attribute type 5 has an invalid length. [ 525.129492][T19995] netlink: 'syz.2.6505': attribute type 1 has an invalid length. [ 525.137876][T19996] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 525.145131][T19996] rust_binder: Write failure EINVAL in pid:1222 [ 525.145191][T19995] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 525.158649][T19995] rust_binder: Write failure EINVAL in pid:1222 [ 525.238292][T20002] devtmpfs: Unknown parameter '^ *([%' [ 525.444798][T20006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 525.457509][T20008] binder: Unknown parameter 'fsconV)ߩ* 6{' [ 525.511090][T20013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 525.511473][T20013] rust_binder: Write failure EINVAL in pid:174 [ 525.518396][T20013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:174 [ 525.537027][T20017] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 526.486861][T20027] binder: Bad value for 'defcontext' [ 526.523283][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 526.526032][T20031] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 526.538259][T20031] SELinux: failed to load policy [ 526.544345][T20031] overlayfs: missing 'lowerdir' [ 526.958980][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6528'. [ 527.079197][T20065] overlay: ./file1 is not a directory [ 527.681570][T20068] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 527.867642][T20072] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6531'. [ 527.867967][T20073] 9pnet_fd: Insufficient options for proto=fd [ 528.458072][T20079] binder: Unknown parameter 's}a)' [ 528.723426][ T1828] Bluetooth: hci0: command 0x1003 tx timeout [ 528.723589][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 528.787619][ T713] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 528.841582][T20089] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 528.894259][T20098] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 528.894976][T20098] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 528.969301][ T713] usb 3-1: Using ep0 maxpacket: 16 [ 528.982922][ T713] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 528.991849][ T713] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.001990][ T713] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 529.011105][ T713] usb 3-1: config 1 has no interface number 1 [ 529.017367][ T713] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 529.030409][ T713] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 529.041807][ T713] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 529.051120][ T713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.059365][ T713] usb 3-1: Product: syz [ 529.063564][ T713] usb 3-1: Manufacturer: syz [ 529.068425][ T713] usb 3-1: SerialNumber: syz [ 529.289394][T20087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 529.290295][T20087] rust_binder: inc_ref_done called when no active inc_refs [ 529.302150][ T713] usb 3-1: USB disconnect, device number 17 [ 529.859174][T20132] kvm: pic: non byte read [ 529.863715][T20132] kvm: pic: level sensitive irq not supported [ 529.863761][T20132] kvm: pic: non byte read [ 529.874417][T20132] kvm: pic: level sensitive irq not supported [ 529.874462][T20132] kvm: pic: non byte read [ 529.885176][T20132] kvm: pic: level sensitive irq not supported [ 529.885224][T20132] kvm: pic: non byte read [ 529.895974][T20132] kvm: pic: level sensitive irq not supported [ 529.896017][T20132] kvm: pic: non byte read [ 529.906639][T20132] kvm: pic: level sensitive irq not supported [ 529.906683][T20132] kvm: pic: non byte read [ 529.913795][T20134] netlink: 'syz.2.6552': attribute type 15 has an invalid length. [ 529.917433][ T36] audit: type=1400 audit(2000000104.287:1577): avc: denied { mounton } for pid=20131 comm="syz.2.6552" path="/425/file0" dev="configfs" ino=2116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 530.081144][ T311] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 530.135835][ T45] ================================================================== [ 530.143954][ T45] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 530.150762][ T45] Write of size 8 at addr 0000000000000098 by task kworker/1:1/45 [ 530.158603][ T45] [ 530.160948][ T45] CPU: 1 UID: 0 PID: 45 Comm: kworker/1:1 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 530.160981][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 530.160997][ T45] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 530.161061][ T45] Call Trace: [ 530.161069][ T45] [ 530.161080][ T45] __dump_stack+0x21/0x30 [ 530.161108][ T45] dump_stack_lvl+0x10c/0x190 [ 530.161133][ T45] ? __cfi_dump_stack_lvl+0x10/0x10 [ 530.161158][ T45] print_report+0x3d/0x70 [ 530.161175][ T45] kasan_report+0x163/0x1a0 [ 530.161205][ T45] ? down_write+0x83/0x2a0 [ 530.161230][ T45] ? down_write+0x83/0x2a0 [ 530.161254][ T45] kasan_check_range+0x299/0x2a0 [ 530.161284][ T45] __kasan_check_write+0x18/0x20 [ 530.161309][ T45] down_write+0x83/0x2a0 [ 530.161332][ T45] ? __cfi_down_write+0x10/0x10 [ 530.161357][ T45] ? _raw_spin_lock+0x8c/0x120 [ 530.161385][ T45] ? __cfi__raw_spin_lock+0x10/0x10 [ 530.161415][ T45] ? mutex_unlock+0x8b/0x240 [ 530.161438][ T45] ? __cfi_mutex_unlock+0x10/0x10 [ 530.161461][ T45] rust_binderfs_remove_file+0x6c/0x110 [ 530.161487][ T45] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 530.161525][ T45] ? unwind_next_frame+0x3c2/0x750 [ 530.161547][ T45] ? __kernel_text_address+0x11/0x40 [ 530.161569][ T45] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 530.161603][ T45] ? arch_stack_walk+0x139/0x170 [ 530.161631][ T45] ? ret_from_fork_asm+0x1a/0x30 [ 530.161660][ T45] ? stack_trace_save+0x9d/0xe0 [ 530.161687][ T45] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 530.161726][ T45] ? stack_depot_save_flags+0x38/0x800 [ 530.161753][ T45] ? update_load_avg+0x506/0x19a0 [ 530.161776][ T45] ? detach_entity_load_avg+0x7b0/0x7b0 [ 530.161808][ T45] ? kasan_save_stack+0x4d/0x60 [ 530.161837][ T45] ? kasan_save_stack+0x3e/0x60 [ 530.161866][ T45] ? __kasan_record_aux_stack+0xb2/0xd0 [ 530.161891][ T45] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 530.161916][ T45] ? __call_rcu_common+0xcc/0x6f0 [ 530.161944][ T45] ? call_rcu+0x14/0x20 [ 530.161973][ T45] ? __kasan_check_write+0x18/0x20 [ 530.161998][ T45] ? _raw_spin_trylock+0xaf/0x130 [ 530.162030][ T45] ? __cfi__raw_spin_trylock+0x10/0x10 [ 530.162062][ T45] ? _raw_spin_unlock+0x45/0x60 [ 530.162092][ T45] ? call_rcu_nocb+0x6bd/0xc10 [ 530.162116][ T45] ? swake_up_one_online_ipi+0x30/0x30 [ 530.162139][ T45] ? __cfi_delayed_put_task_struct+0x10/0x10 [ 530.162166][ T45] ? __call_rcu_common+0x40b/0x6f0 [ 530.162196][ T45] ? call_rcu_hurry+0x30/0x30 [ 530.162224][ T45] ? task_dead_fair+0x110/0x190 [ 530.162251][ T45] ? __cfi_task_dead_fair+0x10/0x10 [ 530.162280][ T45] ? call_rcu+0x14/0x20 [ 530.162308][ T45] ? put_task_struct_rcu_user+0x66/0xb0 [ 530.162331][ T45] ? __switch_to_asm+0x3d/0x70 [ 530.162360][ T45] ? __schedule+0x1463/0x1f10 [ 530.162382][ T45] ? kick_pool+0xad/0x550 [ 530.162403][ T45] process_scheduled_works+0x7d2/0x1020 [ 530.162438][ T45] worker_thread+0xc58/0x1250 [ 530.162471][ T45] kthread+0x2ca/0x370 [ 530.162503][ T45] ? __cfi_worker_thread+0x10/0x10 [ 530.162534][ T45] ? __cfi_kthread+0x10/0x10 [ 530.162566][ T45] ret_from_fork+0x64/0xa0 [ 530.162598][ T45] ? __cfi_kthread+0x10/0x10 [ 530.162631][ T45] ret_from_fork_asm+0x1a/0x30 [ 530.162663][ T45] [ 530.162672][ T45] ================================================================== [ 530.517330][ T45] Disabling lock debugging due to kernel taint [ 530.523822][ T45] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 530.531661][ T45] #PF: supervisor write access in kernel mode [ 530.537740][ T45] #PF: error_code(0x0002) - not-present page [ 530.543744][ T45] PGD 0 P4D 0 [ 530.547151][ T45] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 530.553237][ T45] CPU: 1 UID: 0 PID: 45 Comm: kworker/1:1 Tainted: G B 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 530.568107][ T45] Tainted: [B]=BAD_PAGE [ 530.572267][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 SYZFAIL: failed to send rpc fd=3 want=264 sent=0 n=-1 (errno 32: Broken pipe) [ 530.582343][ T45] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 530.599150][ T45] RIP: 0010:down_write+0x9a/0x2a0 [ 530.604215][ T45] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 dd 1c 55 fc 4c 89 f7 be 08 00 00 00 e8 d0 1c 55 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 530.615989][ T36] audit: type=1400 audit(2000000104.867:1578): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2400]" dev="pipefs" ino=2400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 530.623859][ T45] RSP: 0018:ffffc900002ef500 EFLAGS: 00010256 [ 530.623885][ T45] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 530.660893][ T45] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900002ef520 [ 530.668889][ T45] RBP: ffffc900002ef598 R08: ffffc900002ef527 R09: 1ffff9200005dea4 [ 530.674267][ T36] audit: type=1400 audit(2000000104.998:1579): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 530.676877][ T45] R10: dffffc0000000000 R11: fffff5200005dea5 R12: dffffc0000000000 [ 530.706646][ T45] R13: 1ffff9200005dea0 R14: ffffc900002ef520 R15: 0000000000000000 [ 530.714733][ T45] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 530.723697][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.730306][ T45] CR2: 0000000000000098 CR3: 000000010c31c000 CR4: 00000000003526b0 [ 530.738305][ T45] Call Trace: [ 530.741601][ T45] [ 530.743946][ T36] audit: type=1400 audit(2000000104.998:1580): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.744547][ T45] ? __cfi_down_write+0x10/0x10 [ 530.770737][ T45] ? _raw_spin_lock+0x8c/0x120 [ 530.775531][ T45] ? __cfi__raw_spin_lock+0x10/0x10 [ 530.780765][ T45] ? mutex_unlock+0x8b/0x240 [ 530.785766][ T45] ? __cfi_mutex_unlock+0x10/0x10 [ 530.790798][ T45] rust_binderfs_remove_file+0x6c/0x110 [ 530.796359][ T45] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 530.809165][ T45] ? unwind_next_frame+0x3c2/0x750 [ 530.814297][ T45] ? __kernel_text_address+0x11/0x40 [ 530.819587][ T45] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 530.825753][ T45] ? arch_stack_walk+0x139/0x170 [ 530.830708][ T45] ? ret_from_fork_asm+0x1a/0x30 [ 530.835657][ T45] ? stack_trace_save+0x9d/0xe0 [ 530.840530][ T45] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 530.853731][ T45] ? stack_depot_save_flags+0x38/0x800 [ 530.859199][ T45] ? update_load_avg+0x506/0x19a0 [ 530.864225][ T45] ? detach_entity_load_avg+0x7b0/0x7b0 [ 530.869782][ T45] ? kasan_save_stack+0x4d/0x60 [ 530.874640][ T45] ? kasan_save_stack+0x3e/0x60 [ 530.879497][ T45] ? __kasan_record_aux_stack+0xb2/0xd0 [ 530.885048][ T45] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 530.891031][ T45] ? __call_rcu_common+0xcc/0x6f0 [ 530.896062][ T45] ? call_rcu+0x14/0x20 [ 530.900240][ T45] ? __kasan_check_write+0x18/0x20 [ 530.905404][ T45] ? _raw_spin_trylock+0xaf/0x130 [ 530.910464][ T45] ? __cfi__raw_spin_trylock+0x10/0x10 [ 530.915950][ T45] ? _raw_spin_unlock+0x45/0x60 [ 530.920861][ T45] ? call_rcu_nocb+0x6bd/0xc10 [ 530.925656][ T45] ? swake_up_one_online_ipi+0x30/0x30 [ 530.931135][ T45] ? __cfi_delayed_put_task_struct+0x10/0x10 [ 530.937130][ T45] ? __call_rcu_common+0x40b/0x6f0 [ 530.942265][ T45] ? call_rcu_hurry+0x30/0x30 [ 530.946990][ T45] ? task_dead_fair+0x110/0x190 [ 530.951865][ T45] ? __cfi_task_dead_fair+0x10/0x10 [ 530.957076][ T45] ? call_rcu+0x14/0x20 [ 530.961241][ T45] ? put_task_struct_rcu_user+0x66/0xb0 [ 530.966790][ T45] ? __switch_to_asm+0x3d/0x70 [ 530.971565][ T45] ? __schedule+0x1463/0x1f10 [ 530.976251][ T45] ? kick_pool+0xad/0x550 [ 530.980586][ T45] process_scheduled_works+0x7d2/0x1020 [ 530.986144][ T45] worker_thread+0xc58/0x1250 [ 530.990836][ T45] kthread+0x2ca/0x370 [ 530.994915][ T45] ? __cfi_worker_thread+0x10/0x10 [ 531.000031][ T45] ? __cfi_kthread+0x10/0x10 [ 531.004631][ T45] ret_from_fork+0x64/0xa0 [ 531.009054][ T45] ? __cfi_kthread+0x10/0x10 [ 531.013666][ T45] ret_from_fork_asm+0x1a/0x30 [ 531.018441][ T45] [ 531.021470][ T45] Modules linked in: [ 531.025370][ T45] CR2: 0000000000000098 [ 531.029525][ T45] ---[ end trace 0000000000000000 ]--- [ 531.035070][ T45] RIP: 0010:down_write+0x9a/0x2a0 [ 531.040136][ T45] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 dd 1c 55 fc 4c 89 f7 be 08 00 00 00 e8 d0 1c 55 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 531.059758][ T45] RSP: 0018:ffffc900002ef500 EFLAGS: 00010256 [ 531.065842][ T45] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 531.073820][ T45] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900002ef520 [ 531.081795][ T45] RBP: ffffc900002ef598 R08: ffffc900002ef527 R09: 1ffff9200005dea4 [ 531.089862][ T45] R10: dffffc0000000000 R11: fffff5200005dea5 R12: dffffc0000000000 [ 531.097929][ T45] R13: 1ffff9200005dea0 R14: ffffc900002ef520 R15: 0000000000000000 [ 531.105907][ T45] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 531.114840][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.121427][ T45] CR2: 0000000000000098 CR3: 000000010c31c000 CR4: 00000000003526b0 [ 531.129410][ T45] Kernel panic - not syncing: Fatal exception [ 531.135738][ T45] Kernel Offset: disabled [ 531.140133][ T45] Rebooting in 86400 seconds..