last executing test programs: 4.248128997s ago: executing program 0 (id=96): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f0000000240)={0x67446698, 0x0, 0x0, 0x4, 0x2, "7059c72dee6d42e1151f123bc6f5b31aa6f9a8a5d0c494b2297ee9f6b58f645549c854316ee3378bf9b036a878f1efb39b4f67e31b8a5a348f1dda63958bfe947020aca13eb8c34dded4f99e0cb46bf4f3f3160b578c29680d0ab79e64b7b0d3e9"}, 0x71) (async) write$nbd(r2, &(0x7f0000000240)={0x67446698, 0x0, 0x0, 0x4, 0x2, "7059c72dee6d42e1151f123bc6f5b31aa6f9a8a5d0c494b2297ee9f6b58f645549c854316ee3378bf9b036a878f1efb39b4f67e31b8a5a348f1dda63958bfe947020aca13eb8c34dded4f99e0cb46bf4f3f3160b578c29680d0ab79e64b7b0d3e9"}, 0x71) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup(r4) (async) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/30, 0x1e) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r8, 0x1, 0xfffffffe, 0x25dfdbfc, {0x3}}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r9, 0x8, &(0x7f0000000040)={0x0, 0x0, 0xc00000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r10 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40088a01, &(0x7f0000000000)=0x100) (async) ioctl$FS_IOC_SETFLAGS(r10, 0x40088a01, &(0x7f0000000000)=0x100) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) r12 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r12, &(0x7f0000000080)) ioctl$BLKIOMIN(r5, 0x1278, &(0x7f00000000c0)) (async) ioctl$BLKIOMIN(r5, 0x1278, &(0x7f00000000c0)) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000010401f2ffffff0000000000aa000006"], 0x14}, 0x1, 0x0, 0x0, 0x20008045}, 0x0) 4.11391832s ago: executing program 0 (id=97): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x20, 0x0, 0x84}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, {}, {0x8000, 0x0, 0x0, 0xfffff7fffffffffe}, {}, 0x70bd2b, 0x2, 0x2, 0x0, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @algo_aead={0x4c, 0x12, {{'gcm_base(cbc(des3_ede),sha256-generic)\x00'}}}]}, 0x184}}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000001100)={0x480, {{0x2, 0x4e20, @multicast2}}}, 0x88) (async, rerun: 32) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f00000011c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}], 0x1, 0x4008000) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) ioctl$BLKRRPART(r2, 0x125f, 0x0) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 64) 3.834168636s ago: executing program 0 (id=98): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0xc0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x5, 0x7fffffff) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000180)={'broute\x00', 0x0, 0x3, 0x25, [0x40, 0x7, 0x8, 0x8, 0x4, 0x6], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000140)=""/37}, &(0x7f0000000240)=0x78) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="73573b4ffa5141778d5c9e6818f080c44a45f38ab27804cd4e31b8d6275898526990d2266a51158cdf5292c9f1fa154bc3f6d2470500e895", @ANYBLOB="fa4099ef8ab9b2bfbff124afcadfcb8a5dcaa436c82f81f369199b932d07fa9564071cd886449172ee6d3a07b074697d5fc60cc516f7c5a85201ecebece914121b64bec9dcca61e594b7f6040ebc7364b289b2ec9249a0535c94fb4ded81d9c59fdbdd023f86625ea5774d2a51816a9e369ef339de1d2c0cd72e3a4bca6a9068caea05fefea9a4f9596e7cab63d8266e690099d9cac75c209ab0ab71d94b7f3c3661ee894255cd418e3ee0d83658737c9e45220745e81ff3c12681cda343cee60e8b234ad17bba84", @ANYRESOCT=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000300)=0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(0x0) sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') lremovexattr(&(0x7f00000000c0)='./file1\x00', 0x0) openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r8 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={0x20000, 0x20, 0x2}, 0x18) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9) execveat$binfmt(0xffffffffffffff9c, r7, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 3.325596095s ago: executing program 0 (id=99): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xcb, &(0x7f0000000fc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x2, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x7}, [@selector_unit={0x6, 0x24, 0x5, 0x4, 0x6, "de"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0xff, 0x6}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0x9, 0x8, 'w'}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x6, 0x3, [0x8, 0x0, 0x7], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x2, 0x2, 0x90, "af839f", "c481"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x2, 0x9, 0x0, "8c91", "fc3032"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x9, 0x1, "", "d99698"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x4, 0x80, {0x7, 0x25, 0x1, 0x2, 0x9, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x2}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x800, 0x81, 0x6, 'J'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x40, 0x9, 0xff, {0x7, 0x25, 0x1, 0x0, 0x0, 0x3}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x0, 0x5, 0x72, 0x4, 0x10, 0x4}, 0x73, &(0x7f0000000640)={0x5, 0xf, 0x73, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x8, 0x9, 0x100}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x80, 0x2, 0x100}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "e38b72a10789233921975b9dd3be3138"}, @ptm_cap={0x3}, @generic={0x1f, 0x10, 0x4, "f0e5fc1d6761ed4cef55ee74978f7f6679182a438a3a12b2ceaee92f"}, @ssp_cap={0x24, 0x10, 0xa, 0xfe, 0x6, 0x1ff, 0xf0f, 0x4, [0xf, 0x7f80c0, 0xff0000, 0x7345a7678a2bb655, 0x3f00, 0xff3f0f]}]}, 0x2, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x446}}, {0x8d, &(0x7f00000010c0)=@string={0x8d, 0x3, "a1c5e68d757ecc0f45f448307021c5297ac973d71fc9fd532df3c175c627d2218e41d5b22e4289da3fedfca48e0a2867d1844e6473571de736592a9a2a2baf64b67c0d63433632c745125af5ed9959ba4f546919784741b325c36a7f15f4bcc9d8e29cdc1ad6956522fd9c494603c7467e41efe9208fd5c6f36d4b41e8efd72a15142aaac04227f6aff336"}}]}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="401546000000f63e12d474b3435cfb01d649c269469d4a6467ee57d4916a4da395cee28ee6d13e1bf8550fb44e1e845273a132ff4425581146b91279e42b8830ff"], &(0x7f00000008c0)={0xa1, 0x1, 0x400, "2aac8ccbd1b0851b263ee5483bdeae474e9d9d7e6065ae5e06bba998857aaf1da65a2d3f25d4dcb6f240b457d2e41b9682eb046a634c1e087485f1cbfa03e60cb76b225d312cb1a95c93725e9838cc1369f0c5d67fdc9e664befb3ca6b09c9eea7210f2b16cf9c17f3a52bdc0f30bd09ead8c39eaa54fd759a8238cedd46ec5245312df46fb04f73a600ddab3052ec4abae491b94b34d53f2f69b82d67ea9575622f59b1671aab73441803a8256f55e0d3309e7c87478b9d24f35edbc62967d0763930ec907f00730c4c4926dcfd9f3391a4d70ddf68173cb43f3e7fe70b68321603a06b18add2d5eef89ede73b4c1e7a16dcaf0a9f75d6fe9d674f3ade7aedd4a39cc977d52f6f562d63c271e1b5399d828bbc7e8b3d238bb50871661ef6d2cee4a9a3e523167e395133dd4df2994a9d6958064229ed366ce5dd0f256c6cdf18bfda9da68cda4cd1443e8a8f67953c5b24258f1ccd9e514ed186c507bddd2477a9d6e953298c145c8a974f05c0ae2637ee01198d7f94de7ecbc0bb2d084c804f72e7393162f86fc7202e8395df0213bc5e1e0da856132ae00a649fc7a3a26a8a5b022a48dbfe81847ae08706c9c7366d5a16fb6ac68f0f436ad5fa0f289d74438a7c208c92bdc597fb2da2f19e222bde02b874e70e2f2a2a50b906f7fed4358450a8803950f68d7bdc3332fd645d03c61f177e0e602f69cc41772ccbdf70a35f5fdf313f5788f863ad5534d303b6dfe42fbffdd47efa0df5b7bf01dbd8e0038caa023b36e40988b5619d318c989a470d95bdd0ca9bb3610d19502d12c091256090d88d9345f9c89e1a24566e2536ad151a3e462160417319ba34979ac13fb7e713f0d2aa151f40b52d360a82e2a2420e4181bcffbe0f6c8007241fa6a0c2789beab1f366db4af3f28a114dd97eb1a4beffb99d7df3437fb8263cde23c44fcd8a6e73e1107360b8e417204e135464d8f996b86a1812c253408fb78737a368b1b88e4cc8585487fe39961896ed1b093c21cfc456c5dc6a177dcb881b776053468ee0d1ff7ffc05599a383b7c1c16b38fe3cd7c3d3386b4f974075f09a196cba336bbba2defa91763ab5c7bf973c12d8de66937a7a5a8116b47a98b01977970ce43772e78f5c4862ad2ca5a2cc1a5cc191dca2ae031c867c4cca9598ba2332bcba7379c7f5b97c91240870737686edf1b3c4d4fd32d091cf865f5596f24d9130b40a1e3a62b40dfa7908d8cb679400add3a72d06f6dd738aaf5cdae9c2979c56136a7f566d0062c38cdb3e472024ffb6fe1e3e1042d4411a7d9cf9936aa464dda64898d602a584024c3f6b0cc45c9009af1bffd80bebec4bf8a6aec280bf078dc82c0700b8394271eedd7debd57e5c9a09fb997da37fd3306ca0a51459f299b48bf0908f5c9be3c31379c4f1dea89841fa49cee8a459316e553fed7f31fbe714de"}, &(0x7f0000000140)=ANY=[@ANYBLOB="1042010000009384e078a91f08dc44fcd0be9adce460c31a22be392d474f6786df19c75bb6a9cc3f546f7adf8eddfaf05f3774bef5c605779fc1c09f88431d47b9958e94484d7051c18d05a307e2cae5442b9c3b4a3e75d5731a96274437d038f77ecd91b454dfe3d217055efbc5664c18d47a36"]}) (async) close(0xffffffffffffffff) (async, rerun: 32) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235004000000f30b9fa000000130f01d9d90f78c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba000000000f30660fc775022e0fba600c9864660ffc76002f3166b857000f00d0", 0x55}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r7, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000001180)="650f985c0ada870000f20f1c8780000ffe8b000066b80500000066b9e40800000f01d96766c7442400000000006766c7442402004800006766c744240600000000670f011c240f20e06635000001000f22e0d366a22e65670f01cab8d4000f00d0", 0x61}], 0x1, 0x40, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)={{0x1, 0x0, 0x80, {0xeeee8000, 0x8000000, 0x6}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcfbaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd92ac431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fae33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b3775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f599b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd317069083a5632b5cfc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2baeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e26d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf532a55da91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a6da5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6a4ee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a6fffffffffffffe3be6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfcafdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a774f129d4a80f88c5660511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938ec40762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f646ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb3f9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c317feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a0800206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182099b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) (async, rerun: 32) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (rerun: 32) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r9, 0x4018aee2, &(0x7f0000000080)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x8000000000000001}) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x2a0, &(0x7f0000000d00)={[{0x87, 0x4e00, "3867d5e425559187cd946439d47a4c8782aa15220476ddae0ba44d189d491e4c3c83c0800e3effe2b94d9ff477d8e112c94355a5ed19dd110f0076e70e110630f85559649febaeed6ce8b8171869e636f594ccba5e9f4ff74d43bf159f9583ad008f365df860e9cbbe262dbbcd94df7132c71db6b85cdfdc651c90b79a993d6023a4bc527fc4ee"}, {0x56, 0x4e00, "57f4857acd0dfed9c305389206904f98eca10d7c1efe222ec8ccb3b028fa26cd988971de60d9e5fb222cc4d64e982b1ab53004a6a48074c0f85972747e651b7baaa6d60045661f39007f4b12ba92db1956ad71f9558b"}, {0xb3, 0x4e00, "3115806706748e2b452053384d5250af652d9a6771c32581091d28e1c2dfc0d90d0d926de450c130163459b35935ed14fd61a2415357e3bbd1172528b9edd065c1a017037a2182d7a8dbf18caaa3177bce1e60d5cbc3ff8228df437bb7b90e8effd1c3abbcf11eba1e228393562a1ebece5fc0aef9d5d9bc2ac04b140c638ee46533ac255f5c5e07344eac5f218b2a903bbce332ead792582cb54a1c862782757daeca6398195f01a88eb0101a0a3eb995ee99"}, {0xfc, 0x4e00, "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"}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f00000001c0)={0x20, 0x22, 0x36, {0x36, 0x1, "54fff2550e9771cc3d3a94062d947886692a5e02d1d42b6a3272f2c2baa3ff72980c3e6973d0f0697026bd8ee4ec8be7e8bfc6e2"}}, &(0x7f0000000700)=ANY=[@ANYBLOB="00030400000000039fdf6b00bc0f10e70aec4a81f6a6e33b2dacd4f177a88d6d8f1d61b992a2034ae6acacdfbc7f254372205980700059714add177ca0aa7e83113b51be6f2aa25b5bce7acbe3104c22dcdae0ad8df72a1f8eed19da54b606fe3eb0f3e64bdf5ef0d67ecc4333e3fb81149ac24b715c0598936dfbe0852c47f972f2ca20fec26d19a75442372c775d49af2b7988db225a4a953297160426456f5e03fa7f5f1297cfc574ac7c1fb335fc60581373c0d24610875958"]}, &(0x7f00000005c0)={0x44, &(0x7f00000003c0)={0x40, 0x13, 0x86, "d02aad8b08db42dddb00981eebb24d176b7443c4ccf2849a53a672691af5630fc97243027f5cdf669c0f95f511daecaffb01fb07454b6c01ff2613617002594a539f4554758460f7d283373609a37dc455c6c6f4a762783b42b9ee9a45458b698afd3fe05da0d86987750c269d05ecd945b68cd41e5157678126821b72ef96a38cc4bb8e88a5"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000200)=ANY=[@ANYBLOB="2081c3feffffdd3f818ac00628667d481509171416c390e67c51f312b1717827e521c1e825a148e073dbac7ae727f02073c96bd7"], &(0x7f00000004c0)={0x20, 0x82, 0x3, "aba429"}, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0x20, 0x84, 0x3b, "54bd85ff"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "8740e1"}}) (rerun: 32) 2.649897728s ago: executing program 0 (id=102): write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) 2.648302008s ago: executing program 0 (id=103): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x50, 0x0, &(0x7f0000000400)="b9d787b3af89a5d99a5a970a084485fae40e5ad0c55c8de8677cb6d6c24e611e69b89827d15313e6a00abff49a2b981f3f98967aff7a8c71c6ae7fbe95c5a960489eaa8e65f3104c316074bb0090243d"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0xa8, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@handle={0x73682a85, 0x100, 0x3}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}}, @enter_looper, @decrefs={0x40046307, 0x1}, @register_looper, @release={0x40046306, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1100, 0x1}, @flat=@weak_binder={0x77622a85, 0x1001, 0x3}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}}, @acquire], 0x81, 0x0, &(0x7f0000000700)="a96de94e3d23c0a93270126eb1b22172f0593d1b6e5afabd3682384fd597d10c8cfa07ae90c2488a80ea1c379eab97373021ede320ae4f6105ce0a8af886c9b32a34df98567a95863097383c13b30471ea985ec1e6c5d52242a055360d58f9280d1af1588612a858e5c644a852d913373cdb8dbf03934e4129ce24b10c4c0ab89e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) eventfd(0x8e) io_submit(0x0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES32=r3], 0x0) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0x2000775) r5 = dup(r4) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, &(0x7f0000000200)={0x11, 0x0, r8}, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x3fb, 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000340)="100306", 0x3, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) sendto$packet(r5, &(0x7f0000000040)="bf078680770284ed6f7901e0784c3e375188a44db9c8228d51548fdeccd4ef0d0362e17ffaca45cc38b9b2d3fc564ba89fe6c05b9a8b0149f0eaad42a93caf0570378df4d203fa885b5cdfb882942f0e725f6ebb1bd9a27525e5c49290fe15f69abad459ae503b4d4aac", 0x6a, 0x4000005, &(0x7f0000000100)={0x11, 0x19, r8, 0x1, 0x3, 0x6, @random="8abe61bb3721"}, 0x14) 2.57824426s ago: executing program 2 (id=104): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000580)=[{&(0x7f0000000700)="d264aec9900ecd9fcebed12d6d44", 0xe}], 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) close(r2) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') openat(r3, &(0x7f0000000000)='./file0\x00', 0x400000, 0x1) write$binfmt_format(r3, &(0x7f0000000300)='1\x00', 0x2) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x2012) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 2.508437881s ago: executing program 2 (id=105): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x24, 0x2a, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x12}]}, 0x24}], 0x1}, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 2.421821373s ago: executing program 2 (id=106): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r0, 0x0, 0x8001, &(0x7f0000000e00)="129a0a6b6b536e123c359b237855b367813fa23269bdead37faf05634e5a88cbaeb2dd64a5fb4abe697b606b31ed53351d5b4a673f03f859c0e71939c04db89bb7c090", 0x43) (async) setsockopt(r0, 0x0, 0x8001, &(0x7f0000000e00)="129a0a6b6b536e123c359b237855b367813fa23269bdead37faf05634e5a88cbaeb2dd64a5fb4abe697b606b31ed53351d5b4a673f03f859c0e71939c04db89bb7c090", 0x43) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, 0xfffffffffffffffe) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@private1, 0x56}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x40040, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]}) socket(0x80000000000000a, 0x2, 0x0) close_range(0xffffffffffffffff, r5, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0x7, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x7ffffffe, r7, &(0x7f00000001c0)={0x30000000}) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x422100, 0x81) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x422100, 0x81) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.372405364s ago: executing program 2 (id=107): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x9e4c, 0x4402) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000140)=0x4) r2 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r2, 0x80079a0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r2, r2, 0x0, 0x200001) syz_usb_control_io$sierra_net(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x40, 0x15, 0x46, "f63e12d474b343087e9eb73f3588d0603e405cfb01d649c269469d4a6467ee57d4916a4da395cee28ee6d13e1bf8550fb44e1e845273a132ff4425581146b91279e42b8830ff"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000080)={0x21, 0x0, 0x1, "93"}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r3, 0xffffffffffffffff, 0x0) 1.201863496s ago: executing program 3 (id=125): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a80070002000300000000000000040037"], 0x34}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a80070002000300000000000000040037"], 0x34}], 0x1}, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) 1.061929649s ago: executing program 3 (id=126): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x10, r1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89b1, &(0x7f0000000900)={'wg1\x00', @remote}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.053554799s ago: executing program 3 (id=127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2}, &(0x7f0000000080)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@empty, @in6=@local, 0x4e23, 0x9, 0x4e24, 0x8, 0xa, 0x90, 0x20, 0x1, r2, r3}, {0xf, 0x4, 0x10000, 0xa0000000, 0x0, 0x6, 0xfffffffffffff001, 0x86}, {0x200000, 0x4, 0x2, 0x4}, 0x0, 0x6e6bb6, 0x1, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0xa, @in=@remote, 0x3504, 0x0, 0x0, 0x70, 0x5, 0x6, 0x81}}, 0xe8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000280)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req={0x0, 0x7, 0x8, 0x21}, 0x10) r6 = dup(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00050000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff000000000000000000000000060000000401"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$pppl2tp(r9, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0004110004000000b9a66eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042008be000000030c000800050086dd88a888be00000002160966040100000000008100080022eb00020000200cf0020200000000000002000494030800655800000002"], 0x7a) write$tun(r7, &(0x7f00000002c0)=ANY=[], 0xfdef) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r11, 0x4008af60, &(0x7f0000000280)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 909.924462ms ago: executing program 3 (id=129): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000340)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xdc\xfd\xd2\xf3\b>\x1bU\t\x00\x00\x00\x00\x00\x00\x003\x1f\xc5!\xb2\x1bs\xfc\x00\x00\x00\x0043\b_kj\xa4\x93\xf2\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8cfV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\x88\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\xc5BN\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12J\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7?\xb2\xa2\xda\xfeX\x12;w\x17f\xd6\x0e\xf9S[\xa3\x99\n7c\xc5\xbb\xd2\xb9\xa3k\xaa\x9e\xe9\xb4\xb22m\xdd\xa9\xc1\x01\x00\x00\x00\x00\x00\x00\x00\xf7e_\xe6\xd5\xcf\x8a\x13sF\xc3\x83\x0e=\x00\x00\x00\x00\x00\x00\xf1\xff\xff\xff\xff\xff\xff\xff\x00\x00\xb8Y\xd0\x13F4$6\xb0I\xc3\xfas\xdcnq\\\x19\xb5S\t\x9d$D9Q_\xa7\xd0\xe8\xe7\xa4\xee\x19\x86/j\xb7A\xd7\xfb\x13\xbf\xcd\xb2m\x9fY]$\x8d:M\x7f\xdd\r\xcdM\xc6\x1e\xe4l\xa7x\x1d\xe3\xca/\x8d%\x90\t\x1d\x9bV\xeb{\xd8\x1d7\xa8v\xfch\xe65\xb4W\xa4PY\xac\xfbK`~N\xea\x87\x92\xd7\x11\xd6\xe9ME.\v\x97 t\x92}\xfd\xa1\xfaQX\x13\x9bMU,\x88\x8b\xcf\xa9\"pv\x06\x19\x9a[a\x04\xa7m\xb4\x92\xe4\xf5\x85/\xd9\x8b/\xcf\f\x1b\xf8\xf9\x12\xe0)\xfe\xffef\xb0+\xdad\xda\x96\xe1\xec\xb3\x95\xf8\xe6\xa8\x1cr9\xceDGmr\xf0z\x12\x9e\xd4\xf7\xc1Cw\xb3\xa8\xc9`\xafG\x92\x19S\x7f\xb9\xde\r\xb7\xb0\xfa\xdf\xa4rY\x1f\xfc\x1ad\xf8P\xd2\xf4\x81d\xa7\xd6\x9c\xe2\x04\xd0\xc3\a\xca/\xf9\x9fj\x97\x9e\xd4j\xac\x8f\xe2\x86\nP\xe3G}yA\x96\xd2<\x91\xfd\xd3\xa3-c\xa9\x8b\xb3jWS\vO\xec:\xacF\x870\xdb\xaa\xba=3\xadv\xc7\x1c|BS\xdd\x94\xc3\xdc\x8a\aH\xb9\x91I1\x14\xcfgM\xce9=\xb3K\f\xd28\xc8v\x03\xf8Y\x1c\xa4%/;v\x18\x92\xbf\xa4)\xfeA\f') mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) (async) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) 685.750697ms ago: executing program 1 (id=134): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = epoll_create(0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000300), 0x4) ppoll(&(0x7f0000000200)=[{r1, 0x26a}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000000)={0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 'wlc\x00', 0x15, 0xcf, 0x6e}, 0x2c) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0xa8ca3411d1c26009, 0x13, r0, 0xce33a000) 654.755417ms ago: executing program 1 (id=135): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000180)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f00000011c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x1, 0x4008000) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) mlock(&(0x7f000077b000/0x2000)=nil, 0x2000) 585.820428ms ago: executing program 1 (id=136): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x400007, 0x3, 0x10000, 0x3, 0x0, 0x400, 0x6}, 0x1c) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) execve(0x0, &(0x7f0000000300)={[&(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00']}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={0x0}, 0x19}, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x40) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) fcntl$setpipe(r1, 0x407, 0x7) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = getpgrp(0x0) syz_pidfd_open(r9, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 485.794971ms ago: executing program 1 (id=137): brk(0x6) brk(0x7) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) brk(0xa) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x7) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) sendto$inet(r1, &(0x7f00000000c0)="a447f174b9f149a4639d892df9581fd99f3d9fe99e31b0dabbde8a3e1446ced1cf6d223a1afa54a3c068d667da264c52af02d55a0a49924d93493f362b0a2df0f4f12b23a883a33391e4404e0ad82aadd20a9a3f229745a1cf3928c9bbde1041afc26e548a8db5549fdf81bc9bc22a7486f33bba95ad3e9b08b8b04c60a3a47c85f1dec60c9d83aa8a1b8f02392880a9aef0ccb92040cb0cf02930c045544b68ff4bc281da294e116c337f31986c79ccf2901e6de53fb8f422065e629d0e09d3925a17f73f9222de1e59e261042f3203974f6a209422a803ee4b29d1efc1d92052d5571f9f109b095f2c8c3372d0", 0xee, 0x44800, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x58, 0x0, &(0x7f0000001340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001280)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/4096, 0x1000, 0x0, 0x30}, @ptr={0x70742a85, 0x0, &(0x7f0000001200)=""/125, 0x7d, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000001300)={0x0, 0x28, 0x50}}}, @increfs_done={0x40106308, 0x1}], 0x43, 0x0, &(0x7f00000013c0)="48bc7afda4a926ac9f4e1ac3049a5ae911eb1e039bea12294c584dce920dcf483e2e230c203e0ebb35581ca0ed2ee3c80d4541b409401872c2aa217a560cc6dc348b86"}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000001480)) fcntl$notify(r0, 0x402, 0x3) brk(0x0) close(r1) brk(0x4a6) brk(0xef65) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) brk(0x5) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001500)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000001540)=r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000001580)={0x2, 'dvmrp1\x00', {0x6}, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000015c0)={0x0, "48cf741748e7b9496f66c5033051eb11"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000025c0)={0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000029c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000002dc0)={0x1, 0x2, {0x5, @struct={0xbf2}, r4, 0x5, 0x7, 0x1, 0x600000000000000, 0x7, 0x4, @struct={0x0, 0x8}, 0x10, 0xf, [0x2, 0x2, 0x7, 0x8, 0x800, 0x76f5]}, {0x1, @struct={0xb7, 0xa}, r5, 0x3, 0xe46e, 0x3, 0x5, 0xde5f, 0x10, @struct={0xfffffffd, 0x3}, 0x1, 0xd, [0x8001, 0x8000000000000000, 0xfc3, 0xcd4, 0xa, 0x7]}, {0x0, @struct={0x7, 0x3f7}, r6, 0xf770, 0x5, 0x3, 0x4, 0x9, 0x2, @usage=0x1, 0x4, 0x400, [0x8, 0xca, 0x7, 0x3, 0x4a54, 0x101]}, {0x8c, 0x4, 0xe2dc}}) accept$nfc_llcp(r2, 0x0, &(0x7f00000031c0)) brk(0x5) brk(0x61) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000003200)) 450.665311ms ago: executing program 1 (id=138): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000002400018014000180080001"], 0x64}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000004f000000000000000f33a067420f01c9"], 0x97}) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x43}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 77.945758ms ago: executing program 2 (id=139): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f00000012c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, &(0x7f00000005c0)={0x0, 0x3938700}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0xc21000, &(0x7f00000002c0)) 77.226628ms ago: executing program 2 (id=140): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x40) getpeername$tipc(r0, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10) ppoll(&(0x7f00000000c0)=[{r0, 0x9200}, {r0, 0x8420}, {r0, 0x1}], 0x3, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)={[0xc66c]}, 0x8) r1 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x208000) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000240)={{r1}, 0x0, 0x12, @inherit={0x78, &(0x7f00000001c0)={0x0, 0x6, 0xfffffffffffffff7, 0x101, {0x3f7767528ebc1d73, 0x4fee, 0x0, 0x6, 0x401}, [0x8000, 0x1, 0x7, 0x5, 0xfe4f, 0x8]}}, @name="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"}) unlinkat(0xffffffffffffff9c, &(0x7f0000001240)='./file0\x00', 0x0) r2 = openat(r0, &(0x7f0000001280)='./file0\x00', 0x20000, 0x21) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) write$UHID_CREATE2(r3, &(0x7f0000001300)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0xf, 0x7583, 0x6, 0x3984, 0xcf17, 0xffffffff, "6e5cd825fcb882305d3241cdc5591a"}}, 0x127) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) read$FUSE(r2, &(0x7f0000001440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000003480)='./file0\x00', &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r2, &(0x7f0000003540)={0x90, 0x0, r4, {0x6, 0x3, 0xf, 0x0, 0x5, 0x1, {0x3, 0xc0, 0x8, 0x100, 0x3, 0x7, 0x80000000, 0x5, 0x9, 0xc000, 0x6, 0xee01, r7, 0x0, 0x80000001}}}, 0x90) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003640), r3) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000003740)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x78, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa875}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20001875) read$FUSE(r3, &(0x7f0000003780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000057c0)={0xa8, 0x0, r9, [{{0x0, 0x3, 0x9, 0x93b, 0x6, 0x7f, {0x0, 0x10000, 0x6, 0x280, 0x2, 0x19b, 0x5f, 0xb, 0xa, 0xa000, 0x6, r6, r5, 0x8}}, {0x2, 0x154, 0x0, 0xc}}]}, 0xa8) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000005940)={&(0x7f0000005880)={0x10, 0x0, 0x0, 0x633f07fd90adeccf}, 0xc, &(0x7f0000005900)={&(0x7f00000058c0)={0x10, 0x3f2, 0x300, 0x70bd2a, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000000) r10 = openat$cgroup_ro(r2, &(0x7f0000005980)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) write$UHID_INPUT2(r10, &(0x7f00000059c0)={0xc, {0x9e, "1868c94cf2f521a6a7baad03dcefc8b7d95e4c917137d4da2936d4077818656bcb3d35233656d4f26cf1d75b1c7cc4833d6cd6a4f4c1143a78ce037ed8e828cca99425ebb53c1bb007159b6e5ff54f9256a2b23343a854d098de7ff8a1b8e7dc31b6e4029dde992287e2f6c33f521b29b55d50c9c7a50315f98bd4c54ae6d14bb7c1fbe24864d2a45c063f9b75f8f95bbec38728956f1407b7dcd4254b80"}}, 0xa4) syz_usb_connect$uac1(0x2, 0xea, &(0x7f0000005a80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x3, 0x1, 0x3, 0x0, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x32}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x1ff, 0x5, 0x39, 0x2, 0xf4, 0x40}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x9, '76'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x3, 0x0, 0xb, 0x25, 0x22}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x101, 0x1, 0xf, 0x400, 0x1, 0x5}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x0, 0x3, "21b0"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x1, 0x40, 0x40, "8c9d", "f50b1e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0xb, 0x3, {0x7, 0x25, 0x1, 0x81, 0x7, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0xfb, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x10, 0x4, 0xfb, 0x1, "2b1a", "eff3"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x40, 0x3, 0x7, 0x4, "77da7f5ddd6d"}, @as_header={0x7, 0x24, 0x1, 0x5f, 0x4, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xcc, 0x4, 0x7, 0x6, '@'}, @as_header={0x7, 0x24, 0x1, 0x6, 0xf2}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xf7, 0x3, 0x1, {0x7, 0x25, 0x1, 0x1, 0x10, 0x2}}}}}}}]}}, &(0x7f0000005e00)={0xa, &(0x7f0000005b80)={0xa, 0x6, 0x200, 0xb7, 0x2d, 0x5, 0x40, 0x84}, 0xeb, &(0x7f0000005bc0)={0x5, 0xf, 0xeb, 0x2, [@generic={0xd2, 0x10, 0xb, "6565481a25edd057190293dc47b8b64a4a9ea4cff294a0dfc9b035e9c0d6ecec7d81d8bf22b889202e460e053809bcb18c0a2d9f89d00bafa569e0abdeb974824c926c6b06e1d64e13a225fbcec10f8210e219aea454575e9b25bf7cf07a588536cf0b65963c16517a81a45b45f166efbebfa72b1e947936fead8320f13aaa9b8f28a31a2d0e8c2b13aa1a983429fe2de6c5df840aadd77211bbd0b2c4b635eff3f136d6b1fffaf082f8dc9c9ca24d3964de3bae810198607f33ffcf3edc565c0dc8902e39158d44e01af4652eb40b"}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "df2c28f71736bea7cd5a5cfb20f4e188"}]}, 0x3, [{0x4, &(0x7f0000005cc0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000005d00)=@lang_id={0x4, 0x3, 0x3001}}, {0x9a, &(0x7f0000005d40)=@string={0x9a, 0x3, "5742de7f17bc6c371c846c576d8cfadfff986f9480b531ebfc8702c283f3eff30bdeb9a940bf2bac0a5c9014f0a2bfbc54a04eb6611b2b4c5a29836d7e4ac644e48986a83e32d493264b508eef7ca3cbc4f781598fe4956da27a62188f7d1d4481abd96f382ee679f08bfcf6722470dede8c08d28edeed0925b411adebe5acbed4dad74b916216a683157293d7075b2232261aa4553fefff"}}]}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000005e80), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r11, &(0x7f0000006080)={&(0x7f0000005e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006040)={&(0x7f0000005ec0)={0x164, r12, 0x100, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x8840}, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f00000060c0)={0x3, r10, 'id0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r13, 0xffffffffffff7fff) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000006140)='0000:00:10.0\x00', &(0x7f0000006180)="c6d2da309dbdec76d29a6b16e9b101d4e1b57a280627658859e54c54a730e07808b48421156fb5e2941ca4e3dfeeea4d231bc389baf7abe7a83dae6aa181c475e075453055ddbfbb28af0310d4d2195989b50fb76d5d6319", 0x58) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000006200)={'batadv0\x00', 0x0}) bind$xdp(r2, &(0x7f0000006240)={0x2c, 0xe, r14, 0x2c, r2}, 0x10) 76.416898ms ago: executing program 3 (id=141): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x46c3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)={0x50281, 0x0, 0x8}, 0x18) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0xc0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000300)={0xd30, 0x4, 0x1, 0x400, 0x4, "78cf197f6b88676fa856b2c442fd184f03b41b", 0xfffffff2, 0xc0000000}) sendmsg$tipc(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4088840) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x5000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r5, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000004) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x4042, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 28.643059ms ago: executing program 1 (id=142): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00000ef000/0x1000)=nil, 0x1000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) pwritev(r2, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}, {0x0}], 0x2, 0x0, 0x0) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0xd, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x80000003, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8001, 0x9, 0x3fe, 0x401, 0xfff, 0x5, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x81, 0x2, 0x85ff, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0x40, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x5, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x1408}], 0x2, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000040)={0x7, 0x9, 0x9fa, 0x3, 0x5, 0x4, 0x3, 0x6ade}, 0x0, 0x0, &(0x7f00000001c0)={0x0}) 0s ago: executing program 3 (id=143): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) r1 = request_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='^-:\xf9\x00', 0xfffffffffffffffd) keyctl$get_persistent(0x16, r0, r1) keyctl$negate(0xd, r1, 0x67a, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r1, 0x0) keyctl$assume_authority(0x10, r1) r3 = request_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='keyring\x00', r1) keyctl$update(0x2, r3, &(0x7f0000000340)="7668231ccc88cea0afac4d0840ebccbd1127fbc97c963a72cb7835c32d684cf07a003c6f6be7b3086ff2fea1aa7e8bec46081eaed7cd1d67e506184f9a748d39a93816f3182531898886341e98f1a2312fbe3a87b554c23da41d01957bc66420b6d073214321ef1569a7ae776cc4a5a29ba747ed2521fb69e2af24b84284e03dec2f359cf6cba0d183f7516ad83cef2d72bf4f0d96498a8324155199fde820fd78e276d899f9c095c20a5dc0a6342cf79ab91d0c466a573a6a078a91b266f25b42781883dff0cf655c3f28b79814cc9146ee92b44757d84d80a47e22dda09cdf2a30a310ad848ae8d2936a7031", 0xed) r4 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)="c905cb0c1a83d2b7ff8f7e1ccac85081dc526b3c9d12ddfc1a278d53ed2f2f5c2b3ea449e0df6b3c3923dbdadc025e8c952c8f9d3d7d7648b3967ba0bff52c13594be8", 0x43, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r0, r1) getpid() keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r3, r1}, &(0x7f0000000580)=""/90, 0x5a, &(0x7f0000000700)={&(0x7f0000000600)={'sha512-avx\x00'}, &(0x7f0000000640)="5f1a31ff87702be15d1a7555dad25dce808ae94a3b5cc9a805967aa5264c9d4fa51ca6a81d58c185dcd53b8e9a341b9b726c07d3bebeed39be4b1aeb0c2bf4817117fc8a3566d0a274d7777af14bbfb4793853a63bbc95beb17e0ffb1b8f5a8f38a85bba2a63626ed10878b21e6fc6f81be8cf65cd4520285e657c1b57bee244069eced3deb94d793a131d2f", 0x8c}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000740)={r4, 0xfb, 0x51}, &(0x7f0000000780)={'enc=', 'pkcs1', ' hash=', {'nhpoly1305-sse2\x00'}}, &(0x7f0000000800)="ba9958ab652156948c1e9dbf23c5b586470e5d35ade4490511449602876753bfc30e4834ef9bc23258246fdde33c26d8d1c7ac70fe9c384b053346e6a9d6c6912a9b3223b45bb8002d84371de46431d5a33a8ac1efd0cf8d18cff089b42810294f81436bffee2aa725eaea203e9ed32c065f56a16a6f233451501816ff595e4a1589a997220879318e0baec9409bd9d6f8dd3299c1428a4b0e630959278bd74ccb31a78e8912802bdddb4db067d3901538428a1ecd5656e50c1c86eee6b5f06250207f40cc5db7ffa160a2c73d9f6f987b67ddf8b1f50433f1c95ae28b5b5ef36adb38dcfc17d0a44c73b716183fdedfbde915a76cd779e23c4570", &(0x7f0000000900)="6169dfd51a281951cb502ce60d85b1a16b9b3e32b1db8a55f1bbf0cc465558379147cc35a1117c05bd9685b6c3b8e0280432eaf3b159e17425ab04ec8edf0ea77e1b999f4205704d9a7b140afe52012ca8") keyctl$invalidate(0x15, r1) r5 = add_key$fscrypt_provisioning(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x1}, &(0x7f0000000a00)={0x0, 0x0, @d}, 0x18, r3) r6 = add_key$fscrypt_provisioning(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000ac0)={0x1, 0x0, @auto=[0x1f, 0x10, 0x1d, 0x20, 0x33]}, 0xd, 0xfffffffffffffffd) keyctl$instantiate(0xc, r6, 0x0, 0x0, r1) r7 = add_key(&(0x7f0000000b00)='.dead\x00', &(0x7f0000000b40)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$read(0xb, r7, &(0x7f0000000b80)=""/132, 0x84) r8 = add_key$fscrypt_provisioning(&(0x7f0000000c40), &(0x7f0000000c80)={'syz', 0x1}, &(0x7f0000000cc0)={0x0, 0x0, @auto=[0x3f, 0x11, 0x13, 0x25, 0x39, 0x12]}, 0xe, r3) keyctl$get_security(0x11, r4, &(0x7f0000000d00)=""/40, 0x28) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r9, 0x0, 0x11, &(0x7f0000000d40)="569d2d1cfc02d21a76c36c0bd1b9c790122fee60be211bab1580eb9a18b5722979860e7afd080939cb40286218e9657f7144113958793e1238707c893d4c0076c2f72312704e5afba1bd53575baba74cb90a34a5daac2e5cc48593e6e38d0dd99399aba16ad483e3a0acebee56be6e", 0x6f) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r9, 0x8008f513, &(0x7f0000000dc0)) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000e00)={r2, 0xb5, 0x1000}, &(0x7f0000000e40)={'enc=', 'oaep', ' hash=', {'cbcmac-aes-ce\x00'}}, &(0x7f0000000ec0)="eda86691dcca5b2c220ad0664f860bac82b22e8a04189772ba1f8e9afa95d18dc316c794c944e54665edb0e8f2e7bbd13edbbe8a431385807fedf3c203060037091b152e6a3c17c697d222fa9281d741a16423860b40a2a51819f755fb217249b29dafb2dd72021fc884a5ac0b21929dd14320b58d1f4b09c023119a886878978626417a90b418eb5a55a329f4e66134688b112aa62efff1fc77e9cb7032de8b7b44d73b610a8dbbda36dc6795c9c4efd562000205", &(0x7f0000000f80)=""/4096) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001f80)={r5, 0x3d, 0x21}, &(0x7f0000001fc0)={'enc=', 'raw', ' hash=', {'sha512-ce\x00'}}, &(0x7f0000002040)="4b0d0488c0dfb53991698c3c0443a12c8526927e262d14c0ac6927840f482b7ba7700d5ccc578280a530d2a18a937bec37afa60c0d4c95f41cf1188320", &(0x7f0000002080)=""/33) keyctl$reject(0x13, 0x0, 0x8, 0x8, r3) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f00000020c0)={0x81, 0x0, 0x2}) keyctl$read(0xb, r8, &(0x7f0000002140)=""/25, 0x19) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 25.341906][ T36] audit: type=1400 audit(1757222851.290:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.343401][ T281] cgroup: Unknown subsys name 'net' [ 25.364755][ T36] audit: type=1400 audit(1757222851.290:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.392214][ T36] audit: type=1400 audit(1757222851.320:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.392417][ T281] cgroup: Unknown subsys name 'devices' [ 25.532861][ T281] cgroup: Unknown subsys name 'hugetlb' [ 25.538513][ T281] cgroup: Unknown subsys name 'rlimit' [ 25.693670][ T36] audit: type=1400 audit(1757222851.640:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.716953][ T36] audit: type=1400 audit(1757222851.640:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.726993][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.742023][ T36] audit: type=1400 audit(1757222851.640:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.773602][ T36] audit: type=1400 audit(1757222851.700:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.799060][ T36] audit: type=1400 audit(1757222851.700:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.812925][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.824651][ T36] audit: type=1400 audit(1757222851.750:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.859076][ T36] audit: type=1400 audit(1757222851.750:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.028319][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.035430][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.042587][ T288] bridge_slave_0: entered allmulticast mode [ 27.048923][ T288] bridge_slave_0: entered promiscuous mode [ 27.063385][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.070532][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.077628][ T288] bridge_slave_1: entered allmulticast mode [ 27.084202][ T288] bridge_slave_1: entered promiscuous mode [ 27.152384][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.159468][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.166582][ T291] bridge_slave_0: entered allmulticast mode [ 27.172882][ T291] bridge_slave_0: entered promiscuous mode [ 27.186193][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.193354][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.200624][ T290] bridge_slave_0: entered allmulticast mode [ 27.206935][ T290] bridge_slave_0: entered promiscuous mode [ 27.213428][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.220639][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.227852][ T290] bridge_slave_1: entered allmulticast mode [ 27.234321][ T290] bridge_slave_1: entered promiscuous mode [ 27.240574][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.247604][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.254854][ T291] bridge_slave_1: entered allmulticast mode [ 27.261147][ T291] bridge_slave_1: entered promiscuous mode [ 27.267191][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.274389][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.281570][ T289] bridge_slave_0: entered allmulticast mode [ 27.287846][ T289] bridge_slave_0: entered promiscuous mode [ 27.297684][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.304787][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.311924][ T289] bridge_slave_1: entered allmulticast mode [ 27.318222][ T289] bridge_slave_1: entered promiscuous mode [ 27.493257][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.500353][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.507648][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.514749][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.527685][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.534802][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.542130][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.549173][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.571639][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.578704][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.586038][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.593120][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.606226][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.613440][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.620755][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.627789][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.674100][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.681660][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.688925][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.696459][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.704489][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.711972][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.736495][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.743601][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.761662][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.768736][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.776677][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.783745][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.791715][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.798847][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.821614][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.828676][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.837029][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.844201][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.863454][ T288] veth0_vlan: entered promiscuous mode [ 27.900721][ T288] veth1_macvtap: entered promiscuous mode [ 27.909410][ T291] veth0_vlan: entered promiscuous mode [ 27.937295][ T290] veth0_vlan: entered promiscuous mode [ 27.954004][ T289] veth0_vlan: entered promiscuous mode [ 27.974132][ T290] veth1_macvtap: entered promiscuous mode [ 27.982743][ T291] veth1_macvtap: entered promiscuous mode [ 27.991299][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.012178][ T289] veth1_macvtap: entered promiscuous mode [ 28.181586][ T347] netlink: 'syz.3.5': attribute type 11 has an invalid length. [ 28.212588][ T347] netlink: 'syz.3.5': attribute type 11 has an invalid length. [ 28.329681][ T351] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.350035][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.350701][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.510030][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 28.516233][ T10] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 28.525516][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.533761][ T45] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 28.535478][ T10] usb 1-1: config 0 descriptor?? [ 28.547726][ T45] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 28.564036][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 28.574644][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 28.584746][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 28.594835][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 28.608339][ T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 28.617864][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.630086][ T45] usb 3-1: config 0 descriptor?? [ 28.839001][ T45] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 28.863242][ T45] usb 3-1: USB disconnect, device number 2 [ 28.871246][ T45] usblp0: removed [ 29.019628][ T361] /dev/sr0: Can't lookup blockdev [ 29.029531][ T361] bridge0: entered allmulticast mode [ 29.121533][ T370] binder: Unknown parameter 'çÿÿÿÿÿÿ+' [ 29.293759][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.353253][ T335] netlink: 'syz.0.1': attribute type 5 has an invalid length. [ 29.361452][ T10] usb 1-1: Cannot set autoneg [ 29.366249][ T10] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 29.379028][ T10] usb 1-1: USB disconnect, device number 2 [ 29.429883][ T354] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.459959][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 29.467556][ T45] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 29.476058][ T45] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 29.485085][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 29.494206][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 29.503935][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 29.513917][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 29.527185][ T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 29.536417][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.545159][ T45] usb 3-1: config 0 descriptor?? [ 29.579885][ T354] usb 2-1: Using ep0 maxpacket: 16 [ 29.586271][ T354] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 29.596263][ T354] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 29.606903][ T354] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.616373][ T354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 29.624502][ T354] usb 2-1: SerialNumber: syz [ 29.630598][ T374] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 29.637820][ T374] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 29.848204][ T354] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 29.858075][ T354] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 29.865823][ T354] usb 2-1: USB disconnect, device number 2 [ 29.948805][ T387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 29.971000][ T45] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 29.983191][ T45] usb 3-1: USB disconnect, device number 3 [ 29.989957][ T45] usblp0: removed [ 30.079727][ T389] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1016 sclass=netlink_tcpdiag_socket pid=389 comm=syz.0.16 [ 30.117945][ T395] exFAT-fs (rnullb0): invalid boot record signature [ 30.124711][ T395] exFAT-fs (rnullb0): failed to read boot sector [ 30.137265][ T395] exFAT-fs (rnullb0): failed to recognize exfat type [ 30.177247][ T401] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.364980][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 30.364997][ T36] audit: type=1400 audit(1757222856.310:155): avc: denied { call } for pid=414 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 30.370881][ T415] rust_binder: Error while translating object. [ 30.371542][ T36] audit: type=1400 audit(1757222856.320:156): avc: denied { transfer } for pid=414 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 30.389887][ T415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.415323][ T415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 30.424840][ T36] audit: type=1400 audit(1757222856.360:157): avc: denied { bind } for pid=414 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.517651][ T36] audit: type=1400 audit(1757222856.460:158): avc: denied { mounton } for pid=422 comm="syz.2.27" path="/2/file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.541179][ T36] audit: type=1400 audit(1757222856.490:159): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.826964][ T36] audit: type=1400 audit(1757222856.770:160): avc: denied { create } for pid=429 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 30.846967][ T372] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.857481][ T36] audit: type=1400 audit(1757222856.800:161): avc: denied { append } for pid=429 comm="syz.2.29" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 30.880377][ T36] audit: type=1400 audit(1757222856.800:162): avc: denied { execute } for pid=429 comm="syz.2.29" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 30.970604][ T436] binder: Bad value for 'stats' [ 30.988041][ T36] audit: type=1400 audit(1757222856.930:163): avc: denied { relabelfrom } for pid=435 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 31.007912][ T36] audit: type=1400 audit(1757222856.930:164): avc: denied { relabelto } for pid=435 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 31.072260][ T441] rust_binder: 27: no such ref 0 [ 31.079083][ T441] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 31.086745][ T441] rust_binder: 27: no such ref 4294967295 [ 31.093146][ T442] rust_binder: 27: no such ref 0 [ 31.100477][ T442] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 31.108044][ T442] rust_binder: 27: no such ref 4294967295 [ 31.397538][ T493] input: syz0 as /devices/virtual/input/input5 [ 31.809843][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.974344][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 31.984814][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 32.006779][ T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 32.027542][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.034583][ T503] virtiofs: Unknown parameter 'always' [ 32.049104][ T10] usb 2-1: Product: syz [ 32.066943][ T10] usb 2-1: Manufacturer: syz [ 32.071764][ T10] usb 2-1: SerialNumber: syz [ 32.079758][ T10] usb 2-1: config 0 descriptor?? [ 32.090379][ T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 32.112271][ T10] usb 2-1: Detected FT232B [ 32.305449][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 32.322664][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 32.339142][ T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 32.364691][ T10] usb 2-1: USB disconnect, device number 3 [ 32.380563][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 32.393838][ T10] ftdi_sio 2-1:0.0: device disconnected [ 32.428296][ T535] rust_binder: 49: no such ref 3 [ 32.433815][ T535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:49 [ 32.477987][ T543] /dev/rnullb0: Can't open blockdev [ 32.650067][ T353] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.669878][ T372] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.800921][ T353] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.812218][ T353] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.819857][ T372] usb 1-1: Using ep0 maxpacket: 16 [ 32.822594][ T353] usb 4-1: config 0 interface 0 has no altsetting 0 [ 32.828812][ T372] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 32.834235][ T353] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 32.842556][ T372] usb 1-1: config 0 has no interface number 0 [ 32.851532][ T353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.857811][ T372] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 32.869358][ T353] usb 4-1: config 0 descriptor?? [ 32.875496][ T372] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 32.891255][ T372] usb 1-1: config 0 interface 41 has no altsetting 0 [ 32.899614][ T372] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 32.908739][ T372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.916896][ T372] usb 1-1: Product: syz [ 32.921277][ T372] usb 1-1: Manufacturer: syz [ 32.925894][ T372] usb 1-1: SerialNumber: syz [ 32.931496][ T372] usb 1-1: config 0 descriptor?? [ 32.936799][ T533] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 32.944127][ T533] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 33.152262][ T533] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 33.159582][ T533] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 33.186375][ T549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 33.483524][ T353] usb 4-1: string descriptor 0 read error: -22 [ 33.693802][ T353] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input7 [ 33.706947][ T353] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input8 [ 33.720226][ T353] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input9 [ 33.734158][ T353] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input10 [ 33.754834][ T353] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 33.771058][ T372] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 33.896743][ T529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.906028][ T529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.916744][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 33.936808][ T45] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 34.027727][ T529] rust_binder: Failed copying into alloc: EFAULT [ 34.027755][ T529] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 34.034268][ T529] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 34.042606][ T529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:52 [ 34.055800][ T353] usb 4-1: USB disconnect, device number 2 [ 34.345427][ T372] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 34.356900][ T372] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 34.366884][ T372] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 34.377746][ T372] usb 1-1: USB disconnect, device number 3 [ 34.423330][ T583] kvm: pic: non byte write [ 34.723142][ T605] rust_binder: Failed to vm_insert_page(35184372101120): vma_addr:35184372097024 i:1 err:EFAULT [ 34.723169][ T605] rust_binder: Error in use_page_slow: EFAULT [ 34.734178][ T605] rust_binder: use_range failure EFAULT [ 34.740541][ T605] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 34.746708][ T605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 34.756462][ T605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:59 [ 34.786775][ T609] netlink: 'syz.3.80': attribute type 4 has an invalid length. [ 34.809423][ T609] netlink: 'syz.3.80': attribute type 5 has an invalid length. [ 34.820720][ T609] netlink: 'syz.3.80': attribute type 1 has an invalid length. [ 34.828471][ T613] netlink: 'syz.2.82': attribute type 4 has an invalid length. [ 34.842227][ T613] rust_binder: Write failure EFAULT in pid:76 [ 34.868649][ T615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.83'. [ 34.885992][ T616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.83'. [ 34.909915][ T372] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 35.049867][ T372] usb 2-1: device descriptor read/64, error -71 [ 35.209257][ T632] rust_binder: 74: no such ref 2 [ 35.260516][ T633] rust_binder: Error while translating object. [ 35.260553][ T633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.266747][ T633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 35.291736][ T372] usb 2-1: device descriptor read/64, error -71 [ 35.397784][ T646] /dev/nbd0: Can't lookup blockdev [ 35.410102][ T581] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.512182][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 35.512200][ T36] audit: type=1400 audit(1757222861.460:234): avc: denied { block_suspend } for pid=656 comm="syz.0.96" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.559983][ T372] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 35.582551][ T581] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 35.591875][ T581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.599967][ T581] usb 3-1: Product: syz [ 35.604174][ T581] usb 3-1: Manufacturer: syz [ 35.608801][ T581] usb 3-1: SerialNumber: syz [ 35.614530][ T581] usb 3-1: config 0 descriptor?? [ 35.632246][ T36] audit: type=1400 audit(1757222861.580:235): avc: denied { create } for pid=660 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.652321][ T36] audit: type=1400 audit(1757222861.580:236): avc: denied { write } for pid=660 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.672305][ T36] audit: type=1400 audit(1757222861.580:237): avc: denied { nlmsg_write } for pid=660 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.692858][ T372] usb 2-1: device descriptor read/64, error -71 [ 35.699830][ T329] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.860939][ T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.872059][ T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.882241][ T329] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.895475][ T329] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.911314][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.929857][ T372] usb 2-1: device descriptor read/64, error -71 [ 35.932651][ T329] usb 4-1: config 0 descriptor?? [ 35.944065][ T329] hub 4-1:0.0: USB hub found [ 36.039975][ T372] usb usb2-port1: attempt power cycle [ 36.094040][ T36] audit: type=1400 audit(1757222862.040:238): avc: denied { execute } for pid=664 comm="syz.0.98" name="file1" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.145504][ T36] audit: type=1400 audit(1757222862.090:239): avc: denied { mount } for pid=654 comm="syz.3.95" name="/" dev="configfs" ino=2085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 36.147537][ T329] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 36.169696][ T36] audit: type=1400 audit(1757222862.120:240): avc: denied { search } for pid=654 comm="syz.3.95" name="/" dev="configfs" ino=2085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 36.369847][ T329] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 36.379848][ T372] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 36.400777][ T372] usb 2-1: device descriptor read/8, error -71 [ 36.540863][ T372] usb 2-1: device descriptor read/8, error -71 [ 36.624496][ T581] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.630957][ T353] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.634689][ T581] asix 3-1:0.0: probe with driver asix failed with error -71 [ 36.650795][ T581] usb 3-1: USB disconnect, device number 5 [ 36.779959][ T372] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 36.791097][ T353] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 36.800248][ T353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.801063][ T372] usb 2-1: device descriptor read/8, error -71 [ 36.811042][ T353] usb 1-1: config 0 descriptor?? [ 36.839995][ T329] usb 4-1: USB disconnect, device number 3 [ 36.872553][ T36] audit: type=1400 audit(1757222862.820:241): avc: denied { bind } for pid=670 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.892098][ T36] audit: type=1400 audit(1757222862.820:242): avc: denied { connect } for pid=670 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.911752][ T36] audit: type=1400 audit(1757222862.820:243): avc: denied { accept } for pid=670 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.951043][ T372] usb 2-1: device descriptor read/8, error -71 [ 37.022373][ T676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.031004][ T676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.045665][ T353] usb 1-1: Cannot set MAC address [ 37.057619][ T353] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 37.060001][ T372] usb usb2-port1: unable to enumerate USB device [ 37.070764][ T353] usb 1-1: USB disconnect, device number 4 [ 37.132490][ T685] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 37.132513][ T685] rust_binder: Read failure Err(EFAULT) in pid:96 [ 37.238022][ T691] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 37.255890][ T691] __vm_enough_memory: pid: 691, comm: syz.2.105, bytes: 18014402804453376 not enough memory for the allocation [ 37.459864][ T353] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 37.609868][ T581] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.611052][ T353] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.627577][ T353] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.637913][ T353] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.647252][ T353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.655351][ T353] usb 1-1: Product: syz [ 37.659565][ T353] usb 1-1: Manufacturer: syz [ 37.664235][ T353] usb 1-1: SerialNumber: syz [ 37.746892][ T701] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.760707][ T701] netlink: 'syz.1.109': attribute type 4 has an invalid length. [ 37.761196][ T581] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 37.777827][ T581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.779222][ T701] netlink: 'syz.1.109': attribute type 4 has an invalid length. [ 37.791135][ T581] usb 3-1: config 0 descriptor?? [ 38.116659][ T711] rust_binder: Write failure EFAULT in pid:108 [ 38.162399][ T716] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 38.202441][ T718] netlink: 'syz.3.116': attribute type 1 has an invalid length. [ 38.231400][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 38.240865][ T722] rust_binder: 119: no such ref 3 [ 38.246091][ T722] rust_binder: 119: no such ref 3 [ 38.251265][ T722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119 [ 38.340448][ T31] rust_binder: 0: removing orphan mapping 0:4232 [ 38.544387][ T741] netlink: 3 bytes leftover after parsing attributes in process `syz.3.125'. [ 38.558852][ T741] netlink: 3 bytes leftover after parsing attributes in process `syz.3.125'. [ 38.570119][ T741] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 38.585822][ T743] netlink: 3 bytes leftover after parsing attributes in process `syz.3.125'. [ 38.594989][ T743] netlink: 3 bytes leftover after parsing attributes in process `syz.3.125'. [ 38.604359][ T743] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 38.620118][ T741] binder: Bad value for 'max' [ 38.650988][ T748] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 38.651017][ T748] rust_binder: Error while translating object. [ 38.659937][ T748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.666309][ T748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 38.728935][ T753] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 38.744214][ T753] syzkaller0: owner set to 825 [ 38.750069][ T753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:85 [ 38.847247][ T758] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 38.866883][ T758] netlink: 'syz.1.130': attribute type 4 has an invalid length. [ 38.876853][ T758] netlink: 'syz.1.130': attribute type 4 has an invalid length. [ 38.925278][ T764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.132'. [ 39.078496][ T581] usb 3-1: Cannot set autoneg [ 39.088160][ T581] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 39.101088][ T581] usb 3-1: USB disconnect, device number 6 [ 39.200245][ T778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 39.211134][ T778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 39.211165][ T778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:106 [ 39.354794][ T786] __vm_enough_memory: pid: 786, comm: syz.1.138, bytes: 18014402804453376 not enough memory for the allocation [ 39.673517][ T791] tipc: Failed to remove unknown binding: 66,1,1/0:774270540/774270542 [ 39.745155][ T288] ------------[ cut here ]------------ [ 39.750742][ T288] WARNING: CPU: 1 PID: 288 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 39.758708][ T288] Modules linked in: [ 39.762821][ T288] CPU: 1 UID: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 39.774540][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.784702][ T288] RIP: 0010:drop_nlink+0xce/0x110 [ 39.789808][ T288] Code: 04 00 00 be 08 00 00 00 e8 5f 46 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 c5 a0 03 cc e8 82 0e 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 39.809483][ T288] RSP: 0018:ffffc9000b5efa80 EFLAGS: 00010293 [ 39.815611][ T288] RAX: ffffffff81edd58e RBX: ffff888121766d10 RCX: ffff888127402600 [ 39.823655][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.831724][ T288] RBP: ffffc9000b5efaa8 R08: 0000000000000003 R09: 0000000000000004 [ 39.839727][ T288] R10: dffffc0000000000 R11: fffff520016bdf40 R12: dffffc0000000000 [ 39.847856][ T288] R13: 1ffff110242ecdab R14: ffff888121766d58 R15: 0000000000000000 [ 39.855895][ T288] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 39.864903][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.871551][ T288] CR2: 00007fb4fd6f8710 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 39.879583][ T288] Call Trace: [ 39.882939][ T288] [ 39.885917][ T288] shmem_rmdir+0x5f/0x90 [ 39.890238][ T288] vfs_rmdir+0x3dd/0x560 [ 39.894533][ T288] incfs_kill_sb+0x109/0x230 [ 39.899171][ T288] deactivate_locked_super+0xd8/0x2a0 [ 39.904620][ T288] deactivate_super+0xb8/0xe0 [ 39.909354][ T288] cleanup_mnt+0x3f1/0x480 [ 39.914037][ T288] __cleanup_mnt+0x1d/0x40 [ 39.918627][ T288] task_work_run+0x1e3/0x250 [ 39.923394][ T288] ? __cfi_task_work_run+0x10/0x10 [ 39.928556][ T288] ? free_nsproxy+0x223/0x290 [ 39.933396][ T288] do_exit+0x9bc/0x2630 [ 39.937607][ T288] ? __cfi_do_exit+0x10/0x10 [ 39.942382][ T288] ? __kasan_check_write+0x18/0x20 [ 39.947644][ T288] ? _raw_spin_lock_irq+0x8d/0x120 [ 39.952849][ T288] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 39.958447][ T288] ? __cfi_ksys_write+0x10/0x10 [ 39.963461][ T288] ? zap_other_threads+0x334/0x370 [ 39.968826][ T288] do_group_exit+0x22a/0x300 [ 39.973518][ T288] __x64_sys_exit_group+0x43/0x50 [ 39.978592][ T288] x64_sys_call+0x2ed2/0x2ee0 [ 39.983381][ T288] do_syscall_64+0x58/0xf0 [ 39.987844][ T288] ? clear_bhb_loop+0x50/0xa0 [ 39.992595][ T288] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.998620][ T288] RIP: 0033:0x7fb4fc98ebe9 [ 40.003215][ T288] Code: Unable to access opcode bytes at 0x7fb4fc98ebbf. [ 40.011054][ T288] RSP: 002b:00007ffd79667268 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 40.019524][ T288] RAX: ffffffffffffffda RBX: 00007fb4fca11c77 RCX: 00007fb4fc98ebe9 [ 40.027677][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 40.035715][ T288] RBP: 0000000000000016 R08: 00007ffd79665006 R09: 00007ffd79668520 [ 40.043769][ T288] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffd79668520 [ 40.051808][ T288] R13: 00007fb4fca11c05 R14: 0000555569c354a8 R15: 00007ffd7966a6e0 [ 40.059950][ T288] [ 40.062995][ T288] ---[ end trace 0000000000000000 ]--- [ 40.068654][ T288] ================================================================== [ 40.076867][ T288] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 40.083236][ T288] Write of size 4 at addr 0000000000000168 by task syz-executor/288 [ 40.091213][ T288] [ 40.093554][ T288] CPU: 0 UID: 0 PID: 288 Comm: syz-executor Tainted: G W syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 40.093578][ T288] Tainted: [W]=WARN [ 40.093584][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.093593][ T288] Call Trace: [ 40.093600][ T288] [ 40.093607][ T288] __dump_stack+0x21/0x30 [ 40.093631][ T288] dump_stack_lvl+0x10c/0x190 [ 40.093652][ T288] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.093674][ T288] print_report+0x3d/0x70 [ 40.093691][ T288] kasan_report+0x163/0x1a0 [ 40.093709][ T288] ? ihold+0x24/0x70 [ 40.093726][ T288] ? _raw_spin_unlock+0x45/0x60 [ 40.093749][ T288] ? ihold+0x24/0x70 [ 40.093765][ T288] kasan_check_range+0x299/0x2a0 [ 40.093783][ T288] __kasan_check_write+0x18/0x20 [ 40.093805][ T288] ihold+0x24/0x70 [ 40.093820][ T288] vfs_rmdir+0x26a/0x560 [ 40.093841][ T288] incfs_kill_sb+0x109/0x230 [ 40.093864][ T288] deactivate_locked_super+0xd8/0x2a0 [ 40.093885][ T288] deactivate_super+0xb8/0xe0 [ 40.093904][ T288] cleanup_mnt+0x3f1/0x480 [ 40.093922][ T288] __cleanup_mnt+0x1d/0x40 [ 40.093938][ T288] task_work_run+0x1e3/0x250 [ 40.093957][ T288] ? __cfi_task_work_run+0x10/0x10 [ 40.093975][ T288] ? free_nsproxy+0x223/0x290 [ 40.093997][ T288] do_exit+0x9bc/0x2630 [ 40.094017][ T288] ? __cfi_do_exit+0x10/0x10 [ 40.094035][ T288] ? __kasan_check_write+0x18/0x20 [ 40.094057][ T288] ? _raw_spin_lock_irq+0x8d/0x120 [ 40.094080][ T288] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 40.094103][ T288] ? __cfi_ksys_write+0x10/0x10 [ 40.094116][ T288] ? zap_other_threads+0x334/0x370 [ 40.094134][ T288] do_group_exit+0x22a/0x300 [ 40.094153][ T288] __x64_sys_exit_group+0x43/0x50 [ 40.094172][ T288] x64_sys_call+0x2ed2/0x2ee0 [ 40.094195][ T288] do_syscall_64+0x58/0xf0 [ 40.094218][ T288] ? clear_bhb_loop+0x50/0xa0 [ 40.094238][ T288] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.094257][ T288] RIP: 0033:0x7fb4fc98ebe9 [ 40.094269][ T288] Code: Unable to access opcode bytes at 0x7fb4fc98ebbf. [ 40.094277][ T288] RSP: 002b:00007ffd79667268 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 40.094293][ T288] RAX: ffffffffffffffda RBX: 00007fb4fca11c77 RCX: 00007fb4fc98ebe9 [ 40.094306][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 40.094316][ T288] RBP: 0000000000000016 R08: 00007ffd79665006 R09: 00007ffd79668520 [ 40.094326][ T288] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffd79668520 [ 40.094336][ T288] R13: 00007fb4fca11c05 R14: 0000555569c354a8 R15: 00007ffd7966a6e0 [ 40.094350][ T288] [ 40.094355][ T288] ================================================================== [ 40.354276][ T288] Disabling lock debugging due to kernel taint [ 40.361191][ T288] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 40.369027][ T288] #PF: supervisor write access in kernel mode [ 40.375125][ T288] #PF: error_code(0x0002) - not-present page [ 40.381136][ T288] PGD 8000000131346067 P4D 8000000131346067 PUD 0 [ 40.387680][ T288] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 40.393758][ T288] CPU: 0 UID: 0 PID: 288 Comm: syz-executor Tainted: G B W syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 40.406876][ T288] Tainted: [B]=BAD_PAGE, [W]=WARN [ 40.411895][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.421956][ T288] RIP: 0010:ihold+0x2a/0x70 [ 40.426470][ T288] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 6d 05 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 3d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 7d [ 40.446081][ T288] RSP: 0018:ffffc9000b5efac0 EFLAGS: 00010246 [ 40.452156][ T288] RAX: ffff888127402600 RBX: 0000000000000000 RCX: ffff888127402600 [ 40.459874][ T581] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 40.460168][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.475808][ T288] RBP: ffffc9000b5efad0 R08: ffffffff8896d947 R09: 1ffffffff112db28 [ 40.483798][ T288] R10: dffffc0000000000 R11: fffffbfff112db29 R12: ffff888121766d1c [ 40.491790][ T288] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 40.499816][ T288] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 40.508849][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.515446][ T288] CR2: 0000000000000168 CR3: 0000000126a2c000 CR4: 00000000003526b0 [ 40.523440][ T288] Call Trace: [ 40.526737][ T288] [ 40.529711][ T288] vfs_rmdir+0x26a/0x560 [ 40.534053][ T288] incfs_kill_sb+0x109/0x230 [ 40.538674][ T288] deactivate_locked_super+0xd8/0x2a0 [ 40.544086][ T288] deactivate_super+0xb8/0xe0 [ 40.548789][ T288] cleanup_mnt+0x3f1/0x480 [ 40.553295][ T288] __cleanup_mnt+0x1d/0x40 [ 40.557727][ T288] task_work_run+0x1e3/0x250 [ 40.562339][ T288] ? __cfi_task_work_run+0x10/0x10 [ 40.567477][ T288] ? free_nsproxy+0x223/0x290 [ 40.572182][ T288] do_exit+0x9bc/0x2630 [ 40.576388][ T288] ? __cfi_do_exit+0x10/0x10 [ 40.581000][ T288] ? __kasan_check_write+0x18/0x20 [ 40.586297][ T288] ? _raw_spin_lock_irq+0x8d/0x120 [ 40.591536][ T288] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 40.597110][ T288] ? __cfi_ksys_write+0x10/0x10 [ 40.602049][ T288] ? zap_other_threads+0x334/0x370 [ 40.607186][ T288] do_group_exit+0x22a/0x300 [ 40.611803][ T288] __x64_sys_exit_group+0x43/0x50 [ 40.616939][ T288] x64_sys_call+0x2ed2/0x2ee0 [ 40.620948][ T581] usb 3-1: device descriptor read/64, error -71 [ 40.621640][ T288] do_syscall_64+0x58/0xf0 [ 40.632326][ T288] ? clear_bhb_loop+0x50/0xa0 [ 40.637165][ T288] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.643076][ T288] RIP: 0033:0x7fb4fc98ebe9 [ 40.647505][ T288] Code: Unable to access opcode bytes at 0x7fb4fc98ebbf. [ 40.654561][ T288] RSP: 002b:00007ffd79667268 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 40.662992][ T288] RAX: ffffffffffffffda RBX: 00007fb4fca11c77 RCX: 00007fb4fc98ebe9 [ 40.671068][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 40.679057][ T288] RBP: 0000000000000016 R08: 00007ffd79665006 R09: 00007ffd79668520 [ 40.687045][ T288] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffd79668520 [ 40.695048][ T288] R13: 00007fb4fca11c05 R14: 0000555569c354a8 R15: 00007ffd7966a6e0 [ 40.703042][ T288] [ 40.706078][ T288] Modules linked in: [ 40.710014][ T288] CR2: 0000000000000168 [ 40.714182][ T288] ---[ end trace 0000000000000000 ]--- [ 40.719811][ T288] RIP: 0010:ihold+0x2a/0x70 [ 40.724334][ T288] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 6d 05 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 3d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 7d [ 40.743954][ T288] RSP: 0018:ffffc9000b5efac0 EFLAGS: 00010246 [ 40.750034][ T288] RAX: ffff888127402600 RBX: 0000000000000000 RCX: ffff888127402600 [ 40.758035][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.766015][ T288] RBP: ffffc9000b5efad0 R08: ffffffff8896d947 R09: 1ffffffff112db28 [ 40.773996][ T288] R10: dffffc0000000000 R11: fffffbfff112db29 R12: ffff888121766d1c [ 40.781986][ T288] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 40.789972][ T288] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 40.798921][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.805538][ T288] CR2: 0000000000000168 CR3: 0000000126a2c000 CR4: 00000000003526b0 [ 40.813573][ T288] Kernel panic - not syncing: Fatal exception [ 40.819882][ T288] Kernel Offset: disabled [ 40.824303][ T288] Rebooting in 86400 seconds..