last executing test programs: 5m41.205098317s ago: executing program 1 (id=156): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x8000, 0x8000, 0x13}}) r1 = gettid() tkill(r1, 0x12) ptrace$setregs(0xd, r1, 0x7fffffffffffffff, &(0x7f0000000100)="e1628a9b2d79a4b2ab4c86002b96007f9de36ab53cad6f604dab6f83fa052fba435b5f497055cb1ae8e04cff8575a96b284ab8b0221ff011e38acf37806f401191c165efb627448f8a566a586f9eafbd55ffe7920e6f21e21e1fe2cdd524429344f5584151d2d7ee011252e4fa84cc9a9884a534c13091665ed43d4e9536f80e2ea20e6a31e9e40532e6e44447c8aaa786") 5m41.169639147s ago: executing program 1 (id=158): openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb000000034e1d00000a0060805e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000080000000000000000000000000000070000000000000000000000000000000000000000000000030000000000000007000000000000000000000000000000000000000000000001000000000000000000000000000000005948554b000000000000000000000084000500ac1414bb000000000000000000000000000000006c00000000000000e00000020000000000000003000000000000000000000900040000000600000000000080ac1414bb000000000000000000000000000000003200000002000000fe8000000000000000f9ff00000000bb003500000300"/244], 0x13c}}, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) (async) sendmsg$inet(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) (async, rerun: 32) read(r4, &(0x7f0000000040)=""/98, 0x3a) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r3, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000380)=0x804, 0x4) (async) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r7, 0x4068aea3, &(0x7f0000000000)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6f, 0x9, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x14, 0x0, 0x2e, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x14, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x80a0000, 0x5000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x26, 0x0, 0x0, 0xfc}, {0x80a0000}, {0xeeef0000}, 0x7dfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0xf000, [0x0, 0x0, 0x1]}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 32) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0) (rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async, rerun: 32) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r9) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000300)) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 5m41.094158149s ago: executing program 1 (id=161): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000540), 0x0, 0x804c044) rt_sigprocmask(0x0, &(0x7f0000000080)={[0x8]}, 0x0, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x1, 0xffffffff80000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) write$FUSE_WRITE(r3, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, r5, {0x18000000}}, 0x18) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000002c0)={0x0, 0x0, 0x6}) 5m41.035611679s ago: executing program 1 (id=162): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x100000000, 0x20000) faccessat(r0, &(0x7f00000001c0)='./file0\x00', 0x100) stat(0x0, &(0x7f0000000240)) getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) getxattr(0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$binder(0x0, 0x0, 0x0, 0x20c411, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) accept(r0, &(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000500)=0x80) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x4c, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x16, 0xa, '/dev/input/mouse#\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000081}, 0x4080) 5m40.97779043s ago: executing program 1 (id=163): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000080)=0x4, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000080)=0x4, 0x4) r2 = accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) bind$packet(r2, &(0x7f0000000140)={0x11, 0xd, r1, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @none}, &(0x7f0000000340)=0xe, 0x80000) (async) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @none}, &(0x7f0000000340)=0xe, 0x80000) r8 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) r10 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)={0x18, 0x2c, 0x10, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8, 0x110, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, 0x18}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x30, 0x1, 0x1, [r0, r7, r0, r0, r0, r0, r2, r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r8, r9]}}, @rights={{0x18, 0x1, 0x1, [r2, r10]}}], 0xa0, 0x20000080}, 0x4040) sendmsg$inet(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="8871c37726d66d521d22db876036c4d87f82e124ce348c2dfbcde771c9eb581eef3b8f70191d7e3bfb4e6653fdcb49eabbe9dbcb", 0x34}, {&(0x7f0000000500)="3502076de2aa59c9af234e5370faa2df4736de0281d077c8e9faba2e369c7f35790af0ea17106d0091ee47b95007140a7e1a5873c6d2387128070cebef49ff7ca199e7ab44d7683246723481cad14e50c210", 0x52}, {&(0x7f0000000580)="c1e23f7c621ef9b32a19b882573d53df364e73989d7999723d8229381ea39e46708430ca8c55645859a8a95d5ebb2b03dc2a5be12fe1b1cc1e624b7d03cbd437f2e241b7ae5e0a6a1e7ee5e8cb3ee1815bbba2dc5545ed18c86178657debd605ab417b92e91b0d093946e10285c32014fbf77658541e27bf3c965e138319d5003fbb4b2fe0381ae52d981b6ab6d3", 0x8e}, {&(0x7f0000000640)="2bf0585e08fa42b0fa38c20103e0ac40f6cd24f20f563a35bda6c469d47380bbb2b25bf5554b42d680e2fdcbe309db40266b34dcc03f43073a5200c005c16dd4ec4d19332f90149f1d8ebf73bd79d6da4e7dfd65a0bbdc4d15d428de5d435fc486de47dfdd35441d66a61b42b8bff57d75737beb1e4d39f3d1b4de14f8c996980e4d5909f8d0b0e95f8de166bf", 0x8d}], 0x4, &(0x7f0000000740)=[@ip_retopts={{0x84, 0x0, 0x7, {[@generic={0x44, 0x4, "da68"}, @timestamp_addr={0x44, 0x14, 0x96, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@remote, 0x8}]}, @lsrr={0x83, 0xb, 0x6, [@private=0xa010102, @local]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x5, 0x2}, {0x7, 0x8, "9590bde68dcd"}, {0x5, 0x3, "c1"}, {0x2, 0x2}, {0x1, 0x8, "c8e8ccbc6a6c"}, {0x7, 0xe, "598cf34c4e6688709fa12ac0"}]}, @end, @generic={0x94, 0x5, "7731d3"}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x7, 0xf, "12434cde8e798f7d2aa85bf3a5"}, {0x1, 0x5, "239c8d"}]}, @lsrr={0x83, 0x3, 0x7a}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}], 0xf0}, 0x48880) (async) sendmsg$inet(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="8871c37726d66d521d22db876036c4d87f82e124ce348c2dfbcde771c9eb581eef3b8f70191d7e3bfb4e6653fdcb49eabbe9dbcb", 0x34}, {&(0x7f0000000500)="3502076de2aa59c9af234e5370faa2df4736de0281d077c8e9faba2e369c7f35790af0ea17106d0091ee47b95007140a7e1a5873c6d2387128070cebef49ff7ca199e7ab44d7683246723481cad14e50c210", 0x52}, {&(0x7f0000000580)="c1e23f7c621ef9b32a19b882573d53df364e73989d7999723d8229381ea39e46708430ca8c55645859a8a95d5ebb2b03dc2a5be12fe1b1cc1e624b7d03cbd437f2e241b7ae5e0a6a1e7ee5e8cb3ee1815bbba2dc5545ed18c86178657debd605ab417b92e91b0d093946e10285c32014fbf77658541e27bf3c965e138319d5003fbb4b2fe0381ae52d981b6ab6d3", 0x8e}, {&(0x7f0000000640)="2bf0585e08fa42b0fa38c20103e0ac40f6cd24f20f563a35bda6c469d47380bbb2b25bf5554b42d680e2fdcbe309db40266b34dcc03f43073a5200c005c16dd4ec4d19332f90149f1d8ebf73bd79d6da4e7dfd65a0bbdc4d15d428de5d435fc486de47dfdd35441d66a61b42b8bff57d75737beb1e4d39f3d1b4de14f8c996980e4d5909f8d0b0e95f8de166bf", 0x8d}], 0x4, &(0x7f0000000740)=[@ip_retopts={{0x84, 0x0, 0x7, {[@generic={0x44, 0x4, "da68"}, @timestamp_addr={0x44, 0x14, 0x96, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@remote, 0x8}]}, @lsrr={0x83, 0xb, 0x6, [@private=0xa010102, @local]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x5, 0x2}, {0x7, 0x8, "9590bde68dcd"}, {0x5, 0x3, "c1"}, {0x2, 0x2}, {0x1, 0x8, "c8e8ccbc6a6c"}, {0x7, 0xe, "598cf34c4e6688709fa12ac0"}]}, @end, @generic={0x94, 0x5, "7731d3"}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x7, 0xf, "12434cde8e798f7d2aa85bf3a5"}, {0x1, 0x5, "239c8d"}]}, @lsrr={0x83, 0x3, 0x7a}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}], 0xf0}, 0x48880) syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xf8, r11, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8011) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r12) tkill(r5, 0x31) r13 = syz_open_procfs(r5, &(0x7f0000000ac0)='net/fib_triestat\x00') ioctl$KVM_SET_BOOT_CPU_ID(r13, 0xae78, &(0x7f0000000b00)=0x1) write$FUSE_NOTIFY_RETRIEVE(r13, &(0x7f0000000b40)={0x30, 0x5, 0x0, {0x0, 0x2, 0x6f0, 0x7fffffff}}, 0x30) (async) write$FUSE_NOTIFY_RETRIEVE(r13, &(0x7f0000000b40)={0x30, 0x5, 0x0, {0x0, 0x2, 0x6f0, 0x7fffffff}}, 0x30) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x2, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x4008080) ioctl$FIBMAP(r10, 0x1, &(0x7f0000000c80)=0x14000000) (async) ioctl$FIBMAP(r10, 0x1, &(0x7f0000000c80)=0x14000000) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r9, 0x80811501, &(0x7f0000000cc0)={0x80}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d80), 0x4c900, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r13, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASK={0xb8, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4d}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40d0}, 0x20000000) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x54c, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x15ea, 0x4, 0x1, {0x22, 0x4b4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xb, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x300, 0xb, 0x4e, 0x5, 0x40, 0x3}, 0x69, &(0x7f0000001080)={0x5, 0xf, 0x69, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "550c764d66fd9575c212bea20639c5ad"}, @ptm_cap={0x3}, @generic={0x43, 0x10, 0x2, "06ec960f0f8a83bf411a8e3e4e4b6b0bcacbb455d793413092e622af4aef80740e020bb4e89fff15dbc032d327f4f8caf6c8610deba7aaf1eaa77d06b00080ce"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0x7, 0x6}]}, 0x2, [{0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0xf8ff}}]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000001240)={'sit0\x00', &(0x7f00000011c0)={'ip_vti0\x00', r1, 0x798, 0x60, 0xf881, 0x6, {{0x17, 0x4, 0x1, 0x2d, 0x5c, 0x68, 0x0, 0x1, 0x4, 0x0, @private=0xa010100, @local, {[@noop, @cipso={0x86, 0x8, 0x0, [{0x2, 0x2}]}, @cipso={0x86, 0x2a, 0x0, [{0x0, 0xf, "2490e454940c17f882673af0c4"}, {0x0, 0xf, "02b5bef62f907ed4460f0f2da8"}, {0x7, 0x6, "1fb46053"}]}, @timestamp={0x44, 0x14, 0x94, 0x0, 0x9, [0x4, 0x3, 0x6, 0x2c]}, @noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000001240)={'sit0\x00', &(0x7f00000011c0)={'ip_vti0\x00', r1, 0x798, 0x60, 0xf881, 0x6, {{0x17, 0x4, 0x1, 0x2d, 0x5c, 0x68, 0x0, 0x1, 0x4, 0x0, @private=0xa010100, @local, {[@noop, @cipso={0x86, 0x8, 0x0, [{0x2, 0x2}]}, @cipso={0x86, 0x2a, 0x0, [{0x0, 0xf, "2490e454940c17f882673af0c4"}, {0x0, 0xf, "02b5bef62f907ed4460f0f2da8"}, {0x7, 0x6, "1fb46053"}]}, @timestamp={0x44, 0x14, 0x94, 0x0, 0x9, [0x4, 0x3, 0x6, 0x2c]}, @noop]}}}}}) renameat(r13, &(0x7f0000001280)='./file0\x00', r13, &(0x7f00000012c0)='./file0\x00') 5m40.910875472s ago: executing program 1 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000010401040bbabb62efb365910a00000a0a000200000000000100000008000540800000000500018002000000050001000300000005000100"], 0x4c}, 0x1, 0x0, 0x0, 0x88c0}, 0x4000884) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x20000003, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0xc0189436, &(0x7f0000000140)) r6 = dup(r4) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) connect$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000190000/0x10000)=nil, 0x10000, 0x0, 0x50, r7, 0xffffd000) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f00, 0x0, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xffff, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r9, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x1000) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 5m40.856706302s ago: executing program 32 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000010401040bbabb62efb365910a00000a0a000200000000000100000008000540800000000500018002000000050001000300000005000100"], 0x4c}, 0x1, 0x0, 0x0, 0x88c0}, 0x4000884) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x20000003, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0xc0189436, &(0x7f0000000140)) r6 = dup(r4) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) connect$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000190000/0x10000)=nil, 0x10000, 0x0, 0x50, r7, 0xffffd000) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f00, 0x0, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xffff, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r9, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x1000) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 5m21.673856302s ago: executing program 0 (id=388): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') (async, rerun: 64) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xffffffffffffffff) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x100000000) 5m21.596858703s ago: executing program 0 (id=390): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = epoll_create(0x4) epoll_pwait(r1, &(0x7f0000000280)=[{}], 0x1, 0x8, &(0x7f0000000380)={[0x4]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0)=[{{0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x1}, {0x4}}], 0x18) bind$can_raw(r3, &(0x7f0000000040), 0x10) close_range(r2, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 5m21.588829513s ago: executing program 0 (id=393): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x2b, 0xffffffff, 0x1024c08a, 0x0, 0xf99, 0x5, 0x4, 0x0, 0x0, 0x0, 0xd}}, 0x50) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xff00000000000002, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_LSEEK(r6, &(0x7f0000000400)={0x18, 0x0, r3, {0x91b}}, 0x18) dup2(r6, r1) close_range(r0, 0xffffffffffffffff, 0x0) 5m20.744825817s ago: executing program 0 (id=424): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) lseek(r1, 0x5, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) 5m20.666384188s ago: executing program 0 (id=425): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@remote, 0xffff, 0x4000, 0x0, 0x7fff, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {}, {}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}]}, 0x154}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 5m20.664809788s ago: executing program 0 (id=426): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) write$cgroup_pid(r4, &(0x7f0000005bc0), 0x12) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x103080, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) setuid(0xee00) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) (async) timer_create(0x0, 0x0, 0x0) (async) creat(&(0x7f0000000080)='./file0\x00', 0x0) (async) close(r5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) (async) write$cgroup_pid(r4, &(0x7f0000005bc0), 0x12) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) 5m9.718380329s ago: executing program 3 (id=546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, 0x0, 0x0, 0x41, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000042dedd4000001d000007000000000000"], 0x14}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x800, 0x10001}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000d9c6b440012001b3a9450102030109021b000100000000090400ec00ff3de2000905040000000000"], 0x0) getpriority(0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r2, 0x0) 5m9.227575436s ago: executing program 3 (id=550): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) 5m9.219959817s ago: executing program 3 (id=551): stat(0x0, 0x0) r0 = getpid() setns(0xffffffffffffffff, 0x24020000) syz_usb_connect(0x0, 0xf5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505240600010524007f000d240f0104000000080000000006241a03000a052404"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) wait4(r0, 0x0, 0x2, &(0x7f0000000240)) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r1, &(0x7f0000000b80)="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", 0x587, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2, 0x4}, 0x1c) recvmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x12, 0x0, 0x101}}) umount2(&(0x7f0000000040)='.\x00', 0x2) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r3, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) 5m8.688249725s ago: executing program 3 (id=564): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 5m8.678582965s ago: executing program 3 (id=565): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x89, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183080, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20200) close_range(r0, 0xffffffffffffffff, 0x0) 5m8.582380177s ago: executing program 3 (id=566): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x10, &(0x7f00000001c0)={0x0, 0x30, 0x6, "cc180147a9ae"}, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 5m8.581485617s ago: executing program 33 (id=566): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x10, &(0x7f00000001c0)={0x0, 0x30, 0x6, "cc180147a9ae"}, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 5m4.923206214s ago: executing program 34 (id=426): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) write$cgroup_pid(r4, &(0x7f0000005bc0), 0x12) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x103080, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) setuid(0xee00) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) (async) timer_create(0x0, 0x0, 0x0) (async) creat(&(0x7f0000000080)='./file0\x00', 0x0) (async) close(r5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) (async) write$cgroup_pid(r4, &(0x7f0000005bc0), 0x12) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) 1m36.259737506s ago: executing program 2 (id=3129): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r2, &(0x7f0000000240)="26b2a8dd3bb50b8ceb62f430e5885746b5fd58b5a47a2bf28b373c8660a05cf8181b4b7a61b8ce127e9a2c0e92dea9379d5ca6b58c15037915bb4319621bdbead01cade5fc0535760d2286578af05881b83e2c2007508ed17ff1e44b5f91fd57e1077aaaf77b6741f58c4e426bb9b1ac269ddb81ba7c1d6ee457f1bb8ceb4e8a69db85ebb1df95fec7f3b5bd95dd726c920792e9a54f1641d5578f4347df0d583f76f962383980e8c6a1c123a70212d089e9b35900b052f0ee59eed7cf1e133398f5f5bd78d5c9820ee007f32894a57377a97af57c6d6dd108231b10a94c67f18552a65b870b7a9afcdfb72b57b81b1e424f739df21dfeebfaca906901b2626cfa482aabcc62b510255ee5010b4c1b260471011275c7f242659df63a8de398c2b0dfa67422e519853a439752898451f9f02defd4ae71ecc8aadd28d21a339d35cb425e109a5452d01d1ca2fc9cd2572a1252582d4b179876cc489b1b3fe4767d0356c29e6e0b891991f1dd5acc3c3e35f9d0048ed0e28b9771295729aeb5a1e262ec2fcbb545c3e24799bc424924294928312b42be902842083b4d7383ed289b307b66c8568277b3c17fea747ee49b750d83dd7ea1f18a5eae198451bd2968f823e03a4656cbbb154145465ddc7bcdd0c7b1d07366c0a4090e4023fd98d0f77d3949d7788bf0b31c52c7704bbfd681c4691d16ef610708ad2ae5af88301c5b0451ae9f292f16aa44230e53874a432be156fc74c9690983928aff88c8d817c86913fdc8425cf2cc43297e89321dfbbba3f4f1b8bcb602a17f1f5918c0657a9e0230f2722f2aca5f2f931c8c91dca589c02a711db5b7ca36f3a49282c4ec3b447ddcbb2f94e257a384d8c17980a3962b2c7b5c0b661899fd1451ce783dfb29355650454b65479ef40a319e37e90757ec3e3e08a2bbe0b9bed99d8bb31e5d240ffa66d5162748f30635658f92d864dc6ee1d95d9b6e19e554f6a4a5cb4a067b3c7d7d882ed4f908337febfd5cf00a6fd68e95fe62f5c374399f6d3201d3482a0637ac4d9d8253fbbf6bfdc3feb9db0a3d8a85cb337dc7a1328973e20bb82bcc2ec03a637f4f29e1efcf4fec09568a42ece4ee0508a0da8206989d12e522a65e76c4d64bbaec9f328b927391f2b15c7e8b3f138ef345afcac4d566448f327f84ed41f69b4d40c8309d9d5ed6846f788198e151a48f654d29b659f923858d443e118409541cea176cda5c518a938d10086148efdecda55cd4990922cffc06633c59db0c21d12e4b311e3858e82001c24c2225844019f9d633679ee75a70521da58cb8809c193c0f3389dcf540884ff0b44f224cbe03623ee16ad37e00abd1bdda5972379bfb097aa2ffe5e881ff988644b1364d8117feb6859fa4a942260aa6ac51387bc4c9173b8656813929744af772742e69d78f5b127b3ec8a64a3781a603a56e05eb948a003e54f3095e56899dc6413c4317e12141b3409ee8d33dc77ff33b10c5294c5e6b969848dee370c19e732f3e75a6bf21ad433c99d3978f8a8254fcc589eb067e3663e6179cd7904e080048565f0d8aae47d0dec7830d5eb48cd386ea8ff0cebf7bf86eda674cabd0d06f2068817d1d85f39bff655bda536ca5d9727545b8202a982818c388ab0219021fdf4dcdc5de8731edb03e9170a8867b614e5317f76f44c33563fabb73eb4cf8a766b6299e52d00646262e6e7704748a35322cdd7c52e6bae2654295f7804f68e807d5ce420213a278b751b360bffbc1bb9a027b98e65e9dab8fd143e02c2e6192eb8f411d80aad0fa5ff40ced48d26e076cda037ffed74f19b1a35839239b5d14e57fcba05aad705435f998d5a85c05d944bfc472ecda2974332b9b44c448365682d00e271f0fd2a436057adfb7b8eca4abdb8c1329121d6dae395dd1506a95c0de8191bd69cd1f68ec5af9a88fbb1a37c082b9df5cb390379f2db48c63e9f779b875ef9891a84181900bec4d6f512e4633f6b43b6abcb87e2e72f74d8cb0ea3019860339fdcff45dfe7e0817de819eef61d6e91b05a6b8ce8b0e1416e0210813429ff7a75cbd6e7a8f5c1e41012f8b092c6f0b45896a3de1a278b80104157dec7e210aab22aebb54ec881291fee48bc1c413f6a0704e45c1b00f39d4618147e4e11f429592bc92044a772bb33349d3ee4b6c2c5a5a8fdd5ad65434943c3987be2ab99807e23db8b9ec30a3030be076b7871c1bc7a9d4506f3a1e7b986d2ea1b60f9240db71a360c919dc6dc24f6af5878efd95d83f5a9529266f2fef29af2b60d214b21b6e3b8e5b3555849453f66e3b2fe46c2547690b745cf6b850312d825c73049a9a009d66d0d58801f254e2dc32897d9f3bf6fc3fd9ca6fef5d0f0dc55e85a99d735d1800f418010986d80f04e7f5a37109b73432db749b569966e781e646c0e373c94d7797960e1b73cb6cf58ffed290c567d7b5dc54f7a9c911d19fab72aded28cb7c063c46fd530b6ea9efef61c4da2bd5bad7d317743314ab01046b0f92d9d428a13bf5ff427fe25bdce29637f916b2da55f2f5ff05ea17002bf139a5740b7f2b60d6048844cc3909c76eb9ea0735ebed9c201efb8228245373c97d8c565e1ddb4c4d07c1ee7e3a942eea3cb88b2b263a0e4eef9b5cbc99f0b1fde017d01b15820f55f51d325c77c298b6973ad694b1f3bd5440fe8e8ea72fb10b53bbfb84c7d2b7be416df5cb60ad3607c71b387687752a119afb71cdc53b8a395e0398a5be4ac9a175df444ea715fbb2703911bcc6867a85ae2d76d25af06ed0e3688660dad6d69c1f356d43e655811e4169ff9f3f275a8417c44a9b7f5cc3e6ae05ed6a226da85946e84144191b4018d2a226e957e583fb34af3d4bdfbb59da087565fdd7faca17d652208c129549f16541f8addf7be170c6041459600364f025362ea0726f48cf82521d47eb478c341da8b0ba94e96942787d4046d04e86b3ecdbf4b3579aa8f00ca70e132609df358d9183f6cf6b200dfd16fac3e0bcdb13cc5bfb20bde3cc139967c70fefe3c39f484c442b75a5606a2b4952c799b04957e151d3dd76eeac764170a1929a88a668926fd6c22e9c2327f85fe88d388f4eed175a5c13e82bd6f42a7669341d2f3012c75c9871e419e0f3c7e50e347856415b8584eb2d2a0214d5bb03b10a26505ea9ffc7d5aca844e24af916eebe7513d8dd9145049aa0dd8e2a5a9fc53cef6239f56f2ba429601ead8223b5d89e5326e09f9d7c409a466fe5781435b9c324efc040cface76eb40b2da68b71a8baf2f916303726256c772cf27806d5208724cdf9f4eef7c7f3084a25242479fbe759bde637a7cb96d98510f0a68876d04cb47a3e7614b0b51f8812727b0881da22bf270d4a44206a581e71a7150c4096dc1fbd9e724ac572adfa13d6c2129e51df101bd5fd45bc57c356d67b65f270168bd0601e0241e887becb130fcb72c398c6e50d5123f5e8cef49d7ae92ae8e7de2221677a8aa6a285824ef679c68f87330224ce2c11299878adf4f46ed510fa4286f6110dd9965c189c21e85654d44992593ad75bb264fa4c9c7f600224b8eee14e6bac1aa0f9c9bc8c10caee2826cc6d8a787a9b98f908d062732ac0226268047fb44fd950d8ae380620c1f594a68a0813b492bfa3a8560dc1458ba84ddbf9b58f0f7317589a36c66493d1b1093c50719fe4e7b3a7f9dc61e961b0a36b0d65bd14029ad5b9dacdb4edbf090c2455c6c1af080e5447ec7aad8d1a532a48ce280decb70918738b3dcd49d3ffe16e1a2099f7e083aec3a97866e51d43e2581530e53d269c4ff2a6f576ecadc018f4e233b6e7da57130bdd369bdf5973031b7280d7bfcfc443dfb578de9d60be87e741e3aabedffd7b46e6a1c342661b0a122d579623e6e86e745e6ec3ee53545e9a1f63c1db363f68ee2a693a8f8bcd5f97c575db2ce1e03fee213bbd7a38a288fb83a07b1adeb99932fa55dda4b7e6be199f8f008abaa88c63f59179b47c541d8707709c7cd5f5aa5ed5c4dc63093596b09858952e64133cbe6b7d02b60528d6a263c9b72aa3e751a99e9fd1664121fc0ba9018d61011edd23d29d05c2080e33c721e503113be23973351a68fb5da582205a0e89e69fc84e24f3d4e8629847f9b6ba77e2ffe6ce394f99b1a94576c677e7433aa8bdc4d9779cbb706c6e2f426806d111173ffb0cd4f7be3ccffcfc9e66a16ab2806b6118ce28bc935624f1cbef0c9c4da396e6dc0e87ff20d0fd0e07d49327d8c0c97c7d70c50b584fbe563cde1cb17f36a73ebbe6b331b6321ac5ceba510a35ee913c5542a9d7b12805a29a99d25a5d3bc13a330435d6f0305bf522cc71e261c39d82584440d47fd82b9b31ad4ea0d2922558e6bab6fb6d3f6da9eb2a2e824af6928ee2ce41baee61fd4b5f896bf92bb1cf06c0c5a1b9b81a8216084c8e90451823d6be884a735a2be130304a22d8168c06db9cb6d62ba30079ecc831952f2564b760153311226d2188bc523928aa63223e785e6cf67a01962eed4195d5b06f06f272fe27d38660153c1727cfb438b5d98da5778070791c5ace1fd3ae756c8f261ad9d1c6aec5722a8e0609c3bb672c628879b65fbba3692070781c13bd34a93a5b9fff4f9ac4cd6aa3fdf076eeb4c0cfa14d2a41193e723d6d013995f34c97bd5d438eae8ca9a8a2dfdadec39c84c11cc9e9506020e072908178a6b60c53321c0b857d12b9adb58d90197c090e558d20a29bfd9f2ae297c23f47a544daa537f5780ec75b1824be5c92c20785499143252dd2f6d1f8aaf47deccbabf74ee0d55793b046aee7dc763353249f03cf2f0c60f6dd6ff082a051ffe2c8ef4ae9b1d8a046af67ffab68a4587ccd0a503906cca13aac0b7309d5fed12abd5303d2803f928651b51dd8747db79c56c3e3f89e6799a9dac3a7c57257c6575e133379b6c616dbab839b530e7ede62dc529acf5a6fa061fd1244fbc82d6e883388291ecaf1130151c8da538f8bccb9b871d2ce3417a9212ad94fe94c6e13e06975d8ba285d7e937ac4c6fd89aae06db06940670463d6b86a18856cc978a49f7e407f2e4f042d7ee1b7791cb33697824c68b2535af6c803e7940512da7db39c98ed1030e615569c200bc3ab833156187c25c1f659dcde3434f47a8cce56d821617c58907f80d5628214a0a8aad3fa2087647d52ac1c9692c6b57b85d70cd12875f110e631f3a9e34f21afc401797d9a13753deabb43fef92d691efb19a7120167f838d283fc5f2f1d7b4c2ef736fb1c8a47befcfd320f98461756d6908f00cea4a252733db78b6f67620e1a209e39f788a8360b8f42ccf1776259c6f70ef7ca2b0ee8caf4bf27017730236669eab62ada6db1d381ec2f8c60bebf555425bab9fa4d46823d3b0a1b1f51add64961aa2a073929116f02ea230bfb354019e47800415edeacf72a7daf8930c64adff306aba841fbe75bb18da73441721c86d3a70f9e6025e7fc95516703372fcae04421b08d0edbc5f1b6b6a3c66225011dc19f575111180e8d173922c2e28123347036b3ff2418dd529c49beb2e335801a3a5473c73d71d084c8271c10d86f283a659deaa57fff6673519645e0ee4c915cc3b8c440584fe222b1bc0cc0888142b9753ad409ed41ca16a92a3126ee73f7237523c6c781959fd255c5c0dff4ff324dc3e2246da77281809ead68df57e4ae6c1f8001e6d292e8e42f897b59770ec26b508ac5d57b47ee9696f9d40ceb39f9653a14737ede3f3213147381417d9633d30cc1107dde46e5ead6e4e4dec617202e10b9093e3bb2dfd785dd96a6a64f44bef7465552dc2e391c978c7ac1ce2b8f774d7b3934d15fc6d96eb3de6f0e9402a8538c6081712e5affa5b67b4153217b38f3248b2565c804226f4a31688d5fafacfe2e4fc191791c7164cfa33a474f4a9cd90fb5f37f5268e1801a2a762b00e8b7b2bda1db7a90ccc74ccc0fb015eb49a6ed0236d8b6b0e67bcaeeb750a499cfc3b2dc34e9024ea9bf00e5f0013a15509992979b50617dc14aeb0bac46c6961eca1e96ab2b45d342bc68e88b765a79d73f1eec58167e8ea4752981fd898f1ce528e9ba947723bd4d2ce228b6e5787227697d52f2bd0d4ecbebf5c6164f5819313060579ebb3ddb3c6423adb999975427c2d3da65b3cf52849c75464b46ede138be670742b175474222a47755f8006d4752b6c271643aa622f8439903abe53595792e7856a6e5a5e1b309fa139c2e64e927620c87aec8f36b9509c1d5cdee296bdde21d2cc54e7738070d93552d9ecd799325fe6fae9f3d7046ef1459d401922e3da284b7f6ef67ae196f274f6ce94887bb5ec25c0101618d6118b4cf47e0dfcb8dc89e8f44b47ba19c326db51a75a5b790620a2e460110dbc0f923a7d3825e4ac1d04597c0693fd05d93aabe907b47b1581f915de89c16580ae484f864e583b43ddc0991d716e401f60b6f62ebd52178a9e0adfbecc706dfffe8eee93f67ba2c9da4515bdfffd764741527ec04c3503da653271f2051ddad922ae38cae98c9a2eba5f8470d2551d2224add25a32b9c4d573f69ed15445d2b72ab20d1cd07c2d897dd7c97edab293db9f217a5eee5de9ad08da2f734e617b9f5268a3b91336237f5e9738a65f4adde4279eea09ce40e577b97eb5c67772e4ebee5a33afc7de28c70d97a514cdcd95908d26ad62800900a7cb9dcb88955b5401ccd4d965d00ebf0da48bf43cd2f5b61331894f523685b17beb253c3f50db89e11e664d6427a2551b5bfb2cbbfbf1e8240909d5eef23ccfa23d185391713d1205078be21e99063ff6316c06cd77969dda4d7f3350d4f2f29a23f12e14788fd60cbe4c3c00685a5e42b861597fd3b70c5e0e4d9f02355b754bf353fa2bd5dc0225080c26eb39be11a5b3cfe5264f39399167ab55ae7286f09c1d7fd0fc69bc9c7fca34867b5bf11c43612d3e010d2918a0d9b620549402f2c56e9cf3aa53b7614337f0867fe08170ffb272c5d340f237cdca3e023d2e65b250acf4f265ab8794a5388c5358d7e1cccbf82d99dd1aeba50f3363b9c3b6ac43542334bde8cf2ffd29da1d516bb5d950938f410829e2e37684916e1eac5c2ea1352e7cf6d0bc19bf16bf4ee61e44cd339fadcdf18126c46c0aba43c927510f3b876b32f606bfd2f657254e9715f8151099da8897c287ec1eb9077c72a0a31171f5e2672c16d3907caf659a73a15ec1bbdf240cf5796c22a99933999dd36ab3c354736b45b990e1631be048cad72829f782504ccff0cfc2e1eb5fb3e52e9fa4c3a39ec9ae7ef7b4b9e7e9a721a3f6addace5ca68d525ab9dc0d26b05333dd638bba4e40ec0a716b29172fc84a26c046dcdd0a744af3a7da0eb295a6b0d2a4e45bd6222464cae11bdb5a6c02f8ebb9c8846ca03175d4cab8b9c9531ae686029cc740c296feee12fda2cfb130808a3fd435c13bfca388ab530b8c4b546c4fc9af86596daec4569b5e82c8fd452731e27f9dffdc5713562b99fde6b59948a46f2a44ed0e539469040bb04a54fdf390f589c6491f1057b3d44573838dd2a1271ef8ccec3796012d2debeddb9dd0e252bf622f2671d6940f1c89b3ae38b4fcaa37103d96f4504c5654e603b80f710dc575bfdf2f4fa01741ab79057c15b627cd03e7dc24aab3ee312dd1d7e96731c28e24df9b051fa5972615858f07572d07f6a6f947fecf8acb05d220b68a4962b0bb9e2bb6341b97b0bfb18dc92764ceca8f723592c02104a020dfb9ff06bebc81ea80c68a1fa6175ab4042abd3305c1a17b72ba5491dc812def91672873fdd98632871ed0387e00a80c173b9e8c75e185149d32a9945e2f9707301c96337cd1c44cc13a9f38dc23720558c31c4cf6ff72559794c04af4deccbeddb04f267308e220963bf64d0aa830af54a91ae3ae0eb1aa3d48dde97ddd0916e3c16f4d90ef3e66f06f8c4c3d4fcfe41094708f49ac8d4e7150a74d9378a75018dba062fd1ec331776aafdb64e5e1732ab0f0ce0bd8985ec4b1374a6245b6d714a1c02ababcdc1fe22481a6ad3276662d4c9adf65e9d275afa6d57d6c3bcc6ab68234f4a1dade56c852c86c0bb4f427387bc9ea23e7361b7f518039af614141a12499b9602f95e2a969c7f31cf1056fe3b1954ecaa3db219f546a28e954964268be0296ea2765a8194d88b14869d388996d645f34511d63a602d92e795a0b29773052ce44b008556b6a0fb418a9233ed13edf3bda3db479211d00c16d40ee6321241d884fffeb3c1e2c01707c7aa387778779a241699ef4bd5d7cb8e40986539d0778cc242e98f17e630a09d62155b469ef5dba920d2ef80686c8f9eaf1965b42935d6dc470de7fbe0f5083a4b6ced2fa06b255fc35c3325bcc57ae3ef95ef58edb0b45bbff699de88afa565ab9f98b1c98255dfd6bd3eb18af00b94cbe5f94421b2828b0583c91e7cecd4754003ad8f46a206da99e75056705f9cccc481b591d4c33d96b21acbbdb4e70dfd9b6a2fccaa6a0af7f97fca9da759e62a6fb222341cbab0c808d320ff13a5989ce707aabd7f7c569b3e22e0c91613c483c136fb5b94ff7bdc1f51cbb9f5c46e4b62a19cca73057b78d1f3f8a9b0e2a20b8b8d9f2e8d0459df86c18353fbb3cb6e8b804e28dee571349e16b5df662cdedf1aa5a44eea00b778bc79c16138d85fab98c15ad9f2b83eebdb9432634280768397d2895c10012da8c6659e02295cfa52d6d06ef1e6ed0546d46c676048e5a455261659c83492d355eee56596e520962467fa8b3ae99cea9547d99a6d6b674682363c0dd5c8bd5c63d3bc2d45a94fb4e090ca27028b29a61c53d96ade29f1c60cffb5053b494dd2d7c7ccffc7006e16eb2bdcb360a1e0a3fa1f380616d0298e315808db7ae9ad16b6c4bb7dece5c2c4ba52d514f7fdc9b00e66302d1b6c6a7b5b58adb313e0cec67448238f66f69dd480d304a9831833a1b94f8109c0d2f85e646077bbaf140f9c7e72301d8e452f13711be18bdb48e2f0031c38da789a9e4161b7f0a6da09075414aaf9984ab7f141647c532e3b2530f3fd8a93b4218ecbbff44c4a58cdde1f9d89eb60ebe8033dc10116cbc09d4903bfd0830ef8b0d33572ce61bc028133be720544872e4a205fed6b005e8ed240ceb6e9efdd313b6eb0aed6bdcd335cb1765f2d7ed7f1819e0c04a8989183abcaa3677c35c33d95b139ed63f9f67e51386206ee2a3ad54bd4312b1178ece5a5a76eac9534faf2bb8c7b5105811a34a110553c63f1b9168ec5758e39d1f1baa4fd3e8dec73026c08ddf1568fa04b1a36a98055b6912f4faa0741e0bb5f063dfab6e6a8605b997affc69369980188967e4655c954d31b3ebea8dff5face904366191f0695fd3ccdc5e82c5982243e16a895f8aaf9d63d37ee1d323b296862ad265760a392378bc2ae5d7b75039b77aec33aa00c134f554ca9e5fd162296e915ccd359976e7ce4099bcaa5494c8eb6fa4da2a2e245920762f3639fa4fd4eb0e5e167a5f2111bfa669576ff3e0711a4ad78d2f8477363b03e6a13cd5b479817a62614ef613ac2b03a340114909c7b21ee93adf74c2ee2d4c666f1ab8bc43368e7643f3ea8da5a919b1e3078875228d2b519387ac49b7b9990d7dc229fb9ff0d551d3dfbeb843c8b2782f50cf8c575dec6836259a160a9a047165791d1e759c74ea65f4f9da990fc0e789bcd4ddf716442864788be6f2c5b607b6ddc7f9575b4e8375eea50e98cd9320fe736114e03aa0a2c1430d5cb507b29b388ace6ab58393513724607102a0458a458998e94d71b758df51ed4ecb6c6f2b94c31fb480745fbc6f6dc595c9558161fa14462779952982adb70d70a9f9a734fcbde17652e1a91422f93a6ff7d6c80fc92a5005bedf58aefe9bbba9d0ab3441e86b863bb5a3fdfd2a9c6f6d10717d2cd35d3c2a892f0e58545b1794d9aae993d72c215a6673bbe38976cc7d03cda84999c637aec8036ea1a23b143ed6288dcbc7d1ee487b1b6a4f6e8ef63b378acd4ff888bf95d86336907939c29695b2e0cc58efab49056f88a9027cad6d724e635f94f45f4cbddd8188608663ec7e46547e2aac7dec6cc5609e9f5f41ef26a1f16ecf6bfe200b0a955f98d9a4d41a2a268f8857670e33fbd4f076aa11c49cebd8306a4de3c86f7726fde93c7fc984079ae60e63854ee9a14162c749d7e308530c6b84cb5cafdd09ec3411cc0302c77d316beff973e3108ddb9b249e206d5476d605b7b24603ca344c2263bda8d7d3db55b9e2fcdce69be9b1ce24f8c4df129cd62a299fcbbff3309031973b5da452654c0b8ca4cf65891a8bdb8dedd20f631a34964e3bb0fa45c618861da79b259d79ecde8394061c99c661851c016c35ee8c91d52bbbc25f52b5e2f77ef2f63c764b717e8cce4d291742d5a7ef7f5d7ec1a96620eda1f962fb2448c388873f8b8abea4d27a5da092833c43c57c4b14099597f83785a31190798826f4264ba8f998cfbf7f20f9678e10e05c793f5781f8accca245d047d3be6c10541b2610c02c6e916d3db9776c6964e4519cf2e30708c954ef2492d3418c552dd9b5db4320dab8be6ac3394cb4b3fb1b9d5222c6ca9bd06aae2fef510e541db1209cde21fae56507020e80862d0b875d958346c42ebb781955ab337be61a68534281100247904b81b86aed49544c2452ecffaf6cc116f9d3c7362fc2cc390ab2ad29928b6e8bf90a4f21442fb213dbeeea4b8f481792fc6579b608e3a9c4fbe2755010d7ab3cd122de7a40a1f7780350a31d83ee5006ade36854cbc8e8c648259b29f2f7042719ab4d4d4d1f0c5fe6b717d23a5504335922f84ea8b20c78a5f1ddf6009089ea221353c01963fb8cabd3d795831c86d084660fa7f7d08f3ff15780c5b301ee27ab8d98fb358b90e92de4c96687c37e327ac1f0f23208c41a36e67cc22356df854f2dc309c110cfae51c5cc69051d22477caa1d2a2f276ccfbe907b263bd79ad4c5f6ea2687466f325ff2b1a736fff687c14d477c4c744e9c82be5b8ebfb69db2b312ff540ec8cadfcba9b609cae7e54ff347ed3d2649f9214600870ecba27f98943b4fb72f93b5ecb6d64dc1c7b2e8c2f2cf1006e39a237c5818014df9281feb6e522f6cb2d5ca35aeada09a58d5a6bdc9a75cf81a1c51faa8a3824a58d192a27be9fee5098b2e71d0d3f12917d50667415e418b790e0942260f4d2589c57aa1bd36017bd2bece963f0776f9f76cc66876c3f88f8bdbc35e329ecb56887948fd2c05d49c664509a682c6ff60350070bfd111be86ad2eee8c0d76b851fdb75f08e11fa47b5fd29b57568abbf91d3760652d475558bce2a1393688c9e2b4ae06cb072c294e1396b58db00b09ba8dbdc047a1684cca6e5b04cb52a40dd7b7f72c55292e7af0f3b8dda380d45b4e71c6cf57179247923750551ffd955f815cfbc29dfe5e0b2689eafdf44ce362b9c5864e4003326b2f183df7d39de7632bf3b2a85dca04cda08d10a5bad9ed9b481227e39804c3fd52d8a8f03288e13eb09c9075e23f82123a416e58864d95a321a719f88c8633201eb7d5c429348dfd83b476510f71808f95ab3b11d521004acc6d9168771736ec0a5f7c73ca78a46787c19299a79b453e49317353d6bee5b", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="9787", 0x2}], 0x1, 0x0, 0x0, 0x3000000}, 0x2400c045) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(r2, &(0x7f0000002400)='./file0\x00', 0x24) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) sendto$unix(r2, &(0x7f0000002340)="6700e9c2230b7a07477c53a5a8ebd9f9f643208c45746825b23e7991423ba7bc7879fd815fc04e34803f5b61fa3ef758ff0cb140e1075f558c69962feeba915b372981a03eea516ec7e78c8914b0413ad059e58ad11242855f2bb38e022ecdb12fbfa0a92a238be8961bfef62b7df615f9f554d5af38bfd8b1f907c06c54a30256cdf0e940", 0x85, 0x8000, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x2, @empty, 'virt_wifi0\x00'}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="6761cd07f58ba96d9f619227f678e18ccd4407a22787", 0x16}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="5000000000000000000000000180000093d1ffd63306026d8d3f82fde45e1b650b0901b7fa2a42e333cbc5388320de2e8d878bc178251b370d6d2be730b59b2fb8bb427935a3c84dd7a6c3df35b1000030000000000000001401000000000000a8f8024747d1615a98c3d1a447b608056cd48aeeefa9089cd00000000000000010100000000000000600000001000000b0362ef7c56f34dd61caec0de8431c58354c8eb3e8a117c39d54633a576e7e1a17df71d5d62b482308825b429722ae20e04100de1adddd5a25049a4dc173e34ad8f05ec07788489cff38d12b13c6f1d482fb98d118a9b37d76815fe48111c633e9aeffa3abd4d0a052718af02626531731abbc2fe9598dc47ee18272d109a0893602eced91284ae184ddf732e52ac48e1a6678988790ccd5fa6087d6fafb043daaf9c72c2838c12225fc839be4f057fd7c857b3e4d80d32e498de088ce65fa3b37bd202e2d057bf09523aa200a0088bfcd8ca9d55ea743fc62c879393ead1883766da08d0baf9a5411c690c84a8b9e1295218884b9b39e4ca361c33f31fb001a0a9b287630688a4f04b581b7a2576b94b133ca0919bc9a0ab89e35475b2be28fd3f3bc5e1819beb57b8d9375ade107df38a9817ec857397283950c0000fd031c42a520e489aad657e7b6620b5666303fecf75da2b63024cdb9c076ad6886d550f57631393c85674065bd0a3193f107c92ae46c87f5903c8d6172182accb710cd042ed5fda027dfd558be3947f578b3091fc4c6ad067946636001595dc326a74372c36866581834777cc244683822e6f36a3b89f06d645d2d125f74f14f328d17b0b1a06251bfc15f3b67c06c53e4cd5b093eb3abd79ba4dd82bd19220197cdcdc670b3306fe964a103a590bfc0a0aee1a212ab335f0a85cd5b13331e08cc898270b186948ebb6a9877e544f70af633833ae8cab5febc2a02741fed8f24ce3f9b4a4d6282c55b35d0ad81eb0ded1e0b184107a57fb4dec8a8e69b9bad1ea5e44f27090adb168c29ddb9399e114f2588f10bebaebdb483ac496f1bd7b985aa3de1751bee2211ea0e8698a5ce5ff185de0b9c842919da54480594c9f861a0110c1fa89cb942b23db4450fbcb4b04c7bd7f10f040df0db7e8205d9f30bfbbbd8c28cfa7e843e354f16459c322d6c24b5fb2a3e0b9581100b96abf8dca6c67afe56d0a26adf35c43e05b09f9c509b18a34abfc26ce18abcde843f41beda9175f46e045ef52b44d3227c28ba79f0ff4cc526e8333e083bc13bbe5e018a7b8abac4dd58da693fd46b212dabc9deaf170e5fca0508ebf0d41562eab426576e135d05326a405a17f7bb79acbf261f40f88fad8d0d27f322c12a0957989827ba2abb06a28185e194b02e4e32d96e7663e538bcb77a70b08ec48fb5d9cd3e7d78cf0d4f3f938d3462df253fd2b1fff0d37a11f03eef14402408dfacf5c724cdec298bd314b1ff59e24132990ac493283fa543a8f144c8291a829aebb038da1c9f05ad4f971a972fe9969ab2d569bb3bfe6261ec17af8357203a6f5a1dcf0512df95f3fa05f0a07044d106784bfc69020d3ab881c780b40ef1d5c501cb6622b8c61d5228704eed986a81b29bb3dcfe7a05cf0929fe8dc825a332be1a85dd2a13d7b326f40998ac9ca56053f6b33b2046f3b3ada1b848946459ac38c94e3f0b3ecffe4a9b767bb7a84e4194d6c1251ce6c3c2f82b603ba8f305ef925f572e7d3f42428f5d7a537ddb2492aa8eaa5b3d29e67bcb69e744943115f4bab41c8deda2946cb2c23f282bf7441d80f94e50b3837483c640d2797b57ea609b504147d1ec7ff748508b893c77c3ea63157da24810dbda4896eb55b9a4d89720fb42f05f2ed55d4b27f7194ed304310fc3c96972792eee2a3641a30645ec9e1947fc448593f5840d9fcd8dca727a32257de0b574d471d01ad105a274c9891f264f7de0c56164ae4cc4a1701c6e51a3137a46db23d76813982a198053fb89460034a08dcf0a75c1a8ccb5f80b4c63d881d45f210f5780fb68211e48a4411db56ceaa1ab17c70c6db203715ab274991eea3e79eddb5cdae7a1945a39e798320a20181603e3f77839b6662fbf31d438d9120f8811a86d3f8f07b546ae928516e5cd69edace6b8b4a03fa8c2c2add4058115e85fe66c9cb9a3cb7dc747141bcb5a7f6aae0da72196d288f9ab13d4934fa5da4710686612e50fa4d55db37d5f38edf4bbad16c9033a96e1ea1871374d5406e652d4b167c3130e1a03a168c9dd9793e6e89108e7eb483b3d6ac9ced7682412ddecf9fb34590d06744c8ee1cdef7a59de1a44058261fdfca42f8304fb570bbcb9301410090407a8563e09699a37f1ec8fc3b321f7c2dc16623044b0af3d9224f8d59e5cc8ce6cd7adbf7b394f2b87d2339ea46534eeed73f56e11beb8e913242db8e70aae2502c5ef7a842669a44a5f1fb6a59ca5a2792c1012e348d2521ae4a6d4f5147de9c68162b4f4f8e4d407f7f398ecb3257f206583114ef24a38e66adc80a40df2da6c6141f7f1572607813e4a63276b253b9b043f42f87ff0625d60314190cb5a6be48efde9345407d983e20531768da7a954746d1e29db8fa1f1e27c9f17ea3fb07e0500c92eada24c420fba02e0c153fc2fc5d0592bcd5f0efa178d3438448b5c6e0f7c10e34526c2c8bf621f33cbe8b450555700d5ca5891d9de6e5bbd8c155e3c459390843ca8d3ee2bb7fb20733fdf6253d04e57583c9e6800b0582d259a26b0074ca3d34af69cdbab6cf41923efbd527a767b4d46acca5dac5014531939a6bf0844fb10868741093974ab99ac6c13d44e8a90eaa194bb475dd96691c8730eb512562a9237445b981a184761c51ff3ab6e4e18acff4547ad88cb53bafb0ba57b8986a159f23468ed53557d2cbcd5ff471e65b352a4ccc0266c7cc45103c7ff233d999a7ce018236d7d78474473c2d2a49af52da866293fb395f18d431efae6385c2ab3ccbc60a587bf4b694bfda2f350beaec28bdc81a7cd57f71ae94d5e0d9ffb4398a140e92b687a823ca9e066222ef7082823b8d97567a30773879addcdc4f42bb5b4522a917fce991b71878f50f41d30ab01bc89fdd9d47e8bac883752ed7c5671b62135d4324ee941601510e361ee711672abb21aafb99865f04e7cfcc4c7c6045c1b3526233cc79419d67b37a36337c7000bdd92fec26988bca2b173bb2b8d94f984d886a7d7218c87898a4f2418429bda4274d68091efb7a32a948bca582eca52fc2bcc1ae12770b8eeeaf81971f7986011dc478c1b0b3c88dae2d7c53698e9d9bb48161f46222161f7a6412c344f7ce34f32320713516e5cc25d8954074fe9258d3b3036a72ddd41689e1b4cbb6d78a617f447106340f0773ed80f5492b5a01ab2e403e618bb1f860e89f911df3e3b1892a2468b99bb1207034c4ab12be03d7c2a915c576dd57d002f4332423113559043f41c73fb6db106b1370e56f4e65f58a408cc0c94d75f4dff846618bed6823f153030ecc0832285ec717ef2defe555c986d7bda12d8cb31d903cd521cc89bcfb5ac0f05929885212e34b77d36f4bc04a9dfcbbeb5bd8afcfb8113c78b79e4ec36234086572f4fb122af3a5771bc15e5d1de5082ec8609da93e7e70641d37b10fec688796af57b89f295a9015e6d081fe753e58101c7a4e9f4eeb7264fc7838b6e779074f8acb4e9d4055b53835ee2b327abcb4d205bb2337bb508f8a320fce96ad4e9b902fae7d94c0e1aa5d35dc66bda7fe29a65e06cad4c3d1f2dba450844e6730a6f62dd0c234d0eac36aa79ba1c30b510c304e10086cad6f0e5a65989a3a56a45f148fb189bfa167b8e6ce5e011f1e87bdbbe64b8afa8a488cc05b7723bda4cd62304aec0acab0c24625c5677c2284198ab6efc2c03eb0e9f76fa06210d350ed41fe28560660fa7c7c27ed17ceefa462bdd9fae0a0cb17f29d5ade2f6788ea6b9a03c416912334e6f8f1dfd2f06220a568f70989064c2051128c8872ec098ec8e091a5276585790acaecc4630964625eac541fe0e510429380d39266d14fc7a51a7ea8984479a68a9e2b4e3c00763f41e679585343d74242974951e392428fd2b5d3dd7fedcc8078061266d72f81437eecae073b3d6c345288b9d6bbdd847220cfea6a168478f240256c6a31fc48cfc925092843e03c98f3ae186275c094f62bd2415733dc3e3532bf8348f7e16dfd6a1ec1f263c803a166236fce58bf70639f9de1cafdbf687b8f91a82a5d2251fdd32efde2334cf35a51e03a0976f09656ecc32668004304f35bfcb5737824c9f916541f45f858fa941e9f9d5d362bfe216ba274b50b4bb43bfd51dbc0c3b9a815ab34d779b8f69969a672d65a03c453653f61612921d7cd640f8ef271ee4c72d14c7a0e2e6834f5b25e2c8766716e643552a7d5dc6203d86bca76f02f52a16f3c839066475857fc9ae2f355b98d0f72ba47a7597e53756ecaf7b9a30ab030a03788017e346b291c4af0dc235a27d70bf9db058c05bfca66b6d4686f8a58aa52b2ca30dc64b8a5d36464b521d492f8d3b1c718bfd466e130925e2bd3f68db83b41ab0dd7fc7a7b979eb4bce183078e8ebc98fa3e70600888f54bb3594c2506676e8d35ebf895c2834a6e5b3608ae9b8982a4d95cceb4682dde2dbc97c5ab49fbe7532d1146707cf06401a6624e0db28b6e483ae3c0cfb80a625d056deb5e554a85ef2788b03ff5d60cc8cdad52f4816e6577db7fc38473b76bbfcc384dd636586cffe65133e96098b76b7f2f6492b19d50233a925424c92f723e7619af356102d6f33c92b68d2d2bcaf915451f86eb8bcac697548ce87b9ce383e4d338b9ff3018133eb0e2749f95cfdd844225f6c9cf791819a69599f0a22715ed9086539c495aa62f157cfad01d0a47b7fad65b9871f7cd38e964a9225c5e029ff35de509281598406103183e237329978db798c0381e077edb57ea46fc0fa4c723b8a298d20d9946f179bddc3ceb7e058a1519b978882e77a0028d1ec4c37fdab577f4e76b52b7adf190aef101217c361f0d96403027c994844522aea2232384ff6a3f7bbfe58d1a2d5798d3596085ccc3b69aceb8da13d0f2867fa86155ae60e80a75468f418465cda31077ce094be9c5bf3e7c8d4530265e6186ee53e4a410e2a7895cbab3b442709abd2f6d4e11cbd34fdb23927e7967f19e024169292cc4d618d92ef126ffae011d7381e533566a4ee70d0d546f898457e2ba41f3a54ecff6206269ab0be326380eda9fa30043ad5411f4c7c1ac027c0b7780c33bd77137d75d77bad50598338031bc95bd4f515849806d57c36fbce1beb48886f92b3cdca24df838f7b01f75b346810691ecebc8115b9fbe92ad03254cb13414831143ed8fd2cf6c6c42c8fadc68b86073298891bf4870c899326b67825881df835f5d402c9cb5d191eb2591910eb0ba4d66e00507f6e8ce2848dfcb9a9d5021c8a513ef08f8ccf23d46100fc98848f2f2dfb0e46996a5fed9241ad134821b4e45ebc5e3bf70f93a63e072516cdede7752559b066ee06a14caf2eea8133042c781ba437fa721a515a971a5f2283193d84e21e6da27caaa379479026f6195812aed94ff9ea8151d557a4445dac8414342f95f147e2488e20fc9de36757a6cd7fa01d1766d4c8982f79eb4d8952288a4ac9e24fcc6575e490385ab9cecb078bd598941242490f37f9d7fd6ae7dd433542e56d6af8f029907b7a21fd9c61b4d37332da7ca8c5e74e7d91938cc28a23781511ecad94eb3eb7b3164398bb26f758b14be75c97bff945198de3182dc7a9a86a552bcf6eb07b56cfdff996a00f97b45acc9e22e13cdba9fcacbc19fd13548699d0d36aaae0412a2358a5bcdb01256970dc672ba766c5e8e115180d20c71e3731c6fc221e4e155c129522d84f6968f7d70aa85da8a609e6c1a0a481d1bffac03ac381787073631f05defcd42988897ea053dfc92ded49d11297918eed012821d5f34398ec55de6919a9ab70000000000000000600000001000080de59cb37e10b700378c353813ad49ad27ad1576082cca3324ca1dd5baf9c2df208d4a3a7549adfa340a928cefab630b9e00d3fcf96b06508e7557d3a59695bf74f2b2c3953601d4e5ecea3371551eae433cb9751ba4c7a0330acd20000000000d000000000000000080100000010000042c1b48540fde02fc6cfc15089b233190f3218fd08f999928fffe54ae0f1f1d478a71e799b5aa4f6f6d792267cef6dc92695cfcbe51142a70c37f1e8843569a18dab71a374f1469bedd172743ccf85464f3c2f67bbd124e71a727531477cf15f55749cad78a8ae281596c8462ea03a7b95fcddc514c06800ff3342da3ffdd1c10c19adcd4eee10c657a9bfa4d93fa13522dc0634afa2d4e464710f58b1d0bd7730ac691fcc2b3eef79fd2b09f922633e752ff1dff8b93447b523d56871c0a400"], 0x11d0}, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$can_raw(r3, &(0x7f0000000480), 0x10) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) setxattr$trusted_overlay_origin(&(0x7f0000002240)='./file0\x00', &(0x7f00000022c0), &(0x7f0000002300), 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r4}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom0\x00', 0x0, 0x0) bind$can_raw(r3, &(0x7f0000002440)={0x1d, r4}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000300)=[@increfs, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1m36.184248167s ago: executing program 2 (id=3130): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x804) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') execveat$binfmt(r4, r5, &(0x7f0000000580)={[&(0x7f00000006c0)='\f\x8e9\xe7K\xc6\x1c\xfcS\xfc', &(0x7f0000000400)='\x11fZ\x97.\xcf\xacM\xe9&LAy\xdcnbeU\xe2,\xe7\x0f\xb0\x14\xa5\x99\xf8h\xd3\xd7FH\xa5o6+\xce\xe0\x015\vzQZ\x90\x17\x86\xc4\xd1bZ\xa5\xcfs\xba\xd9\xff\x0f\x9d`\xdd\xae\xcbG\"', &(0x7f0000000480)='\x03\x00\x00\x00\x00\x00\x00\x00\xc4\xa7\xbd\'\ru/\xde\x94\rU\x11\xb6t\xb7L\xca\xef\xc0\x910\x04\x1b\xf1\xad\x17\xc7\xdf\x1b\x8e{|\xd7\xa8:', &(0x7f00000003c0)='#\xe5']}, &(0x7f0000000680)={[&(0x7f00000005c0)=',,\x00', &(0x7f00000004c0)='./binderFs/binder0\x00', &(0x7f0000000640)='#/\t\x00\x00\x00\xa4']}, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x200000000000}) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000600)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002aa103070900be3dda00"/40], 0x0}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x400885c, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x1, 0x4b}, 0x14) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) setresgid(0xffffffffffffffff, 0xee01, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b86dd4803", 0x5, 0x1c040, &(0x7f0000000500)={0x11, 0xec, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000300)={0x0, {{0x2, 0x4e1e, @remote}}}, 0x88) fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='user.incfs.size\x00', &(0x7f0000000280)='\x11fZ\x97.\xcf\xacM\xe9&LAy\xdcnbeU\xe2,\xe7\x0f\xb0\x14\xa5\x99\xf8h\xd3\xd7FH\xa5o6+\xce\xe0\x015\vzQZ\x90\x17\x86\xc4\xd1bZ\xa5\xcfs\xba\xd9\xff\x0f\x9d`\xdd\xae\xcbG\"', 0x41, 0x4) 1m33.136121065s ago: executing program 2 (id=3170): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) r1 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) ppoll(&(0x7f00000001c0)=[{r1, 0x20}, {r1, 0x42a0}], 0x2, &(0x7f0000000280), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m33.066330206s ago: executing program 2 (id=3171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x105880, 0x0) setsockopt$packet_int(r4, 0x107, 0x0, &(0x7f0000000280)=0x1000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000180)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = fcntl$dupfd(r2, 0x0, r1) setresgid(0x0, 0x0, 0xee01) r6 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r6, 0x9, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peekuser(0x3, r7, 0xa99) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f00000003c0)={'vlan1\x00'}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1m32.906427628s ago: executing program 2 (id=3174): arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) (async) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 1m32.894029899s ago: executing program 2 (id=3175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x2000) getpid() mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 1m32.862410719s ago: executing program 35 (id=3175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x2000) getpid() mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 5.624392542s ago: executing program 6 (id=4054): ioprio_set$uid(0x3, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c859, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) r1 = socket(0x10, 0x803, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010d21f0760000000000001090224000100000000090400070003000000092100000001220500090581030000000000"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x97c}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000380)={"f9bef8d1aaeadafa287efdb9450ae3e2d260489591c42ab93a0c7bca18e9a19fa8e6cd61e9f62f91123f1311f81f85b4044554cb6e3ca1b6d1fc011bd71bdda82f37ccfa5b87dd5dcd311dbbb67f240dc02c53b7eabf3651660ce801e3878538da8bb24e1dbc480dae36207bf6b7b946c7a8ec08468f9a75ec797b8c11807655272833a7c70ccfc9a8259e7a148eca4d16b6ff519973a20b65f91a7261cdd2440a5a0566d843fa334b0280f0aacc3b417322b9b56098dd842c44139da4bd1e2212a40ba043bd72b995b172b26b71d434e9f3bf74b4ed480b264e0e9d6f628732534db36bfb92ee6419fb244db44abf0cd9357755ce9c4c9a584e5eb89ffd10c8a6c3c6115265f25f798570751917cd7cfc2ca71729e268c3b30c05b3dfdb18cbbfd3036a889f5fefb0f9d56bf970bdbf2524f8e435b721c809e73a5fdafbf1594088ad1974908bf5fc752d564c1a4989a7d1e59564567d9b437442c5c1cfec93526395d18b1ecb18dedd713ced403a00a2cd27b2dc857808287ea88157b3c19075eb33f7cc60a6161a88ad37fb04d0ce0fda24176406391a5ac521299143bdf59a474a17272105e55e9870cec2942a6705993e821e54441c877a64450e739b1321ad17e1ed552e65654bbfcc8ebd1d64fc4e888609a90410f780fe5031c27737f2de05a7ddf00129eb746a2e990438d9bf6a3211779707d615d79111b3fe71c26433482306ce7563c11cdf6f8da283ae147311465af80ba5350e6d65438cd5a20ec155d78227e5336d504f8f1145f4b942180f7ba6e5c9a070d4e31289d4845229780e53713090e782a75b32729c10da28c1f2702dad57a37416fc138040064347a0a290803f51a619402d88d0a4b2bef39bf92696b6d7052459a78a258edfe2e66f2e10a80b168b483c90a1a1dd67c6d6c9b7a2336d1678131ca38552d9acff05dcd57f9f4164064b7781d8a8b5507e21edfe35d65d726bf24799535648cd04f3b7e85c3f6762f353a8f65afdc7ba63bc0eb65d7188cb1adee1d8d14c0413458d2ff65093d972ac3696fa12defc0f8dedf2309e1b80fc672205e6ccfc6b494233c4d00b5471cb52d896c73cddee40e5e51ee8a9bbe453a1a7d5b9832cacc5965220145504ccb2a157a7c1d9d718c0bf96cd350ac5ca330c827bedbff299774707f5840a0d954ae39c9421975d48e05d87a1ceddefbecae936e15ffb308364b69eefd345d6200cd128e48c162a4ebd026fefb7cc73e80204b21ff30d63e8707292f60682c6f6a587fff9c5a0fae24e0406df5363c7c9d31f72829b6a9d9237a84e83e22c33bf6313ee4072f09f9c6254d0eb7239d51cdda77b8e3d42a89449a3e1b6be8953a27651486383879490486fd11b6ac4e1b86f8a71fc294e0ebf572f4ef00582be189ee5a38c18d4d51cd3221fb1475a56cdf3cc7258bf8c559bf1a9"}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x4000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x9, 0x0, 0xff, '\x00', 0xf7}, {0x0, 0x2a, 0x0, '\x00', 0x7e}, {0xfc, 0x12, 0x5, '\x00', 0xba}, {0x11, 0xb, 0x0, '\x00', 0xfe}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x8f, 0xf7, '\x00', 0xa}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xef}, {0x0, 0x1, 0x5, '\x00', 0x3}, {0x2, 0x0, 0x8, '\x00', 0x3}, {0xc3, 0xfd, 0x0, '\x00', 0x2}, {0x0, 0x21, 0x88, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0xb, 0x9, 0x3}, {0x1, 0xbb}, {0x0, 0x4, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x6, 0x9}, {0x7f, 0xff, 0x3}]}}) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r8 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$AUTOFS_IOC_SETTIMEOUT(r8, 0x80049367, 0x0) read(0xffffffffffffffff, &(0x7f0000000000), 0x2002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x100801f9, 0x1, 0xb94}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x7) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(r6, 0x8, &(0x7f0000000100)=0xa400000000000000) sched_setscheduler(r6, 0x2, 0x0) 2.516231851s ago: executing program 5 (id=4083): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00') r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = fsopen(&(0x7f0000000340)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) getdents(r3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x48, 0x0, &(0x7f0000000440)=[@exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x8, 0x2, 0x34}, @flat=@handle={0x73682a85, 0x14, 0x1}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000300)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x0, 0x0, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}, 0x3a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) 2.497317281s ago: executing program 6 (id=4084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0x80, 0x2, 0x4000000000800002, 0xfffffffffffffffd, 0x100000007, 0x3e, 0x6, 0x2, 0x40000, 0x5, 0xfdb, 0x10000000009, 0x1, 0x1, 0x1002], 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x464801, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x201, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000000000087010000000000000100000000000000b53af123d177b594a0f6c2521d29b87db3b8ca2ff3bf6048ecd354314ef65e48583fa21dde5c49a8bd1601d6098f212688f313e8e953e740d240213f6bc78f75d3ec156ff6f988d03de35f756f4259c9ded0f5319cdc715bd05032fc112302f115e39a437c72d3988f8e5428cce986e86935afd0b6761ab18facbac030a9dd5f7744242fef079f57acd428a0d9e9d6755ef24ec6583fafff3266e2230dbc1dfd48f2eb447c4912292864a463ca5d7cc98d97b625c8478badde9d30f6c86ba26141d88e97eda8e0eaa3f5e8dd5addb63931d592f91d641ec8ea1e07ed2970527a7e0c5ce76e223492cafab87b38"]) r8 = open(&(0x7f00000021c0)='./file0\x00', 0x48442, 0x182) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) ioctl$KVM_RUN(r4, 0xae80, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) inotify_init1(0x80000) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "ff6350489c84dc829ea0a875c6b254c1f0b58e24eaeab60d338132aa79e730370bd81a58c7c641e2ee408cd773648ac9c15d119bf8829dc9ac749723be7f01df", 0x1c}, 0x48, 0xfffffffffffffff9) 2.394535263s ago: executing program 5 (id=4085): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='exfat\x00', 0x0, &(0x7f00000001c0)='discard') r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) r2 = syz_clone(0x0, &(0x7f0000000200)="456ad4d81e3ee74f03346e79d4a140b4014147c777a8bdbd6d18b8e0344247ae63db565a4b95203add373fb59c4f4c845c77b0c71fab5080143f51e091b97d1919d80be924b393feaf8f9f6d52826ee16c5f26fdef8c5ff5444711d046625c3702e8a5e176e28b4bf6078e6685e177edb84374e6453e7c38762ffd65341bf1dc", 0x80, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0)="8d1726dd8b24471cda9985e7fa6dc3520fd2106da5bad5e6911e8e5fa8edc1547961a9a94fa15f170df552c7636d2361db073b3cbdc8c5e0f087d466be962ceacde15ec4c284f5b27d31400f9d34eaf530d63fd290e9d07e949bbd8b6283f5007aa63120e27bfa7d62a2068f18776555231d26dadb9d13a195075f6147af0db705f11ba3bab5671a24e1f33baa03ed787da7f964d85a00cb16a7265d169013e22d24093a42ad31a29e75c4bb235ff6c01c81ec7e2d57155919c7f1d89ad6046448ac2f07abe42ae98bf7826277b3800642b1a3f93610f5435cccad7bda1e98") sched_setscheduler(r2, 0x3, &(0x7f00000003c0)=0xffffca7f) sendfile(r0, r0, 0x0, 0x7ffff000) 1.538479036s ago: executing program 4 (id=4092): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) 1.346512989s ago: executing program 5 (id=4095): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r2 = syz_clone(0x0, &(0x7f00000002c0)="eccf9b7de3128954f7278ed5185000d8f6a2a4b7ee6d1eeb2f9071ffe33d96d75777507b6a4da05f294b8b0ff6e6c0db0651f66323937e8691b1d9db20b614188362a15dad68acdcccb8471c48b13e5f8b441d21df43f99bf9d88a2d1838033d9aff1dc385fc3baa646178c308aab5197d2e55856f83ad176a81089321fc9f780944069a4ad3a7272e95de09d26938285107", 0x92, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000380)="ccb4eb67ff71b804c9e892da0fefdc1a4879d411ccef293309740e6d5af703474185440d66964ce181bfd67b7fedab8b640418bf0b160c4b4683a21e9c3e4456574d658c2fb6641439e2da3bd93cd6e82cc8ccf173df3591bc804faa002d829da080c03404a7b883f472e1c55fb5229a45e6cd63e0148c5d5e3cd11a9ca9c30ddc84ef44") syz_open_procfs$pagemap(r2, &(0x7f0000000240)) (async) syz_open_procfs$pagemap(r2, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1.240672451s ago: executing program 6 (id=4098): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x4e3, 0xbc, 0x8}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$KVM_CAP_SYNC_REGS(r1, 0x4068aea3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000580)={0x0, 0x58, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="330300000000000000001c000000200001801400020064766d7270310000000000000000000008000100", @ANYRES32=r4], 0x34}}, 0x0) mmap(&(0x7f0000242000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r0, 0x0) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) setsockopt$inet6_int(r5, 0x29, 0x0, &(0x7f00000000c0)=0x25, 0x4) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r8 = socket$inet(0x2, 0x3, 0x5) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r8, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r7, 0x0, 0xff, 0x2b, 0x6, 0x17, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0xc057, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r11 = dup(r10) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',privport,access=', @ANYRESDEC=r12]) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r13, 0xff, 0x7, &(0x7f00000004c0)="bca954e0", 0x4) r14 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_SETINTERFACE(r14, 0x80085504, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r6, 0x0) 1.021751494s ago: executing program 5 (id=4100): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2}}, 0x50) 1.021511804s ago: executing program 6 (id=4101): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x2, 0x0, "00629a7d82000000000000000000f7ffffff00"}) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x3) r4 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigqueueinfo(r4, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x2}, @release={0x40046306, 0x3}, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @clear_death={0x400c6313}], 0x0, 0x0, 0x0}) 1.014365575s ago: executing program 5 (id=4102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) dup3(r0, r1, 0x80000) syz_clone(0x611c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 941.857836ms ago: executing program 5 (id=4103): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00', {}, 0x8}) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0xa, 0xfffffffc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0xeef53001, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000800)="ba4000b8e6008ed03b940f73da0eccb8f0028ed80f23d80f21f86635800000200f238c66b9800000c00f326635000400000f306c0ffcdf36efddc666b9800000c0c4c249cf9009186635004000000f300f01c4", 0x53}], 0x1, 0x1a, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = syz_usb_connect(0x6, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x18, 0x2d, 0x9c, 0x10, 0x930, 0xa13, 0x7644, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x2, 0x2, 0xff, 0xff, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="855d064eb1860309a0b3db7497e2fd3abe7a60f88611"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x54}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x1, 0x5a3, 0x6, 0x3, 0x6, 0x515d, 0x400, 0x3, 0x7, 0x0, 0x695, 0x7}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x5}, 0x0, 0x0, 0x0}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201500200000010ac0573020000000000010902240001000080030904009e0a03000300092107000001220700090581030000ff0b0023debe9a7c8dc35b401c7764bacf0e99c0f380bcdd897ddf3310892255f1841477829b3bf08d434b6dcc9657a64ce180fc89493e32bd9a3c23b00255c2ec830d57b7559acf1e169231e4e97069e5d675347cf82dc8184773080f73de5fbb1621c2e316160379e647546f85f02bd3d12efeb382b79adf0753"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x0, 0x1, 0x2, {0x2, 0x1}}, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000003c0)={0x0, 0x22, 0x10, {[@local=@item_012={0x2, 0x2, 0x0, "8fd0"}, @local=@item_4={0x3, 0x2, 0x3, "f5afa540"}, @local=@item_4={0x3, 0x2, 0x0, "c6e15544"}, @local=@item_012={0x0, 0x2, 0x8}, @local=@item_012={0x1, 0x2, 0x2, 'x'}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xc, 0x1, {0x22, 0x4aa}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000280)={0x40, 0x15, 0x3, '<\f.'}, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e85f58eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioprio_get$pid(0x2, r9) poll(&(0x7f0000002100)=[{r5, 0x400}], 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 826.547037ms ago: executing program 6 (id=4104): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x8000000}, 0xc) close(r0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x2000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x6, 0x0, "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"}) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x6, 0x0, "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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) io_setup(0x4, &(0x7f0000000100)) (async) io_setup(0x4, &(0x7f0000000100)) 826.264318ms ago: executing program 7 (id=4105): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x2a) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v\x0e\x1d\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c7\xa7\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\xfd\xba|\xa3\xd9\xb2].]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\b\x00\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16\x03\x00\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7P\xfb\xfc\xfa\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\x03\xb6\ny\x8cP\xbcQ\x98wZ]\x9f\x16l\xd7\'\x06\xc9O{tSh\x8cWiD:\x1fDaqb\xc7\xf7+K:\xde\xa8U\xbcPw\xa4\xe5\x12\xea\xa2c\xdfX:\xf6') ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\x00\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r\xba\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00'/468) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161000, 0x0) read(r2, &(0x7f0000000040)=""/106, 0x6a) 719.533219ms ago: executing program 6 (id=4106): ioprio_set$uid(0x3, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x97c}, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4004) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x5, 0x2, 0x9) (async) prlimit64(r2, 0x7, &(0x7f0000000180)={0x1, 0x80000000000009}, 0x0) (async) read(0xffffffffffffffff, &(0x7f0000000000), 0x2002) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x100801f9, 0x1, 0xb94}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0xa400000000000000) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'vlan0\x00', &(0x7f0000000340)=@ethtool_coalesce={0xf, 0x7fff, 0x5, 0x7, 0x6c000000, 0x7ff, 0x10001, 0x9b6f, 0x1, 0xa73d, 0x9, 0x6, 0x6, 0x5, 0xf, 0x1, 0x0, 0x1000, 0x0, 0x8, 0x0, 0x7, 0xa9}}) (async) sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r7) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000005c0)={0x18, r8, 0x309, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, &(0x7f0000000180)) 674.72763ms ago: executing program 7 (id=4107): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc002ca8bfb47e287, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}, {@directio}, {@directio}], [{@uid_lt={'uid<', r3}}, {@uid_lt={'uid<', r4}}, {@permit_directio}, {@obj_role={'obj_role', 0x3d, '+.[[$(?$'}}]}}) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000240)=0x1, 0x4) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.pending_reads\x00', 0x321080, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f00000002c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/40, 0x28}, {&(0x7f0000000380)=""/192, 0xc0}, {&(0x7f0000000440)=""/149, 0x95}], 0x3, &(0x7f0000000540)=""/47, 0x2f}, 0x21) r9 = dup(r8) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x1b) accept4(r7, &(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000640)=0x80, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x110) r10 = syz_open_dev$evdev(&(0x7f0000000680), 0x0, 0x480000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r10, 0xc0096616, &(0x7f00000006c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r11 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r12 = add_key(&(0x7f0000000700)='cifs.idmap\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r11) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000800)={0x0, 0x0}) ptrace$poke(0xffffffffffffffff, r13, &(0x7f0000000880), 0x80000000) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x6) recvmsg(r9, &(0x7f0000000a80)={&(0x7f00000008c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/122, 0x7a}, {&(0x7f00000009c0)=""/19, 0x13}], 0x2, &(0x7f0000000a40)=""/37, 0x25}, 0x40000023) mkdirat(r6, &(0x7f0000000ac0)='./file0\x00', 0x28) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000b00)={'geneve1\x00', 0x200}) add_key(&(0x7f0000000b40)='rxrpc\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0x0, r12) socket$inet6_icmp(0xa, 0x2, 0x3a) mkdir(&(0x7f0000000bc0)='./file0/file0\x00', 0x103) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000000c00)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 622.459461ms ago: executing program 4 (id=4108): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190003000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$inet(0x2, 0xa, 0xfffffffc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000800)="ba4000b8e6008ed03b940f73da0eccb8f0028ed80f23d80f21f86635800000200f238c66b9800000c00f326635000400000f306c0ffcdf36efddc666b9800000c0c4c249cf9009186635004000000f300f01c4", 0x53}], 0x1, 0x1a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000f00)={0x2020}, 0x2020) 540.765682ms ago: executing program 7 (id=4109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000104050000000000000000000a00000005000100"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xd0, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/121, 0x79, 0x1, 0x1a}, @fda={0x66646185, 0x9, 0x0, 0xa7c}, @fda={0x66646185, 0xa, 0x2, 0x5}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @dead_binder_done, @increfs_done, @exit_looper, @acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@flat=@weak_binder={0x77622a85, 0x100, 0x1}, @fda={0x66646185, 0x2, 0x0, 0x29}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/23, 0x17, 0x0, 0x2c}}, &(0x7f00000003c0)={0x0, 0x18, 0x38}}}, @exit_looper, @increfs={0x40046304, 0x2}, @increfs={0x40046304, 0x2}], 0x5c, 0x0, &(0x7f0000000700)="dfd84996dc5561d57d94b5a215aa76e22db4c02cb5b1c285ccfb3b394da34635c7220ccd1531c6eceed5d51e5b7b9f298a6dcdd9542f376361f193e663c399fd6f7363439b6ba90f3d4cee639a73304d06f067b2c428e98e1aa02021"}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="340000001d002100050000000000000000000005000000000000000a000200f0b5dc862850e9c66850661b7ace1cf263d464d24928fc1550666cda0b30d11ae8e48683b98165af5a606ad6bcd63a2d230edf30b20fc9016c99a0cecd4fcf0078da99bdd72e91213d199f85b2f5fe35fd75039564d6f2497e11550ee692d5fa77a5be7ca5beec355f00"/150], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05030500d3fc030000004788031c09102f28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f00000000c0)={'tunl0\x00', r7, 0x80, 0x8, 0xf, 0x72f, {{0xa, 0x4, 0x1, 0x5, 0x28, 0x64, 0x0, 0xc, 0x2f, 0x0, @remote, @loopback, {[@generic={0x7, 0x12, "2413947cab449b4f1f7283f1200f6b11"}]}}}}}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000002580)) r9 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x11e, 0x0, 0xa1a9}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x3}], 0x0, 0x1000000, 0x0}) 414.410814ms ago: executing program 4 (id=4110): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2}}, 0x50) 270.480046ms ago: executing program 4 (id=4111): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001040)={0x40, 0x2, 0x3}, 0x10) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000000)={{0x5c, @dev={0xac, 0x14, 0x14, 0x3e}, 0x4e24, 0x2, 'dh\x00', 0x10, 0x2, 0x5d}, {@private=0xa010102, 0x4e21, 0x3, 0xd, 0xfffffff3, 0x74a24c01}}, 0x44) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) read(r2, 0x0, 0x0) 263.894596ms ago: executing program 4 (id=4112): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000000)=0x8, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@fda={0x66646185, 0x8, 0x1, 0x16}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x38}}, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffd98}}, 0x40}, @register_looper], 0x0, 0x0, 0x0}) 186.638017ms ago: executing program 7 (id=4113): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000002c0)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) 122.670448ms ago: executing program 4 (id=4114): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000040)={0x1, 0x1, 0x1000, 0x9, &(0x7f0000000000)="259241755b0cfb22d1", 0xeb, 0x0, &(0x7f00000002c0)="ae4542fde52790d965b8f4171a43f6fa140005772bf31613c235ec335ab8107cba4a3eaaef1506c5a622c337f4c0f24373f9244a35a8986c496fbb172fc9f9e14e3408bc2d3ee08efd0e8d5fc749e1ab3cb2923cd931414d3a65ba3d0ec2fb5b79eac794f479fbf70da6c2a9d7a5d5d7a835abfd42dc9e82bddbd7347c8ebf32a0eacac08587bce9974a25c3c362bad5b92028750f1b4fa097ed4b14422e32feb75bd8bfb8100eb9d610343d595a8362003784374cb7d79815e2357e859a92926394f42070a7dd1f34835943e3eb0f17bf491f7a963f51f7a288d68f56dac9982d6438d8e0f254249905a3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xe}, @fda={0x66646185, 0x4, 0x1, 0x43}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 97.177639ms ago: executing program 7 (id=4115): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), 0x4) close(0xffffffffffffffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x74) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@default_permissions}], [{@obj_role={'obj_role', 0x3d, '**$\xd5*)-\x92*'}}, {@appraise}]}}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000002400)={0x3, 0x4, 0x8248, 0x2, 0x1429af19}) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, 0x0) 0s ago: executing program 7 (id=4116): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000)=0xeffefffc, 0x4) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc4c03d12, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x770a, 0x2) kernel console output (not intermixed with test programs): nk: 'syz.6.3191': attribute type 1 has an invalid length. [ 289.390474][T10020] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3191'. [ 289.393516][T10024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:14 [ 289.715661][T10044] netlink: 'syz.4.3200': attribute type 4 has an invalid length. [ 289.749946][T10044] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3200'. [ 289.935257][T10054] Invalid ELF header type: 3 != 1 [ 289.958259][T10054] Invalid ELF header type: 6 != 1 [ 290.062657][T10057] rust_binder: Write failure EINVAL in pid:23 [ 290.228689][T10064] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.241875][T10064] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.248921][T10064] bridge_slave_0: entered allmulticast mode [ 290.250464][ T64] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 290.257171][T10064] bridge_slave_0: entered promiscuous mode [ 290.270637][T10064] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.277742][T10064] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.284845][T10064] bridge_slave_1: entered allmulticast mode [ 290.291303][T10064] bridge_slave_1: entered promiscuous mode [ 290.345686][T10064] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.352741][T10064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.360010][T10064] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.367037][T10064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.390434][ T64] usb 5-1: device descriptor read/64, error -71 [ 290.406682][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.414206][ T2221] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.426691][ T2205] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.433886][ T2205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.444862][ T2205] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.451916][ T2205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.505995][T10064] veth0_vlan: entered promiscuous mode [ 290.529779][T10064] veth1_macvtap: entered promiscuous mode [ 290.630484][ T64] usb 5-1: device descriptor read/64, error -71 [ 290.870621][ T64] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 290.960592][ T45] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 290.993159][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3216'. [ 291.010481][ T64] usb 5-1: device descriptor read/64, error -71 [ 291.120445][ T45] usb 8-1: Using ep0 maxpacket: 16 [ 291.127741][ T45] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 291.136190][ T45] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 291.144536][ T45] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 291.152919][ T45] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 291.161098][ T45] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 291.169975][ T45] usb 8-1: config 0 has no interface number 0 [ 291.176128][ T45] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 291.187222][ T45] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 291.197098][ T45] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 291.206934][ T45] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.220038][ T45] usb 8-1: config 0 interface 125 has no altsetting 0 [ 291.227080][ T45] usb 8-1: config 0 interface 125 has no altsetting 2 [ 291.236390][ T45] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 291.245511][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.253531][ T45] usb 8-1: Product: syz [ 291.257674][ T45] usb 8-1: Manufacturer: syz [ 291.260426][ T64] usb 5-1: device descriptor read/64, error -71 [ 291.262330][ T45] usb 8-1: SerialNumber: syz [ 291.274173][ T45] usb 8-1: config 0 descriptor?? [ 291.370757][ T64] usb usb5-port1: attempt power cycle [ 291.493771][ T45] usb 8-1: USB disconnect, device number 2 [ 291.710471][ T64] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 291.732966][ T64] usb 5-1: device descriptor read/8, error -71 [ 291.738500][T10120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1015 sclass=netlink_tcpdiag_socket pid=10120 comm=syz.6.3226 [ 291.863173][ T64] usb 5-1: device descriptor read/8, error -71 [ 291.990467][ T391] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 292.100846][ T64] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 292.122574][ T64] usb 5-1: device descriptor read/8, error -71 [ 292.146907][ T391] usb 8-1: unable to get BOS descriptor or descriptor too short [ 292.158995][ T391] usb 8-1: no configurations [ 292.163642][ T391] usb 8-1: can't read configurations, error -22 [ 292.252334][ T64] usb 5-1: device descriptor read/8, error -71 [ 292.360767][ T64] usb usb5-port1: unable to enumerate USB device [ 292.650761][T10156] 9pnet_fd: Insufficient options for proto=fd [ 292.688987][T10158] rust_binder: Write failure EINVAL in pid:34 [ 292.905899][ T36] kauditd_printk_skb: 952 callbacks suppressed [ 292.905920][ T36] audit: type=1400 audit(1750780327.575:29089): avc: denied { map } for pid=10159 comm="syz.7.3241" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 292.909158][T10164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:36 [ 292.920815][ T36] audit: type=1400 audit(1750780327.575:29090): avc: denied { read } for pid=10159 comm="syz.7.3241" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 292.977371][ T36] audit: type=1400 audit(1750780327.575:29091): avc: denied { read } for pid=10159 comm="syz.7.3241" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 293.000280][ T36] audit: type=1400 audit(1750780327.575:29092): avc: denied { read open } for pid=10159 comm="syz.7.3241" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 293.036557][T10167] can: request_module (can-proto-0) failed. [ 293.050883][ T36] audit: type=1400 audit(1750780327.575:29093): avc: denied { ioctl } for pid=10159 comm="syz.7.3241" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 293.097292][ T36] audit: type=1400 audit(1750780327.615:29094): avc: denied { ioctl } for pid=10159 comm="syz.7.3241" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 293.146566][ T36] audit: type=1400 audit(1750780327.635:29095): avc: denied { read write } for pid=8258 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.171403][ T36] audit: type=1400 audit(1750780327.635:29096): avc: denied { read write open } for pid=8258 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.226803][ T36] audit: type=1400 audit(1750780327.635:29097): avc: denied { ioctl } for pid=8258 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.254048][ T36] audit: type=1400 audit(1750780327.705:29098): avc: denied { read write } for pid=10165 comm="syz.4.3242" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 293.727809][T10191] binder: Bad value for 'max' [ 293.892755][T10199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 293.892787][T10199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 294.316867][T10208] kernel profiling enabled (shift: 8) [ 294.360426][ T45] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 294.510412][ T45] usb 8-1: Using ep0 maxpacket: 32 [ 294.523182][ T45] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.546384][ T45] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 294.561339][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.592360][ T45] usb 8-1: config 0 descriptor?? [ 294.602869][ T45] usbhid 8-1:0.0: can't add hid device: -22 [ 294.608850][ T45] usbhid 8-1:0.0: probe with driver usbhid failed with error -22 [ 294.879478][T10226] overlay: Bad value for 'uuid' [ 294.887712][T10226] overlayfs: failed to clone upperpath [ 295.556484][ T2222] Bluetooth: hci1: Frame reassembly failed (-84) [ 295.584285][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3257'. [ 295.700617][T10238] Bluetooth: hci0: command 0x1003 tx timeout [ 295.706673][ T830] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 295.793870][T10257] rust_binder: Write failure EINVAL in pid:375 [ 295.872131][T10265] SELinux: Context system_u:object_r:hald_var_run_t:s0 is not valid (left unmapped). [ 295.894738][T10265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:379 [ 295.977413][T10272] rust_binder: Write failure EINVAL in pid:381 [ 295.979066][T10273] rust_binder: Write failure EINVAL in pid:381 [ 296.499582][T10300] netlink: 'syz.4.3291': attribute type 4 has an invalid length. [ 296.513918][T10300] netlink: 'syz.4.3291': attribute type 21 has an invalid length. [ 296.522083][T10300] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3291'. [ 296.793947][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3295'. [ 296.803752][T10314] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.050420][ T45] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 297.153310][ T369] usb 8-1: USB disconnect, device number 5 [ 297.211016][ T45] usb 5-1: not running at top speed; connect to a high speed hub [ 297.231608][ T45] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.244982][ T45] usb 5-1: config 1 interface 0 has no altsetting 0 [ 297.255733][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.40 [ 297.264869][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.272991][ T45] usb 5-1: Product: syz [ 297.277243][ T45] usb 5-1: Manufacturer: syz [ 297.282010][ T45] usb 5-1: SerialNumber: syz [ 297.484443][T10332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 297.496701][T10314] rust_binder: Write failure EINVAL in pid:419 [ 297.522647][ T45] usbhid 5-1:1.0: can't add hid device: -71 [ 297.542741][ T45] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 297.583784][ T45] usb 5-1: USB disconnect, device number 87 [ 297.620500][ T830] Bluetooth: hci1: command 0x1003 tx timeout [ 297.626634][ T52] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 297.716308][T10345] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 297.839444][T10353] binder: Unknown parameter '00000000000000000000003' [ 297.918888][ T36] kauditd_printk_skb: 619 callbacks suppressed [ 297.918907][ T36] audit: type=1400 audit(1750780332.585:29718): avc: denied { read write } for pid=10362 comm="syz.5.3314" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.993519][ T36] audit: type=1400 audit(1750780332.585:29719): avc: denied { read open } for pid=10362 comm="syz.5.3314" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 298.060559][ T36] audit: type=1400 audit(1750780332.625:29720): avc: denied { map } for pid=10362 comm="syz.5.3314" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 298.110972][ T36] audit: type=1400 audit(1750780332.625:29721): avc: denied { read } for pid=10362 comm="syz.5.3314" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 298.156272][ T36] audit: type=1400 audit(1750780332.665:29722): avc: denied { read write } for pid=10064 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.228920][ T36] audit: type=1400 audit(1750780332.665:29723): avc: denied { read write open } for pid=10064 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.254340][ T45] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 298.300420][ T36] audit: type=1400 audit(1750780332.665:29724): avc: denied { ioctl } for pid=10064 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.355479][ T36] audit: type=1400 audit(1750780332.675:29725): avc: denied { create } for pid=10364 comm="syz.7.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 298.376081][ T36] audit: type=1400 audit(1750780332.675:29726): avc: denied { read write } for pid=10364 comm="syz.7.3315" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.401509][ T36] audit: type=1400 audit(1750780332.675:29727): avc: denied { read write open } for pid=10364 comm="syz.7.3315" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.457634][ T45] usb 8-1: config 9 has an invalid interface number: 89 but max is 0 [ 298.465836][ T45] usb 8-1: config 9 has no interface number 0 [ 298.472031][ T45] usb 8-1: config 9 interface 89 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 1024 [ 298.482070][ T45] usb 8-1: config 9 interface 89 has no altsetting 0 [ 298.494546][ T45] usb 8-1: New USB device found, idVendor=17ef, idProduct=480b, bcdDevice=72.65 [ 298.504181][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.512236][ T45] usb 8-1: Product: syz [ 298.516418][ T45] usb 8-1: Manufacturer: syz [ 298.521076][ T45] usb 8-1: SerialNumber: syz [ 298.529154][T10365] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 298.751391][ T45] usb 8-1: Found UVC 0.00 device syz (17ef:480b) [ 298.757872][ T45] usb 8-1: No valid video chain found. [ 298.771357][ T45] usb 8-1: USB disconnect, device number 6 [ 299.645702][T10410] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 299.706496][T10414] binder: Unknown parameter 'fscontext?}' [ 299.844697][T10420] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 300.035939][T10425] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 300.059468][T10426] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 300.396080][T10435] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 300.422661][T10437] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 300.429864][T10437] rust_binder: Write failure EINVAL in pid:48 [ 300.532734][T10443] binder: Unknown parameter 'fscontext?}' [ 300.588458][T10449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 300.594519][T10449] rust_binder: Write failure EINVAL in pid:112 [ 300.859643][T10457] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 300.866073][T10457] rust_binder: Error while translating object. [ 300.877595][T10457] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 300.884442][T10457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 301.137916][T10463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 301.147194][T10463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:114 [ 301.192609][T10465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.206365][T10465] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 301.220056][T10465] rust_binder: Write failure EINVAL in pid:116 [ 301.615531][T10493] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž;KZì44§/@®qæžkøp [ 301.615531][T10493] éC<+ [ 301.710417][ T369] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 301.840480][ T369] usb 5-1: device descriptor read/64, error -71 [ 302.080422][ T369] usb 5-1: device descriptor read/64, error -71 [ 302.298529][T10513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 302.320414][ T369] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 302.490433][ T369] usb 5-1: device descriptor read/64, error -71 [ 302.664977][T10527] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3370'. [ 302.745120][ T369] usb 5-1: device descriptor read/64, error -71 [ 302.838592][T10535] rust_binder: Write failure EINVAL in pid:85 [ 302.860507][ T369] usb usb5-port1: attempt power cycle [ 302.924649][ T36] kauditd_printk_skb: 589 callbacks suppressed [ 302.924668][ T36] audit: type=1400 audit(1750780337.595:30317): avc: denied { read write } for pid=10064 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.968092][ T36] audit: type=1400 audit(1750780337.595:30318): avc: denied { read write open } for pid=10064 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.004362][ T36] audit: type=1400 audit(1750780337.595:30319): avc: denied { ioctl } for pid=10064 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.048190][ T36] audit: type=1400 audit(1750780337.605:30320): avc: denied { read write } for pid=10540 comm="syz.5.3378" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 303.114797][ T36] audit: type=1400 audit(1750780337.605:30321): avc: denied { read write open } for pid=10540 comm="syz.5.3378" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 303.142502][ T36] audit: type=1400 audit(1750780337.605:30322): avc: denied { read write } for pid=10540 comm="syz.5.3378" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 303.174328][ T36] audit: type=1400 audit(1750780337.605:30323): avc: denied { read write open } for pid=10540 comm="syz.5.3378" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 303.199436][ T36] audit: type=1400 audit(1750780337.605:30324): avc: denied { ioctl } for pid=10540 comm="syz.5.3378" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 303.234320][ T369] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 303.256987][ T36] audit: type=1400 audit(1750780337.635:30325): avc: denied { read write } for pid=9976 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.281521][ T36] audit: type=1400 audit(1750780337.635:30326): avc: denied { read write open } for pid=9976 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.292965][ T369] usb 5-1: device descriptor read/8, error -71 [ 303.452468][ T369] usb 5-1: device descriptor read/8, error -71 [ 303.690444][ T369] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 303.712605][ T369] usb 5-1: device descriptor read/8, error -71 [ 303.842398][ T369] usb 5-1: device descriptor read/8, error -71 [ 303.950489][ T369] usb usb5-port1: unable to enumerate USB device [ 304.181029][T10575] rust_binder: Write failure EINVAL in pid:141 [ 304.220138][T10578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.269761][ T2224] tipc: Subscription rejected, illegal request [ 304.559385][T10585] rust_binder: Error while translating object. [ 304.559424][T10585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 304.569475][T10585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:434 [ 304.890169][T10592] netlink: 196 bytes leftover after parsing attributes in process `syz.7.3397'. [ 304.909555][T10592] rust_binder: Write failure EFAULT in pid:150 [ 304.937088][T10590] binder: Unknown parameter 'processor : 0 [ 304.937088][T10590] vendor_id : GenuineIntel [ 304.937088][T10590] cpu family : 6 [ 304.937088][T10590] model : 79 [ 304.937088][T10590] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 304.937088][T10590] stepping : 0 [ 304.937088][T10590] microcode : 0xffffffff [ 304.937088][T10590] cpu MHz : 2199.998 [ 304.937088][T10590] cache size : 56320 KB [ 304.937088][T10590] physical id : 0 [ 304.937088][T10590] siblings : 2 [ 304.937088][T10590] core id : 0 [ 304.937088][T10590] cpu cores : 1 [ 304.937088][T10590] apicid : 0 [ 304.937088][T10590] initial apicid : 0 [ 304.937088][T10590] fpu : yes [ 304.937088][T10590] fpu_exception : yes [ 304.937088][T10590] cpuid level : 13 [ 304.937088][T10590] wp : yes [ 304.937088][T10590] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 304.937088][T10590] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 305.332286][T10622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.474362][T10622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.579797][T10627] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.582849][T10629] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 82) [ 305.589315][T10629] rust_binder: Error while translating object. [ 305.599842][T10629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 305.606018][T10629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168 [ 305.710424][ T45] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 305.740644][T10633] netlink: 'syz.7.3411': attribute type 4 has an invalid length. [ 305.850526][ T45] usb 5-1: device descriptor read/64, error -71 [ 305.910844][T10643] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 306.107994][ T45] usb 5-1: device descriptor read/64, error -71 [ 306.190424][ T369] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 306.222984][T10666] overlayfs: failed to clone upperpath [ 306.343963][ T369] usb 8-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 306.353053][ T369] usb 8-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 306.361162][ T45] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 306.368646][ T369] usb 8-1: Product: syz [ 306.372854][ T369] usb 8-1: Manufacturer: syz [ 306.377466][ T369] usb 8-1: SerialNumber: syz [ 306.384238][ T369] usb 8-1: config 0 descriptor?? [ 306.510429][ T45] usb 5-1: device descriptor read/64, error -71 [ 306.750467][ T45] usb 5-1: device descriptor read/64, error -71 [ 306.797388][ T369] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 306.822617][ T369] asix 8-1:0.0: probe with driver asix failed with error -71 [ 306.837846][ T369] usb 8-1: USB disconnect, device number 7 [ 306.866638][ T45] usb usb5-port1: attempt power cycle [ 306.882817][T10674] netlink: 'syz.6.3428': attribute type 30 has an invalid length. [ 306.933903][T10674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10674 comm=syz.6.3428 [ 307.221264][ T45] usb 5-1: new low-speed USB device number 94 using dummy_hcd [ 307.244147][ T45] usb 5-1: device descriptor read/8, error -71 [ 307.329355][T10733] netlink: 'syz.6.3442': attribute type 12 has an invalid length. [ 307.390399][ T45] usb 5-1: device descriptor read/8, error -71 [ 307.640423][ T45] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 307.670031][ T45] usb 5-1: device descriptor read/8, error -71 [ 307.803754][ T45] usb 5-1: device descriptor read/8, error -71 [ 307.912768][ T45] usb usb5-port1: unable to enumerate USB device [ 307.938732][ T36] kauditd_printk_skb: 777 callbacks suppressed [ 307.938753][ T36] audit: type=1400 audit(1750780342.605:31104): avc: denied { create } for pid=10780 comm="syz.6.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 307.970611][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3455'. [ 307.979598][ T36] audit: type=1400 audit(1750780342.635:31105): avc: denied { write } for pid=10780 comm="syz.6.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 308.008071][ T36] audit: type=1400 audit(1750780342.645:31106): avc: denied { nlmsg_write } for pid=10780 comm="syz.6.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 308.277035][ T36] audit: type=1400 audit(1750780342.945:31107): avc: denied { read write } for pid=9976 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 308.301470][ T36] audit: type=1400 audit(1750780342.945:31108): avc: denied { read write open } for pid=9976 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 308.337155][T10784] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.343988][ T36] audit: type=1400 audit(1750780342.945:31109): avc: denied { ioctl } for pid=9976 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 308.418749][ T36] audit: type=1400 audit(1750780343.005:31110): avc: denied { write } for pid=10783 comm="syz.7.3456" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 308.427786][T10789] binder: Unknown parameter 'öÞ÷’SဂÕEÃÓ' [ 308.461655][ T36] audit: type=1400 audit(1750780343.005:31111): avc: denied { write } for pid=10783 comm="syz.7.3456" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 308.507412][ T36] audit: type=1400 audit(1750780343.005:31112): avc: denied { read } for pid=10783 comm="syz.7.3456" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 308.535326][T10793] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.658289][T10801] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.664564][T10801] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.671644][T10801] rust_binder: Write failure EINVAL in pid:197 [ 308.793770][T10806] binder: Unknown parameter 'processor : 0 [ 308.793770][T10806] vendor_id : GenuineIntel [ 308.793770][T10806] cpu family : 6 [ 308.793770][T10806] model : 79 [ 308.793770][T10806] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 308.793770][T10806] stepping : 0 [ 308.793770][T10806] microcode : 0xffffffff [ 308.793770][T10806] cpu MHz : 2199.998 [ 308.793770][T10806] cache size : 56320 KB [ 308.793770][T10806] physical id : 0 [ 308.793770][T10806] siblings : 2 [ 308.793770][T10806] core id : 0 [ 308.793770][T10806] cpu cores : 1 [ 308.793770][T10806] apicid : 0 [ 308.793770][T10806] initial apicid : 0 [ 308.793770][T10806] fpu : yes [ 308.793770][T10806] fpu_exception : yes [ 308.793770][T10806] cpuid level : 13 [ 308.793770][T10806] wp : yes [ 308.793770][T10806] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 308.793770][T10806] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 308.802000][T10807] binder: Unknown parameter 'processor : 0 [ 308.802000][T10807] vendor_id : GenuineIntel [ 308.802000][T10807] cpu family : 6 [ 308.802000][T10807] model : 79 [ 308.802000][T10807] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 308.802000][T10807] stepping : 0 [ 308.802000][T10807] microcode : 0xffffffff [ 308.802000][T10807] cpu MHz : 2199.998 [ 308.802000][T10807] cache size : 56320 KB [ 308.802000][T10807] physical id : 0 [ 308.802000][T10807] siblings : 2 [ 308.802000][T10807] core id : 0 [ 308.802000][T10807] cpu cores : 1 [ 308.802000][T10807] apicid : 0 [ 308.802000][T10807] initial apicid : 0 [ 308.802000][T10807] fpu : yes [ 308.802000][T10807] fpu_exception : yes [ 308.802000][T10807] cpuid level : 13 [ 308.802000][T10807] wp : yes [ 308.802000][T10807] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 308.802000][T10807] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 308.935323][ T391] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 309.107024][T10809] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 309.110123][T10810] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 309.122829][T10809] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 309.131907][T10810] rust_binder: Error while translating object. [ 309.141408][T10809] rust_binder: Error while translating object. [ 309.147651][T10810] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 309.153973][T10809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 309.166604][T10810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205 [ 309.179707][T10809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205 [ 309.227440][ T391] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 309.244783][ T391] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.255003][ T391] usb 5-1: config 0 has no interface number 0 [ 309.265328][ T391] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 309.298833][ T391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.319348][ T391] usb 5-1: Product: syz [ 309.324687][ T391] usb 5-1: Manufacturer: syz [ 309.329336][ T391] usb 5-1: SerialNumber: syz [ 309.342411][ T391] usb 5-1: config 0 descriptor?? [ 309.398003][T10820] Invalid ELF header len 32 [ 309.505210][T10827] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 309.694936][ T2667] usb 5-1: USB disconnect, device number 96 [ 309.711226][T10835] fuse: Unknown parameter '00000000000000000000fd' [ 310.620412][ T2667] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 310.780503][ T2667] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 310.800404][ T2667] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 310.817620][ T2667] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 310.828764][ T2667] usb 5-1: config 220 has no interface number 2 [ 310.835930][ T2667] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 310.850126][ T2667] usb 5-1: config 220 interface 0 has no altsetting 0 [ 310.857793][ T2667] usb 5-1: config 220 interface 76 has no altsetting 0 [ 310.880399][ T2667] usb 5-1: config 220 interface 1 has no altsetting 0 [ 310.893103][ T2667] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 310.909571][T10880] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.913067][T10880] rust_binder: Error while translating object. [ 310.919620][T10880] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 310.922098][ T2667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.935255][T10880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:226 [ 310.946483][ T2667] usb 5-1: Product: syz [ 310.971644][ T2667] usb 5-1: Manufacturer: syz [ 310.976249][ T2667] usb 5-1: SerialNumber: syz [ 311.112580][T10882] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.079940][T10913] fuse: Bad value for 'group_id' [ 312.111067][T10913] fuse: Bad value for 'group_id' [ 312.118620][ T2667] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 312.132092][ T2667] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 312.138472][ T2667] usb 5-1: No valid video chain found. [ 312.151535][ T2667] usb 5-1: selecting invalid altsetting 0 [ 312.167379][ T2667] usb 5-1: USB disconnect, device number 97 [ 312.338112][T10918] /dev/rnullb0: Can't open blockdev [ 312.990832][ T36] kauditd_printk_skb: 784 callbacks suppressed [ 312.990853][ T36] audit: type=1400 audit(1750780347.665:31880): avc: denied { read } for pid=10924 comm="syz.7.3502" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.030993][T10925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 313.101961][ T36] audit: type=1400 audit(1750780347.695:31881): avc: denied { read open } for pid=10924 comm="syz.7.3502" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.138336][T10925] rust_binder: Write failure EFAULT in pid:253 [ 313.152286][ T36] audit: type=1400 audit(1750780347.705:31882): avc: denied { ioctl } for pid=10924 comm="syz.7.3502" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.185496][ T36] audit: type=1400 audit(1750780347.705:31883): avc: denied { read write } for pid=10924 comm="syz.7.3502" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 313.210175][ T36] audit: type=1400 audit(1750780347.705:31884): avc: denied { read write open } for pid=10924 comm="syz.7.3502" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 313.235978][ T36] audit: type=1400 audit(1750780347.705:31885): avc: denied { ioctl } for pid=10924 comm="syz.7.3502" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 313.262354][ T36] audit: type=1400 audit(1750780347.715:31886): avc: denied { read } for pid=10924 comm="syz.7.3502" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.286193][ T36] audit: type=1400 audit(1750780347.715:31887): avc: denied { read open } for pid=10924 comm="syz.7.3502" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.319421][ T36] audit: type=1400 audit(1750780347.725:31888): avc: denied { ioctl } for pid=10924 comm="syz.7.3502" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.345961][ T36] audit: type=1400 audit(1750780347.725:31889): avc: denied { read append } for pid=10924 comm="syz.7.3502" name="custom0" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 314.509595][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3513'. [ 314.710423][ T391] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 314.860408][ T391] usb 5-1: device descriptor read/64, error -71 [ 315.100414][ T391] usb 5-1: device descriptor read/64, error -71 [ 315.340449][ T391] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 315.470418][ T391] usb 5-1: device descriptor read/64, error -71 [ 315.613704][T10982] overlayfs: failed to clone upperpath [ 315.613707][T10983] overlayfs: failed to clone upperpath [ 315.695750][T10987] futex_wake_op: syz.6.3521 tries to shift op by -1; fix this program [ 315.710865][ T391] usb 5-1: device descriptor read/64, error -71 [ 315.820491][ T391] usb usb5-port1: attempt power cycle [ 316.160418][ T391] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 316.198928][ T391] usb 5-1: device descriptor read/8, error -71 [ 316.245899][T11002] overlayfs: failed to clone upperpath [ 316.332986][ T391] usb 5-1: device descriptor read/8, error -71 [ 316.570475][ T391] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 316.592637][ T391] usb 5-1: device descriptor read/8, error -71 [ 316.731027][ T391] usb 5-1: device descriptor read/8, error -71 [ 316.841572][ T391] usb usb5-port1: unable to enumerate USB device [ 317.248518][T11083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 317.820415][ T369] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 317.982345][ T369] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.993301][ T369] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.003030][ T369] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.015942][ T369] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.025019][ T369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.034059][ T369] usb 5-1: config 0 descriptor?? [ 318.039507][ T36] kauditd_printk_skb: 401 callbacks suppressed [ 318.039521][ T36] audit: type=1400 audit(1750780352.705:32291): avc: denied { ioctl } for pid=11100 comm="syz.4.3556" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 318.071034][ T36] audit: type=1400 audit(1750780352.705:32292): avc: denied { ioctl } for pid=11100 comm="syz.4.3556" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 318.096156][ T36] audit: type=1400 audit(1750780352.705:32293): avc: denied { ioctl } for pid=11100 comm="syz.4.3556" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 318.136011][ T36] audit: type=1400 audit(1750780352.705:32294): avc: denied { ioctl } for pid=11100 comm="syz.4.3556" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 318.173047][ T36] audit: type=1400 audit(1750780352.785:32295): avc: denied { read write } for pid=9976 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.198629][ T36] audit: type=1400 audit(1750780352.785:32296): avc: denied { read write open } for pid=9976 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.239524][ T36] audit: type=1400 audit(1750780352.785:32297): avc: denied { ioctl } for pid=9976 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.269586][ T36] audit: type=1400 audit(1750780352.805:32298): avc: denied { read write } for pid=11102 comm="syz.7.3557" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 318.297880][ T36] audit: type=1400 audit(1750780352.805:32299): avc: denied { read open } for pid=11102 comm="syz.7.3557" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 318.322402][ T36] audit: type=1400 audit(1750780352.805:32300): avc: denied { map } for pid=11102 comm="syz.7.3557" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 318.471271][ T369] plantronics 0003:047F:FFFF.002A: unknown main item tag 0xd [ 318.481223][ T369] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 318.495201][ T369] plantronics 0003:047F:FFFF.002A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 318.771363][ T64] usb 5-1: USB disconnect, device number 102 [ 319.256585][T11134] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 319.268587][T11134] syz.5.3566 (11134): /proc/11133/oom_adj is deprecated, please use /proc/11133/oom_score_adj instead. [ 319.321509][T11136] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3567'. [ 319.363173][T11143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:506 [ 319.526881][T11155] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 319.544793][T11155] SELinux: failed to load policy [ 319.677128][T11163] fuse: Unknown parameter 'fo<Ô#"¡S}gw‚j Ò5:_½MF©|?Ì©yˆ¬Ë…C³ð’_Ñ7o0x0000000000000003' [ 319.910439][ T64] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 320.062576][ T64] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.072711][ T64] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 320.081590][ T64] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.097392][ T64] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 320.106494][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.114496][ T64] usb 5-1: Product: syz [ 320.118632][ T64] usb 5-1: Manufacturer: syz [ 320.123219][ T64] usb 5-1: SerialNumber: syz [ 320.131165][ T64] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 320.138539][ T64] cdc_ncm 5-1:1.0: bind() failure [ 320.330648][ T2667] usb 5-1: USB disconnect, device number 103 [ 322.619704][T11208] rust_binder: Write failure EFAULT in pid:140 [ 322.903334][T11220] binder: Binderfs stats mode cannot be changed during a remount [ 322.977825][T11222] SELinux: security_context_str_to_sid () failed with errno=-22 [ 323.581515][ T36] kauditd_printk_skb: 414 callbacks suppressed [ 323.581534][ T36] audit: type=1400 audit(7003121424.247:32715): avc: denied { read write } for pid=10064 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 323.664417][ T36] audit: type=1400 audit(7003121424.277:32716): avc: denied { read write open } for pid=10064 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 323.704725][ T36] audit: type=1400 audit(7003121424.277:32717): avc: denied { ioctl } for pid=10064 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 323.769757][ T36] audit: type=1400 audit(7003121424.327:32718): avc: denied { read } for pid=11227 comm="syz.5.3595" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 323.808858][ T36] audit: type=1400 audit(7003121424.327:32719): avc: denied { read open } for pid=11227 comm="syz.5.3595" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 323.813033][T11231] overlayfs: failed to clone upperpath [ 323.860841][ T36] audit: type=1400 audit(7003121424.327:32720): avc: denied { ioctl } for pid=11227 comm="syz.5.3595" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 323.920396][ T36] audit: type=1400 audit(7003121424.367:32721): avc: denied { create } for pid=11227 comm="syz.5.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 323.960416][ T36] audit: type=1400 audit(7003121424.367:32722): avc: denied { read } for pid=11227 comm="syz.5.3595" dev="nsfs" ino=4026532471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 323.969876][T11238] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 323.996517][ T36] audit: type=1400 audit(7003121424.367:32723): avc: denied { read open } for pid=11227 comm="syz.5.3595" path="net:[4026532471]" dev="nsfs" ino=4026532471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 324.069819][T11243] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.070512][ T36] audit: type=1400 audit(7003121424.367:32724): avc: denied { create } for pid=11227 comm="syz.5.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 324.076406][T11243] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 324.158146][T11246] fuse: Bad value for 'user_id' [ 324.161479][T11247] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.171024][T11246] fuse: Bad value for 'user_id' [ 324.236060][T11248] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 324.289516][T11253] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.683424][T11275] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 324.710409][T11275] rust_binder: Error while translating object. [ 324.740510][T11275] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 324.760453][T11275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:548 [ 324.788213][T11283] binder: Unknown parameter '00000000000000000000000' [ 324.857596][T11281] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55466 sclass=netlink_xfrm_socket pid=11281 comm=syz.7.3611 [ 325.128986][T11299] rust_binder: Error while translating object. [ 325.129033][T11299] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 325.152606][T11299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:558 [ 325.193218][T11302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.272842][T11308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:299 [ 325.492695][T11321] ip6_vti0: entered promiscuous mode [ 325.652646][T11331] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 325.670456][T11331] rust_binder: Write failure EINVAL in pid:566 [ 325.741157][T11337] rust_binder: Read failure Err(EAGAIN) in pid:194 [ 325.932240][T11342] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.022933][T11345] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 326.044836][T11345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 326.283028][T11355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.365051][ T36] kauditd_printk_skb: 925 callbacks suppressed [ 332.365073][ T36] audit: type=1400 audit(7003121433.027:33650): avc: denied { read } for pid=11379 comm="syz.7.3647" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 332.370766][T11384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.372885][ T36] audit: type=1400 audit(7003121433.027:33651): avc: denied { read open } for pid=11379 comm="syz.7.3647" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 332.446466][ T36] audit: type=1400 audit(7003121433.027:33652): avc: denied { ioctl } for pid=11379 comm="syz.7.3647" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 332.510455][ T36] audit: type=1400 audit(7003121433.047:33653): avc: denied { read } for pid=11381 comm="syz.5.3649" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 332.590397][ T36] audit: type=1400 audit(7003121433.047:33654): avc: denied { read open } for pid=11381 comm="syz.5.3649" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 332.590774][T11398] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.669900][ T36] audit: type=1400 audit(7003121433.047:33655): avc: denied { create } for pid=11379 comm="syz.7.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 332.705081][T11396] audit: audit_backlog=65 > audit_backlog_limit=64 [ 332.715456][T11392] audit: audit_backlog=65 > audit_backlog_limit=64 [ 332.729807][T11396] audit: audit_lost=28 audit_rate_limit=0 audit_backlog_limit=64 [ 332.730409][ T36] audit: type=1400 audit(7003121433.047:33656): avc: denied { create } for pid=11379 comm="syz.7.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 332.756381][T11392] 9p filesystem being mounted at /572/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 332.773815][T11396] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 333.441828][T11432] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3663'. [ 333.501963][T11433] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.521979][T11433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:225 [ 333.561709][T11438] overlayfs: overlapping lowerdir path [ 333.636831][T11448] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.010160][T11471] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 334.016822][T11471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 334.026151][T11471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:602 [ 334.480913][T11485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.526008][T11485] rust_binder: Error in use_page_slow: ESRCH [ 334.526037][T11485] rust_binder: use_range failure ESRCH [ 334.548421][T11485] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 334.565950][T11485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 334.588348][T11485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:322 [ 336.695467][T11496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.940557][T11501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:611 [ 337.022751][T11505] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 337.371701][ T36] kauditd_printk_skb: 415 callbacks suppressed [ 337.371721][ T36] audit: type=1400 audit(7003121438.037:34054): avc: denied { create } for pid=11532 comm="syz.6.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 337.402701][T11533] audit: audit_backlog=65 > audit_backlog_limit=64 [ 337.406330][T11534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 337.412201][T11533] audit: audit_lost=35 audit_rate_limit=0 audit_backlog_limit=64 [ 337.429502][T11533] audit: backlog limit exceeded [ 337.436132][T11535] audit: audit_backlog=65 > audit_backlog_limit=64 [ 337.444950][T11534] audit: audit_lost=36 audit_rate_limit=0 audit_backlog_limit=64 [ 337.445022][T11535] audit: audit_lost=37 audit_rate_limit=0 audit_backlog_limit=64 [ 337.453764][ T36] audit: type=1400 audit(7003121438.037:34055): avc: denied { write } for pid=11531 comm="syz.4.3696" name="udplite" dev="proc" ino=4026532333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 337.460649][T11535] audit: backlog limit exceeded [ 337.497728][T11535] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=82 sclass=netlink_audit_socket pid=11535 comm=syz.4.3696 [ 337.578310][T11547] overlayfs: failed to clone upperpath [ 337.755396][T11561] rust_binder: Write failure EINVAL in pid:634 [ 337.857988][T11572] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 337.877437][T11573] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 337.969970][T11579] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.000422][ T45] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 338.191322][ T45] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 338.202745][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.214995][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.225635][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 338.240207][T11580] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.240907][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 338.247411][T11580] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.257692][ T45] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 338.264521][T11580] bridge_slave_0: entered allmulticast mode [ 338.272451][ T45] usb 5-1: Manufacturer: syz [ 338.277899][T11580] bridge_slave_0: entered promiscuous mode [ 338.285235][ T45] usb 5-1: config 0 descriptor?? [ 338.292782][T11580] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.299953][T11580] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.308382][T11580] bridge_slave_1: entered allmulticast mode [ 338.314894][T11580] bridge_slave_1: entered promiscuous mode [ 338.427533][T11591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:344 [ 338.427572][T11591] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 338.430831][T11580] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.450396][T11591] rust_binder: Read failure Err(EFAULT) in pid:344 [ 338.451874][T11580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.465740][T11580] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.472807][T11580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.555193][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.564206][ T2221] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.582704][ T2221] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.589952][ T2221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.602554][ T2205] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.609644][ T2205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.612560][T11594] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.712043][T11580] veth0_vlan: entered promiscuous mode [ 338.748394][T11580] veth1_macvtap: entered promiscuous mode [ 339.273808][T11613] binder: Unknown parameter 'fscontext?}' [ 339.915364][T11631] rust_binder: Write failure EFAULT in pid:33 [ 340.753096][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 340.781693][T11636] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.792136][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 340.830574][ T45] usb 5-1: USB disconnect, device number 104 [ 340.831099][T11636] rust_binder: Failed to allocate buffer. len:160, is_oneway:true [ 340.961868][T11643] rust_binder: Error while translating object. [ 340.997977][T11643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 341.007036][T11647] binder: Bad value for 'max' [ 341.012189][T11643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:39 [ 341.032297][T11649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 341.074885][T11649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:240 [ 341.130426][T11649] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 341.164956][T11649] rust_binder: Read failure Err(EFAULT) in pid:240 [ 341.202816][T11657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:645 [ 341.276184][T11659] binder: Unknown parameter 'ma' [ 341.410058][T11663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 341.420396][ T64] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 341.593773][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 341.609833][ T64] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.631446][ T64] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 341.645151][T11678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 341.645182][T11678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:654 [ 341.654621][ T64] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 341.701268][ T64] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.708967][T11674] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 341.710335][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.731269][ T64] usb 7-1: Product: syz [ 341.735482][ T64] usb 7-1: Manufacturer: syz [ 341.745944][T11681] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 341.745963][T11681] rust_binder: Read failure Err(EFAULT) in pid:657 [ 341.754846][ T64] usb 7-1: SerialNumber: syz [ 341.858767][T11686] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 342.014546][T11695] 9pnet_fd: Insufficient options for proto=fd [ 342.191700][T11699] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 342.197347][T11700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.221886][T11655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.251639][T11700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.253306][T11655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.332765][ T64] cdc_ncm 7-1:1.0: bind() failure [ 342.345995][ T64] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 342.362680][ T64] cdc_ncm 7-1:1.1: bind() failure [ 342.379553][ T64] usb 7-1: USB disconnect, device number 14 [ 342.418644][ T36] kauditd_printk_skb: 990 callbacks suppressed [ 342.418665][ T36] audit: type=1400 audit(7003121443.077:35045): avc: denied { create } for pid=11705 comm="syz.7.3751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.488910][ T36] audit: type=1400 audit(7003121443.077:35046): avc: denied { write } for pid=11705 comm="syz.7.3751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.564774][ T36] audit: type=1400 audit(7003121443.077:35047): avc: denied { read } for pid=11705 comm="syz.7.3751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.605834][ T36] audit: type=1400 audit(7003121443.087:35048): avc: denied { read } for pid=11705 comm="syz.7.3751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.647349][ T36] audit: type=1400 audit(7003121443.087:35049): avc: denied { write } for pid=11705 comm="syz.7.3751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.668652][ T36] audit: type=1400 audit(7003121443.097:35050): avc: denied { write } for pid=11705 comm="syz.7.3751" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 342.692260][ T36] audit: type=1400 audit(7003121443.097:35051): avc: denied { write } for pid=11705 comm="syz.7.3751" path="/dev/bus/usb/001/001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 342.717346][ T36] audit: type=1400 audit(7003121443.097:35052): avc: denied { read write } for pid=11705 comm="syz.7.3751" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.745983][ T36] audit: type=1400 audit(7003121443.107:35053): avc: denied { read write open } for pid=11705 comm="syz.7.3751" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.771999][ T36] audit: type=1400 audit(7003121443.107:35054): avc: denied { ioctl } for pid=11705 comm="syz.7.3751" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.214956][T11720] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.271233][T11721] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 343.278048][T11721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 343.340404][ T391] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 343.502461][ T391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.513477][ T391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.523394][ T391] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 343.532535][ T391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.541969][ T391] usb 5-1: config 0 descriptor?? [ 343.750270][ T391] usbhid 5-1:0.0: can't add hid device: -71 [ 343.769751][ T391] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 343.782189][ T391] usb 5-1: USB disconnect, device number 105 [ 344.033076][T11731] binder: Bad value for 'stats' [ 344.060441][ T45] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 344.220412][ T45] usb 7-1: Using ep0 maxpacket: 32 [ 344.240763][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.264571][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.281658][ T45] usb 7-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 344.297003][T11739] can: request_module (can-proto-0) failed. [ 344.298054][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.323654][ T45] usb 7-1: config 0 descriptor?? [ 344.529193][T11744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265 [ 344.745118][ T45] smartjoyplus 0003:0925:8866.002B: global environment stack underflow [ 344.770404][ T45] smartjoyplus 0003:0925:8866.002B: item 0 1 1 11 parsing failed [ 344.781758][ T45] smartjoyplus 0003:0925:8866.002B: parse failed [ 344.791496][ T45] smartjoyplus 0003:0925:8866.002B: probe with driver smartjoyplus failed with error -22 [ 344.952210][ T45] usb 7-1: USB disconnect, device number 15 [ 345.320414][ T611] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 345.479378][ T611] usb 5-1: Using ep0 maxpacket: 16 [ 345.540560][ T611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.560420][ T611] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 345.591746][T11757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 345.594334][ T611] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 345.620040][ T611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.627337][T11754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:51 [ 345.642093][ T611] usb 5-1: config 0 descriptor?? [ 345.785381][T11766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 345.937011][T11764] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 346.054447][T11783] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 346.089645][ T611] HID 045e:07da: Invalid code 65791 type 1 [ 346.104178][T11782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11782 comm=syz.7.3776 [ 346.104187][T11781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11781 comm=syz.7.3776 [ 346.114784][ T611] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002C/input/input35 [ 346.149072][ T611] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 346.490167][ T391] usb 5-1: USB disconnect, device number 106 [ 346.562603][T11797] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 346.570407][T11797] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 346.571770][T11795] syzkaller0: entered promiscuous mode [ 346.620411][T11795] syzkaller0: entered allmulticast mode [ 346.871699][T11808] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 346.888745][T11812] fuse: Bad value for 'fd' [ 347.064714][T11817] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 347.388137][T11821] binder: Bad value for 'context' [ 347.401273][ T391] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 347.420840][ T36] kauditd_printk_skb: 1526 callbacks suppressed [ 347.420861][ T36] audit: type=1400 audit(7003121448.087:36581): avc: denied { ioctl } for pid=11818 comm="syz.4.3789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 347.464838][ T36] audit: type=1400 audit(7003121448.127:36582): avc: denied { read } for pid=11822 comm="syz.6.3791" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 347.488089][ T36] audit: type=1400 audit(7003121448.127:36583): avc: denied { read open } for pid=11822 comm="syz.6.3791" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 347.530425][ T36] audit: type=1400 audit(7003121448.177:36584): avc: denied { ioctl } for pid=11818 comm="syz.4.3789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 347.590389][ T391] usb 5-1: Using ep0 maxpacket: 32 [ 347.596083][ T36] audit: type=1400 audit(7003121448.257:36585): avc: denied { read write } for pid=11580 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.602198][ T391] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.635053][ T36] audit: type=1400 audit(7003121448.257:36586): avc: denied { ioctl } for pid=11818 comm="syz.4.3789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 347.661019][ T36] audit: type=1400 audit(7003121448.257:36587): avc: denied { ioctl } for pid=11818 comm="syz.4.3789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 347.665798][ T391] usb 5-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.686175][ T36] audit: type=1400 audit(7003121448.257:36588): avc: denied { ioctl } for pid=11818 comm="syz.4.3789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 347.754804][ T391] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 347.760397][ T36] audit: type=1400 audit(7003121448.257:36589): avc: denied { ioctl } for pid=11818 comm="syz.4.3789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 347.790388][ T391] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 347.815892][ T36] audit: type=1400 audit(7003121448.257:36590): avc: denied { ioctl } for pid=11818 comm="syz.4.3789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 347.823689][ T391] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 347.865104][ T391] usb 5-1: config 0 interface 0 has no altsetting 0 [ 347.872689][ T391] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 347.882734][ T391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.911957][ T391] usb 5-1: config 0 descriptor?? [ 348.195934][T11833] fuse: Bad value for 'fd' [ 348.332310][ T391] hid-thrustmaster 0003:044F:B65D.002D: unknown main item tag 0x0 [ 348.340192][ T391] hid-thrustmaster 0003:044F:B65D.002D: unknown main item tag 0x0 [ 348.364159][ T391] hid-thrustmaster 0003:044F:B65D.002D: unknown main item tag 0x0 [ 348.376481][ T391] hid-thrustmaster 0003:044F:B65D.002D: unknown main item tag 0x0 [ 348.385321][ T391] hid-thrustmaster 0003:044F:B65D.002D: unknown main item tag 0x0 [ 348.397231][ T391] hid-thrustmaster 0003:044F:B65D.002D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 348.411767][ T391] hid-thrustmaster 0003:044F:B65D.002D: setup data couldn't be sent [ 348.555971][T11819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.585937][T11819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.586785][T11844] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 348.751851][ C0] hid-thrustmaster 0003:044F:B65D.002D: URB to get model id failed with error -71 [ 348.762507][ T391] usb 5-1: USB disconnect, device number 107 [ 348.839927][T11852] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 348.853240][T11853] netlink: 'syz.6.3800': attribute type 4 has an invalid length. [ 348.912615][T11853] overlayfs: missing 'lowerdir' [ 349.295521][T11868] fuse: Bad value for 'fd' [ 349.434392][T11874] rust_binder: Error while translating object. [ 349.434425][T11874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 349.457660][T11874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:109 [ 349.534901][T11879] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 349.622189][T11884] rust_binder: Write failure EFAULT in pid:111 [ 349.897973][T11896] rust_binder: Write failure EINVAL in pid:704 [ 349.922915][T11899] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.938626][T11903] rust_binder: Write failure EFAULT in pid:120 [ 350.326941][T11922] rust_binder: Error while translating object. [ 350.333238][ T611] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 350.360442][T11922] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 350.360482][T11922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:132 [ 350.371444][T11924] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.437958][T11930] binder: Bad value for 'stats' [ 350.510470][ T611] usb 5-1: Using ep0 maxpacket: 8 [ 350.542338][ T611] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 350.560377][ T611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.569565][T11934] lo: entered promiscuous mode [ 350.576353][T11934] lo: left promiscuous mode [ 350.586839][ T611] usb 5-1: config 0 descriptor?? [ 350.590424][T11929] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3821'. [ 350.987640][T11951] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 351.140672][T11956] Invalid logical block size (18) [ 351.291022][T11963] 9pnet_fd: Insufficient options for proto=fd [ 351.400453][ T391] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 351.552571][ T391] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.563518][ T391] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.573282][ T391] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.586066][ T391] usb 7-1: New USB device found, idVendor=056a, idProduct=c5f0, bcdDevice= 0.00 [ 351.595125][ T391] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.605686][ T391] usb 7-1: config 0 descriptor?? [ 352.023995][ T391] wacom 0003:056A:C5F0.002E: unknown main item tag 0x0 [ 352.033145][ T2221] bridge_slave_1: left allmulticast mode [ 352.040532][ T391] wacom 0003:056A:C5F0.002E: Unknown device_type for 'HID 056a:c5f0'. Ignoring. [ 352.051768][ T2221] bridge_slave_1: left promiscuous mode [ 352.057422][ T2221] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.070642][ T2221] bridge_slave_0: left allmulticast mode [ 352.079374][ T2221] bridge_slave_0: left promiscuous mode [ 352.085883][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.211984][ T2221] tipc: Disabling bearer [ 352.217358][ T2221] tipc: Left network mode [ 352.223921][T11958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.223941][ T2221] veth1_macvtap: left promiscuous mode [ 352.239044][ T2221] veth0_vlan: left promiscuous mode [ 352.239863][T11958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.255000][T11958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 352.255032][T11958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:150 [ 352.273094][T11977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.295316][T11974] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 352.295980][T11977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.322484][ T369] usb 7-1: USB disconnect, device number 16 [ 352.467262][ T36] kauditd_printk_skb: 978 callbacks suppressed [ 352.467282][ T36] audit: type=1400 audit(7003121453.127:37569): avc: denied { ioctl } for pid=11911 comm="syz.4.3816" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 352.498683][ T36] audit: type=1400 audit(7003121453.127:37570): avc: denied { ioctl } for pid=11911 comm="syz.4.3816" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 352.576349][ T36] audit: type=1400 audit(7003121453.237:37571): avc: denied { unmount } for pid=10064 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 352.604711][ T36] audit: type=1400 audit(7003121453.267:37572): avc: denied { read write } for pid=10064 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.638358][ T36] audit: type=1400 audit(7003121453.267:37573): avc: denied { read write open } for pid=10064 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.666423][ T36] audit: type=1400 audit(7003121453.267:37574): avc: denied { ioctl } for pid=10064 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.720395][ T36] audit: type=1400 audit(7003121453.297:37575): avc: denied { unmount } for pid=9976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 352.762009][T11912] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 352.775456][ T36] audit: type=1400 audit(7003121453.327:37576): avc: denied { create } for pid=11983 comm="syz.5.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 352.806961][ T36] audit: type=1400 audit(7003121453.337:37577): avc: denied { read write } for pid=9976 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.838088][ T36] audit: type=1400 audit(7003121453.337:37578): avc: denied { read write open } for pid=9976 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.925275][T11991] rust_binder: Write failure EFAULT in pid:401 [ 353.201141][T12000] SELinux: failed to load policy [ 353.355788][T12007] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.246213][T12035] tun0: tun_chr_ioctl cmd 1074025675 [ 354.258204][T12035] tun0: persist enabled [ 354.263266][T12035] tun0: tun_chr_ioctl cmd 1074025675 [ 354.268662][T12035] tun0: persist enabled [ 355.436934][ T2221] Bluetooth: hci0: Frame reassembly failed (-84) [ 356.074912][T12043] binder: Unknown parameter 'fscontext?}' [ 356.148566][T12047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.148890][T12047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.155844][T12047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.162620][T12047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.169125][T12047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.175879][T12047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.182506][T12047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.189264][T12047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.195743][T12047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.202485][T12047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.208914][T12047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.282121][T12057] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.297149][T12057] SELinux: security_context_str_to_sid () failed with errno=-22 [ 357.142872][T12068] incfs: Options parsing error. -22 [ 357.148209][T12068] incfs: mount failed -22 [ 357.155459][T12068] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 357.287921][T12074] fuse: Bad value for 'fd' [ 357.460402][ T830] Bluetooth: hci0: command 0x1003 tx timeout [ 357.460415][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 357.481839][ T36] kauditd_printk_skb: 368 callbacks suppressed [ 357.481858][ T36] audit: type=1400 audit(7003121458.147:37947): avc: denied { unmount } for pid=8258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 357.518751][ T36] audit: type=1400 audit(7003121458.147:37948): avc: denied { read write } for pid=11580 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.548314][T12085] rust_binder: Write failure EINVAL in pid:160 [ 357.550408][ T611] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110 [ 357.586987][ T611] asix 5-1:0.0: probe with driver asix failed with error -110 [ 357.591439][T12088] audit: audit_backlog=65 > audit_backlog_limit=64 [ 357.602439][ T36] audit: type=1400 audit(7003121458.147:37949): avc: denied { read write open } for pid=11580 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.609995][T12088] audit: audit_lost=38 audit_rate_limit=0 audit_backlog_limit=64 [ 357.651833][T12090] binder: Bad value for 'max' [ 357.666760][ T36] audit: type=1400 audit(7003121458.147:37950): avc: denied { ioctl } for pid=11580 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.681993][T12091] audit: audit_backlog=65 > audit_backlog_limit=64 [ 357.708003][T12090] audit: audit_backlog=65 > audit_backlog_limit=64 [ 357.716012][T12090] audit: audit_lost=39 audit_rate_limit=0 audit_backlog_limit=64 [ 357.723845][ T36] audit: type=1400 audit(7003121458.177:37951): avc: denied { read } for pid=12084 comm="syz.6.3875" name="binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 357.990388][ T611] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 358.064270][T12100] fuse: Bad value for 'fd' [ 358.097760][T12102] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3880'. [ 358.140543][ T611] usb 7-1: Using ep0 maxpacket: 8 [ 358.162079][ T611] usb 7-1: config 7 has an invalid interface number: 240 but max is 3 [ 358.170754][ T611] usb 7-1: config 7 has an invalid interface number: 231 but max is 3 [ 358.179199][ T611] usb 7-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 358.195067][ T611] usb 7-1: config 7 has an invalid interface descriptor of length 8, skipping [ 358.204856][ T611] usb 7-1: config 7 has an invalid interface number: 153 but max is 3 [ 358.214843][ T611] usb 7-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config [ 358.226704][ T611] usb 7-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 358.236462][ T611] usb 7-1: config 7 has no interface number 0 [ 358.242588][ T611] usb 7-1: config 7 has no interface number 1 [ 358.248657][ T611] usb 7-1: config 7 has no interface number 2 [ 358.254753][ T611] usb 7-1: config 7 interface 240 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 358.265625][ T611] usb 7-1: config 7 interface 240 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 358.276472][ T611] usb 7-1: config 7 interface 240 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 358.289671][ T611] usb 7-1: config 7 interface 231 altsetting 6 endpoint 0x6 has invalid maxpacket 20905, setting to 64 [ 358.303131][ T611] usb 7-1: config 7 interface 231 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 358.316181][ T611] usb 7-1: config 7 interface 153 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 358.329209][ T611] usb 7-1: config 7 interface 240 has no altsetting 0 [ 358.335982][ T611] usb 7-1: config 7 interface 231 has no altsetting 0 [ 358.342765][ T611] usb 7-1: config 7 interface 153 has no altsetting 0 [ 358.351749][ T611] usb 7-1: New USB device found, idVendor=19d2, idProduct=ff62, bcdDevice=11.71 [ 358.360830][ T611] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.368792][ T611] usb 7-1: Product: syz [ 358.372964][ T611] usb 7-1: Manufacturer: syz [ 358.377547][ T611] usb 7-1: SerialNumber: syz [ 358.617639][ T611] usb 7-1: USB disconnect, device number 17 [ 358.633755][T12118] rust_binder: Error while translating object. [ 358.633790][T12118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 358.644930][T12118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:749 [ 358.693813][T12120] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 358.714705][T12120] rust_binder: Write failure EINVAL in pid:751 [ 358.802351][T12130] fuse: Bad value for 'fd' [ 358.849652][T12132] tc_dump_action: action bad kind [ 358.890921][T12137] binder: Bad value for 'defcontext' [ 358.935013][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.935359][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.942688][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.949497][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.957902][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.965872][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.973725][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.981388][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.988324][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.997651][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 359.005964][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 359.013575][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 359.020996][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 359.028827][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 359.036743][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 359.044856][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 359.051803][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 359.105259][T12144] 9pnet_fd: Insufficient options for proto=fd [ 359.270861][T12155] rust_binder: Error while translating object. [ 359.270904][T12155] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 359.277117][T12155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:781 [ 359.485143][T12168] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 359.499340][T12167] rust_binder: Error while translating object. [ 359.507371][T12167] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 359.515601][T12167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:785 [ 359.600577][T12172] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 359.721971][T12182] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 359.954111][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3909'. [ 360.046679][T12201] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 360.059879][T12201] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 360.082682][T12201] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 360.091544][T12201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:184 [ 360.317838][T12215] rust_binder: Write failure EFAULT in pid:188 [ 360.556579][T12224] tun0: tun_chr_ioctl cmd 1074025675 [ 360.606764][T12224] tun0: persist enabled [ 360.630975][T12223] tun0: tun_chr_ioctl cmd 1074025675 [ 360.640168][T12223] tun0: persist enabled [ 360.648166][T12229] binder: Unknown parameter 'gscontext' [ 360.720388][ T511] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 360.884221][ T511] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.900382][ T511] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 360.911894][ T511] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.925599][ T511] usb 7-1: config 0 descriptor?? [ 360.950919][T12240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.959490][T12240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.981541][T12240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.990067][T12240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.159520][ T511] usbhid 7-1:0.0: can't add hid device: -71 [ 361.179558][ T511] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 361.191009][ T511] usb 7-1: USB disconnect, device number 18 [ 361.610394][ T2667] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 361.770415][ T2667] usb 7-1: Using ep0 maxpacket: 8 [ 361.786798][ T2667] usb 7-1: unable to get BOS descriptor or descriptor too short [ 361.793264][T12260] binder: Unknown parameter './binderfs' [ 361.802854][ T2667] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.813044][ T2667] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 361.821942][ T2667] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.837609][ T2667] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 361.846710][ T2667] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.854713][ T2667] usb 7-1: Product: syz [ 361.858883][ T2667] usb 7-1: Manufacturer: syz [ 361.863579][ T2667] usb 7-1: SerialNumber: syz [ 361.889332][T12261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.897864][T12261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.079719][ T2667] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 362.086588][ T2667] cdc_ncm 7-1:1.0: bind() failure [ 362.095236][ T2667] usb 7-1: USB disconnect, device number 19 [ 362.585287][ T36] kauditd_printk_skb: 1157 callbacks suppressed [ 362.585314][ T36] audit: type=1400 audit(7003121463.247:39042): avc: denied { unmount } for pid=11580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 362.618222][ T36] audit: type=1400 audit(7003121463.287:39043): avc: denied { read write } for pid=11580 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.642720][ T36] audit: type=1400 audit(7003121463.287:39044): avc: denied { read write open } for pid=11580 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.667960][ T36] audit: type=1400 audit(7003121463.287:39045): avc: denied { ioctl } for pid=11580 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.701896][ T36] audit: type=1400 audit(7003121463.367:39046): avc: denied { create } for pid=12262 comm="syz.6.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 362.721591][ T36] audit: type=1400 audit(7003121463.367:39047): avc: denied { create } for pid=12262 comm="syz.6.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 362.742421][ T36] audit: type=1400 audit(7003121463.367:39048): avc: denied { read write } for pid=11580 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.769598][ T36] audit: type=1400 audit(7003121463.367:39049): avc: denied { read write open } for pid=11580 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.794886][ T36] audit: type=1400 audit(7003121463.367:39050): avc: denied { ioctl } for pid=11580 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.821103][ T36] audit: type=1400 audit(7003121463.437:39051): avc: denied { read } for pid=12267 comm="syz.6.3932" dev="nsfs" ino=4026533100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 363.079557][T12282] binder: Bad value for 'max' [ 363.669012][T12298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12298 comm=syz.4.3940 [ 363.684593][T12298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12298 comm=syz.4.3940 [ 363.827909][T12303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 363.828204][T12303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 363.861531][T12303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 363.868356][T12303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 363.896633][T12303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 363.896962][T12303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 363.928948][T12310] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12310 comm=syz.6.3944 [ 363.949050][T12303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 363.949328][T12303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 363.970800][T12303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 363.977644][T12303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 363.984279][T12310] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12310 comm=syz.6.3944 [ 364.006082][T12303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 364.006402][T12303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 364.060735][T12310] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 364.068090][T12310] rust_binder: Write failure EINVAL in pid:213 [ 364.271497][T12328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:448 [ 364.282408][ T2224] Bluetooth: hci0: Frame reassembly failed (-84) [ 364.595859][T12345] rust_binder: Error while translating object. [ 364.595900][T12345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 364.603104][T12345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:457 [ 365.362040][T12361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 365.708010][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.734642][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.742456][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.750209][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.758031][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.768052][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.775928][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.783947][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.791963][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.799719][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.807524][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.815429][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.824072][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.832533][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.840973][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.848731][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.857407][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.865773][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.874176][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.881978][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.889723][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.897515][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.905309][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.913102][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.920908][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.928645][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.936474][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.944529][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.952295][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.960036][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.967773][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.975524][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.983302][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.991040][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 365.998745][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 366.006477][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 366.014211][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 366.022013][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 366.029752][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 366.037531][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 366.045288][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 366.053058][ T511] hid-generic 000F:FFFFFFFB:0001.002F: unknown main item tag 0x0 [ 366.061900][ T511] hid-generic 000F:FFFFFFFB:0001.002F: hidraw0: HID v0.02 Device [syz0] on syz0 [ 366.147554][T12376] fido_id[12376]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 366.287778][T12382] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 366.289256][T12382] rust_binder: Write failure EINVAL in pid:887 [ 366.340374][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 366.340544][ T830] Bluetooth: hci0: command 0x1003 tx timeout [ 366.740850][ T611] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 366.911285][ T611] usb 7-1: device descriptor read/64, error -71 [ 367.160461][ T611] usb 7-1: device descriptor read/64, error -71 [ 367.165769][T12418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.175267][T12418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.184979][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.196058][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.204736][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.212987][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.221636][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.229823][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.238594][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.246988][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.255654][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.263915][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.272496][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.280924][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.289163][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.297984][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.306381][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.315116][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.324296][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.333257][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.341598][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.350425][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.359258][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.368197][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.377039][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.398902][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.410657][ T611] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 367.411395][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.428112][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.437092][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.448325][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.457479][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.466495][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.476706][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.485229][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.493914][T12419] binder: Unknown parameter 'defcontext01777777777777777777777' [ 367.550418][ T611] usb 7-1: device descriptor read/64, error -71 [ 367.661198][ T36] kauditd_printk_skb: 1028 callbacks suppressed [ 367.661218][ T36] audit: type=1400 audit(7003121468.327:40080): avc: denied { ioctl } for pid=12391 comm="syz.6.3973" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.692635][ T36] audit: type=1400 audit(7003121468.327:40081): avc: denied { ioctl } for pid=12391 comm="syz.6.3973" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.717783][ T36] audit: type=1400 audit(7003121468.327:40082): avc: denied { ioctl } for pid=12391 comm="syz.6.3973" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.742950][ T36] audit: type=1400 audit(7003121468.327:40083): avc: denied { ioctl } for pid=12391 comm="syz.6.3973" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.768281][ T36] audit: type=1400 audit(7003121468.327:40084): avc: denied { ioctl } for pid=12391 comm="syz.6.3973" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.790395][ T611] usb 7-1: device descriptor read/64, error -71 [ 367.794233][ T36] audit: type=1400 audit(7003121468.327:40085): avc: denied { ioctl } for pid=12391 comm="syz.6.3973" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.825637][ T36] audit: type=1400 audit(7003121468.327:40086): avc: denied { ioctl } for pid=12391 comm="syz.6.3973" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.850723][ T36] audit: type=1400 audit(7003121468.397:40087): avc: denied { ioctl } for pid=12391 comm="syz.6.3973" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.876533][ T36] audit: type=1400 audit(7003121468.497:40088): avc: denied { read write } for pid=9976 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.901380][ T36] audit: type=1400 audit(7003121468.497:40089): avc: denied { read write open } for pid=9976 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.901494][ T611] usb usb7-port1: attempt power cycle [ 367.933897][T12423] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.935029][T12423] rust_binder: Error while translating object. [ 367.941573][T12423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 367.947742][T12423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:479 [ 368.228980][T12434] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 368.237264][T12439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.247476][T12434] rust_binder: Write failure EINVAL in pid:485 [ 368.259278][T12439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.280700][ T611] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 368.308582][T12442] binder: Unknown parameter 'smackfsdef' [ 368.315909][T12442] binder: Unknown parameter 'smackfsdef' [ 368.327753][ T611] usb 7-1: device descriptor read/8, error -71 [ 368.342669][T12442] binder: Unknown parameter 'smackfsdef' [ 368.350406][T12444] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3992'. [ 368.359871][T12442] binder: Unknown parameter 'smackfsdef' [ 368.369029][T12442] binder: Unknown parameter 'smackfsdef' [ 368.383438][T12442] binder: Unknown parameter 'smackfsdef' [ 368.390655][T12444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3992'. [ 368.397508][T12442] binder: Unknown parameter 'smackfsdef' [ 368.406664][T12442] binder: Unknown parameter 'smackfsdef' [ 368.413792][T12442] binder: Unknown parameter 'smackfsdef' [ 368.421030][T12442] binder: Unknown parameter 'smackfsdef' [ 368.428012][T12442] binder: Unknown parameter 'smackfsdef' [ 368.435236][T12442] binder: Unknown parameter 'smackfsdef' [ 368.442263][T12442] binder: Unknown parameter 'smackfsdef' [ 368.449316][T12442] binder: Unknown parameter 'smackfsdef' [ 368.456468][T12442] binder: Unknown parameter 'smackfsdef' [ 368.464259][T12442] binder: Unknown parameter 'smackfsdef' [ 368.473180][ T611] usb 7-1: device descriptor read/8, error -71 [ 368.480485][T12442] binder: Unknown parameter 'smackfsdef' [ 368.487927][T12442] binder: Unknown parameter 'smackfsdef' [ 368.495114][T12442] binder: Unknown parameter 'smackfsdef' [ 368.502147][T12442] binder: Unknown parameter 'smackfsdef' [ 368.509138][T12442] binder: Unknown parameter 'smackfsdef' [ 368.516022][T12442] binder: Unknown parameter 'smackfsdef' [ 368.523026][T12442] binder: Unknown parameter 'smackfsdef' [ 368.530030][T12442] binder: Unknown parameter 'smackfsdef' [ 368.537070][T12442] binder: Unknown parameter 'smackfsdef' [ 368.544160][T12442] binder: Unknown parameter 'smackfsdef' [ 368.551681][T12442] binder: Unknown parameter 'smackfsdef' [ 368.571390][T12442] binder: Unknown parameter 'smackfsdef' [ 368.578691][T12442] binder: Unknown parameter 'smackfsdef' [ 368.580145][T12446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.595339][T12442] binder: Unknown parameter 'smackfsdef' [ 368.610205][T12442] binder: Unknown parameter 'smackfsdef' [ 368.618416][T12442] binder: Unknown parameter 'smackfsdef' [ 368.625029][T12442] binder: Unknown parameter 'smackfsdef' [ 368.631303][T12442] binder: Unknown parameter 'smackfsdef' [ 368.637535][T12442] binder: Unknown parameter 'smackfsdef' [ 368.644375][T12442] binder: Unknown parameter 'smackfsdef' [ 368.648425][T12447] rust_binder: Error while translating object. [ 368.650133][T12447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 368.651187][T12442] binder: Unknown parameter 'smackfsdef' [ 368.656385][T12447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:925 [ 368.667732][T12442] binder: Unknown parameter 'smackfsdef' [ 368.675136][T12447] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 368.682305][T12442] binder: Unknown parameter 'smackfsdef' [ 368.687499][T12447] rust_binder: Read failure Err(EFAULT) in pid:925 [ 368.695760][T12442] binder: Unknown parameter 'smackfsdef' [ 368.714301][T12442] binder: Unknown parameter 'smackfsdef' [ 368.720399][ T611] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 368.723157][T12442] binder: Unknown parameter 'smackfsdef' [ 368.734413][T12442] binder: Unknown parameter 'smackfsdef' [ 368.741492][T12442] binder: Unknown parameter 'smackfsdef' [ 368.743080][ T611] usb 7-1: device descriptor read/8, error -71 [ 368.748519][T12442] binder: Unknown parameter 'smackfsdef' [ 368.759727][T12442] binder: Unknown parameter 'smackfsdef' [ 368.766363][T12442] binder: Unknown parameter 'smackfsdef' [ 368.772626][T12442] binder: Unknown parameter 'smackfsdef' [ 368.779097][T12442] binder: Unknown parameter 'smackfsdef' [ 368.786144][T12442] binder: Unknown parameter 'smackfsdef' [ 368.792447][T12442] binder: Unknown parameter 'smackfsdef' [ 368.798864][T12442] binder: Unknown parameter 'smackfsdef' [ 368.805907][T12442] binder: Unknown parameter 'smackfsdef' [ 368.812268][T12442] binder: Unknown parameter 'smackfsdef' [ 368.818493][T12442] binder: Unknown parameter 'smackfsdef' [ 368.825273][T12442] binder: Unknown parameter 'smackfsdef' [ 368.831630][T12442] binder: Unknown parameter 'smackfsdef' [ 368.837882][T12442] binder: Unknown parameter 'smackfsdef' [ 368.844756][T12442] binder: Unknown parameter 'smackfsdef' [ 368.851038][T12442] binder: Unknown parameter 'smackfsdef' [ 368.857267][T12442] binder: Unknown parameter 'smackfsdef' [ 368.864249][T12442] binder: Unknown parameter 'smackfsdef' [ 368.871224][T12442] binder: Unknown parameter 'smackfsdef' [ 368.877533][T12442] binder: Unknown parameter 'smackfsdef' [ 368.885322][T12442] binder: Unknown parameter 'smackfsdef' [ 368.892055][ T611] usb 7-1: device descriptor read/8, error -71 [ 369.000853][ T611] usb usb7-port1: unable to enumerate USB device [ 369.592584][T12459] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 369.592612][T12459] rust_binder: Error while translating object. [ 369.604575][T12459] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 369.611937][T12459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 369.631346][T12460] @: renamed from vlan0 (while UP) [ 369.750580][T12465] fuse: Bad value for 'fd' [ 370.089714][T12483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 370.105891][T12483] usb usb8: usbfs: process 12483 (syz.4.4007) did not claim interface 0 before use [ 370.305402][T12494] binder: Bad value for 'defcontext' [ 370.346730][T12497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.360523][T12497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.380405][ T391] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 370.540378][ T391] usb 7-1: Using ep0 maxpacket: 8 [ 370.552687][ T391] usb 7-1: config 0 has an invalid interface number: 73 but max is 0 [ 370.570372][ T391] usb 7-1: config 0 has no interface number 0 [ 370.576510][ T391] usb 7-1: too many endpoints for config 0 interface 73 altsetting 28: 107, using maximum allowed: 30 [ 370.604903][ T391] usb 7-1: config 0 interface 73 altsetting 28 has 0 endpoint descriptors, different from the interface descriptor's value: 107 [ 370.619441][T12502] binder: Unknown parameter 'defcontext01777777777777777777777' [ 370.629224][ T391] usb 7-1: config 0 interface 73 has no altsetting 0 [ 370.632367][T12503] binder: Unknown parameter 'defcontext01777777777777777777777' [ 370.637208][ T391] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 370.653394][ T391] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.671942][ T391] usb 7-1: config 0 descriptor?? [ 370.709013][T12505] fuse: Bad value for 'group_id' [ 370.714107][T12505] fuse: Bad value for 'group_id' [ 370.885713][T12485] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4008'. [ 370.896206][ T391] usb 7-1: string descriptor 0 read error: -32 [ 370.903411][ T391] asix 7-1:0.73 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 370.913582][ T391] asix 7-1:0.73: probe with driver asix failed with error -32 [ 371.237992][T12509] fuse: Unknown parameter '000000000000000000130x000000000000000d' [ 371.965052][T12532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 371.970439][T12532] rust_binder: Got transaction with invalid offset. [ 371.973757][T12535] fuse: Bad value for 'group_id' [ 371.988626][T12535] fuse: Bad value for 'group_id' [ 371.988823][T12532] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 372.000402][T12532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:983 [ 372.074225][ T2205] Bluetooth: hci0: Frame reassembly failed (-84) [ 372.161442][T12542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.179267][T12542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.744812][ T36] kauditd_printk_skb: 1715 callbacks suppressed [ 372.744830][ T36] audit: type=1400 audit(7003121473.407:41805): avc: denied { read write } for pid=8258 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.806487][ T36] audit: type=1400 audit(7003121473.407:41806): avc: denied { read write open } for pid=8258 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.871191][ T36] audit: type=1400 audit(7003121473.407:41807): avc: denied { ioctl } for pid=8258 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.902628][ T36] audit: type=1400 audit(7003121473.457:41808): avc: denied { write } for pid=12550 comm="syz.4.4030" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 372.949555][ T36] audit: type=1400 audit(7003121473.457:41809): avc: denied { write } for pid=12550 comm="syz.4.4030" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 373.008560][ T36] audit: type=1400 audit(7003121473.467:41810): avc: denied { read write } for pid=12550 comm="syz.4.4030" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 373.054725][ T36] audit: type=1400 audit(7003121473.467:41811): avc: denied { read write open } for pid=12550 comm="syz.4.4030" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 373.112228][ T36] audit: type=1400 audit(7003121473.507:41812): avc: denied { create } for pid=12550 comm="syz.4.4030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 373.149999][ T611] usb 7-1: USB disconnect, device number 24 [ 373.160380][ T36] audit: type=1400 audit(7003121473.507:41813): avc: denied { write } for pid=12550 comm="syz.4.4030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 373.190313][T12561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 373.192497][T12561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.202393][ T36] audit: type=1400 audit(7003121473.517:41814): avc: denied { name_bind } for pid=12550 comm="syz.4.4030" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 373.239161][T12561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.381643][T12568] fuse: Bad value for 'group_id' [ 373.386631][T12568] fuse: Bad value for 'group_id' [ 373.933675][T12587] overlay: Unknown parameter 'mounts' [ 374.040298][T12590] futex_wake_op: syz.6.4041 tries to shift op by -1; fix this program [ 374.081723][T12594] overlayfs: missing 'lowerdir' [ 374.102888][ T830] Bluetooth: hci0: command 0x1003 tx timeout [ 374.112111][T12594] binder: Bad value for 'stats' [ 374.117069][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 375.062427][T12622] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 375.062453][T12622] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 375.072627][T12622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:518 [ 375.313150][T12636] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 375.360866][T12636] rust_binder: Error while translating object. [ 375.367498][T12636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 375.373731][T12636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1008 [ 375.400474][ T511] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 375.568041][T12641] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 375.580390][ T511] usb 7-1: Using ep0 maxpacket: 16 [ 375.593768][ T511] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 375.606583][ T511] usb 7-1: config 0 interface 0 has no altsetting 0 [ 375.613215][ T511] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 375.622285][ T511] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.631307][ T511] usb 7-1: config 0 descriptor?? [ 375.638075][ T511] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 376.198888][T12643] kvm: Disabled LAPIC found during irq injection [ 376.442708][T12653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.452367][T12653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.412444][T12677] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer. [ 377.571309][T12680] SELinux: security_context_str_to_sid () failed with errno=-22 [ 377.766639][ T36] kauditd_printk_skb: 552 callbacks suppressed [ 377.766660][ T36] audit: type=1400 audit(7003121478.427:42367): avc: denied { read write } for pid=8258 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 377.825100][ T36] audit: type=1400 audit(7003121478.437:42368): avc: denied { read } for pid=12685 comm="syz.5.4078" dev="nsfs" ino=4026532471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 377.842347][T12689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.854089][ T36] audit: type=1400 audit(7003121478.437:42369): avc: denied { read open } for pid=12685 comm="syz.5.4078" path="net:[4026532471]" dev="nsfs" ino=4026532471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 377.864042][T12689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.885649][ T36] audit: type=1400 audit(7003121478.437:42370): avc: denied { create } for pid=12685 comm="syz.5.4078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 377.906663][ T36] audit: type=1400 audit(7003121478.437:42371): avc: denied { read } for pid=12685 comm="syz.5.4078" dev="nsfs" ino=4026532471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 377.913238][T12689] rust_binder: Write failure EINVAL in pid:1022 [ 377.947305][ T36] audit: type=1400 audit(7003121478.437:42372): avc: denied { read open } for pid=12685 comm="syz.5.4078" path="net:[4026532471]" dev="nsfs" ino=4026532471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 377.978685][ T36] audit: type=1400 audit(7003121478.437:42373): avc: denied { create } for pid=12685 comm="syz.5.4078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 378.000375][ T36] audit: type=1400 audit(7003121478.437:42374): avc: denied { bind } for pid=12685 comm="syz.5.4078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 378.021290][ T36] audit: type=1400 audit(7003121478.437:42375): avc: denied { listen } for pid=12685 comm="syz.5.4078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 378.042425][ T36] audit: type=1400 audit(7003121478.437:42376): avc: denied { read } for pid=12685 comm="syz.5.4078" name="msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 378.221714][ T611] usb 7-1: USB disconnect, device number 25 [ 378.384334][T12703] /dev/nullb0: Can't lookup blockdev [ 379.125000][T12719] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 4098) [ 379.125028][T12719] rust_binder: Error while translating object. [ 379.144361][T12719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 379.161268][T12719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:530 [ 379.558316][T12739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:540 [ 379.679903][T12746] fuse: Unknown parameter 'grou00000000000000000000' [ 379.787761][T12753] rust_binder: Write failure EINVAL in pid:270 [ 379.788231][T12753] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 379.830656][T12753] rust_binder: Write failure EINVAL in pid:270 [ 380.230040][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4109'. [ 380.264493][T12777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:556 [ 380.320397][ T611] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 380.328814][T12777] kvm: kvm [12776]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 380.362615][T12779] fuse: Unknown parameter 'grou00000000000000000000' [ 380.371206][T12777] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 380.380664][T12777] rust_binder: Write failure EINVAL in pid:556 [ 380.500394][ T611] usb 7-1: Using ep0 maxpacket: 16 [ 380.520920][T12783] rust_binder: Write failure EFAULT in pid:1042 [ 380.551329][ T611] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.588340][T12786] rust_binder: inc_ref_done called when no active inc_refs [ 380.588395][ T611] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.642538][T12788] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 380.646199][ T611] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 380.651942][T12788] rust_binder: validate_parent_fixup: new_min_offset=83, sg_entry.length=0 [ 380.668364][T12788] rust_binder: Error while translating object. [ 380.668635][ T611] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.685469][T12788] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 380.697735][T12788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1044 [ 380.721273][ T9976] ------------[ cut here ]------------ [ 380.732097][ T611] usb 7-1: config 0 descriptor?? [ 380.736138][ T9976] WARNING: CPU: 0 PID: 9976 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 380.749170][ T9976] Modules linked in: [ 380.753116][ T9976] CPU: 0 UID: 0 PID: 9976 Comm: syz-executor Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 380.766829][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 380.776946][ T9976] RIP: 0010:drop_nlink+0xce/0x110 [ 380.782034][ T9976] Code: 04 00 00 be 08 00 00 00 e8 7f 56 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e2 68 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 380.801693][ T9976] RSP: 0018:ffffc9000203fc60 EFLAGS: 00010293 [ 380.807791][ T9976] RAX: ffffffff81ed146e RBX: ffff888131ad8f50 RCX: ffff88812a49df00 [ 380.815869][ T9976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.823966][ T9976] RBP: ffffc9000203fc88 R08: 0000000000000003 R09: 0000000000000004 [ 380.831994][ T9976] R10: dffffc0000000000 R11: fffff52000407f7c R12: dffffc0000000000 [ 380.840006][ T9976] R13: 1ffff1102635b1f3 R14: ffff888131ad8f98 R15: 0000000000000000 [ 380.848156][ T9976] FS: 000055555ebe1500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 380.857279][ T9976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.863956][ T9976] CR2: 000055555ec044e8 CR3: 0000000149794000 CR4: 00000000003526b0 [ 380.871980][ T9976] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000800 [ 380.879982][ T9976] DR3: 0000000100000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 380.888013][ T9976] Call Trace: [ 380.891332][ T9976] [ 380.894287][ T9976] shmem_rmdir+0x5f/0x90 [ 380.898577][ T9976] vfs_rmdir+0x3dd/0x560 [ 380.902953][ T9976] incfs_kill_sb+0x109/0x230 [ 380.907570][ T9976] deactivate_locked_super+0xd5/0x2a0 [ 380.913034][ T9976] deactivate_super+0xb8/0xe0 [ 380.917731][ T9976] cleanup_mnt+0x3f1/0x480 [ 380.922218][ T9976] __cleanup_mnt+0x1d/0x40 [ 380.926666][ T9976] task_work_run+0x1e0/0x250 [ 380.931322][ T9976] ? __cfi_task_work_run+0x10/0x10 [ 380.936448][ T9976] ? __x64_sys_umount+0x126/0x170 [ 380.941537][ T9976] ? __cfi___x64_sys_umount+0x10/0x10 [ 380.946928][ T9976] ? __kasan_check_read+0x15/0x20 [ 380.952014][ T9976] resume_user_mode_work+0x36/0x50 [ 380.957151][ T9976] syscall_exit_to_user_mode+0x64/0xb0 [ 380.962675][ T9976] do_syscall_64+0x64/0xf0 [ 380.967117][ T9976] ? clear_bhb_loop+0x35/0x90 [ 380.971856][ T9976] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 380.977779][ T9976] RIP: 0033:0x7fadf938fc57 [ 380.982291][ T9976] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 381.001968][ T9976] RSP: 002b:00007ffe0b7cec98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 381.010451][ T9976] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fadf938fc57 [ 381.018446][ T9976] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0b7ced50 [ 381.026561][ T9976] RBP: 00007ffe0b7ced50 R08: 0000000000000000 R09: 0000000000000000 [ 381.034600][ T9976] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0b7cfde0 [ 381.042622][ T9976] R13: 00007fadf9410925 R14: 000000000005cf0f R15: 00007ffe0b7cfe20 [ 381.050639][ T9976] [ 381.053682][ T9976] ---[ end trace 0000000000000000 ]--- [ 381.071831][ T9976] ================================================================== [ 381.079451][ T611] usbhid 7-1:0.0: can't add hid device: -71 [ 381.079929][ T9976] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 381.092083][ T9976] Write of size 4 at addr 0000000000000168 by task syz-executor/9976 [ 381.100167][ T9976] [ 381.102512][ T9976] CPU: 0 UID: 0 PID: 9976 Comm: syz-executor Tainted: G W 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 381.102550][ T9976] Tainted: [W]=WARN [ 381.102557][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.102570][ T9976] Call Trace: [ 381.102577][ T9976] [ 381.102585][ T9976] __dump_stack+0x21/0x30 [ 381.102611][ T9976] dump_stack_lvl+0x10c/0x190 [ 381.102631][ T9976] ? __cfi_dump_stack_lvl+0x10/0x10 [ 381.102653][ T9976] print_report+0x3d/0x70 [ 381.102670][ T9976] kasan_report+0x163/0x1a0 [ 381.102694][ T9976] ? ihold+0x24/0x70 [ 381.102719][ T9976] ? _raw_spin_unlock+0x45/0x60 [ 381.102741][ T9976] ? ihold+0x24/0x70 [ 381.102763][ T9976] kasan_check_range+0x299/0x2a0 [ 381.102788][ T9976] __kasan_check_write+0x18/0x20 [ 381.102807][ T9976] ihold+0x24/0x70 [ 381.102828][ T9976] vfs_rmdir+0x26a/0x560 [ 381.102844][ T9976] incfs_kill_sb+0x109/0x230 [ 381.102863][ T9976] deactivate_locked_super+0xd5/0x2a0 [ 381.102883][ T9976] deactivate_super+0xb8/0xe0 [ 381.102901][ T9976] cleanup_mnt+0x3f1/0x480 [ 381.102927][ T9976] __cleanup_mnt+0x1d/0x40 [ 381.102952][ T9976] task_work_run+0x1e0/0x250 [ 381.102971][ T9976] ? __cfi_task_work_run+0x10/0x10 [ 381.102990][ T9976] ? __x64_sys_umount+0x126/0x170 [ 381.103009][ T9976] ? __cfi___x64_sys_umount+0x10/0x10 [ 381.103030][ T9976] ? __kasan_check_read+0x15/0x20 [ 381.103052][ T9976] resume_user_mode_work+0x36/0x50 [ 381.103071][ T9976] syscall_exit_to_user_mode+0x64/0xb0 [ 381.103093][ T9976] do_syscall_64+0x64/0xf0 [ 381.103116][ T9976] ? clear_bhb_loop+0x35/0x90 [ 381.103148][ T9976] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 381.103173][ T9976] RIP: 0033:0x7fadf938fc57 [ 381.103189][ T9976] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 381.103206][ T9976] RSP: 002b:00007ffe0b7cec98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 381.103226][ T9976] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fadf938fc57 [ 381.103240][ T9976] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0b7ced50 [ 381.103262][ T9976] RBP: 00007ffe0b7ced50 R08: 0000000000000000 R09: 0000000000000000 [ 381.103276][ T9976] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0b7cfde0 [ 381.103291][ T9976] R13: 00007fadf9410925 R14: 000000000005cf0f R15: 00007ffe0b7cfe20 [ 381.103308][ T9976] [ 381.103317][ T9976] ================================================================== [ 381.106542][ T611] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 381.164667][ T9976] Disabling lock debugging due to kernel taint [ 381.199575][ T611] usb 7-1: USB disconnect, device number 26 [ 381.247213][ T9976] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 381.377442][ T9976] #PF: supervisor write access in kernel mode [ 381.383498][ T9976] #PF: error_code(0x0002) - not-present page [ 381.389458][ T9976] PGD 80000001485d4067 P4D 80000001485d4067 PUD 0 [ 381.395961][ T9976] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 381.402015][ T9976] CPU: 0 UID: 0 PID: 9976 Comm: syz-executor Tainted: G B W 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 381.417191][ T9976] Tainted: [B]=BAD_PAGE, [W]=WARN [ 381.422191][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.432262][ T9976] RIP: 0010:ihold+0x2a/0x70 [ 381.436849][ T9976] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 cd 5f 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 3c 4d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 dd [ 381.456526][ T9976] RSP: 0018:ffffc9000203fca0 EFLAGS: 00010246 [ 381.462590][ T9976] RAX: ffff88812a49df00 RBX: 0000000000000000 RCX: ffff88812a49df00 [ 381.470539][ T9976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.478506][ T9976] RBP: ffffc9000203fcb0 R08: ffffffff88954947 R09: 1ffffffff112a928 [ 381.486456][ T9976] R10: dffffc0000000000 R11: fffffbfff112a929 R12: ffff888131ad8f5c [ 381.494406][ T9976] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 381.502365][ T9976] FS: 000055555ebe1500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 381.511281][ T9976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.517857][ T9976] CR2: 0000000000000168 CR3: 0000000149794000 CR4: 00000000003526b0 [ 381.525812][ T9976] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000800 [ 381.533762][ T9976] DR3: 0000000100000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 381.541712][ T9976] Call Trace: [ 381.544987][ T9976] [ 381.547896][ T9976] vfs_rmdir+0x26a/0x560 [ 381.552120][ T9976] incfs_kill_sb+0x109/0x230 [ 381.556686][ T9976] deactivate_locked_super+0xd5/0x2a0 [ 381.562046][ T9976] deactivate_super+0xb8/0xe0 [ 381.566744][ T9976] cleanup_mnt+0x3f1/0x480 [ 381.571189][ T9976] __cleanup_mnt+0x1d/0x40 [ 381.575635][ T9976] task_work_run+0x1e0/0x250 [ 381.580326][ T9976] ? __cfi_task_work_run+0x10/0x10 [ 381.585540][ T9976] ? __x64_sys_umount+0x126/0x170 [ 381.590584][ T9976] ? __cfi___x64_sys_umount+0x10/0x10 [ 381.595979][ T9976] ? __kasan_check_read+0x15/0x20 [ 381.601039][ T9976] resume_user_mode_work+0x36/0x50 [ 381.606174][ T9976] syscall_exit_to_user_mode+0x64/0xb0 [ 381.611648][ T9976] do_syscall_64+0x64/0xf0 [ 381.616067][ T9976] ? clear_bhb_loop+0x35/0x90 [ 381.620815][ T9976] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 381.626687][ T9976] RIP: 0033:0x7fadf938fc57 [ 381.631164][ T9976] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 381.650745][ T9976] RSP: 002b:00007ffe0b7cec98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 381.659166][ T9976] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fadf938fc57 [ 381.667115][ T9976] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0b7ced50 [ 381.675336][ T9976] RBP: 00007ffe0b7ced50 R08: 0000000000000000 R09: 0000000000000000 [ 381.683284][ T9976] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0b7cfde0 [ 381.691231][ T9976] R13: 00007fadf9410925 R14: 000000000005cf0f R15: 00007ffe0b7cfe20 [ 381.699187][ T9976] [ 381.702192][ T9976] Modules linked in: [ 381.708594][ T9976] CR2: 0000000000000168 [ 381.712745][ T9976] ---[ end trace 0000000000000000 ]--- [ 381.718186][ T9976] RIP: 0010:ihold+0x2a/0x70 [ 381.722685][ T9976] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 cd 5f 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 3c 4d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 dd [ 381.742302][ T9976] RSP: 0018:ffffc9000203fca0 EFLAGS: 00010246 [ 381.748359][ T9976] RAX: ffff88812a49df00 RBX: 0000000000000000 RCX: ffff88812a49df00 [ 381.756328][ T9976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.764283][ T9976] RBP: ffffc9000203fcb0 R08: ffffffff88954947 R09: 1ffffffff112a928 [ 381.772246][ T9976] R10: dffffc0000000000 R11: fffffbfff112a929 R12: ffff888131ad8f5c [ 381.780384][ T9976] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 381.788349][ T9976] FS: 000055555ebe1500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 381.797296][ T9976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.803873][ T9976] CR2: 0000000000000168 CR3: 0000000149794000 CR4: 00000000003526b0 [ 381.811840][ T9976] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000800 [ 381.819817][ T9976] DR3: 0000000100000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 381.827786][ T9976] Kernel panic - not syncing: Fatal exception [ 381.834165][ T9976] Kernel Offset: disabled [ 381.838511][ T9976] Rebooting in 86400 seconds..