last executing test programs: 6m14.71357433s ago: executing program 32 (id=119): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000000)=ANY=[@ANYBLOB="6d61783d3030303030303030303030303030303030303030303030fca70a6919f42d744bac2c00"]) 5m36.429554794s ago: executing program 33 (id=408): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000280)=[@decrefs={0x400c6314}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m18.903988958s ago: executing program 34 (id=1282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x88}}, 0x20000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000180)={0x50, 0xfffe, 0x0, {0x7}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x56, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea0683"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 3m42.624318602s ago: executing program 6 (id=1525): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)="ba403c8e31749740db80392adaca093b62517c3e47e8b9aa5379926a5842c247bbe7834c570e333f41e62b1d5a5481275af0fcfe5caea9ee2e4b5eff845b992d2758", 0x42}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="16cb4c", 0x3}], 0x1}}], 0x2, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 3m42.585124115s ago: executing program 6 (id=1527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) (async, rerun: 32) r1 = socket$inet6(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x1000800, 0x0, 0x3, 0x1, 0x0, 0x547}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x20) (async) setreuid(0xee00, 0x0) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) (async) r2 = getuid() (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000d00)={0x2, {{0xa, 0x2, 0x5, @mcast1}}, 0x0, 0x22, [{{0xa, 0x4e24, 0x1, @empty, 0x801}}, {{0xa, 0x4e22, 0x7fff, @empty, 0x9}}]}, 0x90) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=R0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(r5, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x49e8648f) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) (async) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x1, 0x9, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7, 0x80, 0x508, 0xffff1f32}}) (async, rerun: 32) close_range(r3, 0xffffffffffffffff, 0x0) (rerun: 32) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) setreuid(0xee00, r2) (async) setfsgid(0xee01) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$msr(r8, &(0x7f0000000280)=""/175, 0xaf) vmsplice(r9, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x3}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$TIOCL_GETSHIFTSTATE(r7, 0x541c, &(0x7f0000000000)={0x6, 0x4}) 3m42.503627162s ago: executing program 6 (id=1528): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0xc, 0x81}, 0x2404c840) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x6) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) sendmmsg$unix(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="d287e78df6efe09ef6656ed478fc752f833e4f63f29f8364491f855af24321d6a852d5d68efb5a38ae93dbf0bbbbccab5c1d6ffd87315d27520cb3eb3795b60a7fa9a073d86c750862368a167875de414964ada7fc19ccb263170870133a1582d8f84f6abc977c5d7ec7ab28b3b9b608d79ed297d1069f1ceb6db7e4f7931458c0e07a42feb8d464eeaefe38888e27d6bb14ff95e3dade22ec874c8ff05bb7233692dedd273c054762206da6c54251ccd2a6d42787", 0xb5}, {&(0x7f00000001c0)="80da24c631407e6f2c70d5f63da9044fa48d16a51c61412138acc7e593501bbfc350a3fb4509f89c9f0fd1ae5566fc901bd4de4929e2f7affd30f7644e351483f3d7034f74eb2c543baea3742a622555c1a1cec5c65760dbe876819f9a5ae25d2f6f752987fed729bf3fce3ad4f709c3a9472b8242a9d83638ab2355fbc0ef9948506db088f61a50f67e7cabaea6112e", 0x90}, {&(0x7f0000000280)="2fb40929de869ff6be3dec513b7b16c8fc1ba4a2f0cfdf2e625a482f4087f2149fa0838d9534e6833190df0f94ce06489d2743d0d29eae4e4ae1565136992d78e7da5b7c016846eed0cbcb7357cfd007042cfe241e33835c28ee43dfe21d03ed8c439cdc2701574ea9639b21aed2b2e898e5dace1bb861cf06ee7bf65f222dab16dcbaa8726dc524b51666da9cce8ec88f966f5c4378e02e530f10aca62576beaebb40af056965dbfefdf364d8b1a9ba75cf30abec9ef6fa53cdc5e5ef68a11d93d02eb3c81ecae7e50404", 0xcb}, {&(0x7f0000000380)="975ade8edd060d17dc18e447247f400a2cfb272761ef8d2e399e3e8fb2759fa83a82dd38756e27813f99f1dc2b512d76a94d9f3d1f95a16fd0b610ec75d97dba87730998fdbffc666d2cecad1e8a47a0e9eb41f991d4262e1f422101dead785f0d4d07e3c25936e70abd112deb17bd28aaf60359f3ee2df00dacd67b3e7ea4424c19af7d9166fbab09b9c63d", 0x8c}], 0x4}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="3f6e82e02b5942bbf642", 0xa}], 0x1, &(0x7f0000000540)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r2, r1, r1, r3, r0]}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x48, 0xc3c468b836484d64}}], 0x2, 0x800) socket$can_raw(0x1d, 0x3, 0x1) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f00000001c0)={0x0, 0x80000000}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb02163c, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x11) close_range(r1, 0xffffffffffffffff, 0x0) 3m42.483996654s ago: executing program 6 (id=1529): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_hsr\x00', 0x10) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) read$FUSE(r1, &(0x7f00000088c0)={0x2020}, 0x2020) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 3m42.412315899s ago: executing program 6 (id=1530): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x303fc2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3m42.383096292s ago: executing program 6 (id=1532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1008, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x400, @private1}}}, 0x32) getsockname(r3, 0x0, &(0x7f0000000000)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x434, 0x3f4, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x1, 0x1e, [0x3ff, 0xfffffffe, 0xc, 0x7fff, 0x37, 0x3, 0x1000, 0x73b, 0xffff0001, 0x3, 0xf4, 0x80000001, 0xffff, 0x66, 0x9, 0x6, 0x9e, 0x6, 0x2, 0x3, 0x6, 0x80000001, 0x1, 0x6, 0x4, 0xfd, 0x81, 0x8, 0x1, 0x8, 0xe, 0x1, 0x8, 0x8, 0x5, 0x0, 0xfff, 0x1, 0x40, 0x6, 0x3, 0x3ff, 0x4f000000, 0x4, 0x3, 0x14, 0x3ff, 0x7, 0x2, 0x7, 0x5c86, 0x0, 0x8, 0xe, 0x3, 0x91b4, 0x3, 0x9, 0x2, 0x8000, 0x7, 0x72fd, 0x1, 0x5], [0xf, 0x2, 0x3, 0xffff2d9e, 0x8, 0x80, 0xffffffe7, 0x0, 0x8, 0x400, 0x2, 0x5, 0x80000001, 0x0, 0x9, 0x4606fc77, 0x5, 0x94f, 0x0, 0x6, 0x4, 0x6, 0x1, 0x4, 0x25b, 0x2, 0x7, 0xd85, 0xd, 0x6, 0x4, 0x781, 0x9, 0x3, 0x7ff, 0x3, 0xffffffff, 0x4, 0x400, 0x9, 0x9, 0x0, 0x1, 0x4, 0x3, 0x3, 0x40, 0x3, 0x7, 0xa21e, 0x3, 0x3ff, 0x5, 0x0, 0x2, 0x4, 0x8, 0x3, 0xffffffff, 0xf1, 0x800008, 0x5, 0x0, 0xfffffff9], [0x2, 0x4, 0x582, 0x7, 0x7, 0x6, 0x5, 0x6, 0x665b8ba0, 0x4, 0xf2, 0x1, 0x5, 0x3, 0xfffffffd, 0x8001, 0x6, 0x1000, 0x7fffffff, 0x7, 0x2, 0x8, 0x6, 0x3, 0x1400000, 0x2, 0x6, 0xf3, 0xa, 0x8, 0x3, 0x180000, 0x4, 0x2, 0x3, 0x200, 0x10, 0x400, 0x7, 0x6, 0x4, 0x5, 0xd198, 0xaa, 0x4, 0x80, 0x0, 0x8, 0x9, 0x8, 0x1, 0x4, 0x6, 0x0, 0x401, 0x5, 0x9, 0xfb000000, 0x8, 0x0, 0x4, 0xfffffffa, 0x101, 0x4], [0x5, 0x7, 0x7, 0x2, 0x5, 0x9, 0x9, 0x2, 0x5, 0x7ff, 0xffff, 0x9, 0x200, 0x7ff, 0xffff, 0x9, 0x9, 0x800, 0x4, 0x4, 0xfffffff7, 0x1, 0x0, 0x7fff, 0xfff, 0x67, 0x156e, 0x4, 0x9, 0x3, 0x7, 0x9, 0xe, 0x34, 0x1, 0xc, 0x3e13, 0x7fffffff, 0xa04a, 0x8, 0x41e7, 0xffff7f22, 0x0, 0x5, 0x6, 0xa822, 0xcb2e, 0x2, 0x6, 0x1ff, 0x6, 0x80000000, 0x1, 0x0, 0x2, 0xf, 0x3, 0x6, 0x3, 0x9, 0x2, 0x1ff, 0x8, 0x5], 0x12, ['\\$],%@)^\x00', '*.gL+\x00', '\f+\x00']}, [""]}, 0x434}, 0x1, 0x0, 0x0, 0x20000}, 0x4080) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f00000002c0)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x5}, 0x1c, 0x0}, 0x810) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r1, &(0x7f0000000180)={0x18, 0x0, 0x0, {0xfffffffc}}, 0x18) write$FUSE_INIT(r7, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r8, 0x75e7f000) write$FUSE_INIT(r8, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x800008, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x10, 0x6}}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) 3m32.137017642s ago: executing program 35 (id=1602): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x9cc8bc4e8b6c0751) syz_usb_connect$cdc_ecm(0x3, 0xec, &(0x7f00000000c0)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x1, 0x1, 0x7b, 0xe0, 0x3a, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x8, 0x24, 0x6, 0x0, 0x0, "0f490c"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x3d, 0x7ff, 0x5, 0xe2}, [@mdlm_detail={0x7b, 0x24, 0x13, 0x38, "f72010aa28081ef235233d5360937927feda317816f9510c63d1fa39069eedecee49a4bb42bfabbe0f130d6b03dba8c37335e93164299df91603b8ce36893fb944a14a75899fe6aa1609ef98c8c5dc1150f36c37aab13bd94477e8bc72e1bf589da03187841207ba8e86fe1e3701c894650aaf9a6fa4ef"}, @mdlm={0x15, 0x24, 0x12, 0x1000}, @mbim={0xc, 0x24, 0x1b, 0x6e, 0xa, 0x8e, 0x50, 0x9, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0x2, 0x5a}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x35, 0x9f}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x7, 0x5, 0x1, 0xff, 0x3}, 0x1d, &(0x7f00000001c0)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x1, 0xf, 0x3, [0x0, 0x1015f30, 0xf]}]}}) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000480)={0x1, 0x100, 0x202, 0x8000, 0x1, 0x1}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x72e80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x57789000) 3m27.047363579s ago: executing program 36 (id=1532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1008, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x400, @private1}}}, 0x32) getsockname(r3, 0x0, &(0x7f0000000000)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x434, 0x3f4, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x1, 0x1e, [0x3ff, 0xfffffffe, 0xc, 0x7fff, 0x37, 0x3, 0x1000, 0x73b, 0xffff0001, 0x3, 0xf4, 0x80000001, 0xffff, 0x66, 0x9, 0x6, 0x9e, 0x6, 0x2, 0x3, 0x6, 0x80000001, 0x1, 0x6, 0x4, 0xfd, 0x81, 0x8, 0x1, 0x8, 0xe, 0x1, 0x8, 0x8, 0x5, 0x0, 0xfff, 0x1, 0x40, 0x6, 0x3, 0x3ff, 0x4f000000, 0x4, 0x3, 0x14, 0x3ff, 0x7, 0x2, 0x7, 0x5c86, 0x0, 0x8, 0xe, 0x3, 0x91b4, 0x3, 0x9, 0x2, 0x8000, 0x7, 0x72fd, 0x1, 0x5], [0xf, 0x2, 0x3, 0xffff2d9e, 0x8, 0x80, 0xffffffe7, 0x0, 0x8, 0x400, 0x2, 0x5, 0x80000001, 0x0, 0x9, 0x4606fc77, 0x5, 0x94f, 0x0, 0x6, 0x4, 0x6, 0x1, 0x4, 0x25b, 0x2, 0x7, 0xd85, 0xd, 0x6, 0x4, 0x781, 0x9, 0x3, 0x7ff, 0x3, 0xffffffff, 0x4, 0x400, 0x9, 0x9, 0x0, 0x1, 0x4, 0x3, 0x3, 0x40, 0x3, 0x7, 0xa21e, 0x3, 0x3ff, 0x5, 0x0, 0x2, 0x4, 0x8, 0x3, 0xffffffff, 0xf1, 0x800008, 0x5, 0x0, 0xfffffff9], [0x2, 0x4, 0x582, 0x7, 0x7, 0x6, 0x5, 0x6, 0x665b8ba0, 0x4, 0xf2, 0x1, 0x5, 0x3, 0xfffffffd, 0x8001, 0x6, 0x1000, 0x7fffffff, 0x7, 0x2, 0x8, 0x6, 0x3, 0x1400000, 0x2, 0x6, 0xf3, 0xa, 0x8, 0x3, 0x180000, 0x4, 0x2, 0x3, 0x200, 0x10, 0x400, 0x7, 0x6, 0x4, 0x5, 0xd198, 0xaa, 0x4, 0x80, 0x0, 0x8, 0x9, 0x8, 0x1, 0x4, 0x6, 0x0, 0x401, 0x5, 0x9, 0xfb000000, 0x8, 0x0, 0x4, 0xfffffffa, 0x101, 0x4], [0x5, 0x7, 0x7, 0x2, 0x5, 0x9, 0x9, 0x2, 0x5, 0x7ff, 0xffff, 0x9, 0x200, 0x7ff, 0xffff, 0x9, 0x9, 0x800, 0x4, 0x4, 0xfffffff7, 0x1, 0x0, 0x7fff, 0xfff, 0x67, 0x156e, 0x4, 0x9, 0x3, 0x7, 0x9, 0xe, 0x34, 0x1, 0xc, 0x3e13, 0x7fffffff, 0xa04a, 0x8, 0x41e7, 0xffff7f22, 0x0, 0x5, 0x6, 0xa822, 0xcb2e, 0x2, 0x6, 0x1ff, 0x6, 0x80000000, 0x1, 0x0, 0x2, 0xf, 0x3, 0x6, 0x3, 0x9, 0x2, 0x1ff, 0x8, 0x5], 0x12, ['\\$],%@)^\x00', '*.gL+\x00', '\f+\x00']}, [""]}, 0x434}, 0x1, 0x0, 0x0, 0x20000}, 0x4080) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f00000002c0)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x5}, 0x1c, 0x0}, 0x810) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r1, &(0x7f0000000180)={0x18, 0x0, 0x0, {0xfffffffc}}, 0x18) write$FUSE_INIT(r7, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r8, 0x75e7f000) write$FUSE_INIT(r8, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x800008, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x10, 0x6}}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) 3m17.15563907s ago: executing program 2 (id=1734): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x4002a, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@random={'osx.', '\x00'}, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x8280, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, 0x0, 0x44) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0404ca1000000000010902240001000000000904000d0103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x2}], 0xfffffffffffffd45, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace(0x10, r4) 3m15.086925616s ago: executing program 2 (id=1758): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="10000000d1"], 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000001440)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000300)=[@enter_looper, @acquire={0x40046305, 0x3}, @decrefs={0x40046307, 0xffffffff}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x14a, 0x0, &(0x7f0000000ac0)="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"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 3m14.948210427s ago: executing program 2 (id=1760): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ec1306000000000000010102240500000000000000000001030002000921010000012205000905810300000c0000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20220ba405dd07655892e60c4bd4e5eb8f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$binfmt_aout(r3, &(0x7f0000000500)=ANY=[], 0xff2e) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="1300000065ffff00000000060039280e303030"], 0x13) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000006c0)=0x0) fcntl$lock(r5, 0x25, &(0x7f0000000740)={0x0, 0x4, 0x1000004003, 0x1000, r6}) pwritev2(r5, &(0x7f0000000300)=[{&(0x7f0000000200)="8f18287281945236a44892bf3d729a2327b7f78ac4a6b524366ed594d91b780adb46782074c1d3823a2fcc2919c8b08a06c6f9ff908271feb7389ee610fe92fe7f7b7b8d8a9d163b676de989fdae062adcba20fe44b95d63107f402a8d6c206d6cbdbe6255ac2de27db55dc9f4796ba7bd229d1e1b879624", 0x78}, {&(0x7f0000000080)="fa90b3ec", 0x4}, {&(0x7f0000000580)="8bbf31cd367b65aa9619e9bdb61c0ae644abb42076212fcea7bfc49d24f47c220f02cc6bc6d87be76eead81294dd59f9776bccf74242957ebd3a0c3f1c108c341b0fa218d827f9caa98bd371402a7f1d96a7851ab48491f6f4eb0c86b6124991d2b23c9a8ac4169c8b530f4592eb22af7ab65629c9572e0cce07207c1c764a3c836078a4b2e48aaf4cf27de87cfe5b55484e", 0x92}, {&(0x7f0000000380)="ba173d49d98a9f6ec08b795bddf2d3c553bf03c716d79bb3c719ad96c35caad2a76581b121b1c006ee876871e0087970ad09415b41840317", 0x38}], 0x4, 0x961b, 0x570, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003bc0)={0x54, 0x13, 0x403, 0x70bd2c, 0x25dfdbff, {0x18, 0xda, 0x5, 0x6, {0x4e24, 0x4e22, [0x8ae3, 0x5, 0x2000000, 0x6], [0x2182, 0xfffffff4, 0x3ff, 0x128f], 0x0, [0xffffffff, 0x7f]}, 0x8, 0x200}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, &(0x7f0000000080)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000680)=@x86={0x81, 0x5, 0x2, 0x0, 0x6, 0x9, 0x9, 0x5, 0x7, 0x7, 0x4, 0x4, 0x0, 0x78d, 0x2, 0x8, 0x52, 0x3, 0x81, '\x00', 0x10, 0x1}) 3m11.971902495s ago: executing program 2 (id=1769): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, 0xffffffffffffffff) ptrace$setregs(0xd, r2, 0x40000200000, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace(0x10, r3) r4 = socket$packet(0x11, 0x3, 0x300) setresuid(0xee01, 0xee00, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) (async) sendto$packet(r4, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) r7 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xacE\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf3\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r0, 0x409, 0x9) ftruncate(r7, 0xffff) (async) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) (async) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, 0x0) (async) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x10000000000000) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x10000000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="0f23080f3566660f38809909004d260faa26f3900f2c9a0e000f0f0f1d0f01dff30f00e3", 0x24}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="0f23080f3566660f38809909004d260faa26f3900f2c9a0e000f0f0f1d0f01dff30f00e3", 0x24}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x5}}, 0xd0, 0xcdf, &(0x7f0000000480)="0eecc0ed53b66049c4d6e0441847d310e3745762cd0fc51b3efce6291222a907d6f4b2058677ade722e31519016bfa84463512b09c22bb42283f1ac8e89a9999847a7af1a7914b64ec81557c56b7fd97d7035da9deeb51f498c3006834cf5f9bc7dedb7a12360ba77a9ebe8422d09ce56e3106b73f4fda1c68d54cb596ebe7067495713ea433d33db5d47d6d85440815041eea1d9c6b7b1efab900e685758c36da80bf07311837d8d1de37eed99e28cacc3f13f278b6f19ab8c57aa98405db04692f1579d38c32675ee0ec69e27cdbe1"}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) symlink(0x0, 0x0) (async) symlink(0x0, 0x0) 3m11.902544061s ago: executing program 2 (id=1770): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xffffff01, 0x10002, 0x4, 0x3, 0x1b, "48b4299abf3991c75ba90fd2ee13ed2ee2f419"}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee3, 0x9, 0x7ffd, 0x90, "9900010000000000008000"}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x2ffdfff, 0x0, 0x0, 0x1}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) mknodat(r4, &(0x7f0000000100)='./file1\x00', 0x80, 0x8) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000030000000000000800040001000000", 0x24) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x398cf814) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async) gettid() (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xffffff01, 0x10002, 0x4, 0x3, 0x1b, "48b4299abf3991c75ba90fd2ee13ed2ee2f419"}) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000026c0)=0x3d) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee3, 0x9, 0x7ffd, 0x90, "9900010000000000008000"}) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x2ffdfff, 0x0, 0x0, 0x1}, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) (async) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) (async) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async) mknodat(r4, &(0x7f0000000100)='./file1\x00', 0x80, 0x8) (async) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000030000000000000800040001000000", 0x24) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x398cf814) (async) 3m11.899645421s ago: executing program 2 (id=1771): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000540)='/dev\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc5\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bx\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xe4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc2\xb39\xe3\xb6\x886\xaa\x9e\xeeav\xe5A\xc2wF\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\xf4\x14U\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda\xf6{9\xff\x82\xb8\xc7}D\xa9Lb\xfa\x173\x93\x16\xbd\x8c\xd2E\xce*Z\x9ad\xc0\x06Ww?>\xbfi\x00\x00\x00\x00\x8bv\x95\xc43\xe9\x9fH\xcb\x83\x17\x93Q\xf1\x16\xf9\x16\x01U\xa3!BE\x05r\xd0\xbdX7^\x9f\xc2 \xe1,\xc7Z\xa2\x8f\x9dZ9\xab4-\x81F\a?\x96\x80V\x9c\xbc\xc3\x94\x18!\x88\t\xaf,<$y\x15\xac)~*\xef\xe75\x98%F\x13\xe6\x13\xf5\\I\x98\xf7\xf0Ch\x98\xec\xc9\xbf\x90Y\x8cA\x01\xb2\xb5\xcc\x929@\xb7\xb3\x81\x85Tl\x92\r\x02166\xec\xda\x8f\x13\x95\x0e\x11\xc4\x9f\xd1 \xd1\x1a\f\xd8%h\xec\xe2\x99[~\xe9\x1d.v\xd2\xa3n\x16\xca\xe1\x8brI\xee%\xfd\x18\xcf\xff}\xd6\xd5sA\xbfuLtQ\xae]\xb0\xcdT\x18q\x11W\x91\x85\xca*j\x10m\xc2\xcc\a\v\x9a\x9f=\xe2m\xc4\xc3y\xca\xc6cz\xd6c\x88\xa7\xddz\x18?oK\xc63p\xba\x87\x02T\xc0\a\xf5r\ri]w\\6T3\xdf\x985\xff\x17\xff\x11_$\x89J\xf9\xddF\x8e0d\x16\xe4\xdf\xc3\x04W\xff\x96F\x1b\x05\xcb>\xa1\x0f') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r5) syz_usb_connect(0x3, 0x16a, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x5a, 0xf, 0xff, 0x0, 0x4}, 0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB]}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000140)="66b9800000c066b9800000c00f326635010000000f306635002000000f300f790a66b9840a00000f32f264609a86171200660fc77228ea533cca0036670f009ae60000009a6e56a2000fc26b010766efbafc0c0f08", 0x55}], 0x1, 0x0, 0x0, 0x0) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000008c0)="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", 0xfc) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) ioctl(r4, 0x8, &(0x7f0000000240)="7b62688ccc2a1d8060496bd64bb660546eda3da0e0fdf26a78fffcda3202298f19e571929666881382b6a9f7e1b34e5d210d5f4b2bb0f16b7752dd8cc6775155d6ab3f731603607bc4a39cff479f7ecc8f931d03a0f97e80742bae7b0d6bd14702eb0994468404f2258368264ede510f35b73a05d49655105df2578f075ebf4629f34e20d844aa834cc8da3b0afb6290a4ffbee7c098962941c3fb51a942ab3193c2a659f610630b") mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000540)='/dev\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc5\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bx\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xe4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc2\xb39\xe3\xb6\x886\xaa\x9e\xeeav\xe5A\xc2wF\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\xf4\x14U\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda\xf6{9\xff\x82\xb8\xc7}D\xa9Lb\xfa\x173\x93\x16\xbd\x8c\xd2E\xce*Z\x9ad\xc0\x06Ww?>\xbfi\x00\x00\x00\x00\x8bv\x95\xc43\xe9\x9fH\xcb\x83\x17\x93Q\xf1\x16\xf9\x16\x01U\xa3!BE\x05r\xd0\xbdX7^\x9f\xc2 \xe1,\xc7Z\xa2\x8f\x9dZ9\xab4-\x81F\a?\x96\x80V\x9c\xbc\xc3\x94\x18!\x88\t\xaf,<$y\x15\xac)~*\xef\xe75\x98%F\x13\xe6\x13\xf5\\I\x98\xf7\xf0Ch\x98\xec\xc9\xbf\x90Y\x8cA\x01\xb2\xb5\xcc\x929@\xb7\xb3\x81\x85Tl\x92\r\x02166\xec\xda\x8f\x13\x95\x0e\x11\xc4\x9f\xd1 \xd1\x1a\f\xd8%h\xec\xe2\x99[~\xe9\x1d.v\xd2\xa3n\x16\xca\xe1\x8brI\xee%\xfd\x18\xcf\xff}\xd6\xd5sA\xbfuLtQ\xae]\xb0\xcdT\x18q\x11W\x91\x85\xca*j\x10m\xc2\xcc\a\v\x9a\x9f=\xe2m\xc4\xc3y\xca\xc6cz\xd6c\x88\xa7\xddz\x18?oK\xc63p\xba\x87\x02T\xc0\a\xf5r\ri]w\\6T3\xdf\x985\xff\x17\xff\x11_$\x89J\xf9\xddF\x8e0d\x16\xe4\xdf\xc3\x04W\xff\x96F\x1b\x05\xcb>\xa1\x0f') (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r5) (async) syz_usb_connect(0x3, 0x16a, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x5a, 0xf, 0xff, 0x0, 0x4}, 0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB]}) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000140)="66b9800000c066b9800000c00f326635010000000f306635002000000f300f790a66b9840a00000f32f264609a86171200660fc77228ea533cca0036670f009ae60000009a6e56a2000fc26b010766efbafc0c0f08", 0x55}], 0x1, 0x0, 0x0, 0x0) (async) socket(0x8000000010, 0x2, 0x0) (async) write(r6, &(0x7f00000008c0)="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", 0xfc) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) (async) ioctl(r4, 0x8, &(0x7f0000000240)="7b62688ccc2a1d8060496bd64bb660546eda3da0e0fdf26a78fffcda3202298f19e571929666881382b6a9f7e1b34e5d210d5f4b2bb0f16b7752dd8cc6775155d6ab3f731603607bc4a39cff479f7ecc8f931d03a0f97e80742bae7b0d6bd14702eb0994468404f2258368264ede510f35b73a05d49655105df2578f075ebf4629f34e20d844aa834cc8da3b0afb6290a4ffbee7c098962941c3fb51a942ab3193c2a659f610630b") (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) (async) 2m56.816244468s ago: executing program 37 (id=1771): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000540)='/dev\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc5\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bx\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xe4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc2\xb39\xe3\xb6\x886\xaa\x9e\xeeav\xe5A\xc2wF\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\xf4\x14U\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda\xf6{9\xff\x82\xb8\xc7}D\xa9Lb\xfa\x173\x93\x16\xbd\x8c\xd2E\xce*Z\x9ad\xc0\x06Ww?>\xbfi\x00\x00\x00\x00\x8bv\x95\xc43\xe9\x9fH\xcb\x83\x17\x93Q\xf1\x16\xf9\x16\x01U\xa3!BE\x05r\xd0\xbdX7^\x9f\xc2 \xe1,\xc7Z\xa2\x8f\x9dZ9\xab4-\x81F\a?\x96\x80V\x9c\xbc\xc3\x94\x18!\x88\t\xaf,<$y\x15\xac)~*\xef\xe75\x98%F\x13\xe6\x13\xf5\\I\x98\xf7\xf0Ch\x98\xec\xc9\xbf\x90Y\x8cA\x01\xb2\xb5\xcc\x929@\xb7\xb3\x81\x85Tl\x92\r\x02166\xec\xda\x8f\x13\x95\x0e\x11\xc4\x9f\xd1 \xd1\x1a\f\xd8%h\xec\xe2\x99[~\xe9\x1d.v\xd2\xa3n\x16\xca\xe1\x8brI\xee%\xfd\x18\xcf\xff}\xd6\xd5sA\xbfuLtQ\xae]\xb0\xcdT\x18q\x11W\x91\x85\xca*j\x10m\xc2\xcc\a\v\x9a\x9f=\xe2m\xc4\xc3y\xca\xc6cz\xd6c\x88\xa7\xddz\x18?oK\xc63p\xba\x87\x02T\xc0\a\xf5r\ri]w\\6T3\xdf\x985\xff\x17\xff\x11_$\x89J\xf9\xddF\x8e0d\x16\xe4\xdf\xc3\x04W\xff\x96F\x1b\x05\xcb>\xa1\x0f') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r5) syz_usb_connect(0x3, 0x16a, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x5a, 0xf, 0xff, 0x0, 0x4}, 0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB]}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000140)="66b9800000c066b9800000c00f326635010000000f306635002000000f300f790a66b9840a00000f32f264609a86171200660fc77228ea533cca0036670f009ae60000009a6e56a2000fc26b010766efbafc0c0f08", 0x55}], 0x1, 0x0, 0x0, 0x0) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000008c0)="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", 0xfc) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) ioctl(r4, 0x8, &(0x7f0000000240)="7b62688ccc2a1d8060496bd64bb660546eda3da0e0fdf26a78fffcda3202298f19e571929666881382b6a9f7e1b34e5d210d5f4b2bb0f16b7752dd8cc6775155d6ab3f731603607bc4a39cff479f7ecc8f931d03a0f97e80742bae7b0d6bd14702eb0994468404f2258368264ede510f35b73a05d49655105df2578f075ebf4629f34e20d844aa834cc8da3b0afb6290a4ffbee7c098962941c3fb51a942ab3193c2a659f610630b") mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000540)='/dev\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc5\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bx\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xe4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc2\xb39\xe3\xb6\x886\xaa\x9e\xeeav\xe5A\xc2wF\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\xf4\x14U\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda\xf6{9\xff\x82\xb8\xc7}D\xa9Lb\xfa\x173\x93\x16\xbd\x8c\xd2E\xce*Z\x9ad\xc0\x06Ww?>\xbfi\x00\x00\x00\x00\x8bv\x95\xc43\xe9\x9fH\xcb\x83\x17\x93Q\xf1\x16\xf9\x16\x01U\xa3!BE\x05r\xd0\xbdX7^\x9f\xc2 \xe1,\xc7Z\xa2\x8f\x9dZ9\xab4-\x81F\a?\x96\x80V\x9c\xbc\xc3\x94\x18!\x88\t\xaf,<$y\x15\xac)~*\xef\xe75\x98%F\x13\xe6\x13\xf5\\I\x98\xf7\xf0Ch\x98\xec\xc9\xbf\x90Y\x8cA\x01\xb2\xb5\xcc\x929@\xb7\xb3\x81\x85Tl\x92\r\x02166\xec\xda\x8f\x13\x95\x0e\x11\xc4\x9f\xd1 \xd1\x1a\f\xd8%h\xec\xe2\x99[~\xe9\x1d.v\xd2\xa3n\x16\xca\xe1\x8brI\xee%\xfd\x18\xcf\xff}\xd6\xd5sA\xbfuLtQ\xae]\xb0\xcdT\x18q\x11W\x91\x85\xca*j\x10m\xc2\xcc\a\v\x9a\x9f=\xe2m\xc4\xc3y\xca\xc6cz\xd6c\x88\xa7\xddz\x18?oK\xc63p\xba\x87\x02T\xc0\a\xf5r\ri]w\\6T3\xdf\x985\xff\x17\xff\x11_$\x89J\xf9\xddF\x8e0d\x16\xe4\xdf\xc3\x04W\xff\x96F\x1b\x05\xcb>\xa1\x0f') (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r5) (async) syz_usb_connect(0x3, 0x16a, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x5a, 0xf, 0xff, 0x0, 0x4}, 0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB]}) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000140)="66b9800000c066b9800000c00f326635010000000f306635002000000f300f790a66b9840a00000f32f264609a86171200660fc77228ea533cca0036670f009ae60000009a6e56a2000fc26b010766efbafc0c0f08", 0x55}], 0x1, 0x0, 0x0, 0x0) (async) socket(0x8000000010, 0x2, 0x0) (async) write(r6, &(0x7f00000008c0)="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", 0xfc) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) (async) ioctl(r4, 0x8, &(0x7f0000000240)="7b62688ccc2a1d8060496bd64bb660546eda3da0e0fdf26a78fffcda3202298f19e571929666881382b6a9f7e1b34e5d210d5f4b2bb0f16b7752dd8cc6775155d6ab3f731603607bc4a39cff479f7ecc8f931d03a0f97e80742bae7b0d6bd14702eb0994468404f2258368264ede510f35b73a05d49655105df2578f075ebf4629f34e20d844aa834cc8da3b0afb6290a4ffbee7c098962941c3fb51a942ab3193c2a659f610630b") (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) (async) 2m14.18535313s ago: executing program 3 (id=2359): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) (async) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bind$tipc(r3, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0xffb, 0x39, 0x1cc, 0x1001, 0x3}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 2m14.175799251s ago: executing program 3 (id=2360): creat(0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 2m14.161111892s ago: executing program 3 (id=2361): syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x28001) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141a03, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setuid(0xee01) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) connect$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x402}}, 0x10) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000000002) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x12, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f00000001c0)={0x0, 0x0, "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"}) sendmsg$IPCTNL_MSG_EXP_NEW(r6, 0x0, 0x24000840) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @local, 0x8}, 0x1c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet6_int(r8, 0x29, 0xb, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 2m14.096156188s ago: executing program 3 (id=2362): r0 = open(&(0x7f0000000000)='./file0\x00', 0x102, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) tee(r1, r0, 0xffffffffffffffff, 0x8) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002100)={0x50, 0x0, r2, {0x7, 0x2b, 0x7, 0x800000, 0x1d45, 0xb, 0xff, 0x8001, 0x0, 0x0, 0x8, 0xa2c}}, 0x50) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000002180), &(0x7f00000021c0)={0x0, 0xfb, 0xc7, 0xe, 0xb, "790a68b5edf4584fd6731b64dc5e3947", "68acb4d8cef7133ecf6f15f137a83040ab67058b395df70bdd3c8b0ccd9c102af39604d5f5acc5f1d2b45a8140cd12b195bef048dce064cd9a91190b84660ff8def768dd2bd7e910316d62b97e39ba39bdbf0bd0c5e8d45d762afde6590605cb67ecd9318b76a98ff14b0783e37fcce744c52447e507e6e90bf2cce8a0f3bee0b3caa16de14179a668a6370a6d0628729ebb51a8a3c9e701f73be7a434cf0808ca1bbc3a771fa21ec90282a438d1d5f1a60b"}, 0xc7, 0x2) sendmsg(r0, &(0x7f0000002680)={&(0x7f00000022c0)=@caif=@util={0x25, "24beb5d3c80014278de6eb6188ac8268"}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002340)="2c4f935cb0e80c5bdd03f5d6e2752e8e8714d0bb7a80d7da181e84b1bc51f7f5a09743bfa5daddf6895391afd33e29f3581ac875627c47f0a9cbd25589efb5210043f3ed94c8c6faaf787f5f830f3135a2b1745f99ead4a4756560af36062a8f730ff34ff0925e7fc1e9bf2a4a1feb5590581c7c67d3149ba893aed073afcde0f3b2bc539b60b948cfc3797b56fc95e72c77775bc33b2e2d2de640e521a6fcb207169f9f6d90c5db6aedb94b02813fc2e0c2543e75458a3d25f61d75297dd586124cdad916", 0xc5}], 0x1, &(0x7f0000002480)=[{0x90, 0x1, 0x0, "da567b98ba61a958e43ce2615363ff5513506da1cd72441ba2d70fa9f99beec6ef14f42e13aa35e50e3e0e831aaf79a98d8ddb72d250d97360818e497857322ec498379f21e3662aab6ec06acabb70a2b6404787f662f2f0a04e71b9400f4ce38afb43dec31801b12d3c8763df1678e28706328e89a62db8ef"}, {0x70, 0x114, 0xc, "f7a5100b635a8a2c9d2b3f15800b1991b4da38808035f729fce7a74068d29a26c51e6391d29ebd3d0cf54a5ee6536b17a89f081bdf0e8b5ab7478cf957c5250b4e8649f20cbfdac37c4c5170011f00e240c125efb8ae47c506e77c4df4"}, {0x48, 0x34c, 0x3, "0e44d257ab9efeff9e32014ea6590972eb2dc0530ce2f1414a52f5606720612d3ba7c57a5b367488b67e36e88a780368da4fb8675cf636"}, {0x60, 0x88, 0xfffffffa, "34fb3530a55ad347145b04b55e5281214deafe0f574140ad68ac4fa79240bb627b38d0344fb544b8a2b61e1dac944dadefc5b72bc488de194ad5ebf25b2be02ba06f6ef294173628961040d7054d"}, {0x48, 0x113, 0xf, "d91b3f99ea6f5be817ab16f0992a9d43712c2f7621cd3ae9a2c18437f2252cd5995c8c852bb986b26e71924f901e3d6d318ebe"}], 0x1f0}, 0x80) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000026c0)=0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000002700), &(0x7f0000002740), 0x2, 0x5) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000002780)={0x8, 0xf, 0x8001, 0x1, 0x6, "dda28073cdb031514797829bbfd9290d115f72", 0x2, 0x2}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000027c0)=0x10, 0x4) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002800), 0x22002, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000002840)={{0x7f, 0x45, 0x4c, 0x46, 0xf, 0x7, 0x5c, 0x8, 0x4, 0x2, 0x3e, 0x8, 0x177, 0x40, 0x27b, 0x3ff, 0x1, 0x38, 0x4, 0x401, 0xfff8, 0x8}, [{0x70000004, 0x5, 0x2, 0x3, 0x8, 0x4, 0x3, 0x3}, {0x5, 0x4, 0x6, 0x0, 0x3, 0x7, 0xc0, 0xb77}, {0x60000000, 0x401, 0xfffffffffffffffc, 0xffffffffffffffff, 0x81, 0x9, 0x0, 0x5}, {0x4, 0x6, 0x98, 0x2, 0x5, 0x3, 0x7fff, 0x10}], "e5f3ca30f1973c7bf9faf08ef98299e14135f91b9959d885ee5ef13a982c05058dcdfdddd17fcd70e9f0116cefbf43b01acd8684a15d86c5f6d07f54e731853fe90961bfbaedb2ca", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb68) r7 = memfd_secret(0x80000) sendmsg$AUDIT_TTY_SET(r7, &(0x7f0000003480)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x18, 0x3f9, 0x400, 0x70bd2b, 0x25dfdbfd, {0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40001) memfd_secret(0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000034c0)) writev(0xffffffffffffffff, &(0x7f0000003740)=[{&(0x7f0000003500)="d78f07edf952e0b724e103572d7240af17515c598226f6036450987548469eba7b07e1051488e36b74bcff69ee5b78b233f1ab90798f3a32599b7a635baab3ea28d8b894db7283e6974ed0526cbd331a64ffa42104cc7c72d681bbc9578852e83fcbc97bc4b3d2526a69d1414d478bff05b220a942ce8ab683f5a15fc728de0d5dae68c3cca686ccc990445d05ddea2bf8d9825d8799a61d42e45fabb6e757948c534db582706aabf5c5c9f2ffd926b801d5d3393070aae76cdd68dea77a25fd10d7", 0xc2}, {&(0x7f0000003600)="f0558ef607206abcc4fdec55c208bf1a4d5070382a627397d08f5dc061bf16733b2d97e521dfc4c9c8f0bbade066d5674842b8cb878c686a754d4ea1e0996a8e1c1cd7154ac4af68961ebf2ebff6d7bb7fca2869114520c408247376af010b25e305e871ec99c9", 0x67}, {&(0x7f0000003680)="f2bbedcdac610ee1124da99d8f2ede067505878d9bf79a560e93846c9547bbb4bc30d2a748746ca35892a7ade0e79e2fe288cce36673eb1a85fa2c5ad1d438824bad30aa0018ca3fa355846489827d9070f3cfe212407e4a84b073839be26009204356ca011da42c742abacbdd890ae378f9f5b753dc550a900e53504f6afa98716113d7ef130836617c7519b124841910c162948e26e23ab8495ce6cd942bf36459c9fe0888066d040e6f1c53cbd01e4c1e55ca1b7a57d5", 0xb8}], 0x3) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb, 0x36}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40055}, 0x40) setns(r7, 0x10000000) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f0000003880)) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000038c0)={0x1000, 0x7, 0x6, 0x3, 0x3, 0xb46d}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000003900)={0x80, 0x4, 0x8d9e, 0x8, 0x11, "0cd75cb099bdaeebbcadf573385013c18dcaae"}) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003a00)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2m14.095684988s ago: executing program 3 (id=2363): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000001, 0x2010, r0, 0x0) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x8000, 0x0, 0x8}, 0x18) (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x500, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0xa}, 0x18) (async) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xea7, 0xa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800090200ffe6000000000002"], 0x20}}, 0x0) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='vfat\x00', 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) fremovexattr(r5, &(0x7f00000033c0)=@known='system.posix_acl_access\x00') (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) (async) write(r2, &(0x7f0000002400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6798428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc000f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb68ec4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b330e7735bf1c7e0e26aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010", 0x1000) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x7, 0x10000, 0x0, 0x7f, 0x7, 0x9, 0xfff}, 0x1c) 2m14.094403488s ago: executing program 3 (id=2364): quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x801, 0x3a) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="660f594bd066b8fe000f00d80f01c2f40f01c8660f3841dac4e1296b07360f79c766baf80cb875d11180ef66bafc0cecb9800000c00f3235004000000f30", 0x3e}], 0x1, 0x2, &(0x7f00000000c0), 0x0) (async) r2 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0xc, @loopback, 0x4e20, 0x1, 'lblc\x00', 0x17, 0xffff, 0x6b}, {@rand_addr=0x64010102, 0x4e20, 0x4, 0x443ebc3b, 0x0, 0x80000000}}, 0x44) (async) socket(0x1e, 0x1, 0x2) (async) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) fstat(r3, &(0x7f00000001c0)) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000240)={0x0, r2, 0x1}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000280)={0x50002009}) (async) quotactl$Q_SYNC(0x9193750c02f1c158, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) r4 = pidfd_getfd(r1, r0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x720) (async) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1) (async) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000002c0)="652e0f20930f79d066b92e0300000f32b8ce008ee03e0f3809679f0f2110eaad00fb00baa100b0afee660f78c4fb810f01cf", 0x32}], 0x1, 0x90, &(0x7f0000000340)=[@cstype3={0x5, 0x9}, @cstype3={0x5, 0xe}], 0x2) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (async) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000380)) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000400)=0x2, 0x4) (async) sendmmsg(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000440)="6495ddbcd3fbaab3368c78ad0f97a3c2607776ca51e47f9457d5eb541c080ae14c885f7cd339bf682e36fe723e21f8300f7820f621da84d5843ec9daa8b0d82a6dec5ecd35ada3d12287084859e597ef789a46c4dc8b18ab62d97c2565bcea6cd2a825618d06a64ffba83a837d674f6337dbc037bcc236f8a5d278c6a0c366718fc87e90b900c29e8a8dbfcb9240d4f240e127ad0222edd7cb82e5a144", 0x9d}, {&(0x7f0000000500)="aba3cceef5c53199526850d641e38a7a9826bcb74c84ddf53f68ddfd559c2af81b022ad427afb27c694e77dd0ace8585ace2632fc3b8ccd053218380184db3186c1823cc77823bc22f64149ccff5899bdcb96acb4aa5a26a807f9b9ab609fc02f1871c418e9879df4c05fd40cc941a7bcadca2e58e769c82dd8531133ae41a08e4ebde40ad", 0x85}, {&(0x7f00000005c0)="ef3175f8ee4f9abd0ab3b134efbb9f3f34a80abe529cc8a228396fa711537c44e1cbf09de6a24263fd9166c52e4be52ae0ec8d740b5c93a1af4852c22e2093e1f722fbdbac2b78b653fac3a53d0725d67c43b8109586d601995ca926ebf5349528e8b42a9365bd99a5aae89107973df5368a148308a62d86806b781b5d26d4e6134cb3f61cb9ab3299d238b2b87d1f7da986a75e2c9b7e55906ce99f38859b72fbcdc1dc9e39334ad7ea477c1176aa32ce", 0xb1}, {&(0x7f0000000680)="68b3c99657ac3176b1ce6514324020aa9a2ffc479e3f482552cb9a37f17de1ff1ee9716f4f0b8e8812017936d655931d44d7548faea2c33343277c8042eb62eb31214d23e256f6df932a611e3b0d0e0fe4622f573420f3fb332a16ce637415c79ae9515db5811604664d293a816d99ff7e9d94918cdff733cd44a8533f624647aafd3fa6f9da4e3ac0d8ff1bb759999d0bae1ff3192612a4a6adb5ebb7e37718e4b70dc53fb37796dffc", 0xaa}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="530624", 0x3}, {&(0x7f0000001780)="f8e68dda275a30c31d46e49ee31a0195748baf30690209e101549110d868d4e4f49a1070625cb081ea6b505a5be900e896d35642395649f170121a47c5875d6f0384d124c0d22815e9d3b2f71e1a2d34eb7e07f5c386eb3805acd18ac13015af6dee7ea6cb0e61435fee3954e3f088ff501ca6367182de0f09eb97692a89fd1e24ff8ade0e41c3fae38f7cdbfac73937eb69b1a89cae540328933289f258c24066cb36464511c5bd0e25f958e2cf5b5d965a090a07e4aa37f7907a9814ce3f4923eb57dada0479d43e04b9490d5e1e4634e7faceb06b0825", 0xd8}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="0058ee293381", 0x6}, {&(0x7f00000028c0)="94762d54c33e8a142cc10c10717eb4baf979090b9bbeee33527b977099d9ea64df54790ad536b90377e2e76cf6672d77a929f6fdbef7124ad6cccf3f9a9fe6e17ffafabaacea00205aeb9ca1d1c0e9932757f33afb8328cbe004777283567c8c59c72e30ce77aec1bf7193e54a7184ebcda18d12844e8292ad655256625263cfb78f18e0514397437d6d9b036d800b9c54526b6be74cabc6b0eb28398684", 0x9e}], 0xa, &(0x7f0000002a40)=[{0xc0, 0x114, 0x5, "86d5d54e0e333e8cd53810a83d0c2fbefe34e9b976dc748e4cbf7ec3dc8545d73efd12f0b56a2b9598736cc4b93e2ffabe0b77b062591864ba97856f414d551f8f72173acc946def9c83fde7a770e0089973c71e61c51c87207362b8eea2acf3d67a67cb6c30d0ce1f379456cb9e1e6dfd05c9b2901833943d3a6974e84137c6eb22b6aaa84e1b2869758a0b79b4df25d126ea93b79767aeff62c3476ac7ccf277996d7f01f76d0318c3"}], 0xc0}}, {{&(0x7f0000002b00)=@isdn={0x22, 0x7, 0x6, 0x10}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002b80)="472cd96fee4c55e94ca770700d5368976b521d5ddbfad18233aa97fb1933086c06034b24fe850e9dd4852abcccf744d8704a6d1d01fa81e0bf3486f0ca636bfdfd5f64c0dff16a1cc539f72b9793bf6b30794730f84cdf9120787cc6d35caa13d555c9ee0b096414b8658d06ece6be53cdf1b42cad279c63fa816b55c757d21f9b39960b5325d738a83f43fbd895a40226bb53bbce172a1979c6d8a49e7152fa6b029fc4a0c81831daa38adbad08717f1d7470081c1b9cf79c5390e0576918271934edeaad7f056cf4585359c6d355aee5949f304a3bbfb21389f3e3a2b315", 0xdf}, {&(0x7f0000002c80)="1a9467d768c4a059f10073550e0b", 0xe}, {&(0x7f0000002cc0)="c1c6574d02b71101a75db23aeb6a4bf4a3caaf9baf3af890f38ba50670be9ba5e345240658", 0x25}, {&(0x7f0000002d00)="dc667480df4195481b1cd20c1b59ff7ad795b919eaec00fe06d0e8852ef8c021cc8d8de1d800c73ea71984234dc0c3acf87321e0f856c58e948f56a02bdc37ccdc750918ab38d2075ab547ce713e86cbd32826c079cb656ea93f4ea0a791260090746cf25aa7205d1f14fad26214e6a9a4db4b7113f230ed046e82cb7b683de9c9d0aee4b336654729f4debf6825a8", 0x8f}, {&(0x7f0000002dc0)="882bc9d7df90eb831f8cf4b7207ac9d9c0f926e9480a087c88df5536cb4d4eebcf197b803198a78132ee47b94a77e3cbdd0d224252833cb448236723f3918d5769d277734d953b07c98f56664c4cc87adb217b3ce54745f85bad18a1d67effac2765ca049de031dd332383f071bf7c16424faebedac40e59d02f800d4054600250083776a843487ddf1977e326f2f17102381be2590317cabe73d5238fac5552befdb3c297f52e54956ca04643b578147e00272430347ce1e43fecd24ca7da30dea084fd562fe25486c9021cd581e5063192c67d178a6d2e4d", 0xd9}, {&(0x7f0000002ec0)="bce2cd87b94462a4143e5e1a96da92979ad6740846496e7356f1ccf6d89e91b55f68805d9019142c7e954075d3", 0x2d}, {&(0x7f0000002f00)="a26f5933839b011fa0ce9bf4e833445a442666b09713c6189e75b73019ebdad7a12115a5beefb5b4173deccc586b9786fc46507870e034dd960e5153df619c2efb9730feaa643d791211360420fb6af9f128fad0eb5a3fefadee636195534a6c31b7d668c54e7ffef1878eb1e29f18dc43ca854f6cf034435d0a0e4a198342090024f61418fe3845913daa1fe6a4bad0d42666477f0e4d94081aca6e17c02be625360a088caa67ffb73ac0ddef44a698d636401d1befbfc2ca147aa0e73da11c62280e4eb0bde21946714bb461a1220296ac179e201c7ec67b1d5a55b37ce435", 0xe0}], 0x7}}, {{&(0x7f0000003080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43}}}, 0x80, &(0x7f0000003100), 0x0, &(0x7f0000003140)=[{0xe8, 0x113, 0xffff, "4b874445ae66ac75987ff3fd67668d490dea9590c56b5bd59bd3a2f1bae675be8ab1027bffc18146fc6016d1e1e5a11cab6e98d4d3d470c617fe5d23179925c0033013478745b3d171b829733b1d0afe94559015b28a74bb01baca124488f9b56aec40ea8916ba7fa2a58240cfb1979909c0a02a5963532796635d8e3387c699bf576e81a6369a8e7b60e6907185dbcd4474af3c0a061c9da14169fa4b32db4d12261c3061026424e3316d57ae05e0e817f30173341758534c836ccaad9986d86d4acf674ae270c22b5f57e8348b5c8fee2bced88548f488"}, {0xe0, 0x10c, 0xfffffffc, "889f74e1a4db2e571c54dc1f110fec50dd2add0bbca7c9950f63d0687dcc656282d6c7715c6cbc2afa3aa816162cd150466283e7927bca12b97a7ef1fa775bd60abd824d285d54170595ce24d4d8208c95139a97f54e43aa854538d76e12830d2a89333df023a7187250952f6536d69ff32729b40c04f4542b92dceba6f27d89d56ff6b1db6b98cd902be2feb1e584d71bc22a37cf25619437f4e6ee8365612c38b156a9a4a00743916bca9517ed9eb80aafa1cecb8c26c5240a849611d1656f1936fc2e166e8d9ba8"}], 0x1c8}}], 0x3, 0x40404c0) (async) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 1m59.07741766s ago: executing program 38 (id=2364): quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x801, 0x3a) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="660f594bd066b8fe000f00d80f01c2f40f01c8660f3841dac4e1296b07360f79c766baf80cb875d11180ef66bafc0cecb9800000c00f3235004000000f30", 0x3e}], 0x1, 0x2, &(0x7f00000000c0), 0x0) (async) r2 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0xc, @loopback, 0x4e20, 0x1, 'lblc\x00', 0x17, 0xffff, 0x6b}, {@rand_addr=0x64010102, 0x4e20, 0x4, 0x443ebc3b, 0x0, 0x80000000}}, 0x44) (async) socket(0x1e, 0x1, 0x2) (async) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) fstat(r3, &(0x7f00000001c0)) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000240)={0x0, r2, 0x1}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000280)={0x50002009}) (async) quotactl$Q_SYNC(0x9193750c02f1c158, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) r4 = pidfd_getfd(r1, r0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x720) (async) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1) (async) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000002c0)="652e0f20930f79d066b92e0300000f32b8ce008ee03e0f3809679f0f2110eaad00fb00baa100b0afee660f78c4fb810f01cf", 0x32}], 0x1, 0x90, &(0x7f0000000340)=[@cstype3={0x5, 0x9}, @cstype3={0x5, 0xe}], 0x2) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (async) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000380)) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000400)=0x2, 0x4) (async) sendmmsg(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000440)="6495ddbcd3fbaab3368c78ad0f97a3c2607776ca51e47f9457d5eb541c080ae14c885f7cd339bf682e36fe723e21f8300f7820f621da84d5843ec9daa8b0d82a6dec5ecd35ada3d12287084859e597ef789a46c4dc8b18ab62d97c2565bcea6cd2a825618d06a64ffba83a837d674f6337dbc037bcc236f8a5d278c6a0c366718fc87e90b900c29e8a8dbfcb9240d4f240e127ad0222edd7cb82e5a144", 0x9d}, {&(0x7f0000000500)="aba3cceef5c53199526850d641e38a7a9826bcb74c84ddf53f68ddfd559c2af81b022ad427afb27c694e77dd0ace8585ace2632fc3b8ccd053218380184db3186c1823cc77823bc22f64149ccff5899bdcb96acb4aa5a26a807f9b9ab609fc02f1871c418e9879df4c05fd40cc941a7bcadca2e58e769c82dd8531133ae41a08e4ebde40ad", 0x85}, {&(0x7f00000005c0)="ef3175f8ee4f9abd0ab3b134efbb9f3f34a80abe529cc8a228396fa711537c44e1cbf09de6a24263fd9166c52e4be52ae0ec8d740b5c93a1af4852c22e2093e1f722fbdbac2b78b653fac3a53d0725d67c43b8109586d601995ca926ebf5349528e8b42a9365bd99a5aae89107973df5368a148308a62d86806b781b5d26d4e6134cb3f61cb9ab3299d238b2b87d1f7da986a75e2c9b7e55906ce99f38859b72fbcdc1dc9e39334ad7ea477c1176aa32ce", 0xb1}, {&(0x7f0000000680)="68b3c99657ac3176b1ce6514324020aa9a2ffc479e3f482552cb9a37f17de1ff1ee9716f4f0b8e8812017936d655931d44d7548faea2c33343277c8042eb62eb31214d23e256f6df932a611e3b0d0e0fe4622f573420f3fb332a16ce637415c79ae9515db5811604664d293a816d99ff7e9d94918cdff733cd44a8533f624647aafd3fa6f9da4e3ac0d8ff1bb759999d0bae1ff3192612a4a6adb5ebb7e37718e4b70dc53fb37796dffc", 0xaa}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="530624", 0x3}, {&(0x7f0000001780)="f8e68dda275a30c31d46e49ee31a0195748baf30690209e101549110d868d4e4f49a1070625cb081ea6b505a5be900e896d35642395649f170121a47c5875d6f0384d124c0d22815e9d3b2f71e1a2d34eb7e07f5c386eb3805acd18ac13015af6dee7ea6cb0e61435fee3954e3f088ff501ca6367182de0f09eb97692a89fd1e24ff8ade0e41c3fae38f7cdbfac73937eb69b1a89cae540328933289f258c24066cb36464511c5bd0e25f958e2cf5b5d965a090a07e4aa37f7907a9814ce3f4923eb57dada0479d43e04b9490d5e1e4634e7faceb06b0825", 0xd8}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="0058ee293381", 0x6}, {&(0x7f00000028c0)="94762d54c33e8a142cc10c10717eb4baf979090b9bbeee33527b977099d9ea64df54790ad536b90377e2e76cf6672d77a929f6fdbef7124ad6cccf3f9a9fe6e17ffafabaacea00205aeb9ca1d1c0e9932757f33afb8328cbe004777283567c8c59c72e30ce77aec1bf7193e54a7184ebcda18d12844e8292ad655256625263cfb78f18e0514397437d6d9b036d800b9c54526b6be74cabc6b0eb28398684", 0x9e}], 0xa, &(0x7f0000002a40)=[{0xc0, 0x114, 0x5, "86d5d54e0e333e8cd53810a83d0c2fbefe34e9b976dc748e4cbf7ec3dc8545d73efd12f0b56a2b9598736cc4b93e2ffabe0b77b062591864ba97856f414d551f8f72173acc946def9c83fde7a770e0089973c71e61c51c87207362b8eea2acf3d67a67cb6c30d0ce1f379456cb9e1e6dfd05c9b2901833943d3a6974e84137c6eb22b6aaa84e1b2869758a0b79b4df25d126ea93b79767aeff62c3476ac7ccf277996d7f01f76d0318c3"}], 0xc0}}, {{&(0x7f0000002b00)=@isdn={0x22, 0x7, 0x6, 0x10}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002b80)="472cd96fee4c55e94ca770700d5368976b521d5ddbfad18233aa97fb1933086c06034b24fe850e9dd4852abcccf744d8704a6d1d01fa81e0bf3486f0ca636bfdfd5f64c0dff16a1cc539f72b9793bf6b30794730f84cdf9120787cc6d35caa13d555c9ee0b096414b8658d06ece6be53cdf1b42cad279c63fa816b55c757d21f9b39960b5325d738a83f43fbd895a40226bb53bbce172a1979c6d8a49e7152fa6b029fc4a0c81831daa38adbad08717f1d7470081c1b9cf79c5390e0576918271934edeaad7f056cf4585359c6d355aee5949f304a3bbfb21389f3e3a2b315", 0xdf}, {&(0x7f0000002c80)="1a9467d768c4a059f10073550e0b", 0xe}, {&(0x7f0000002cc0)="c1c6574d02b71101a75db23aeb6a4bf4a3caaf9baf3af890f38ba50670be9ba5e345240658", 0x25}, {&(0x7f0000002d00)="dc667480df4195481b1cd20c1b59ff7ad795b919eaec00fe06d0e8852ef8c021cc8d8de1d800c73ea71984234dc0c3acf87321e0f856c58e948f56a02bdc37ccdc750918ab38d2075ab547ce713e86cbd32826c079cb656ea93f4ea0a791260090746cf25aa7205d1f14fad26214e6a9a4db4b7113f230ed046e82cb7b683de9c9d0aee4b336654729f4debf6825a8", 0x8f}, {&(0x7f0000002dc0)="882bc9d7df90eb831f8cf4b7207ac9d9c0f926e9480a087c88df5536cb4d4eebcf197b803198a78132ee47b94a77e3cbdd0d224252833cb448236723f3918d5769d277734d953b07c98f56664c4cc87adb217b3ce54745f85bad18a1d67effac2765ca049de031dd332383f071bf7c16424faebedac40e59d02f800d4054600250083776a843487ddf1977e326f2f17102381be2590317cabe73d5238fac5552befdb3c297f52e54956ca04643b578147e00272430347ce1e43fecd24ca7da30dea084fd562fe25486c9021cd581e5063192c67d178a6d2e4d", 0xd9}, {&(0x7f0000002ec0)="bce2cd87b94462a4143e5e1a96da92979ad6740846496e7356f1ccf6d89e91b55f68805d9019142c7e954075d3", 0x2d}, {&(0x7f0000002f00)="a26f5933839b011fa0ce9bf4e833445a442666b09713c6189e75b73019ebdad7a12115a5beefb5b4173deccc586b9786fc46507870e034dd960e5153df619c2efb9730feaa643d791211360420fb6af9f128fad0eb5a3fefadee636195534a6c31b7d668c54e7ffef1878eb1e29f18dc43ca854f6cf034435d0a0e4a198342090024f61418fe3845913daa1fe6a4bad0d42666477f0e4d94081aca6e17c02be625360a088caa67ffb73ac0ddef44a698d636401d1befbfc2ca147aa0e73da11c62280e4eb0bde21946714bb461a1220296ac179e201c7ec67b1d5a55b37ce435", 0xe0}], 0x7}}, {{&(0x7f0000003080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43}}}, 0x80, &(0x7f0000003100), 0x0, &(0x7f0000003140)=[{0xe8, 0x113, 0xffff, "4b874445ae66ac75987ff3fd67668d490dea9590c56b5bd59bd3a2f1bae675be8ab1027bffc18146fc6016d1e1e5a11cab6e98d4d3d470c617fe5d23179925c0033013478745b3d171b829733b1d0afe94559015b28a74bb01baca124488f9b56aec40ea8916ba7fa2a58240cfb1979909c0a02a5963532796635d8e3387c699bf576e81a6369a8e7b60e6907185dbcd4474af3c0a061c9da14169fa4b32db4d12261c3061026424e3316d57ae05e0e817f30173341758534c836ccaad9986d86d4acf674ae270c22b5f57e8348b5c8fee2bced88548f488"}, {0xe0, 0x10c, 0xfffffffc, "889f74e1a4db2e571c54dc1f110fec50dd2add0bbca7c9950f63d0687dcc656282d6c7715c6cbc2afa3aa816162cd150466283e7927bca12b97a7ef1fa775bd60abd824d285d54170595ce24d4d8208c95139a97f54e43aa854538d76e12830d2a89333df023a7187250952f6536d69ff32729b40c04f4542b92dceba6f27d89d56ff6b1db6b98cd902be2feb1e584d71bc22a37cf25619437f4e6ee8365612c38b156a9a4a00743916bca9517ed9eb80aafa1cecb8c26c5240a849611d1656f1936fc2e166e8d9ba8"}], 0x1c8}}], 0x3, 0x40404c0) (async) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 1m26.797438084s ago: executing program 8 (id=2818): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000d081000418e00000004fcff", 0x58}], 0x1) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) r6 = socket(0x25, 0x1, 0xffffffff) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x8e54}, 0x10) write(r6, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) (async, rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) (async) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r9, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00220f00000057000000001772164fec95f516e679d829e24b138a77e3e0cbf6095cbebe5d7c28956b8f04bc46ff0fd9140a6378b071af723fb1596e44a62aaa0e631659d69511f53839e35ebb8f4fd2bf7deb9fce3442dd735af22618ca00f6d8829fe311fd25ceeec177e4852628489ab4c163070d21b55417159e0e2d29b0754505f3b2f0227f32c26d58e7b6926a4b583eee1c874ca55700fc303f15000c461c"], 0x0}, 0x0) (rerun: 64) close_range(r4, r8, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close$binfmt(r10) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r11 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_access(r11, &(0x7f00000003c0)={'system_u:object_r:sshd_var_run_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x8}, 0x49) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) 1m26.772076795s ago: executing program 8 (id=2819): r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000180)={0x50, 0x5, 0x9, {0x7}, {}, @rumble={0x3ff, 0x5}}) 1m26.048366103s ago: executing program 8 (id=2831): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xb) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x4, &(0x7f0000000080)=""/137, 0x89) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0xfb979a4a1dab8423, 0x46, 0x0, 0x1, 0x0, [{0x5, 0xc, 0xf, '\x00', 0x8}, {0xe, 0x6, 0xf9, '\x00', 0x5}, {0x5, 0x8, 0x9, '\x00', 0x5}, {0x9, 0x1, 0xc, '\x00', 0x7f}, {0xc, 0x5b, 0x6, '\x00', 0x8}, {0x0, 0x1, 0xff, '\x00', 0x8}, {0x2, 0x7, 0xf4, '\x00', 0x6}, {0x6, 0x5, 0x28, '\x00', 0xf6}, {0x0, 0xb, 0x8, '\x00', 0x2}, {0x5, 0xc, 0x0, '\x00', 0x7}, {0x3, 0x7, 0x5, '\x00', 0x7}, {0x7f, 0x3d, 0x1, '\x00', 0x1}, {0x0, 0x1, 0x7, '\x00', 0xf9}, {0x81, 0x1, 0x4d, '\x00', 0x2}, {0x81, 0x1, 0xa, '\x00', 0x4b}, {0x5, 0x10, 0xa, '\x00', 0x7}, {0x6, 0x6, 0x4, '\x00', 0x5}, {0x1, 0x7, 0x46, '\x00', 0x7}, {0x8, 0x6, 0x1, '\x00', 0xcd}, {0x7, 0x4, 0x81, '\x00', 0x8}, {0x1, 0x80, 0x4, '\x00', 0xd}, {0x8, 0xc0, 0x0, '\x00', 0x5}, {0x3, 0x8e, 0xc, '\x00', 0xf7}, {0x2, 0x4, 0xa, '\x00', 0xff}]}}) r2 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_control_io$uac1(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, 0x0) syz_usb_control_io(r2, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00030400000000031608"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x18680) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r7 = dup(r6) read$FUSE(r7, &(0x7f00000041c0)={0x2020}, 0x2020) lseek(r5, 0xffffffff9801dbc5, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) 1m25.514219216s ago: executing program 8 (id=2843): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) (async, rerun: 64) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') (async, rerun: 64) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x12, r2, 0x87a07000) socket$xdp(0x2c, 0x3, 0x0) 1m25.455297961s ago: executing program 8 (id=2845): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) r2 = dup(r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc814}, 0x40001) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 1m25.455050381s ago: executing program 8 (id=2846): quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'wg1\x00', 0x137}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m10.398070416s ago: executing program 39 (id=2846): quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'wg1\x00', 0x137}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 48.164088085s ago: executing program 1 (id=3177): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x40107447, 0xf0ff1f00000000) 48.097917391s ago: executing program 1 (id=3180): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x8, 0x55600518, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ab725c861b08395c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000226089f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076cf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd652b75951a20c100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000059000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x20000001, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x200, 0x81) syz_fuse_handle_req(r0, &(0x7f0000008280)="1c0bc426960940431745c08463be4468782390248d0318e62499a0a4c5d7a71210c6f84de12b3fcd02a38d5e7ce825dab44719f35ab1bdf4be92192fa7b73ee377ebbd57f2f81c32e41b3ee76cf6a27806a03cdc09307dbd8ba393f766892e652439a91b040495b67f281d1c12d14f232b5f2efee94faec6c8bf5467bb87297f92d0115acec8f275d5fd0662d1c782bc722428e637408b732b5fe6d6ea304de1b4e7abddc70c2c427395cfea7b270492aa4ea6f2f11237a04097de01cf09cca1727b8f1eb13b29856c8643da649d61beb61b2f974360190659775cd564c9c33729b3dee1ec3209de8d52f6fe3d20f216e68cc79b93a2d12ad768fa96d4c8afbca46ac54e7b9bb1ecd8e0326a64a3d06a9df7c2a4e69bc51b505eaaf375c26d042d15c4f17f749fd16fcfbda18b0664d6b1ff4d37b3fd1622ce385dfabcb89ecd0b8557ae43983c7a539eacf406d61b1a7223c2bc68040849c4740230699e2ddbd2e747b9b909cbb255aa55e119897b57b99989f39f35b0bedaf08e4d788cb8fd0e4f1aa737ab703904b303190150a1d293b2d41e7b14226d6701650b7670755bbea7e1940d6a447bae298ef889460ba84d52204a907c6c937199c741332699ecb69c28d26a38ca59e50f86582f0bd68c1f751f67c0e029ebe09bc640d3d11da602d5a2b27c9caf132d396440e10334335fd354de55e34cd8f495a4f360976d38aae1883a3798d7b5fa59704d02a4cccd9872815b63868d8e7ed701365e407bf82fd66537b020fe4271d18e1f505bacb85290e8ecdd1bbc500062b6a8187ea57e52b95e46bf741b402b65ac00a8eace11617712a13043345abf828eb9c9189f3726364959c5a9471f8f84f966eeae07a5fe620bd5bdd2eff04cf54f1ab9c09b8c1eb2e76b1fdf02b261674f0a359e666c4528437458f4a02ecb1de2abd13f3419bd5109c61697470688a6e8d20118e97cfbfa84eac48b27d01f4221f481b8ab30e1f66e254f2632ebbc8fb5da128249c44be59b112218ff92193a7742df588a695d30cfee2fb255fee9e6fd9807558d8fcb2bbcdaf2080fdb7214104e702ee5e91a0bb11cea8225bf6dc37f201a6429178651d37a4c6e39184cd85b3f57ce463f49289033968c0bfa14c2b166d3c0ff32145f6da997ca2758b9cea6f2e81493d66c3171d51fe6f94aa2f761f3c90b958c0a1954f2e8909ff3a826fb80c957a7737c27c58e3ce2300c3bf1ecf25c99833c2fe8db30f58bc5987d3a776f285cb334bbc2538b495da35fbf0997da211d964c8b6ce99a683602d1eabf620bc3d36b72f19cd6870d946ef3cd7812e981ed5aa73c800d72cb1fe10b7b8bd652712ef3bc6343b43ef4903d7d7a75233a7efc0f65c96bea0e5affe40cdc4bdd2e66ca805813658cd2bc925103451c547892802b1e1c314e4b035220bdff4ff274087cb14c37acc0c9453783be05000c99957cd7323c3b564198571697583505b246b350e0b4ae233db316c81e28d3308a4b2e5b65b468905013c078ec95da028437f1670208b611ea4547dd55921d0e88f61d47f2a9c10fc7b86bbfeedf47ebc18b37433f6d93548b8ac046994d1973fd25952440e5fe822815ca70afe33c274b33d892b213951f8b50f3cd37690c59c8cad51405c5a3af31a706aea4c176b2b059c69be905e9b2a90e84762d3797bf0af692e5cde9043e07ca42ef2e765b31db02202580dd86dad31b133e718f75f1c50178d3f21e6f187210e3808a73ca8fdcfa19892e17b0d60aed5cb146742b5512cccd37c58056dae4c75dc01d2128c825b7c79ae96f26f865e34a58a963e821f38df2f9ad47bb9785546d08a30026f58e5240adb929aa60a567cb42d2270d10173590789cc550c04555b2a9e1589f1510e3d597b8958357bf0369be61d293730adac580322dc49104f255225069a26c7fb6db0661fe5bddfa49de2a2db25f670526b44fc990400ea0fac3d89272a858cbcc6bd46d68763119b521c5857195a3fb0b320aa612803eb755774c870510ff42dc5dab81363778ce18a050519b236a7bbbee53a6035adc9b39ad781f54321889619e0562f4af937aeafb4e2a20624e8e75855d5468b9b6cf5ee1acbcab07e41a21b4ad8eb572fa61cfb44340940aa4b0fa9166149a014b3f40ef2e9c06d63719e6383f296257dee87936508e9633124913126ed66a7d98c384c456d435393b922280ae5cf0fbf98b1592ea82182460738b62a5772413b8baa44cd71e1e053c77e2b6e88b0251227cd7a7b6effead17a7910ff4b4e9e4ce5b122426beb0c4087c878b11b8deee8ed73b76142751763c01fc8d0d429c549c76515f768363b712aeb977950378b47dc1b7c2e20065a233a4f927d188d6f9c644d92e0d5b607419dbec7334135d236a84fe33cddfa51498f55f2450554246fe303ad78f309886e4f5b2fe2ec03957e5665c7f47c538c7303d1e85deea6076d8a9455baa326748ae8167083870ea884407c32c1815c905d0aef036ba723264a4a1687d5805b646bbfe77957a6cfe4daa5ac4b71d6534c5e02eabcc05292ea05fa82a6864c6eac70e146a38924c5d4450b4d7c336e64927ff3c0bf572cdcb096d0a6f961c5e4da8005b8d1490bd28fb1ea51756924c4a73180844197c69e2dc36eada98c4d717c6d3cf6f2bf864dae149b1a66acd8aa7d2b8956e803859747573e2444419154d46048e42a94637ecfdf9044193329d9174ce483e32135a5338f9d37460a43ba07bb3177991e0670c2eb9caae978fe0efd37ef4a06da562d7ef285cda2183368111944ed166864eb02040480e64054190ff8c0aa902c8bf0147f8e02a3512b96e9192fda9f2f3476091908dca0ae01bc70a43bab472ae4af129409a7f10b31e26c847ad0c9bb8f0aaaa33bc42b8cef42820c276ecca3c7dc6dae9e3083cd671984c4f41cdb02ef9d8c11b49a47992852939568399c88dfa051414af95837fe1ee2d4121f1b8842840c66a3dbeb3d6b068f159faedf3282abe733b5f9545f39823828cff408442dfc1c0c5af212a275b0b2a10e6e1dd0262e173a5ce76fc3e03c4e264da161ddd29546e0189742fc73239aeba8ff1e8206b4ba5b79e5019b250a3cdebb0fe27be15ac76b5d17a2a4fa2e8b72244266e45ca4bdb8acbeed55540a5f74f0680b225835065c664d3ee48d4adbe1290dcdfa923a34d9792a884e869f8a3ae46813f0540737e09afa20c36785ca2358c257b7bca4027d669bcd7654090e1e6302de9850c6e5cad3ecd4cef5832bfbea6d15df1fa37a9db6d93d1e9677b0d1575751a8b76d5ac4145634f020e39c98a6dc7ac9b8f70b06b61a44eabfacdd8bbbd8bd23977834a1bd7dbae9948e6bedc3157ab2bb78ce468d3bb17b88cf623efd1906860277768cdff16b2ab275e03b138cb46ad70802069ef1786f11123193e7b1e732a5fa632287c91ade2882ac31f70d089eba832c278711f918d14da3a0a47a381a54866694acef4e366fdc4bbd630ca7a90a1f2e2618f6a3f026769bb86926f1ed320ac958d3036bc5ffd125d8cbd86b90b9af9c4480aa8ec04961bb14d553a231695209c51d925da227addc6ebec78959a59796d527d104648d6f30fb9ae1d05e287f9f9f184014cb854130ed5869dd34b5dfb96b8885f5083716ac70e8f0d57aca11b78f1e9d299127a670817bf773dd98cbecd8c6b7a7608709fccc6345fbbf3fc20013e356c846a730411936f303a1c2aa0c3e49be88fccbf112e6be8cd0f9cd661c0a0aa8b890ce0adb89adc9bcce62701604cd53bec244473ad457ee8fa3f86329b690e68aa0b1b4a799dd843ac6e2f73bbe1beff118ed0b56be4102955b12c6e9d003724f641f6053434f73bccab63bba1c8e014e87b897f51ba17b40d5a5161b79182ba919a0e917aa1686f7181b4935163032c74bf23df7738a2db63e26008fb4dbd396f1e3d45d5403e3d5a8e613bd73ba2f3d82ac547c877ea1337aa46d02e3ecca85fe9308d1653e01d62d02d6283c5e059578c5d4c62145539c3569cc2c2fa8c77a825302f7d57ea6eb67a4fefb30a996eba020b1d154e99fe7d7e4d0ac77d2f78b0ee6412d458ecafda863423f76afa0dd1c5fa54eb41c158b5478b864e02b2e7d7e8ff7ecfd43c46bf0ad37f3c2d347c75f087edc22e10f72643bbd343a6af243efb5e0dfd1a0d2a8389b0379efd0e5c14a4d8f4053729aa7c23f27a8f92bd6c9859758f919d3cbc540c3e11d670bb4fdc82381af505c5609bf323cb89a1df92bf0fda8d3189865d627dda72cba6a908aba2be28d0f6c0db9ad128e7bbcdf4b10ffce9e7ffe8082cc70c1523816c6d4ec783f9774f1ce4bfe3a3f5cb85a52f8559d5ef811ef84265a4d89d2932bda80babc753ec14a8c2fff0837cc2efb3fb9cb9549fbad9209b0e455d50610acca2787b3e40e17cd2920d854c9aeb418c30749034e0d20901c72f98d6f7ba5c448d76c186e274cc8376f291627f2e157b6c46c526d9092a72de94a41243213fd662026b4952c68c5ee194f261264c7126ffce8fef588f0581a54ed1b3018960ae20252dae9b2ad4317ac91e80aab175d36992c788a9e987756764c7a7c4b55f2a7b4d38586ba3fa7a6b4c582a6efeb281fc455bbd30f1b4d1a19246c2f484175eddcbb7038287d2af72809de9b075dbda0f5314c7ed37c5a8396c4ac945e3c879cd053fdfb255cc10115eddf37ab223b890638fbd892dac4758b06b465e979365b91701e255403b35ad4fbff63954bbb4773aa6b958ce8d7c183480a516cd26f3e0705cdd3417f27cfcfef1a6664bafc8061197b9831522ba10ec9ce6877127e37f089f567ca949f415fedadfa725f929eded60f114f8c7aca1d9c2bec402f3f6d5c3d323723c1e80aba1ea41d5051ccb4d0a289b78cf1e77cd980e4150d9560a94bad19a0d6dde9f8022cc1ebdc8069027d01492c16f83c0e0554f53a3a11c70e13b58c2dd942b48cd1dab522d13b81112523537d73a7837c02a562caaaa2be7fd7236e3abf21fc4c9c8d50196372ac7831bc7151180a2e0daf5094d204e73e93724f7edbbf36fef53b6903c44d47686e5665fb56f44f208cc666a1b045123de076ce6c8d77e3372a7f3a38f12e73872f87927db6f87cac19310cd996805fb64bd23dd64e128c44e58b205a88cd19b1aa4ef6d45c433fffba8c30b06c9e7b71c16ce959131d332067af38f91b10c175768d8de8ed79ba18c59bad67708d9e3a23598b4b3de29a18aab915c3e81b4b5ee938e1773de4c5cb98ff1ff3ba2e0d2bf44c949687df5a2b08552e4a92d9166877f24efb16c166ea6ce18f9c4d81a0d9306e957f6068df3fab272b7ce81b91d88b7a76131cb080609dc7230ee746ce91a147d9b88fe64985acbb38b7d781bd12bb58d618e73b074c4129a7bd78af7e64aedb0ca6240e5b21da9f876b3ff9622dc7cfeaca1d64368d7541b5d55f2a3fff1d31ebeca5969be5d552490d819b6d31f23632916b98c50d404edb698132a46153eaf7ca96342363c4130f97e0f44e00bb8d1eaca9ca7d1febba27c4b8b554b691fe4cf1f9b9043115985b785b9ec9f4780a68b1ebedd1b8ab7e539ee284572d16f6abb34cf12d04fdb19b010cbc38e5adcdc510d826ba6babe2b37720ca7a7955eef6b4c8bd0c859b88197658651a8d9d1db82cd7d9fb0b29d21396b1a5474e5901e7a6c5ab60a84a5a8f8a0ead244fb8066da6cefce3994d375317cd075aff24b8acad46dea88b2abc7b305f4903837253c1914581ddb66f2daf4db56cf2665e686276efb5150f4e6dfb8399f90870e1b01438bd2c4a69273f84c19551c060417d4c18a35018c36f4ff6d8b68aab4124409569504d2a17f88ab503b83459ed1915946d409d851199cdaef4dd03df1c93105c58e2a062211324b7e19cc822e172fafbea6bd0b9724b44cdfc01f02db31cf7f9a3e638d991077c4a1bcd7dccba7b3676e639cf250c27e5a744cd660b86b4a96452bbb99d46360a8b21916c7284b7db941333546baff6cc4d4c344a7c24c84cb3430808acc701dc387614d3e6ebea7666cb3a0b0a62aa52db2ea7732abddbe6eac5207fc42643e7c1f007acd747993351ab9959058e5262fb3b2308664438163fea820caa318a3ab0356e6c64f7c016fa4960afacd60b8d683226dbc56a58ad53893856af81e0de0a49154ad248df773f74a18c5be59052ac7cdd372a4beac79058d923b0b69a825eee2f852c5c88fe09155f99d2d6d321329c9565471535ef3e8b9857d9d64b317b17944b788de7afb680673dc24cc0aa8ff7eafef5faa16dc5095e926e3eb3f12a1d1631ff3af4f8d49f4a822ebee34089dbb73aafbef0bdd7e28f0edc655b034f388761c76f61bc73fa96ef2d516945926c25df6d2e01c6883ddda074475a1e90f60189010e23154ebd0c1c39b26f5d449404dec85ee6433842b91bc3a5d10df1bda2fea031a477aa37b64d74c1d7def8cebc408285056e5429c243b4a17105da2bf5ad81cc332edb08979e8235c993a1089a88e9f2057833c2236baad6b82f1419e77e2a2e6c30542934a8fee9dc705808e6398a9a5f4d2dfe618525a92ce36a698438365f049764e73771aedb6305c2ae372308aeb04a9f4e972d504204827ef80987cba57da8562e30bd67284446c50510acbc5a4e0bd863aca196f97c556c2549ab6f3767fd7668697765cd7ebad9e097b183137b8a6234ec649a2749a85432001117b8d4952b28701410662309f82c3c668e5a7fce0556ab0910307611273f3448c0e0190db0e41e9712bf9c181a92f62f4c1df61cb924e5d5bd413ea9790211c19943956d396211de27eb8b8852bf13be7554eb08da55f15393bacc62f08a3b2ec53a609971977e2df3ab7dce521e7671c25a18e671e30144659411f209b5dc8164d4687c437ddd2dde5529834dcb9d122bf61547057498f8cf32d19e706fb5cd7123cda0e8b7477703781c181e9d71ea7c6e654471f6f3d1a32916234b311a9c2ac8b5aa93fffe44036bcf7cb4a5c3dee21442d1219e74d04f58064e8fea4ff2f59bd17d7079e00897274c18d2495c63e74a0f08564f8c2a2df05fdd98f965b41e0c1174afb1cecf4b6d587c34e99757264da81310c38059ea6ba7ae119c67b4e475fa264e6c946d45d0daf619023e3a33724dee170f867cc5d6b0c63520d4f56a4116daabf3a714949091b885203cc1809a017d4fb860ee4372fedac0da20eb1de7116f0371351ea4fcf05edf2669a84cd700e8d74f47f2754dca0eb453a7778fe56f57a37dff4b06d4f156961e94a4d05b2790bf0c9990d3af632b30f0ca4d53d07dbf8ecbc21dcaa711ca6d2ca03852868221caab0b0c18847df644144af3a6af8d404d099576176cccc72be5b9f49e3040e97cc76ba91abb8ae396ac13fdfd4e54a6fa663773ca1bc85e577613da8d44d90f6be1ff05b1b40aa682567192b2ebd173ef8db13af59106228bd02c6e52ce56b0c336df2f014fefd7744e71630c93e5fe314170e7723ea27cb33249240f3281d289fb1e3b56b236471b62adad71ab6fb4467086fc3a44819aa6cce25808d5cb790f9868313bde48e5ea8531447a652f2c95bfcc8154767ce6f70d30bf358db516c5ae7a555f1b1e279e036f2a8865d4c1dce5e66aa21165e4a1ba72f3957602287c9953ac8c357e6a68a7e03df875b85102d0dab18c6f37b5ea54af4fa23ee95805701f55c8870a0254a85b7572b31ff3c948d8feb78642c014ca860d4dbf960f334e5e0b1a296ec68d08672ed906ac846759f539fe343ec8af23ce4fe402955a1b836ef6b69bba38ce0d4394fe5ae5c1b6b359028dcddc29340440fe012830536ad36f54641bb44153966c57371878faa0b17ae28ad0bca47d481d53875f75179cb621b03f887d2256f3353ecfe0aff24c7a03a56292db088077c684e770a3c5f3d29ab4ec9a122a941c80f0642a5a6b3ade57a3ae845a8ddf71ec579212784fe02619b6ed0c149e836eb225353fa403835a1bb0263a112729cc3da29cc653fbc16362ac3162d79b0576afdd34bc50ae1c23adf84d1dedf38aa56970c7f9e3081973bf2e247b3a08901b3fbd26b3adfcc94a8eb442c8e5d938be50a85c83abf743013b5e4c81950723bc3205f2bd17397d329954d00b8004e521bd4789f0a76b90f0fac8e9616f7fb97971121061c21415ed9129adc86627657e45961b808ca06cc1cf71970bc4103d7f07f7ad8e787d5d005976c120d2e0270d9b0a8777f1e5b21c5a859e05b4435081361a91dbf66f7dd429fbdc07d6d4a87addc273a8e01be44b8fb5597d495d5ef20a8970c8e48343a51d9045e2bc9dfab07ae3cecadb2da219fd58f39e5bdecc50e4e8fb8810b981611d9be58f78c7d0cc92c167b7123dfe919562625c713c89c779af4e0c7aaa7c585facf0b2fd8e67f7deb8b3003560368464e9c69603c888cbf9e3d5f72688c7e6051394a1623105d0ca753adbca63ab33afdddf50e083ec97e8d91e314578ed296bed6fb26636b196afd78bf4d583d2c0ef158a5e65f8bcc55fb5bd3251aa3c7ba27728211749d458b9135109b9d784253369b0a7dabadfb0e3b8493b8445f945c07707d9cbd8dab38c55a7339dabcbab0b63903ff75ff88e3c6401340c694fa74658c9dcde63771ed12a2d373611f2dccae0879630a4e1ec1fdc1d596aa6df3d5e0d8325967d519ff00bb1b11c5f66a30971ac0a2400246717b1fc37b58bef2cfc7839a042d916e9a46c4860afbd6fb3115d1462b1cfcb05fb62a207b95ea80236f8053d64f1b4505c511ff1c27e8d070d3c3702dd819af8e842e31d6b603e9e38037e2113e34a75139c065e3706bed19ce21fa93fe5afb8060fb4eedf5dcdb6f3c607f0881a502a4a85af622d16ec4fd59d40475d6bad6173e483dca2f1a770b92c336851f09e263627bfa04a7b2deb99c6f26229b7551405dfc6fef6732212e98632968103692059404be532c74724940cf89ce0ff851cc98f02ce7d0aee550feb6f2034dc71b5c5b664a89f9d5a3a703fba295c87dce830e18bef4b5bff940678a8edbda61327723b5caa09d7689ebee5094745d3fc69879d9a3a3e795fb029daa28efa5b1dbf619f39fe2d77a849b29a8dedf3a35a5cf446483ed02d8199aefd54eb375a4a98c87f0b92239daa37b790654e9ab3f3bee9dd2a048516139aa7532ee3a0d84215dca70dce4b1d7a3bf72ba1c9ffe0342f6e1f142717c867cc6d7271887100a242796dc6c71cddff53195622892d11e1c9d998922a0c996f3becd6504dd5b5638c2a36e4b93ce9761c6a8fb23730eabc980a1c1ed629025122ff2e6854932f882f8940bb916291b6c1f0c8e7131a6dab51f97771816e1ff0a30203cf6ec3929634e44583d8424fdbcd7a8a39d518f1a1d16b72f8b652cc18fca1a850d17320e0860b81fb45b6df7132fdb71083988d5706efbb66d0eff31d3915b6ced510209788bf3ec137e5fa246b23ca1a99def2d94a2362c346576d2efe928c675c516ac23b77217d7e50c30a5c8a3683959029365a64e5d86638f2daf8454ab60bcbfc53e3caab9e4653ebc92d1c536d52e3d53f59d7d8eec34a2a4a76b420cbf49316c9d89ba68fb3d4877b891971e533584c06ada51b758025c4d0365b1e93877ad1724e2af98a549889a06c7823d93ddf70ae4bcf0d4450197b87ae1fd8b0d62a7b5fd024107a45dcd7d3ee150ed7a83a42d78e2f4e2f9aff3048aa8808b96f3d6a97e5e798d99ea84a6fd640524b1cda71040a19782236d9f9c094e9adf28bc5b717d7f91b23333170a7a2c3a40a8a88c834f665d270e1c8d8f26ab9305da18701adb0473ba0a9a83727a1361e53afc4a53d5117b1fd4e32c45f245692ea5f7650a89f00881b52e3b197af2e5cb5c3d42e52f31cf300c8ca505700c52314413ba350b885c18fd23da19199ed4e920bdfb855eb8164d5ccbfb3abe2f7bed257ae019490f901c70c4af263fd01321ebf97fd63ce2ed3e56fe166211a866e6d2c8d92e4df2cb0ada92ddffc97c6c05d3e4b7e905c1b44fe0f6aac2457bfa7078a0621868af2dccb8f6d93b77ec9c192b0b65eaacdff4847820e44943160869758a8ec9550fbf6154c78ee836200ba81e6811f24617e79b2e63807865cac90a010c23e0d2e40fe216f2040062b24abd52366824f21f417f14c3582a3a6c13bf8adaa10e7ce372173e3737f9ae323a053681f2263a727b8cd0eb9a8ea39a5057d27425ada2196ab9a4f9e1e81d9be8068034118221411f94e6e1efcae49478f2e28e4c4b45e750838c7984b8354b7e5a6bcde92aa4073fca27fd55adaa740ac23a22c6741052a529cbbc6e41edfad0258b15a775bb803bc582e6969e0f679788e602a6a28daef9c423622ebb2ab511a03fd45c3fd59b4f526e69bf8d831e28ccc192aaf526af7b98b41fb23d930ab2cf9fb5f357b6e53d19015b9a80a6b9f95b635d7703736647efc2c0989ddbdb345c9ef94bf9a4a7c61763b014914ee8094420cb7f35d4f5b08ce5b7fd873fe7085ce8f817079cc2b954e4adaa7fe2603d571ffaec66263326e5dce240970b8b5a8d432e0819f171c66bc6313cc2a22fbed0f80d2a7184b4001576559298f2a9bf01247a84664f399b8d264496ea37b77a11c3dba58f01b3f352c7feec69f71ed4209a6e129bb2a20f5f9f1909ab64c8515873dce7c52f17c14965aa6fd0c10b5a44be85759c868c72790df70261865628751df01f3165c301f1f3bd001090f432f3c629e7d5d45ddf0551c9689ec77ce655b3f90967c731b44d764883d92b5807488abd1808ad3dfdd764af5a716d0ff8d7497fcf3d664701aeddb081da51b9dbe555e333b3e560a59deed823aa4542c10724782799eb6fb2a0a941b0de0ebaeedd29d7b585f78944918390794203395881fd4a117fb7ca8f724bbde8216c7f7a696385e498451bb79f06c12c84ad14f4cf18d2f75e29b0d21a33541a73e2aed8dc39090070896b502e78f7cdf763bcb3c10e475a574a5f1bb1802b45f99d8175cd482cff97af423208151f2827d60ade5efb3b7d8f7f24b94e97d713b8dd9ece87d966022237aaa392350038126a11622cb8e43318b5f0451773efdf1ffd6f5da8aa2e7341738457e8d3e288e4a409e7158212742cbd25e16b7fd5829eea46d752229d24ae6e07fbdb4acbf62d4e361a426a5132295b5267c893d3f1476b3e3484edf1f58abda20c8494744e9142e842c1e7fc86c162df25c9001c934d5f56e200db80b7fc353bc2200a69ce34fd3686af6fd3ccdc357222f9b036cd0c4db509f737f1a2c865f5e391cde63e8edb66dbddc6da8957ff8d0b7a609f5e075fe27093c963cb9c05f0c836cb48e6685becf2f8a8b83ed56539f835e5767e0dde6b199bba264ff71a04b4005f2aaa2759dad995c7349226cbd5280fea56b634b23098218d04556f014590807fd399b6e79c6fc69504d786d638c019e8c7982bbb2a1387a73d4b8251517e6c5b09da17d6788021844fbe75f467d71fe6bf4b7f037929828494ae27cfcd8581858880e6673b9e4b2f0a6253c530506186ba9bb739a87bd9c7e0edb8b5cdcc75c09535789d94b451750d235a4ebf94", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x18, 0xfffffffffffffffe, 0x2, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 47.528204387s ago: executing program 1 (id=3182): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statfs(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 47.320248803s ago: executing program 1 (id=3185): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) setuid(0xee01) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) 47.080120492s ago: executing program 1 (id=3189): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 47.035728676s ago: executing program 1 (id=3190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) 32.000013489s ago: executing program 40 (id=3190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) 19.389931098s ago: executing program 0 (id=3405): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x1, 0x0, 0x0, 0x31, 0x1, 0x10cf, 0x5df, 0x8b, 0x2, 0x3, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000c80)={0x1, &(0x7f0000001040)=[{@fixed}]}) 19.312270235s ago: executing program 0 (id=3406): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, {0xfffffffffffffffe}, 0x9, 0x80000000, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 19.312089695s ago: executing program 0 (id=3407): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 19.311986935s ago: executing program 0 (id=3408): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x21a501b, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x8) 19.297936546s ago: executing program 0 (id=3409): socket$inet(0x2, 0x80000, 0xfffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 19.133181769s ago: executing program 0 (id=3410): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x64, r3, 0x201, 0xfffffffc, 0x25dfdbfd, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x64}, 0x8, 0x3000000000002}, 0x0) 18.906782307s ago: executing program 41 (id=3410): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x64, r3, 0x201, 0xfffffffc, 0x25dfdbfd, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x64}, 0x8, 0x3000000000002}, 0x0) 3.617462911s ago: executing program 7 (id=3575): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f80000001a0007000800000000000000ff0200000000000000000000000000b6e0000002000000000000000000000000ffff0000fffe00000000000033000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0a010101000000000000000000000000000004d32b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000020000000000005000000000000000000000000000000c061771a000000007f00000000000000000000000a00004f70000000000000000800180009000000"], 0xf8}}, 0x4000040) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="88010000276d34925499e558a54859e64aa24cabe13e8680939c7adc3c5fe83b3469c8b6f2391bc032f642b6ee2234fcecf397a4a44abe8cdad37d6243d04676f5ccdd5e3711ad172382fe9740e6b1021fd8888ede18c73a32fb16bb5d5aea29c77e7ddd6e3e797cff7072965015b8879971e3937e78a4f00d1aece66562d82d2f920da453143d16b302716c6f9f312815426405b0231ae824056166de2fb5b942361504c8553bfb734f81616dcfd8ab64980e30788eaec7c3685d50f38977f2e09394d8", @ANYRES16=r4, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xcb, &(0x7f0000000080)=0x7ac6, 0x4) signalfd(r3, &(0x7f0000000280)={[0x1]}, 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) syz_clone3(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@loopback, 0x4e22, 0x0, 0x4, 0x4, 0x2}, {0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0xfffffffd, 0x32}, 0xa, @in6=@private0, 0xfffffffd, 0x4, 0x0, 0x0, 0x3, 0x0, 0xfffffffc}}, 0xe8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) listen(0xffffffffffffffff, 0xa) sched_setattr(0x0, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 3.612807511s ago: executing program 7 (id=3576): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) (async) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x101) close(r1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) (async) faccessat2(r1, &(0x7f0000000000)='./file0\x00', 0x192, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 3.555904376s ago: executing program 4 (id=3577): setpgid(0x0, 0xffffffffffffffff) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x120) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil) (async) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x5) (async) syslog(0x4, &(0x7f0000005480)=""/85, 0x55) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000002a00)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/19, 0x13, 0x2, 0x7}, @fda={0x66646185, 0x3, 0x0, 0xa}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f00000029c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r5, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f00003f9000/0xc00000)=nil, 0xc00000) (async) socket$unix(0x1, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) read$FUSE(r1, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r7, 0x0) 3.548579636s ago: executing program 5 (id=3578): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) 3.457266414s ago: executing program 7 (id=3579): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)={0x28, 0x4, 0x0, {0x1, 0x24}}, 0x28) 3.420061376s ago: executing program 7 (id=3581): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x1, 0x12) 3.304990486s ago: executing program 5 (id=3583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000020000900020000ffdbdf250207"], 0x1c}, 0x1, 0x30000, 0x0, 0x4000000}, 0x4000) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x10000) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="00c490c373d2389954ce75d723324fb1c7f44f3d15ac37fd5bd2c07c291f69359e14dd3134506f85524335803229ee72f55d218d64792550f7c2bd603d0ac56d19bcbc7d16e7b7f4a1fa3a43850644b1babf50d281cf72a411271c8f5c321e190000004bf8eac6ea6cec21", 0xffffffffffffff69}], 0x1}}], 0x1, 0x9200000020000080) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r4, &(0x7f0000000400)="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", 0x1f000) 3.302590846s ago: executing program 7 (id=3584): prctl$PR_CAPBSET_READ(0x17, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)=""/112, 0x0) syz_usb_connect$uac1(0x0, 0xbb, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x800000000009, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x3, 0x0, 0x2007) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') pread64(r1, 0x0, 0x0, 0xe0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[], 0x10) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000200)={@loopback, @private=0xa010101, @empty}, 0xc) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xc001, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = fsopen(&(0x7f0000000000)='ext2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='/dev/udmabuf\x00', &(0x7f0000000100)='ext2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x6, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 3.224283422s ago: executing program 4 (id=3585): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) r2 = dup2(r1, r1) open$dir(&(0x7f0000000100)='./file0\x00', 0x404080, 0x1ba) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) close_range(r0, 0xffffffffffffffff, 0x0) 3.223659892s ago: executing program 4 (id=3586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x7, 0x0}) (fail_nth: 2) 2.920768807s ago: executing program 4 (id=3588): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x3, 0x1e, 0x4003, 0x6, 0x3, 0xc0, 0x5, 0x14c}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 2.88473341s ago: executing program 4 (id=3590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) copy_file_range(r0, 0x0, r1, &(0x7f0000000080)=0x1, 0x9, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file0'}, 0xb) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) (rerun: 64) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) gettid() (async) r6 = dup3(r4, r2, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2c, r8, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x2, &(0x7f0000000240)=0x1000, 0x4) getsockopt$inet6_tcp_int(r9, 0x6, 0x2, 0x0, &(0x7f0000000100)) (async) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x3b, 0x4, 0x3, 0x8, 0x6, "cf33b47dc7746ef85dfc6ca7d2c1bd14dbf966", 0x1c5b0b28, 0x800}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a00000006000000000000000300060000000000020000003b8bffff"], 0x50}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000250001002bbd7000fcdbdf2526dd187513"], 0xa0}], 0x1, 0x0, 0x0, 0x4050}, 0x40) (async) timerfd_gettime(r6, &(0x7f0000000000)) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (rerun: 64) 2.88445871s ago: executing program 5 (id=3591): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) 2.778236018s ago: executing program 4 (id=3593): r0 = fsopen(&(0x7f0000000280)='cgroup\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000100)) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r5, &(0x7f0000000740)=[{&(0x7f0000000880)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b4876ce425106cecf403fbc9c91ff3f1394ac4ba3d024e34de099eedf5ca5b19e5e6f1b25", 0x3b}], 0x1) r9 = userfaultfd(0x80001) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r10 = socket$xdp(0x2c, 0x3, 0x0) process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 2.733356032s ago: executing program 5 (id=3595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0x27, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x3}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r5, 0x1000006, 0x13, r3, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xffff1000, 0x5000, 0x3, 0xad, 0x3, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0xdddd0000, 0x3, 0x0, 0x40, 0x9, 0x80, 0x1, 0x5, 0x6, 0x3}, {0x80a0000, 0x1000, 0x0, 0x5, 0x1, 0x2, 0xfd, 0x9, 0x0, 0xa9, 0xb, 0x81}, {0xdddd1000, 0x100000, 0xa, 0xe7, 0x3, 0xf, 0x1, 0x4, 0xa, 0x7, 0xe, 0xf5}, {0x4, 0x2000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0x2, 0x0, 0xf7, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0xc5, 0x0, 0xc, 0x4, 0x7, 0x80, 0xc, 0x1}, {0x100000, 0x11d004, 0xc, 0x7, 0x0, 0x5, 0x1, 0x3, 0x5, 0x80, 0x3, 0x6}, {0x100000, 0x1, 0x9, 0x5, 0x5, 0x7, 0x22, 0x37, 0x2, 0x8, 0xf0, 0xa}, {0x10000, 0x8}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0xf, 0x0, 0x3000, [0x5, 0x5, 0x15e, 0x2]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000fe5000/0x2000)=nil, r4, 0x200000f, 0x4000010, 0xffffffffffffffff, 0x0) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000100)) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x818500, 0x148) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000240)) mkdirat(r7, &(0x7f0000002040)='./file0\x00', 0x18) r8 = inotify_init() inotify_add_watch(r8, &(0x7f00000001c0)='./file0\x00', 0x4a9) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000015c0)={'veth0_to_hsr\x00', &(0x7f0000001500)=@ethtool_sset_info={0x37, 0x3c12, 0x80009, [0x3, 0x0, 0x40, 0x4, 0x5]}}) inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x1100001c) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r11, 0x0, 0x2f, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2=0xe0000001}}, {{0x2, 0x4e21, @local}}}, 0x108) write$P9_RLCREATE(r10, &(0x7f0000000680)={0x18, 0xf, 0x1, {{0x2, 0x0, 0x2}, 0x6}}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@nat={'nat\x00', 0x19, 0x2, 0x2b4, [0x2000000006c0, 0x0, 0x0, 0x200000000914, 0x200000000944], 0x0, &(0x7f0000000440), &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x32c) write$P9_RCLUNK(r10, &(0x7f0000000bc0)={0x7, 0x79, 0x1}, 0x7) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.516025739s ago: executing program 5 (id=3601): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040050}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r4) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b00), r4) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010027bd7000fcdbdf2503"], 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x800) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r5, 0x800, 0x101, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040d0}, 0x4004) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000100)={0x10, 0xd, 0x2}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, 0x0) unshare(0x62040200) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 2.344028623s ago: executing program 9 (id=3604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) (async, rerun: 64) r2 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000140)=ANY=[], 0x0) (async, rerun: 64) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/93, 0x5d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/25, 0x19}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}}], 0x4, 0x400120a0, 0x0) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 64) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x0, 0x4, {0xdd8f54d7c298f4c8, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.592217053s ago: executing program 9 (id=3605): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/protocols\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 64) syz_fuse_handle_req(r0, &(0x7f0000002680)="ca8955b3ab335d21787d66ffbc9b99e49c086721520dee268a8450d16b026ae91504463e6c06d4016094797ce1713b3669777d9cb0b1c46c216d091e4e2aa6177d611a08f0b1b10e54d6db4b7b7d743b737ffd161874eb8cd3189e59ac8d74a24a4acba98f0b8267ebc55f1dc5dc941f44d4c7f722d08d23701a810c6e3178d528021eb176bda15404339afb0a3e1b961660d4f6a60b2d15319ad80920b16b22a2e8ec6485582a666e70777c3f2b1d2ac480880df74e7ee616808906ec10cc94d695a5a37c62eea3736449894b85dac0ded06c8b2bc09b3b5a81bf6ed8eb7adfcb90aa0e8b126cff8f2f3d3b9300b1aa05d152278a699fa103e1d7faeaa90f6ba7023818eb91d39d209cad449b046aafbc2defb7133136c77e8e4e96a3fe6316639e9c62996ae3a8c564c5f8f6adec25bb1c4519a30104e417001888b99920181f62bde479ab503d2c01dab5142392d264542887b60350d1764ba302635b74c5aedb85369bfc3a614712ee3df17389b1a184cb770f9366beafc860ec68fa2a162314ab9809e77104550ee30f9b0545e301699b7c88d5a631a9b5cf860555158ba9ed2e8dfc13a1388b76dd6c718ebeaa8eb53252802766cabfe15199db6c04af8d4cf2cd7d6d7d25515077c1fb0b505628d0f4cbd3182762bf35adf03117250efb52f6cd0d9d54494ffbb1690ab1b09d276bb9c20e888e741d530ef00a45722b5695d63ff0df44f291c44f9d325f6e3fbcd3c2eec8d69f604fe727d590bfca8344a3c0913c95c51c41abef96f1c7baef5e0da63a2f8a208b36589ac38a7a76fc11b080e68070d5d26c8fc7404253ebb9ce96e7b9cc350f9c27610b149e3f7e5d5cb907d3bb1325c84fdd4b5f9efc3f11ce15fcd8448922c4e698e45a3f5c5c9eb6e8c2377ee494c7532845415ea430948da0b05b4acd5393715e2d3239421dc3451c718c2e39e3fa0785004a047990890aa6044601e79f745029cf8af9e63009f5595fc25e028e528f1ffe1775708b48835543149d0a91ee40d35de5f374e0795846826b88746c2b965930b82e4cad3b6fcf489dd93ab286e42705d11a75d3538513d03e1a38effde494cf4d1b286f37acdfa3cd8e6ec55b731acb3badfff445d562763f51b77a13c59871725a6b7fa853b02eec51d7d01f9d0019c8826ba7867f091c314c9b8aafbb73942ec33b257bce63d80a4f2012d9b3438ab2ea51be93bb06afd24aa0d32f39d4a5a71908ef3a8b4b711b05f1daa4569e74ef5d0112a3af6a7796432732e729ab90da072b8118bafb01653983c9acc76bb1ffda7ebd50f74b842a069a0b7f944b144155cc1481176ea428907e0b5a46aa8763a6783f3f6490dda0433c49e7873f66c1fd8398d18dc0d16f55c5c13d1af00b6711a086ae5d2eed4dfb0f0fe6fd23e2f8eb3857e2e2f4c30a402ea516e065e0350d44d856299d5d45b07a733dfcc194765fd9206208b76650658103aede362eabb920d7fd849eac213a0b9416abebdcc746fe551c16c92e4957781a39487288a2897f797bfa4a7d3c89a521201b4f6a23793208cef138cb2bb9db0fa802c9649f7435677c11a4a3c8e99312a39e02e1bc1258917b667ef578a9ea01221760aa3666e38c33dd4bddaeb0ca0e1c4f463565b618f071b155a5a72163b36840c46f1b557d2893c83be282d60f55363b8eacf352c6388be6df055160163732e0a060b380d42a703b1f425f3bb6475b38910a2660e6890e546168222a65002f7f6b99a61d5a224eb950f85053e98c156660316a0c4135144f0d8a381a4ea280452a551c3a08fc9cff5481f1442429ac9be1b0e4af9dcde2fd2de45f2c50eec466cb4c8d5c90e315bc6879c452f4d393cddd4da41b45695a52c7b24a2bcbfad4e909d0cf3b2778ae639834b6bec4a4b092782ab7ef36bbe94a43e856773c2b0648202085994d868de1c277e663a8d8f43dd2177fc7e36d135bb5723136afee86be693d8fbc069e66ddddbd473023fdc6bb88d205a1e68ce0e40c382e8681eaac1d690eb7d15d9e707bcd87f142ac136fdcd5f332577bf9f6f6a04631a2e8e8097ac54096451159f49296b24ff134457006854779bc700eb5bcac3a4751165a9ef9ad80672772893979ccf7ac495c4d29db1046a1d29e72dd4abbb532d31d965380175f0ce9ca922c5fd43891d326cd36cc5a6babe94f8a130ba37c1170507e6f572345565deedc3173dbce279b75377503cd8c4911f46171d68ed7ce8a1432ee83d9455e44a1f4c6884015ae593bb2f7f8cc01bc08930a5aa326a374e564da851572ae38fbc88de586a88898d1ea7927c7dc96805fb9b08f454812dd676756b62b6b7ed0a09ee1f1b208d6ad3dcac69a719b31848d1222b42f0b2614bf4a5c4638442b5b851b62862a6148c2d4a7a206fb878d88eada2c90a847f840cd5254163840746768bef70b9b9a6830c5b48c860c5b8253efd68cc072880e5b3af2565cd0b1bcae5c48a3eb019a5aeb125f33aae42e12378018e43a8f1e731810fdc58eee4a2b9c1ffa313a182c3d8b412853d1e22d0ab2d22256790b642598a70a58add62c0dec7f13c0c5334d03b8c8b7abb7006149a53ce7fc3193dbfdf88d9ba5b7e19d74aaa333431bc1cede2ab81629984eb54451a079b544d313782ffcfbbbf8214ee93cc5043009af2518e7980f117566c5575dd5c8aa8b136b07b5e9bfafe0f3146af31042cf6cf7be0d65d13afa2394780f991609f833b964530279379fb0a3426a6dac05c1854c63c2e5d864faefbf63fb1b924005adca12b8bffeffadea261c0d26d670680d52202d5ce8a54791e84fc03b4ad5d253c00dcc9fe0b43b4bf04aea3f598d3c6a9d30cf3e7f38b812e5a2b65e95e82887f73ac8e06dfd0b5013f3e5e4951f886008160fb6c4236ca164e17c821718f128db5f5ddf742a32cd9723c34fc32c16e90fbeb417ccec7b5f331da6c95c8ec97d726e9554cf2256a46481c97018c52075fd8a884755dbc580c7283f464815108dd77600b1484e6aaaafaec12d1c33a615180ca44b55c93288528cfad28c4f183bad2b378837177e6898ab1bb44cb2fa1d66e192a22b2035b3ae805d7be872b3a5face8c977904297efdd9d7543b0acf8174ce12ac3d2b2e977ca5fe7300b76064acefd8a849b3e910626d9bf7e31f268b5553ab8aaa782775c7bd9c6ce086ffad5665fd95c33f5c72fd662060da2cc7845c96ba0969a64eace622cf78517b416c75c4448f88dc7ef15610fe3b79f76f53e940fc9d880f0306d8a07cd0bec1af31a70157dd091939a5e2d848e5410e248cc3438f229400b13e291a76b2264fec89711e1aee0a23494c10f0cc03120079ca17cd5aa7b302cc3ad377b94989fc00b09471a398441a69b3caf3c45e417a5029b9140242da9b204cd7ba60935072acb27a3da44b56ae7708b55f7979e64c144c88b0e4ff40e2cf7fcae151589b49e48df963da1f3ed0d71751222a01af2c8e7473d9f945aea39c7733412b77cdf14ea294edfd0fa8f82350e665e2c37831c00f8ac4d671b75a2850d5b9cb71c08dab39f75c09954a5a591b8931b1adaeaff3f76b63cacfd0be63f0eb0d003669d25f80e9af9833410856f2ef518f7b7e12018dd038a91df383cb3d55512b907c7ea43a66a2fffa9c36f92a22e5c7524027cf0251d55e3f8251aa22f5a21493ba1362e49a8fe26fd7cf4ba1891459cf3f63ba89b9415c9926c3352fefc64e61eb3a877105e0adc7a5bf53e02eb95b4e68125d09c7a42867bcb1bccd944776db7732a32b8817f4766c0d69b7709a0a24c0665bbc702e557138d20dab265b29d508afca86ba1d05b321968734019352691dbcbee11882ab2ffb04509f3f90697316c0b965eb748a4193184e4c26f56f47ab740766af393953d9da8176dce0386e12906c6e3bc14c0e8836c2c0fcf16e1724baab111a89ff34b5800d079be7ad9a206154eec5f8fb44d3f93c60c9c2613b413854d44efc5bd55f6fa0d397edc49033de77ad7da8e1f2d0dd932eabf1490eb0a20af98e122caa72c4acc0e8bf51a7d940d425674f6a227fdfc4a8891602eebf8197be7b54994c16257c32c4588caa4b81d02f4efed1e575a5b58b3fed02c8585b8e71b1017d36d6a9c52b81aa891a101843040b1e813181f6579ea6dd2cb8ea9cbe666f183a88771d4b93d2e64d3174acf0cdda8a1d5f95821e1d9bf25e3bd6817ae15314c5b9b6eed15aabbadddb661e6d5353bb1af04a64b81b9303efaaed67e9737aeeb665ddb36525078789bfba572681a45384900251e236d5565a1ebb27dcf51e1fc08df158b58ca24d490a600848a575f5a93e058d975e2ac5e85cc6afd6c8c7bf3da9e7707170a1f53a2f2c90dbe8c14c0b04ce83bf863979b13cc1f3ee01725419984cf92d68e87662099c5bdb025697a77604ccdf36f29a6d0057cd374089311e3ae0e2cfafb58a4d6bc11f02816d1488da556d176b8353d40abd4d0fa068f71cc46841e20add6b7e7e47fc96f413b1fc1a6dd0d4e81149fcca41df1b95d9695e03822c194c40bb70e7cb4c8058f652881158c3bfd4a72bb68d942e36a90f36244422cab10ee4ea534a765df37fc201db6b7809cfff13070946eec32834f77b23d7a106324d630adf67dc9192728a6e652272476bd5c011ab4926161396b0fac5bd620ffc0991ff2c62ce85ae971324d2e224798cb620f4b667c61fea61272024a443562dd7ef9339ff1d7f14c13d5200d1c136bc9765103ce5a334f78a22faa0e4de4ff99c6671e8c4cd2e6229c3bf62a2ce0fb9295a568e87c4486df68c56cc5df612d37b1da0348e62acbbfd398475f2341d42997217c58ea415f3507dc9e9e84af540af5947e407e935fb8c4949e9eca2fb6f8efb267a2f2152f52406405c6fdf1991bca863f0d60a160582e5438bdde347d4a26343a92f69630afcad909e9e36d5f5832d33d6020e645e84a7e01b99e9d756f1fce7b2aba604cfa5813f38b2143e3550aa9d22195e31c7335278ada4cdf9a5d82a90c2c9039bf7028ac4f6dc3fbeda3ebc0e421ff516e3ed21ce595a3f812d98fbf03b02e4486702acd8dd89d0f5d43770fdd01d8634723d1d42106e09fb71c0dbde3d276606f38eb0f3b8de85265cc41eefcff63dcab59cdea78aa236c185cff3c18fa3ecaa238148834c54fa849b5b76a361ef8f0dede3eb3594d1ea8e70fe4106fdfa3d387583bc762d5d62a58ee48ead47f21e7ffeb59c88cdb86b0a7c7a290b84a5fbd7376de062e236e5cf6457055e2f178bfd544cbcaeb7603bbe4f8456166348a342578eb4037e6cbfb2f68a2cb0ae6a4e6be47710366af40c4e4078d6013e944f1d04c67bc4a584dacce2345c7a66faa73cf9e3567d59a583e8274799a76764f97ac7a19db17c30d0e646e5939a788d1583f4ee5413d64fa0ff938169739bd74d2bc0f22445127c25f18f12834e3ab160d7c82904884455929ff5e83f7a44bee0ae6869b94119b2753b49d5cbba451ab8f9797dfc15162b25f1fc1cd5ca38f60d51616596a364edb132ca17ce1f235e299a4136a51b6570cd873abc502d0a270e7a6e140410dad827186560917a051a7a52fab2d5bd47ef941f3cf4f5cb92eb26160920af3c6dac0764a7e3eb11cf51d35d01fa2c4305b0459ff9bfae93e5f45ff8f4e0a2880bad720f3a6d248ba4c5f45e3f90132af5b28a024c68a2f23e528042bb6140fa1fb5e94dfe9ac0bb0827ca4ba94d1065b047804a5ade5ad7aa874c9d610023b3ec38bf15a5cfaa8a7d727afffcace5298e5f77a589a9283dcae1f12080a27ef3b20d249682c0b54075a93bacb068d240dffb547be28cf936f9e1b62f7c49693c3a5894c8f09f856194a3f0a8e2bbe266e5e7ab1a1473658d8449b5b0fc0342f3f256e9002fb92b18ea2e0cf03f8233f0fea46edfcbc6080a2107a6919ced0f82a43666a1beabba204a915c81b78b57157ee4d499d9403fcfa16c206de0aaa58d9bcd16f0e35be3c4c2d0b5dcb2e8c73adea36e8d339aa47bb5bbfcf7de4a7e79970034e1fb70620f8275014cdcdf16375af53ce30d7b742185e1fe6ae1fc074088585718e6da15e9e55dd27ef758ea0eb28ac066c728a5446003ff01b889b0f29b9616e4a25f3c8aee3585a1ea1daeda1427f70f99fce50ed320b4d28eb1b063954d116d2fb659d7a8194dd69790d8e9e7be5c640f59c2f4d5c5c740722b2c78c4b9c736b03f066030a11db012d3c6c2e2be41bb0f8a47ecc58e1db7497f6c5e96b6cef100a80edd1b99cda99e5016194292557d81992cc6ef385acce363c7466d2396fef14f1443bb82de6fbaa07553d837d65b89fe25fede2b3fc4eb71cc71c7f4201d6ea4fb85ea596699ebddbfbcb8c1be120db9261cbbcf211642488b2c2890d639a502bac7d9df553e2d8365e4e964876f9d4b9d6d3791ef7061e0f0f10f820ea1449ff6793b0033f91cb7b94f301c77940ddba5a8d40c74dc9fa79558bbbaef6749b3397496346000fce5ccb6a3e1360fa351f3217e4d2e79818ca6b9888736327dbd878ad4c87ff462a1dba616204f5ed6d2a9982a285b0938d88af89fd10b5afecf14ca1c9f11708e8391ddbf440422140a17b1e87c3f7eb03686b3fba1d3e68bb915c45f408d19642ea8fabd0d5c579b29e6d9bf0cba4d4b1d44c9266728d73e37d9a2702be40a35b6a4a641c19f798aeb850e2472b15bb924ddb0ab6cffc7fb0e5fbaa1cfd32180cdd7b258730e3591d4317fcea009629d2ed1b112a2c1edcc38d1104ac7bf609976398ad0966fa2ffad0cdbcf8070f22b3c060a1a4f06461a576be8fe9312a7fbb9f56fd5e31be7e2836f98e65c6e14a3c245551c460c5af0f0a067798ae826c466e173fc29482302ed2eef30922b3f4b7b5e64b7d8c2317f06617697809a0a5998c301afc56a43aef1de0d6cd23261f16ae263fe6d383638ecbb8ff5fca7526123e63d825f37d382a41375ce1ba1c9fa3f752c74d529a782519505e66d1e299c5e119bdbf3b06ce271c7e8e514121bca15923e48cf7b8c0ef4008ef20de351dd24062b8782cb3830002baf68376b5636612e686009f84fb8914bb5af4122c42f7fe7bf6fec280e5142fb2448be861da1ed2b6d6926650edd9fb24c199b49a8b3b4471444671f4386f9fec048a494a2c360bca6ad679560f113f1c85daeef2b93a18fde42f1ab8f4440564a133e58fd18c82abd63f5018a8bdd0859f14cf659f2637efe16da591914160d5b369aa12a6f50930a04d262ed26bcb508ce86d059c2b05f48c93f47607c1d74980786f0fcea4989d383bd66afe3a46a1a0da0cb4e18abb9128075024612de95909b69d946f9f77ba1f772c68186bc18aaa92e1c9eafc7f6180eaae5cdf87573145314e69fb543189a2211252d2a6afb9cb0640875bda6bba85f982d515eb88c2bb74e161b29681ca5fd93ddca0745ca474e79a8fad9c73eedad652c0d5ad0423332efc0d2fbb633e26142d3b4c867075b64d5d8eb4b4ae8e97bc67e0037c4797259d3e895c5f77d6e7b6d3f5e7a609b6eeb2cafca596707fe674de01f4c7621153b0f09a84f70523b4b41b8a79ea3faf719e760d9caef7b8230712a925fbd5dd6f9fbae9388c41591a0d8c72551e5275723f6fa3aa1a8da64a07375629b329884893f78fc95c8bb7a98cf8562b8e706732c1a2decb6dfb85fb69ea44932523c51767bb56f105e00d5588cd0f337b2460e1b84909daddb6b77cb3f95c96fb5ac483cd56e67190d2badf1d0db65d45aeb0a94ee1e3f387944c75f8d55d31f0877676ee2c6fadf9f0ab91698cf663e1a4782285fa0783e10a59f0435665f6f1bba9963ef43a2394ff4b2c3d60dae5eefd528a050185d310c510ed612afb625904fec6f76f1a300dd8931b9f6528df538536c7f3c25c6bacc2305f047a5705ea60f04a65783e52b87d06808609c99b1982cd1575dd43928362fc12874500aea9ac843b6a00401c6f65de5a996800832120a767143a46248d0d859f8c01b4d1e50a66ffcb899be9b5d4e87cb36d466758cfbf632796a0b9e25a7fd6c435ecaa30e311ab1851745b5e09d1b54b72930273aab2e9d6cd5a7d28f5c17afb1a6e40a440e7da8bcafffed40e56f4a2e2dbb8525bd7bcf0c2e30187856f4ec3830588348f2f29085eb0988c14cc785c63c38788a2384083a30dfa598b18a2e18dee145d3abe2ec01a59a6fb9b29d11cbb7ec1c87c563c8808df26a2f68025da8a40623d104283d87f0cea049a77320fc40d920212c005178ebae49bc86e8c9e648b14581630aba96584f2ed7722098cd12adb529ee5d7e4e515dad6a747ece346df669f3cb5ec01730cfef5c199004fc281971f1f52c188e8b504cafe0d9ab2797b8ccab84634a5ad96a59c63e53c7381e96aebabf929cab82f226a25bb6d4ab5521dd97a136063c22ba7cf061f23f24ebfd6e9e054a01125fe2353163cd8d7f4a88ed8411a52a4c005d6be720fcef76d7f7c9319b3173a3f650a7c7a586e3bf90c8ee1ea947ba4709c4f9d4f3eec4729be83f89bc1f0dbd71a1e9412003662a0f6e8bb5db9900bdaa413da56d0916ff0c15948be1c6667c9e5376da317edca79426a1c9d0023836e8a70096dc59d3390e78600fdc99175cc62848e511060075d05fe297899be21872ca4d53759c80984d86cb8c038c695b0f965fd4777756fe2d81c86fc2514dc1f08baca11d3754dbe3cce63e1c6cafd87562dc416af0a2b3b24eaac1de64a30a318c2dd5e099cffeb58cf01f1704a06f2093377ccb2e9a6da87c3dbdbf65e92090ae7af70b6416714506b90969f894da754bf0abb28a678f2fd69837e1bcea051326d992160c640e887c9af7fb82e8cfae492d444119bd0bc4f64870a198ea0d6291adf64f70bcb7250655e914dcc02453a7e9a0d15f32233d3ff771a36da525032781865d75bb8f5a36a937e47906d5647cd09abd1dbbbde31659a2088a82157b8c945c4a7bac09631a4b5f449f0f6766011f568ac992039191c152026c1e02654fea95ac96cd3cae48e9051c91d613f71763ffdea4b55e7a9259766eef8d0ff67e50127188420deb4a088ed38ad2dbb45bba15a47ae0f9e1079eeb6759f39fa715ab83b48aece28cd26fd6c130dc8fb87b48b3beaa8018affa0d542ad19af8be4f6ba99d64fcad1a5ea62b1b3db43b7d3d18ee75da988368aefa85682910c5a965a70a3cb6868fa9a1c88d64fa4a765560d5b96cc234fbc654271f5b45dcc239080f6b970951dca272b008023e436c00893409ac231c12d8039ef6201a19e2decf984b9311841d20acddfcbca57f04083858e454eaf5061848bbbadc0ec50733d064f197ad9492b5ad48f5d47c2e7866235439e22d3a3cd25238f5a6fee7182b60d513444e3c2decd01b7d720f2a90a34e900a9912c1ddab39fec49f1c4e805535bdd009f5a3c1730e1e3b3cd56c2c626c5981904e30d7338d13d9900cc0ba82b5f1976e77b3ef7141167a847fb6bac7effabd8ab500bc426f6af872a3484f5a06cfbe503e42cd9e7a8611e0942da98f1e23e220f362292ee2ce687d69ffa5c62adf3526cab57b4f4fed16f11702852785a612fadf6a39dd5362a6f207047c038335b5523cc0e987b7743f23fcb4fd567084db9a3276fa59df30706deb5ed41a7a803f6dc2956119920c07efb5f48f2dcf7b4ad5fba0b3f3b8e3bfb9a7ab932ae1cb6ef1b8f97d82b240b63dc5dd74506014a60a54b95888fd1dea8dbe8a900a1319a3a99fe56043273b4dd267233bbf1501a7727672796de342beeb18342eb725d5ed8054a21c145470e23da5f2b3fd26cf7bedc5b287d8cdb027c6bfebe8b9f7c8a3fc3c5894f17fec58799f7327bba20c7c61007a4480339418e7a2811b0ab184a75457f1af052b74878a48b74066bd06ad62059dbd60f8f1f5016ea32328df30956b63004e743770a2f34f44b400803f83b007c39782ed3a5570e5b6aa9bd3095b9de7c2f70c4d2923d7cf97bdf84c37f45fd35470e3950c9f11bdf5724cc119213f96df9059ff0b4bad2126db123369f51a0646fd1013177431ff7a9ef4d5d9b8015c8a4a54bb4647ba031e00f3009b383025b4c0d2aad19bfb1a87177c60ccacaf5c305bcb39052028d12b8a193e1dc6c7c6b1be64e11e5c67eb49020a576094b8f69492254be0ff646a1c3c670f0a29d8765bba64cf0e4df003ac2583621766288157673521c284a4f538510b0d30abd137792ae62a75935661b79f8790b651cb9d2e67159bb007281133256a9abc1dba15359ce904ef13a4d8c90c76248d0fa306c711cb7f342eca6d9b068f8260c0e49c3a34db871100aeb30ac769f118adfa64f635d99968bed427a07e99969093109da3046676469cc7201ef1c4c70a8832a2a0f3ea6aa6ed333e66849070a33a14a2c00e72276888b4adc6ed06f16890bfcf82964cfd2a098c3385a1239be7d4976b95689db762394ebf80218429b6ee74f10f3b7847eaf598b017dd87013c66de2556893bfba9730b86a545059a7e8b885c27cb5070e90d115c7a77d185a2358f59aa874b080b99a60ffe471e327efbe1d2f3dd6da4854c12ce78fd86980821bbe2dae064530b50432e85426525b0da4bb698bd51227747fa7a9c77b4883728c83d179b4b585a9b1f5d3fea4a40883d725d3149f159e62db9968cc633459f7bd4558da0de7ca6fbedb55554fd58255dfd3c302cb4c8df8aa022dbc56a756d79ae75a977686db24f615643aa2f1e3de4eb014da92fdbfed0e57f6185aeca756d8dcf6001ebdc5fa85bd7628f63c1060f9d15f13445e3c95bd8f961c76e457519978367058487529bee42dd20742df684bb5a62a1b6c7da3908e67c786dbc1d16c1c861f3d184e6fbb28d23649fa1227cfdbeb5af89464757953262b7786e8f9891ce5a37de67e51a0d8bfa6e4cab3ea3911aa3ff439150c59dc40ff248b96aaf219692c6883f4081669ae5f45e5344b77eec3da61a6a7333216eb99f8182eb77a0fd74fc9f6f7edf32447ca6ce141df01f5ccf3ce72b57be063c99a6fa546961b3cd17951800a7d73066bc0f284aacc8fd2cbcc2c1a1014bf0260761612e04f79577661656295b36eb57c1625620c73817ddddbf131875da61947bad45ec3cf8f9209e36ad1fefa2a9ae8bd7a93cd9187355e02b80200a2a15f7ddf111c482eaabd74accbc56e4780fe3c1cbb886f3707d8eb8409eec4527c28fc077b604c006225f5fc918fc63a25a27d7403f784450b962bb4c5d7871193a1911b4d443db371fbdcd28d7f1cffb045c2068a9e1fe4f681364a6350970714e922d1e093480d50e278340b7a5ca9f841de6941cfea7dfa031d20a0d7234d8327d786df69aba23ddd57579a1c4dd7fbac7b4be39ff0d74d3c8c8c46d887d903badbb4e2c704aad49cae41b45f2c5fdcd0584b8d978504b33a7ab853a9e4cb9a6a86342a8306c67aad80c2116ccf2447a75696c8612084fad2e34b738cd7156b087ce75eb8e498f752e7928176db49437a07fc5eecd29ae552b699090944ca8383574be1d49b8ae6d01f5bfa7271bf8df6b4bdb4a37218026db03fe949ce1849aeaa82b412600a2e6260521ad513ba77d0539f095f4e9ac", 0x2000, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) setreuid(0x0, 0xee01) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x20000000) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') write$P9_RVERSION(r5, 0x0, 0x0) (async, rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000080)=0xe8) (rerun: 32) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x61cd5e6d}}, {@max_read={'max_read', 0x3d, 0x4d0}}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x1800}}], [{@euid_lt={'euid<', r6}}, {@uid_lt={'uid<', r1}}, {@permit_directio}]}}) 1.589259523s ago: executing program 9 (id=3606): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x1, 0x0, 0x0, 0xa, 0x6, 0x0, 0x6, 0x0, 0x7, 0x1}}, 0x3c}, 0x1, 0x0, 0x0, 0xd5}, 0x40000) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0xff06, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = getpgid(0x0) getpgrp(r8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x1, 0x4, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) connect$netlink(r6, &(0x7f0000000180)=@unspec, 0xc) r9 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000015002b44b6afbdf4ad6da809b64b3f0128bd7000fcdbdf250a0807000100506ac1000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r11 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r11, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r11, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x9, @empty}, 0x1c) sendto$inet6(r11, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.579253744s ago: executing program 9 (id=3607): sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2c004043}, 0x24008000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0xffffffff, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x101301) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000010000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="010000268062c01c80002209bf7ad06c3048c8f1c5f31e29acbcc607115dda2b9a6fd18d033d592615bb027bf74e9e327591593751b07078a50d36595f82429d4b45e6d47fefe171d006bb8683641c61889bd17f5921a51dad4f790225a4ed6f6367fe0c0ee89a4c4f7d35e8466497eb292fd70f058cf32f0bc4b9a5d466e17cfcdabdc4878f6b7b29", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"], 0x80}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x4040004) getsockopt(r4, 0xff, 0x1, 0x0, &(0x7f0000000040)) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000440)={0x80, 0x6, 0x304, 0x0, 0x0, 0x0, 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r3) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040011}, 0x20000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_int(r1, 0x0, 0x7, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$inet(r8, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x80) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000300)={0x6, 0x0, &(0x7f0000000340)=[@decrefs], 0x0, 0x0, 0x0}) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r11, 0x40047459, &(0x7f0000000540)=0x1000008) 1.542537997s ago: executing program 9 (id=3608): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) (async, rerun: 64) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) (async, rerun: 64) write(r2, &(0x7f0000000400)="240000001e005f0214fffffffffffff8070000000500000000000008120008000d000000", 0x24) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) (async, rerun: 32) r3 = socket(0xa, 0x2400000001, 0x0) (rerun: 32) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) accept4$nfc_llcp(r3, 0x0, &(0x7f0000000040), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.488275281s ago: executing program 9 (id=3609): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}}}]}}]}}, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40043d14, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x22e7c000) 282.002188ms ago: executing program 7 (id=3610): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01f42bad7000fbdb00eb06"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b6e690322f4eeb50c2f085bb6f6e6f29"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f732383b569cc6b0eb0b23c1a7a9fa4b"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x104}, 0x8000) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 64) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) (rerun: 64) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x11) (async) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb700000001090212"], 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=3611): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) kernel console output (not intermixed with test programs): XT4-fs: Ignoring removed check option [ 272.517743][ T7842] No source specified [ 272.552398][ T7844] 9pnet_fd: Insufficient options for proto=fd [ 272.676577][ T634] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 272.826559][ T634] usb 9-1: Using ep0 maxpacket: 32 [ 272.833081][ T634] usb 9-1: config 0 has an invalid interface number: 136 but max is 0 [ 272.841513][ T634] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.851990][ T634] usb 9-1: config 0 has no interface number 0 [ 272.858201][ T634] usb 9-1: config 0 interface 136 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 272.871665][ T634] usb 9-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 272.880921][ T634] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.890423][ T634] usb 9-1: config 0 descriptor?? [ 272.911942][ T6239] udevd[6239]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.136/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 272.928600][ T634] snd-usb-audio 9-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 273.113122][ T7828] binder: Bad value for 'stats' [ 273.120397][ T634] usb 9-1: USB disconnect, device number 31 [ 273.746637][ T7914] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 273.919903][ T7924] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2271'. [ 274.485787][ T7934] rust_binder: Error while translating object. [ 274.485812][ T7934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 274.492320][ T7934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:429 [ 274.525241][ T7939] /dev/rnullb0: Can't open blockdev [ 274.590983][ T7944] rust_binder: 437: no such ref 0 [ 274.596715][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2280'. [ 274.645959][ T7950] /dev/rnullb0: Can't open blockdev [ 274.896570][ T634] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 275.046554][ T634] usb 9-1: Using ep0 maxpacket: 32 [ 275.052925][ T634] usb 9-1: config 0 has an invalid interface number: 230 but max is 0 [ 275.061325][ T634] usb 9-1: config 0 has no interface number 0 [ 275.067493][ T634] usb 9-1: config 0 interface 230 has no altsetting 0 [ 275.075813][ T634] usb 9-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 275.085048][ T634] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.093291][ T634] usb 9-1: Product: syz [ 275.097527][ T634] usb 9-1: Manufacturer: syz [ 275.102147][ T634] usb 9-1: SerialNumber: syz [ 275.107633][ T634] usb 9-1: config 0 descriptor?? [ 275.113595][ T634] ums-usbat 9-1:0.230: USB Mass Storage device detected [ 275.121555][ T634] ums-usbat 9-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 277.189189][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2308'. [ 277.257789][ T8036] netlink: 'syz.9.2313': attribute type 2 has an invalid length. [ 277.449299][ T634] ums-usbat 9-1:0.230: probe with driver ums-usbat failed with error -5 [ 278.167777][ T8084] 9pnet_fd: Insufficient options for proto=fd [ 278.606780][ T8105] netlink: 'syz.7.2338': attribute type 1 has an invalid length. [ 278.614659][ T8105] netlink: 'syz.7.2338': attribute type 2 has an invalid length. [ 278.626398][ T621] usb 9-1: USB disconnect, device number 32 [ 278.966580][ T621] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 279.117734][ T621] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 279.127594][ T621] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 279.139165][ T621] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 279.148303][ T621] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.148961][ T8128] netlink: 'syz.3.2346': attribute type 27 has an invalid length. [ 279.156320][ T621] usb 9-1: Product: syz [ 279.156342][ T621] usb 9-1: Manufacturer: syz [ 279.156358][ T621] usb 9-1: SerialNumber: syz [ 279.178953][ T621] usb 9-1: config 0 descriptor?? [ 279.185527][ T8110] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 279.187476][ T8131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8131 comm=syz.3.2347 [ 279.205277][ T8110] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 279.419778][ T8109] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 279.432750][ T621] dm9601 9-1:0.0: probe with driver dm9601 failed with error -71 [ 279.443162][ T621] usb 9-1: USB disconnect, device number 33 [ 279.566201][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 280.595598][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 280.595618][ T36] audit: type=1400 audit(536.196:1287): avc: denied { getopt } for pid=8165 comm="syz.3.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 280.655511][ T36] audit: type=1400 audit(536.256:1288): avc: denied { sqpoll } for pid=8173 comm="syz.3.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 281.566775][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 281.566776][ T6535] Bluetooth: hci0: command 0x1003 tx timeout [ 281.759341][ T8194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.759364][ T8194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.765881][ T8194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.772582][ T8194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.779127][ T8194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.785623][ T8194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.792132][ T8194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.798620][ T8194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.805056][ T8194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.898825][ T8200] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 282.234212][ T36] audit: type=1400 audit(537.836:1289): avc: denied { getopt } for pid=8216 comm="syz.8.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 282.441297][ T8222] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 282.997082][ T8224] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2376'. [ 283.518207][ T8226] netlink: 'syz.9.2377': attribute type 27 has an invalid length. [ 283.561313][ T8230] 9pnet_fd: Insufficient options for proto=fd [ 283.852794][ T8234] SELinux: security_context_str_to_sid () failed with errno=-22 [ 283.873011][ T8236] /dev/rnullb0: Can't open blockdev [ 283.893876][ T8239] __vm_enough_memory: pid: 8239, comm: syz.8.2383, bytes: 18014402804453376 not enough memory for the allocation [ 283.921122][ T8241] rust_binder: Error while translating object. [ 283.921150][ T8241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 283.927510][ T8241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:490 [ 283.937024][ T8241] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 283.946237][ T8241] rust_binder: Read failure Err(EFAULT) in pid:490 [ 283.972077][ T36] audit: type=1400 audit(539.576:1290): avc: denied { create } for pid=8242 comm="syz.8.2385" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 283.999384][ T36] audit: type=1400 audit(539.576:1291): avc: denied { write } for pid=8242 comm="syz.8.2385" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 284.135442][ T8251] GUP no longer grows the stack in syz.9.2388 (8251): 200000005000-200000008000 (200000004000) [ 284.145940][ T8251] CPU: 0 UID: 0 PID: 8251 Comm: syz.9.2388 Not tainted 6.12.38-syzkaller-gaffdb774d7ec #0 e0a1c643210c02f57d3116610c17ac272852aef3 [ 284.145973][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.145991][ T8251] Call Trace: [ 284.145997][ T8251] [ 284.146005][ T8251] __dump_stack+0x21/0x30 [ 284.146032][ T8251] dump_stack_lvl+0x10c/0x190 [ 284.146053][ T8251] ? __cfi_dump_stack_lvl+0x10/0x10 [ 284.146075][ T8251] ? futex_lock_pi_atomic+0xdd/0xc70 [ 284.146096][ T8251] dump_stack+0x19/0x20 [ 284.146116][ T8251] fixup_user_fault+0x63d/0x6d0 [ 284.146136][ T8251] fault_in_user_writeable+0x76/0xe0 [ 284.146151][ T8251] futex_lock_pi+0x258/0xa10 [ 284.146169][ T8251] ? futex_unqueue+0x136/0x160 [ 284.146184][ T8251] ? should_fail+0xf/0x20 [ 284.146207][ T8251] ? __cfi_futex_lock_pi+0x10/0x10 [ 284.146227][ T8251] ? __cfi_futex_wake_mark+0x10/0x10 [ 284.146247][ T8251] ? futex_setup_timer+0xb4/0xd0 [ 284.146262][ T8251] ? __cfi_futex_wake_mark+0x10/0x10 [ 284.146283][ T8251] ? __kasan_check_write+0x18/0x20 [ 284.146306][ T8251] ? up_read+0x26/0x1d0 [ 284.146327][ T8251] do_futex+0x25c/0x500 [ 284.146342][ T8251] ? __cfi_do_futex+0x10/0x10 [ 284.146358][ T8251] ? vm_mmap_pgoff+0x145/0x4e0 [ 284.146382][ T8251] __se_sys_futex+0x28f/0x300 [ 284.146399][ T8251] ? __x64_sys_futex+0x110/0x110 [ 284.146415][ T8251] ? __kasan_check_write+0x18/0x20 [ 284.146439][ T8251] __x64_sys_futex+0xe9/0x110 [ 284.146455][ T8251] x64_sys_call+0x227f/0x2ee0 [ 284.146479][ T8251] do_syscall_64+0x58/0xf0 [ 284.146503][ T8251] ? clear_bhb_loop+0x50/0xa0 [ 284.146518][ T8251] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 284.146543][ T8251] RIP: 0033:0x7f32d998ebe9 [ 284.146563][ T8251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.146577][ T8251] RSP: 002b:00007f32da761038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 284.146600][ T8251] RAX: ffffffffffffffda RBX: 00007f32d9bb5fa0 RCX: 00007f32d998ebe9 [ 284.146618][ T8251] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 284.146630][ T8251] RBP: 00007f32d9a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 284.146640][ T8251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.146650][ T8251] R13: 00007f32d9bb6038 R14: 00007f32d9bb5fa0 R15: 00007ffe83cb43d8 [ 284.146664][ T8251] [ 284.420806][ T8262] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 284.439648][ T8271] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8271 comm=syz.9.2394 [ 284.989343][ T36] audit: type=1400 audit(540.596:1292): avc: denied { getopt } for pid=8292 comm="syz.7.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 285.126797][ T8317] netlink: 'syz.9.2406': attribute type 27 has an invalid length. [ 285.290219][ T8345] netlink: 'syz.9.2417': attribute type 15 has an invalid length. [ 285.298294][ T8345] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2417'. [ 285.309496][ T8345] tipc: Enabling of bearer rejected, failed to enable media [ 285.338492][ T8349] fuse: Bad value for 'fd' [ 285.355034][ T8351] 2N: renamed from vcan0 (while UP) [ 285.616593][ T373] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 285.766618][ T373] usb 9-1: Using ep0 maxpacket: 16 [ 285.777313][ T373] usb 9-1: config 0 has an invalid interface number: 40 but max is 0 [ 285.785625][ T373] usb 9-1: config 0 has no interface number 0 [ 285.789318][ T8363] batadv0: tun_chr_ioctl cmd 2147767519 [ 285.792260][ T373] usb 9-1: config 0 interface 40 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 285.797904][ T8363] batadv0: tun_chr_ioctl cmd 1074025672 [ 285.807528][ T373] usb 9-1: config 0 interface 40 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 285.812940][ T8363] batadv0: ignored: set checksum enabled [ 285.823082][ T373] usb 9-1: config 0 interface 40 has no altsetting 0 [ 285.831842][ T8363] rust_binder: Write failure EFAULT in pid:495 [ 285.837018][ T373] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 285.852302][ T373] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.860384][ T373] usb 9-1: Product: syz [ 285.864639][ T373] usb 9-1: Manufacturer: syz [ 285.869304][ T373] usb 9-1: SerialNumber: syz [ 285.874646][ T373] usb 9-1: config 0 descriptor?? [ 285.880197][ T8355] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 285.887806][ T8355] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 286.096149][ T8355] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 286.105115][ T8355] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 286.517725][ T373] CoreChips 9-1:0.40: probe with driver CoreChips failed with error -22 [ 286.842722][ T36] audit: type=1400 audit(542.446:1293): avc: denied { append } for pid=8385 comm="syz.7.2433" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 286.867847][ T8391] lo: entered allmulticast mode [ 287.050615][ T36] audit: type=1400 audit(542.656:1294): avc: denied { accept } for pid=8397 comm="syz.9.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 287.069624][ T36] audit: type=1400 audit(542.656:1295): avc: denied { listen } for pid=8397 comm="syz.9.2437" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 288.011464][ T8433] overlayfs: failed to resolve './bus': -2 [ 288.040671][ T36] audit: type=1400 audit(543.654:1296): avc: denied { create } for pid=8442 comm="syz.9.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 288.327857][ T634] usb 9-1: USB disconnect, device number 34 [ 288.339563][ T36] audit: type=1400 audit(543.954:1297): avc: denied { create } for pid=8444 comm="syz.8.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 288.342552][ T8445] cgroup: fork rejected by pids controller in /syz8 [ 288.439900][ T12] bridge_slave_1: left allmulticast mode [ 288.445649][ T12] bridge_slave_1: left promiscuous mode [ 288.451428][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.459270][ T12] bridge_slave_0: left allmulticast mode [ 288.464964][ T12] bridge_slave_0: left promiscuous mode [ 288.470822][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.601007][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.603035][ T8457] overlay: Unknown parameter 'uid>00000000004294967295' [ 288.608236][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.615231][ T36] audit: type=1400 audit(544.214:1298): avc: denied { mount } for pid=8456 comm="syz.9.2455" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 288.622842][ T8450] bridge_slave_0: entered allmulticast mode [ 288.650649][ T8450] bridge_slave_0: entered promiscuous mode [ 288.656125][ T8457] overlayfs: failed to clone lowerpath [ 288.662875][ T12] veth1_macvtap: left promiscuous mode [ 288.668604][ T12] veth0_vlan: left promiscuous mode [ 288.698337][ T8461] overlayfs: failed to clone upperpath [ 288.733448][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.740835][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.748002][ T8450] bridge_slave_1: entered allmulticast mode [ 288.755044][ T8450] bridge_slave_1: entered promiscuous mode [ 288.832277][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.839398][ T8450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.846730][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.854125][ T8450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.875664][ T2251] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.883066][ T2251] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.893473][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.900568][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.909559][ T2251] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.916647][ T2251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.943191][ T8450] veth0_vlan: entered promiscuous mode [ 288.954295][ T8450] veth1_macvtap: entered promiscuous mode [ 289.071713][ T36] audit: type=1400 audit(544.684:1299): avc: denied { append } for pid=8489 comm="syz.8.2464" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 289.340477][ T8502] /dev/rnullb0: Can't open blockdev [ 289.348640][ T8503] binder: Binderfs stats mode cannot be changed during a remount [ 289.586581][ T373] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 289.747878][ T373] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.758049][ T373] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 289.767112][ T373] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 289.776299][ T373] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.785210][ T373] usb 9-1: config 0 descriptor?? [ 289.992386][ T373] usb 9-1: USB disconnect, device number 35 [ 290.177190][ T8542] 9pnet_fd: Insufficient options for proto=fd [ 290.612640][ T8549] binder: Unknown parameter 'may' [ 290.939000][ T36] audit: type=1400 audit(546.554:1300): avc: denied { attach_queue } for pid=8564 comm="syz.8.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 291.108512][ T8574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.221648][ T8581] sit0: entered promiscuous mode [ 291.237810][ T8581] netlink: 'syz.9.2496': attribute type 1 has an invalid length. [ 291.271929][ T8581] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2496'. [ 292.198309][ T8600] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 292.198330][ T8600] rust_binder: Read failure Err(EFAULT) in pid:56 [ 292.212342][ T634] rust_binder: 0: removing orphan mapping 0:4120 [ 292.234528][ T8609] sit0: entered promiscuous mode [ 292.240780][ T8609] netlink: 'syz.8.2505': attribute type 1 has an invalid length. [ 292.248627][ T8609] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2505'. [ 293.105156][ T8614] overlayfs: overlapping lowerdir path [ 293.144770][ T8617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 293.144807][ T8617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 293.166373][ T8620] rust_binder: 70: no such ref 0 [ 293.180862][ T8620] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 293.188168][ T8620] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 293.208321][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.208347][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.214570][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.221027][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.227296][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.233522][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.239851][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.246236][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.252422][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.258641][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.264795][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.271233][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.277589][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.283761][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.290174][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.296352][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.302740][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.308952][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.315098][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.321451][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.327851][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.333972][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.340237][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.346359][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.352485][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.358619][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.364880][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.371005][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.377121][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.383203][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.389318][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.395415][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.401547][ T8624] rust_binder: Write failure EFAULT in pid:73 [ 293.437923][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2513'. [ 293.470291][ T36] audit: type=1400 audit(549.084:1301): avc: denied { compute_member } for pid=8631 comm="syz.8.2514" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 293.736623][ T621] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 293.888055][ T621] usb 9-1: config 0 has an invalid interface number: 20 but max is 0 [ 293.896307][ T621] usb 9-1: config 0 has no interface number 0 [ 293.902569][ T621] usb 9-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 293.915275][ T621] usb 9-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 293.924396][ T621] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.932498][ T621] usb 9-1: Product: syz [ 293.936715][ T621] usb 9-1: Manufacturer: syz [ 293.941322][ T621] usb 9-1: SerialNumber: syz [ 293.946573][ T621] usb 9-1: config 0 descriptor?? [ 293.951815][ T8634] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 293.959646][ T621] usb-storage 9-1:0.20: USB Mass Storage device detected [ 293.967828][ T621] usb-storage 9-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 294.160113][ T621] scsi host1: usb-storage 9-1:0.20 [ 294.363207][ T8634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.371854][ T8634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.380251][ T8634] rust_binder: Write failure EFAULT in pid:82 [ 294.397582][ T329] usb 9-1: USB disconnect, device number 36 [ 295.796130][ T8657] binder: Bad value for 'stats' [ 295.857526][ T8663] binder: Bad value for 'max' [ 295.928748][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.935838][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.943256][ T8666] bridge_slave_0: entered allmulticast mode [ 295.950452][ T8666] bridge_slave_0: entered promiscuous mode [ 295.957481][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.964637][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.972464][ T8666] bridge_slave_1: entered allmulticast mode [ 295.979508][ T8666] bridge_slave_1: entered promiscuous mode [ 295.986746][ T8679] tmpfs: Unknown parameter '$ÂÖ‘amôø£p ñ¾aüí½Àç1 ”âѣŀN-§¢ôµ !Ã_’Mþîì^<–ë_ß+ÇËRu0T:9·‚òT`ºq%¯93ÛC#Зt2¢²Œý\(3o[·Žà»' [ 296.044645][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.051752][ T8666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.059101][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.066414][ T8666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.088391][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.095814][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.106204][ T2256] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.113586][ T2256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.123423][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.130795][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.158466][ T8666] veth0_vlan: entered promiscuous mode [ 296.171046][ T8666] veth1_macvtap: entered promiscuous mode [ 296.286614][ T329] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 296.306070][ T8694] fuse: Bad value for 'group_id' [ 296.311171][ T8694] fuse: Bad value for 'group_id' [ 296.329139][ T8700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 296.387131][ T8716] overlayfs: missing 'lowerdir' [ 296.436561][ T329] usb 9-1: Using ep0 maxpacket: 8 [ 296.442627][ T329] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.452842][ T329] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 296.464360][ T329] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 296.475526][ T329] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 296.484751][ T329] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.492789][ T329] usb 9-1: Product: syz [ 296.497042][ T329] usb 9-1: Manufacturer: syz [ 296.501648][ T329] usb 9-1: SerialNumber: syz [ 296.511725][ T329] usb 9-1: config 0 descriptor?? [ 296.718765][ T8686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 297.012922][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2547'. [ 297.234959][ T8755] rust_binder: Error while translating object. [ 297.234984][ T8755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 297.241410][ T8755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:544 [ 298.621344][ T8790] overlayfs: failed to clone upperpath [ 298.650908][ T36] audit: type=1400 audit(554.264:1302): avc: denied { accept } for pid=8794 comm="syz.9.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_selinux_socket permissive=1 [ 298.989708][ T329] usb 9-1: USB disconnect, device number 37 [ 299.326554][ T329] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 299.456557][ T329] usb 9-1: device descriptor read/64, error -71 [ 299.706546][ T329] usb 9-1: device descriptor read/64, error -71 [ 299.956598][ T329] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 300.086818][ T329] usb 9-1: device descriptor read/64, error -71 [ 300.196601][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 300.326580][ T329] usb 9-1: device descriptor read/64, error -71 [ 300.346601][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 300.353127][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.364160][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.373952][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 300.386936][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 300.396019][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.404729][ T10] usb 1-1: config 0 descriptor?? [ 300.436788][ T329] usb usb9-port1: attempt power cycle [ 300.776576][ T329] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 300.797779][ T329] usb 9-1: device descriptor read/8, error -71 [ 300.813393][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 300.819558][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 300.828363][ T10] usb 1-1: USB disconnect, device number 9 [ 300.927668][ T329] usb 9-1: device descriptor read/8, error -71 [ 301.166562][ T329] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 301.187697][ T329] usb 9-1: device descriptor read/8, error -71 [ 301.242889][ T2251] Bluetooth: hci0: Frame reassembly failed (-84) [ 301.317930][ T329] usb 9-1: device descriptor read/8, error -71 [ 301.426654][ T329] usb usb9-port1: unable to enumerate USB device [ 302.209661][ T8875] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 302.209699][ T8875] rust_binder: Error in use_page_slow: EFAULT [ 302.227005][ T8875] rust_binder: use_range failure EFAULT [ 302.237750][ T8875] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 302.243407][ T8875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 302.251873][ T8875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:571 [ 302.336855][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2598'. [ 302.355435][ T8884] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 302.355463][ T8884] rust_binder: Error in use_page_slow: EFAULT [ 302.365969][ T8884] rust_binder: use_range failure EFAULT [ 302.372287][ T8884] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 302.377942][ T8884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 302.385971][ T8884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:136 [ 302.564374][ T8892] overlayfs: failed to clone upperpath [ 303.185385][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2610'. [ 303.218484][ T8918] overlayfs: failed to clone upperpath [ 303.246554][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 303.796552][ T10] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 303.957712][ T10] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 303.966585][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.976815][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 303.985706][ T10] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.999934][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.009018][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.017054][ T10] usb 9-1: Product: syz [ 304.021246][ T10] usb 9-1: Manufacturer: syz [ 304.025834][ T10] usb 9-1: SerialNumber: syz [ 304.032437][ T10] cdc_ncm 9-1:1.0: invalid descriptor buffer length [ 304.039100][ T10] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 304.045923][ T10] cdc_ncm 9-1:1.0: bind() failure [ 305.695480][ T329] usb 9-1: USB disconnect, device number 42 [ 305.715513][ T9032] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 306.026544][ T329] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 306.161808][ T36] audit: type=1400 audit(561.774:1303): avc: denied { read } for pid=9044 comm="syz.9.2657" path="socket:[51596]" dev="sockfs" ino=51596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 306.197804][ T329] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 306.208758][ T329] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.219792][ T329] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.229600][ T329] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 306.243519][ T329] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 306.252676][ T329] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 306.260937][ T329] usb 9-1: Manufacturer: syz [ 306.266298][ T329] usb 9-1: config 0 descriptor?? [ 306.675738][ T329] usbhid 9-1:0.0: can't add hid device: -71 [ 306.682830][ T329] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 306.692144][ T329] usb 9-1: USB disconnect, device number 43 [ 306.749153][ T9069] 9pnet_fd: Insufficient options for proto=fd [ 306.798010][ T9075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=9075 comm=syz.9.2663 [ 306.960928][ T36] audit: type=1400 audit(562.574:1304): avc: denied { write } for pid=9102 comm="syz.9.2672" name="file0" dev="tmpfs" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 306.996566][ T36] audit: type=1400 audit(562.574:1305): avc: denied { open } for pid=9102 comm="syz.9.2672" path="/354/file0" dev="tmpfs" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 307.116583][ T621] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 307.229151][ T9115] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 307.240265][ T9115] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 307.286546][ T621] usb 1-1: Using ep0 maxpacket: 32 [ 307.297431][ T621] usb 1-1: config 0 has an invalid interface number: 13 but max is 0 [ 307.309837][ T621] usb 1-1: config 0 has no interface number 0 [ 307.316065][ T621] usb 1-1: config 0 interface 13 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.326349][ T36] audit: type=1400 audit(562.934:1306): avc: denied { map } for pid=9124 comm="syz.8.2678" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 307.327194][ T621] usb 1-1: config 0 interface 13 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.359469][ T621] usb 1-1: config 0 interface 13 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 307.361411][ T36] audit: type=1400 audit(562.934:1307): avc: denied { execute } for pid=9124 comm="syz.8.2678" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 307.376897][ T621] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 307.404806][ T621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.415613][ T621] usb 1-1: config 0 descriptor?? [ 307.420752][ T9129] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.421132][ T9129] rust_binder: Error while translating object. [ 307.427680][ T9129] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 307.433924][ T9129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:189 [ 307.459241][ T9131] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 307.654877][ T621] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.13/0003:0458:5011.0020/input/input43 [ 307.676039][ T621] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.13/0003:0458:5011.0020/input/input44 [ 307.694265][ T621] kye 0003:0458:5011.0020: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input13 [ 307.776613][ T373] usb 9-1: new low-speed USB device number 44 using dummy_hcd [ 307.867912][ T36] audit: type=1400 audit(563.484:1308): avc: denied { watch_reads } for pid=9089 comm="syz.0.2667" path="/16" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 307.927788][ T373] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.938936][ T373] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.952080][ T373] usb 9-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 307.961345][ T373] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.970707][ T373] usb 9-1: config 0 descriptor?? [ 308.312814][ T9144] KVM: debugfs: duplicate directory 9144-6 [ 308.379542][ T9138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.388210][ T9138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.401002][ T9138] x_tables: unsorted underflow at hook 3 [ 308.408395][ T373] usbhid 9-1:0.0: can't add hid device: -71 [ 308.415576][ T373] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 308.427252][ T373] usb 9-1: USB disconnect, device number 44 [ 308.571275][ T9156] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 308.580946][ T9156] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2688'. [ 308.776786][ C0] kye 0003:0458:5011.0020: usb_submit_urb(ctrl) failed: -1 [ 308.927700][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2692'. [ 308.942001][ T9164] rust_binder: Write failure EFAULT in pid:200 [ 309.126861][ T9184] syz.8.2697 (9184): /proc/9182/oom_adj is deprecated, please use /proc/9182/oom_score_adj instead. [ 309.146225][ T329] usb 1-1: USB disconnect, device number 10 [ 309.286537][ T329] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 309.286557][ T9183] rust_binder: Read failure Err(EFAULT) in pid:219 [ 309.457962][ T329] usb 1-1: not running at top speed; connect to a high speed hub [ 309.487245][ T329] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 309.518011][ T329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.536526][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.544749][ T329] usb 1-1: Product: 킮⮢쩆ギℰå¸ê¡”ꗤ鑵꛱鸱뵦餧펭嘴鱈里༴Ὁ唼婥é¿ì–±é¡»î¶‹â£¡ï•ì¢¬ì“Žé¥¦ãŸ¥ë„¡ã¼‡é’€à£“ë¤æꃥ襆ìšã½•ï¡—ë¿é¶áª®ç“¶ä¨ é¸¤á°¼ì³‡á¯…åŒ€ï§ŸâŽ¥í‡¹ã¹¶î–—ã µé˜©ã°Žè®³ìº•á·»è¹ [ 309.596540][ T329] usb 1-1: Manufacturer: 胮೼á“ïž©ë쪬쎠层敵Ⰾ廎랂ೇڥ㡮邋滯㫸૳믄馅䂜䔧턆땒æ¯ê°Šâ±‚⧶ï¿ê‘½ì»¤ì’®Æ¦ì°¹í…¸é¹¨á–‡ã”é‡é·¹ï²ºæ•¥ë†¥ïŸ¡ã¯°ï¡ë«­ä¤§ìˆˆî²¶é¶Œéœà¶•á³¿âŸ‚컑༯ᶞí—Ӛ⨸è´ê³”ã‘”å“ᩬఉ뢧쟦Α䰹齌 [ 309.621440][ T329] usb 1-1: SerialNumber: êœï«®ë¿–繷푎讂窪羖å´ïŸƒâ§“毿ë½â²¢á‚„㹌趞굇䵞ಢ⚑슰౞諩ࠑ쮭嫾驛⨆é¬å„Œá á€ƒâ£ƒâŠ®â¹Š [ 309.638513][ T9162] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 309.871616][ T329] cdc_ncm 1-1:1.0: bind() failure [ 309.879382][ T329] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 309.886235][ T329] cdc_ncm 1-1:1.1: bind() failure [ 309.896630][ T329] usb 1-1: USB disconnect, device number 11 [ 316.914584][ T9191] rust_binder: 223: no such ref 0 [ 316.921680][ T9191] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 316.930407][ T9196] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 316.938663][ T9191] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 316.983467][ T36] audit: type=1400 audit(572.594:1309): avc: denied { setattr } for pid=9207 comm="syz.9.2706" name="NETLINK" dev="sockfs" ino=51979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 317.038120][ T322] Bluetooth: hci0: Frame reassembly failed (-84) [ 317.058467][ T36] audit: type=1400 audit(572.674:1310): avc: denied { append } for pid=9212 comm="syz.7.2708" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 317.093314][ T9217] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 317.093351][ T9217] rust_binder: Error in use_page_slow: EFAULT [ 317.104310][ T9218] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 317.110518][ T9217] rust_binder: use_range failure EFAULT [ 317.121756][ T9218] rust_binder: Error in use_page_slow: EFAULT [ 317.122866][ T9217] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 317.127566][ T9218] rust_binder: use_range failure EFAULT [ 317.133674][ T9217] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 317.141810][ T9218] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 317.147431][ T9217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:596 [ 317.158136][ T9218] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 317.173880][ T9218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:596 [ 317.274775][ T9223] usb usb4: usbfs: process 9223 (syz.7.2710) did not claim interface 0 before use [ 317.294696][ T36] audit: type=1326 audit(572.904:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.7.2710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe02cb8ebe9 code=0x0 [ 317.831065][ T9226] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9226 comm=syz.9.2711 [ 317.855885][ T9228] IPv6: NLM_F_CREATE should be specified when creating new route [ 318.035111][ T9250] fuse: Bad value for 'group_id' [ 318.040293][ T9250] fuse: Bad value for 'group_id' [ 318.063797][ T9255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:603 [ 318.064176][ T9256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:603 [ 318.064320][ T9254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=9254 comm=syz.9.2722 [ 318.096912][ T9254] netlink: 'syz.9.2722': attribute type 46 has an invalid length. [ 318.106588][ T373] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 318.257685][ T373] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 318.268646][ T373] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 318.277986][ T373] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.287046][ T373] usb 9-1: config 0 descriptor?? [ 318.292363][ T9228] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 318.703791][ T373] hid-generic 0003:04F3:0755.0021: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 319.086547][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 319.086555][ T6535] Bluetooth: hci0: command 0x1003 tx timeout [ 319.721333][ T9282] fuse: Unknown parameter 'fœ0xffffffffffffffff' [ 319.729087][ T9283] fuse: Unknown parameter 'fœ0xffffffffffffffff' [ 319.748693][ T9287] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 319.957806][ T9287] rust_binder: Error in use_page_slow: ESRCH [ 319.964476][ T9287] rust_binder: use_range failure ESRCH [ 319.970549][ T9287] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 319.976052][ T9287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 319.984196][ T9287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:80 [ 320.032372][ T9292] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2734'. [ 320.064451][ T9294] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 320.073597][ T9294] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 320.085448][ T9294] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 320.560622][ T36] audit: type=1400 audit(576.174:1312): avc: denied { create } for pid=9305 comm="syz.0.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 320.561553][ T9308] netlink: 'syz.0.2740': attribute type 28 has an invalid length. [ 320.594878][ T373] usb 9-1: USB disconnect, device number 45 [ 320.611457][ T36] audit: type=1326 audit(576.224:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.0.2740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9500b8ebe9 code=0x0 [ 320.655465][ T9310] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 320.689695][ T9313] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 320.699471][ T9313] rust_binder: Read failure Err(EFAULT) in pid:244 [ 320.733664][ T36] audit: type=1400 audit(576.344:1314): avc: denied { write } for pid=9315 comm="syz.8.2743" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 321.009960][ T9320] 9pnet_fd: Insufficient options for proto=fd [ 321.016748][ T9320] fuse: Unknown parameter 'áØÇÞÊ{·à&ìЀ¥éª<£.ÀêL˜»ÊL챈k«ÙÊ¢3q*é*ÍÉ)8d9sèNú„?'«¸zð뱄–æ2­tŠHƒçi( ß¨15 [ 321.016748][ T9320] [Ä[4žÀwéŒ@˜qC4î«+0x0000000000000003' [ 321.105927][ T36] audit: type=1400 audit(576.714:1315): avc: denied { mounton } for pid=9321 comm="syz.7.2745" path="/dev/binderfs/binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 321.144236][ T9324] binder: Bad value for 'max' [ 321.906560][ T621] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 322.057689][ T621] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 322.068585][ T621] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.079502][ T621] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.089283][ T621] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 322.103347][ T621] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 322.112473][ T621] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 322.120599][ T621] usb 9-1: Manufacturer: syz [ 322.125904][ T621] usb 9-1: config 0 descriptor?? [ 322.449159][ T36] audit: type=1400 audit(578.064:1316): avc: denied { write } for pid=9351 comm="syz.0.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 322.487081][ T9356] binder: Unknown parameter 'mx§' [ 322.571323][ T9360] SELinux: security_context_str_to_sid () failed with errno=-22 [ 322.787526][ T621] usbhid 9-1:0.0: can't add hid device: -71 [ 322.793752][ T621] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 322.802580][ T621] usb 9-1: USB disconnect, device number 46 [ 322.866562][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 323.016555][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 323.022722][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.032939][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.043873][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.053739][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 323.062814][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.071555][ T10] usb 1-1: config 0 descriptor?? [ 323.282253][ T10] logitech-djreceiver 0003:046D:C537.0022: item fetching failed at offset 0/1 [ 323.299292][ T10] logitech-djreceiver 0003:046D:C537.0022: logi_dj_probe: parse failed [ 323.312218][ T10] logitech-djreceiver 0003:046D:C537.0022: probe with driver logitech-djreceiver failed with error -22 [ 323.334137][ T10] usb 1-1: USB disconnect, device number 12 [ 323.344664][ T36] audit: type=1400 audit(578.954:1317): avc: denied { mounton } for pid=9382 comm="syz.8.2762" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 323.367859][ T36] audit: type=1400 audit(578.984:1318): avc: denied { unmount } for pid=8450 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 323.387507][ T36] audit: type=1400 audit(578.994:1319): avc: denied { accept } for pid=9384 comm="syz.8.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.429588][ T9389] support for cryptoloop has been removed. Use dm-crypt instead. [ 323.452963][ T36] audit: type=1400 audit(579.064:1320): avc: denied { create } for pid=9391 comm="syz.8.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 323.496685][ T36] audit: type=1400 audit(579.114:1321): avc: denied { shutdown } for pid=9395 comm="syz.8.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 323.636564][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 323.786563][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 323.792886][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.803064][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.812081][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 323.816549][ T329] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 323.821680][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.837870][ T10] usb 1-1: config 0 descriptor?? [ 323.987760][ T329] usb 9-1: Using ep0 maxpacket: 16 [ 323.997096][ T329] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 324.009832][ T329] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.023003][ T329] usb 9-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 324.032105][ T329] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.040951][ T329] usb 9-1: config 0 descriptor?? [ 324.046654][ T9378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.055455][ T9378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.072340][ T9] usb 1-1: USB disconnect, device number 13 [ 324.127660][ T9424] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 324.460602][ T329] wacom 0003:056A:0059.0023: hidraw0: USB HID v0.09 Device [HID 056a:0059] on usb-dummy_hcd.8-1/input0 [ 324.660138][ T373] usb 9-1: USB disconnect, device number 47 [ 324.809748][ T9437] /dev/rnullb0: Can't open blockdev [ 325.076091][ T9451] cgroup: noprefix used incorrectly [ 325.392921][ T9489] netlink: 'syz.8.2800': attribute type 4 has an invalid length. [ 325.401077][ T9489] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.2800'. [ 325.438637][ T322] Bluetooth: hci0: Frame reassembly failed (-84) [ 325.875328][ T9495] devpts: called with bogus options [ 325.902465][ T9497] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.136545][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 326.306625][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 326.313188][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 326.321437][ T9] usb 1-1: config 0 has no interface number 0 [ 326.327609][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 326.335762][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 326.344885][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.352952][ T9] usb 1-1: Product: syz [ 326.357189][ T9] usb 1-1: Manufacturer: syz [ 326.361815][ T9] usb 1-1: SerialNumber: syz [ 326.367154][ T9] usb 1-1: config 0 descriptor?? [ 326.372931][ T9] smsc75xx v1.0.0 [ 326.470177][ T9503] overlayfs: failed to clone upperpath [ 326.774083][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 326.785020][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 326.794713][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 326.805009][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 327.486581][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 327.486581][ T6535] Bluetooth: hci0: command 0x1003 tx timeout [ 328.327528][ T36] audit: type=1400 audit(583.944:1322): avc: denied { map } for pid=9554 comm="syz.7.2824" path="socket:[52938]" dev="sockfs" ino=52938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 328.351196][ T36] audit: type=1400 audit(583.944:1323): avc: denied { accept } for pid=9554 comm="syz.7.2824" path="socket:[52938]" dev="sockfs" ino=52938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 328.484562][ T9562] rust_binder: Error while translating object. [ 328.484591][ T9562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 328.490869][ T9562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:642 [ 328.527227][ T36] audit: type=1400 audit(584.144:1324): avc: denied { ioctl } for pid=9567 comm="syz.7.2828" path="socket:[53033]" dev="sockfs" ino=53033 ioctlcmd=0x5460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 328.556438][ T9571] /dev/nullb0: Can't lookup blockdev [ 328.567015][ T9571] netlink: 'syz.7.2829': attribute type 4 has an invalid length. [ 328.682130][ T36] audit: type=1326 audit(584.294:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.7.2830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe02cb8ebe9 code=0x0 [ 328.893368][ T9587] netlink: 'syz.9.2834': attribute type 4 has an invalid length. [ 328.916542][ T9] usb 1-1: USB disconnect, device number 14 [ 328.934180][ T9589] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 232, size: 18446744073709551365) [ 328.934203][ T9589] rust_binder: Error while translating object. [ 328.946402][ T9589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 328.952647][ T9589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 328.975955][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 329.181205][ T9604] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 329.195045][ T9604] rust_binder: Write failure EINVAL in pid:169 [ 329.220784][ T9608] Trying to write to read-only block-device rnullb0 [ 329.257902][ T9610] rust_binder: Error while translating object. [ 329.257951][ T9610] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 329.264179][ T9610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:175 [ 329.327206][ T9617] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 329.388385][ T9623] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 329.402035][ T9623] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 97) [ 329.402056][ T9623] rust_binder: Error while translating object. [ 329.412921][ T9623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 329.415219][ T36] audit: type=1400 audit(585.024:1326): avc: denied { create } for pid=9621 comm="syz.8.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 329.419404][ T9623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178 [ 329.429113][ T9624] rust_binder: Write failure EFAULT in pid:321 [ 330.305484][ T9639] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.373563][ T36] audit: type=1400 audit(585.984:1327): avc: denied { relabelto } for pid=9643 comm="syz.0.2853" name="file0" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 330.374057][ T9644] loop7: detected capacity change from 0 to 7 [ 330.380169][ T36] audit: type=1400 audit(585.984:1328): avc: denied { associate } for pid=9643 comm="syz.0.2853" name="file0" dev="tmpfs" ino=306 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 330.444320][ T36] audit: type=1400 audit(586.034:1329): avc: denied { unlink } for pid=8666 comm="syz-executor" name="file0" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 331.324640][ T9657] netlink: 679 bytes leftover after parsing attributes in process `syz.0.2857'. [ 331.335540][ T9657] netlink: 679 bytes leftover after parsing attributes in process `syz.0.2857'. [ 331.636177][ T9662] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.656526][ T621] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 331.703462][ T9662] rust_binder: Failed to allocate buffer. len:4295032128, is_oneway:true [ 331.703514][ T9662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 331.712145][ T9662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:657 [ 331.796537][ T621] usb 1-1: device descriptor read/64, error -71 [ 332.046582][ T621] usb 1-1: device descriptor read/64, error -71 [ 332.286601][ T621] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 332.416571][ T621] usb 1-1: device descriptor read/64, error -71 [ 332.522859][ T36] audit: type=1326 audit(588.134:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9664 comm="syz.7.2860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe02cb8ebe9 code=0x0 [ 332.676569][ T621] usb 1-1: device descriptor read/64, error -71 [ 332.786614][ T621] usb usb1-port1: attempt power cycle [ 333.126578][ T621] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 333.147715][ T621] usb 1-1: device descriptor read/8, error -71 [ 333.248672][ T9669] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2861'. [ 333.277614][ T621] usb 1-1: device descriptor read/8, error -71 [ 333.516557][ T621] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 333.537631][ T621] usb 1-1: device descriptor read/8, error -71 [ 333.667663][ T621] usb 1-1: device descriptor read/8, error -71 [ 333.776654][ T621] usb usb1-port1: unable to enumerate USB device [ 334.222385][ T9703] netlink: 184 bytes leftover after parsing attributes in process `syz.9.2873'. [ 334.249479][ T9715] fuse: Bad value for 'group_id' [ 334.254635][ T9714] fuse: Bad value for 'group_id' [ 334.259750][ T9715] fuse: Bad value for 'group_id' [ 334.261645][ T9714] fuse: Bad value for 'group_id' [ 334.989431][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2890'. [ 335.365527][ T9779] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.417739][ T9781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213 [ 336.600258][ T9812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.663997][ T9812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.736069][ T9817] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.755765][ T9822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32794 sclass=netlink_route_socket pid=9822 comm=syz.0.2912 [ 337.305057][ T9844] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2919'. [ 337.314870][ T9844] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2919'. [ 337.332251][ T36] audit: type=1400 audit(592.944:1331): avc: denied { append } for pid=9847 comm="syz.7.2921" name="binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 337.354844][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 337.506530][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 337.512873][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 337.521317][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 337.530185][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 337.539187][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 337.548982][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 337.558664][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 337.571890][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 337.580985][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.590118][ T9] usb 1-1: config 0 descriptor?? [ 337.798114][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 337.810595][ T9] usb 1-1: USB disconnect, device number 19 [ 337.817486][ T9] usblp0: removed [ 337.884649][ T9859] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9859 comm=syz.9.2924 [ 337.896999][ T36] audit: type=1400 audit(593.494:1332): avc: denied { read } for pid=9857 comm="syz.9.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 338.005673][ T2256] Bluetooth: hci0: Frame reassembly failed (-84) [ 338.246573][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 338.376616][ T9] usb 1-1: device descriptor read/64, error -71 [ 338.616576][ T9] usb 1-1: device descriptor read/64, error -71 [ 338.843173][ T9878] /dev/loop0: Can't lookup blockdev [ 338.866527][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 338.898002][ T36] audit: type=1400 audit(594.514:1333): avc: denied { lock } for pid=9894 comm="syz.9.2935" path="socket:[55824]" dev="sockfs" ino=55824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.996613][ T9] usb 1-1: device descriptor read/64, error -71 [ 339.236572][ T9] usb 1-1: device descriptor read/64, error -71 [ 339.346741][ T9] usb usb1-port1: attempt power cycle [ 339.686570][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 339.707918][ T9] usb 1-1: device descriptor read/8, error -71 [ 339.837727][ T9] usb 1-1: device descriptor read/8, error -71 [ 340.046631][ T6535] Bluetooth: hci0: command 0x1003 tx timeout [ 340.046655][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 340.076566][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 340.097748][ T9] usb 1-1: device descriptor read/8, error -71 [ 340.237297][ T9] usb 1-1: device descriptor read/8, error -71 [ 340.346638][ T9] usb usb1-port1: unable to enumerate USB device [ 340.636562][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 340.787877][ T9] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 340.795244][ T9] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 340.804665][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.813375][ T9] usb 1-1: config 0 descriptor?? [ 340.819533][ T9] rndis_host 1-1:0.0: skipping garbage [ 340.825058][ T9] usb 1-1: bad CDC descriptors [ 341.021617][ T9] usb 1-1: USB disconnect, device number 24 [ 341.197146][ T9911] rust_binder: 691: no such ref 3 [ 341.202663][ T9912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 341.209989][ T9913] rust_binder: 691: no such ref 3 [ 341.331585][ T9917] rust_binder: 9916 RLIMIT_NICE not set [ 341.578494][ T9926] can0: slcan on ptm1. [ 341.826563][ T373] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 341.977753][ T373] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.987968][ T373] usb 1-1: config 0 has no interfaces? [ 341.993482][ T373] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 342.002690][ T373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.011446][ T373] usb 1-1: config 0 descriptor?? [ 342.066097][ T621] rust_binder: 9914: removing orphan mapping 0:1048 [ 342.217937][ T373] usb 1-1: USB disconnect, device number 25 [ 342.267447][ T9926] can0 (unregistered): slcan off ptm1. [ 342.802166][ T9973] devpts: called with bogus options [ 342.992970][ T9979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.489712][ T36] audit: type=1400 audit(599.104:1334): avc: denied { map } for pid=9980 comm="syz.9.2950" path="socket:[56007]" dev="sockfs" ino=56007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 343.603767][ T9987] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2951'. [ 343.614146][ T36] audit: type=1400 audit(599.224:1335): avc: denied { shutdown } for pid=9986 comm="syz.9.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 343.615954][ T9987] 9pnet_fd: Insufficient options for proto=fd [ 343.843285][ T9997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.945904][ T9999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:272 [ 344.516242][ T36] audit: type=1400 audit(600.124:1336): avc: denied { setattr } for pid=10008 comm="syz.9.2958" path="socket:[54980]" dev="sockfs" ino=54980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 344.555900][T10005] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.563260][T10005] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.572447][T10005] bridge_slave_0: entered allmulticast mode [ 344.579391][T10005] bridge_slave_0: entered promiscuous mode [ 344.586740][T10005] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.593905][T10005] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.601277][T10005] bridge_slave_1: entered allmulticast mode [ 344.607909][T10005] bridge_slave_1: entered promiscuous mode [ 344.619350][T10021] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 344.740510][T10005] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.747635][T10005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.754943][T10005] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.762017][T10005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.779283][T10038] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 344.798737][ T2242] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.822850][ T2242] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.836896][ T2251] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.843992][ T2251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.858372][ T2242] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.865458][ T2242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.923209][T10005] veth0_vlan: entered promiscuous mode [ 344.947468][T10005] veth1_macvtap: entered promiscuous mode [ 345.009459][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2955'. [ 345.018538][ T373] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 345.036809][T10040] rust_binder: Error while translating object. [ 345.036849][T10040] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 345.043066][T10040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:2 [ 345.106572][ T36] audit: type=1400 audit(600.714:1337): avc: denied { append } for pid=10043 comm="syz.7.2968" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 345.176561][ T373] usb 1-1: Using ep0 maxpacket: 32 [ 345.182814][ T373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.194331][ T373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.207709][ T373] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 345.226601][ T373] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 345.262916][ T373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.271430][T10042] syzkaller0: entered promiscuous mode [ 345.277808][ T373] usb 1-1: config 0 descriptor?? [ 345.283237][T10042] syzkaller0: entered allmulticast mode [ 345.290345][ T373] usbhid 1-1:0.0: can't add hid device: -22 [ 345.296839][ T373] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 345.440177][T10052] devpts: called with bogus options [ 345.491341][T10038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 345.491375][T10038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 345.501920][ T373] usb 1-1: USB disconnect, device number 26 [ 345.572184][T10058] netlink: 'syz.9.2972': attribute type 1 has an invalid length. [ 345.580035][T10058] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2972'. [ 345.784843][T10070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:15 [ 346.898799][ T36] audit: type=1326 audit(602.514:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10092 comm="syz.0.2982" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9500b8ebe9 code=0x0 [ 346.916537][ T621] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 347.086705][ T621] usb 2-1: Using ep0 maxpacket: 32 [ 347.095276][ T621] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 347.106224][ T621] usb 2-1: config 0 has no interface number 0 [ 347.119937][ T621] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 347.136510][ T621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.155038][ T621] usb 2-1: Product: syz [ 347.159354][ T621] usb 2-1: Manufacturer: syz [ 347.163984][ T621] usb 2-1: SerialNumber: syz [ 347.174778][ T621] usb 2-1: config 0 descriptor?? [ 347.191183][ T621] smsc95xx v2.0.0 [ 347.355679][T10114] cgroup: none used incorrectly [ 347.360896][T10115] cgroup: none used incorrectly [ 347.751956][T10117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2991'. [ 347.777860][T10117] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 347.852602][T10122] rust_binder: Error while translating object. [ 347.852635][T10122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 347.858944][T10122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298 [ 347.888358][T10126] binder: Unknown parameter 'defcontext0x0000000000000003' [ 347.999006][T10088] binder: Unknown parameter 'statv' [ 348.082093][ T36] audit: type=1400 audit(603.694:1339): avc: denied { map } for pid=10134 comm="syz.0.2997" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 348.110932][ T36] audit: type=1400 audit(603.724:1340): avc: denied { read write } for pid=10134 comm="syz.0.2997" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 348.113973][T10135] 9pnet_fd: Insufficient options for proto=fd [ 348.133970][ T36] audit: type=1400 audit(603.724:1341): avc: denied { open } for pid=10134 comm="syz.0.2997" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 348.171505][T10135] overlayfs: failed to resolve './file1': -2 [ 348.196226][T10140] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 348.196989][T10141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:305 [ 348.491736][T10158] tipc: Started in network mode [ 348.496977][T10158] tipc: Node identity 2248b51010eb, cluster identity 4 [ 348.503935][T10158] tipc: Enabled bearer , priority 0 [ 348.512728][T10158] tipc: Disabling bearer [ 348.806547][ T329] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 348.936545][ T329] usb 1-1: device descriptor read/64, error -71 [ 348.988473][T10165] bridge0: port 3(veth0_to_team) entered blocking state [ 348.995541][T10165] bridge0: port 3(veth0_to_team) entered disabled state [ 349.002674][T10165] veth0_to_team: entered allmulticast mode [ 349.009262][T10165] veth0_to_team: entered promiscuous mode [ 349.015835][T10165] 9pnet_fd: p9_fd_create_unix (10165): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 349.176564][ T329] usb 1-1: device descriptor read/64, error -71 [ 349.416539][ T329] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 349.546533][ T329] usb 1-1: device descriptor read/64, error -71 [ 349.640454][ T621] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 349.651706][ T621] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 349.661337][ T621] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 349.672541][ T621] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 349.685062][ T621] usb 2-1: USB disconnect, device number 27 [ 349.768901][T10171] fuse: blksize only supported for fuseblk [ 349.786815][ T329] usb 1-1: device descriptor read/64, error -71 [ 349.793975][T10175] overlayfs: failed to clone upperpath [ 349.817589][T10177] devpts: called with bogus options [ 349.835412][T10180] overlayfs: failed to clone upperpath [ 349.896736][ T329] usb usb1-port1: attempt power cycle [ 350.236555][ T329] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 350.257651][ T329] usb 1-1: device descriptor read/8, error -71 [ 350.387800][ T329] usb 1-1: device descriptor read/8, error -71 [ 350.630255][ T329] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 350.657929][ T329] usb 1-1: device descriptor read/8, error -71 [ 350.797757][ T329] usb 1-1: device descriptor read/8, error -71 [ 350.896575][ T621] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 350.916623][ T329] usb usb1-port1: unable to enumerate USB device [ 351.047770][ T621] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 351.056600][ T621] usb 2-1: config 0 has no interface number 0 [ 351.062700][ T621] usb 2-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 351.073635][ T621] usb 2-1: config 0 interface 214 has no altsetting 0 [ 351.082083][ T621] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 351.091247][ T621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.099533][ T621] usb 2-1: Product: syz [ 351.103732][ T621] usb 2-1: Manufacturer: syz [ 351.108372][ T621] usb 2-1: SerialNumber: syz [ 351.113672][ T621] usb 2-1: config 0 descriptor?? [ 351.118982][T10190] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 351.327262][T10190] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 351.403934][T10197] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 351.592761][ T2251] Bluetooth: hci0: Frame reassembly failed (-84) [ 351.599482][ T2251] Bluetooth: hci0: Frame reassembly failed (-84) [ 352.446976][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 352.458268][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 352.859842][T10190] rust_binder: Error while translating object. [ 352.859908][T10190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 352.866219][T10190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 352.871463][T10210] overlayfs: failed to clone upperpath [ 352.891497][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 352.902739][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 352.913975][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 352.921337][T10213] fuse: Unknown parameter 'groupdid' [ 352.925397][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 352.941528][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 352.952894][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 352.964775][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 352.976215][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 352.987544][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 352.998823][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 353.010156][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 353.021438][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 353.032632][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 353.044100][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 353.055267][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 353.066601][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 353.077802][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 353.089154][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 353.100231][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 353.108274][T10216] netlink: 240 bytes leftover after parsing attributes in process `syz.9.3026'. [ 353.111610][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 353.131329][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 353.142625][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 353.153750][ T621] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 353.166243][ T621] ax88179_178a 2-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, d2:8b:6b:35:4e:12 [ 353.183918][ T621] usb 2-1: USB disconnect, device number 28 [ 353.190698][ T621] ax88179_178a 2-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 353.646567][ T6535] Bluetooth: hci0: command 0x1003 tx timeout [ 353.646661][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 354.198820][T10227] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3030'. [ 356.877847][T10265] netlink: 220 bytes leftover after parsing attributes in process `syz.9.3044'. [ 357.127653][ T36] audit: type=1400 audit(612.744:1342): avc: denied { mounton } for pid=10235 comm="syz.1.3034" path="/proc/45/task" dev="proc" ino=57421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 357.814640][T10280] tipc: Started in network mode [ 357.824591][T10280] tipc: Node identity 1230527ecd86, cluster identity 4711 [ 357.845011][T10280] tipc: Enabled bearer , priority 0 [ 357.856915][T10280] syzkaller0: entered promiscuous mode [ 357.875308][T10280] syzkaller0: entered allmulticast mode [ 357.908327][T10280] tipc: Resetting bearer [ 357.915113][T10279] tipc: Resetting bearer [ 357.922096][T10279] tipc: Disabling bearer [ 357.967583][T10237] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551611) [ 357.967621][T10237] rust_binder: Error while translating object. [ 357.981344][T10237] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 357.987613][T10237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45 [ 358.028961][T10291] loop7: detected capacity change from 0 to 7 [ 358.100943][T10298] tipc: Started in network mode [ 358.105949][T10298] tipc: Node identity 7, cluster identity 4711 [ 358.117036][T10298] tipc: Node number set to 7 [ 358.323230][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 358.333080][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 358.544319][T10327] netlink: 'syz.7.3070': attribute type 4 has an invalid length. [ 358.552891][T10327] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3070'. [ 358.753183][ T36] audit: type=1400 audit(614.364:1343): avc: denied { watch watch_reads } for pid=10343 comm="syz.9.3077" path="/526/file1" dev="tmpfs" ino=2876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 361.249011][T10424] can: request_module (can-proto-6) failed. [ 361.665114][T10453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 361.666970][T10453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 361.673831][T10453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:386 [ 361.719162][ T36] audit: type=1400 audit(617.334:1344): avc: denied { read } for pid=10456 comm="syz.0.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 362.615040][T10473] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3128'. [ 364.234742][ T36] audit: type=1400 audit(619.844:1345): avc: denied { mounton } for pid=10520 comm="syz.0.3149" path="/138/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 367.687868][T10611] rust_binder: Error while translating object. [ 367.688205][T10611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 367.708067][T10611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:823 [ 368.159030][T10634] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 368.274646][T10641] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 368.777418][ T373] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 368.926565][ T373] usb 1-1: Using ep0 maxpacket: 8 [ 368.933606][ T373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 368.944970][ T373] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 368.956491][ T373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.977143][ T373] usb 1-1: config 0 descriptor?? [ 371.552537][ T634] usb 1-1: USB disconnect, device number 31 [ 376.746551][ T9] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 376.907763][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 376.916989][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.935477][ T9] usb 1-1: config 0 descriptor?? [ 377.993705][ T36] audit: type=1326 audit(633.604:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d998ebe9 code=0x7ffc0000 [ 378.046511][ T36] audit: type=1326 audit(633.604:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32d992add9 code=0x7ffc0000 [ 378.083139][ T36] audit: type=1326 audit(633.604:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d998ebe9 code=0x7ffc0000 [ 378.136511][ T36] audit: type=1326 audit(633.604:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d998ebe9 code=0x7ffc0000 [ 378.196514][ T36] audit: type=1326 audit(633.604:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32d992add9 code=0x7ffc0000 [ 378.240448][ T36] audit: type=1326 audit(633.604:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d998ebe9 code=0x7ffc0000 [ 378.297086][ T36] audit: type=1326 audit(633.604:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d998ebe9 code=0x7ffc0000 [ 378.346496][ T36] audit: type=1326 audit(633.604:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d998ebe9 code=0x7ffc0000 [ 378.406501][ T36] audit: type=1326 audit(633.604:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d998ebe9 code=0x7ffc0000 [ 378.456514][ T36] audit: type=1326 audit(633.604:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32d992add9 code=0x7ffc0000 [ 378.626746][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 378.638424][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 378.648947][ T9] asix 1-1:0.0: probe with driver asix failed with error -71 [ 378.660129][ T9] usb 1-1: USB disconnect, device number 32 [ 379.416521][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 379.566555][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 379.572871][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.584123][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.594152][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 379.603471][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.616758][ T9] usb 1-1: config 0 descriptor?? [ 379.625898][ T9] hub 1-1:0.0: USB hub found [ 379.824139][ T9] hub 1-1:0.0: 31 ports detected [ 379.829536][ T9] hub 1-1:0.0: insufficient power available to use all downstream ports [ 380.024506][ T9] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 380.030973][ T9] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 380.047273][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 380.053294][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 380.096966][ T9] usb 1-1: USB disconnect, device number 33 [ 381.934523][ T322] veth0_to_team: left allmulticast mode [ 381.940361][ T322] veth0_to_team: left promiscuous mode [ 381.945992][ T322] bridge0: port 3(veth0_to_team) entered disabled state [ 381.954061][ T322] bridge_slave_1: left allmulticast mode [ 381.959812][ T322] bridge_slave_1: left promiscuous mode [ 381.965564][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.974498][ T322] bridge_slave_0: left allmulticast mode [ 381.980353][ T322] bridge_slave_0: left promiscuous mode [ 381.986052][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.076701][T10850] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.091525][T10850] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.111396][T10850] bridge_slave_0: entered allmulticast mode [ 382.128613][T10850] bridge_slave_0: entered promiscuous mode [ 382.140229][ T322] veth1_macvtap: left promiscuous mode [ 382.150188][ T322] veth0_vlan: left promiscuous mode [ 382.282263][T10850] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.296519][T10850] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.311130][T10850] bridge_slave_1: entered allmulticast mode [ 382.325716][T10850] bridge_slave_1: entered promiscuous mode [ 382.449685][T10850] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.456799][T10850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.464161][T10850] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.471274][T10850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.507829][ T2251] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.515253][ T2251] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.526271][ T2251] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.533377][ T2251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.568261][ T2251] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.575353][ T2251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.620933][T10850] veth0_vlan: entered promiscuous mode [ 382.634697][T10850] veth1_macvtap: entered promiscuous mode [ 382.651171][T10863] kvm: kvm [10862]: vcpu2, guest rIP: 0x45c Unhandled WRMSR(0xc1) = 0x800 [ 382.660055][T10863] kvm: kvm [10862]: vcpu2, guest rIP: 0x45c Unhandled WRMSR(0xc2) = 0x800 [ 382.678536][T10863] kvm: kvm [10862]: vcpu2, guest rIP: 0x45c Unhandled WRMSR(0x11e) = 0xbe702911 [ 382.691677][T10863] kvm: kvm [10862]: vcpu2, guest rIP: 0x45c Unhandled WRMSR(0x186) = 0x800 [ 382.707869][T10863] kvm: kvm [10862]: vcpu2, guest rIP: 0x45c Unhandled WRMSR(0x187) = 0x800 [ 382.725634][T10866] loop8: detected capacity change from 0 to 8 [ 382.958279][ T322] bridge_slave_1: left allmulticast mode [ 382.964841][ T322] bridge_slave_1: left promiscuous mode [ 382.976168][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.995536][ T322] bridge_slave_0: left allmulticast mode [ 383.007092][ T322] bridge_slave_0: left promiscuous mode [ 383.014126][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.272893][ T322] tipc: Left network mode [ 383.281409][ T322] veth1_macvtap: left promiscuous mode [ 383.294355][ T322] veth0_vlan: left promiscuous mode [ 383.495454][T10873] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.504758][T10873] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.512306][T10873] bridge_slave_0: entered allmulticast mode [ 383.518668][T10873] bridge_slave_0: entered promiscuous mode [ 383.525282][T10873] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.532785][T10873] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.540657][T10873] bridge_slave_1: entered allmulticast mode [ 383.547131][T10873] bridge_slave_1: entered promiscuous mode [ 383.603388][T10873] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.610573][T10873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.617935][T10873] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.624984][T10873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.648186][ T2256] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.655604][ T2256] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.665950][ T2242] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.673047][ T2242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.683642][ T2256] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.690762][ T2256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.726195][T10873] veth0_vlan: entered promiscuous mode [ 383.739705][T10873] veth1_macvtap: entered promiscuous mode [ 385.746091][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 385.746112][ T36] audit: type=1400 audit(641.354:1426): avc: denied { execute } for pid=10922 comm="syz.7.3311" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=60098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 385.906514][ T621] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 386.057637][ T621] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 386.065975][ T621] usb 6-1: config 0 has no interface number 0 [ 386.072204][ T621] usb 6-1: config 0 interface 29 has no altsetting 0 [ 386.080556][ T621] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 386.089712][ T621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.097794][ T621] usb 6-1: Product: syz [ 386.102007][ T621] usb 6-1: Manufacturer: syz [ 386.106687][ T621] usb 6-1: SerialNumber: syz [ 386.112005][ T621] usb 6-1: config 0 descriptor?? [ 386.171118][ T36] audit: type=1400 audit(641.784:1427): avc: denied { bind } for pid=10929 comm="syz.9.3312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 386.319254][ T621] usb 6-1: USB disconnect, device number 26 [ 386.436542][ T373] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 386.587702][ T373] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.598051][ T373] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.608533][ T373] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 386.618024][ T373] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 386.626349][ T373] usb 10-1: SerialNumber: syz [ 386.842785][ T373] usb 10-1: 0:2 : does not exist [ 386.874223][ T373] usb 10-1: USB disconnect, device number 5 [ 387.509279][ T36] audit: type=1400 audit(643.124:1428): avc: denied { read } for pid=10985 comm="syz.9.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 388.173559][T11014] tipc: Enabled bearer , priority 0 [ 388.422377][T11011] tipc: Disabling bearer [ 388.796708][ T373] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 388.967888][ T373] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 388.976664][ T373] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 388.985652][ T373] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 388.996870][ T373] usb 10-1: config 0 interface 0 has no altsetting 0 [ 389.004342][ T373] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.013662][ T373] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.025038][ T373] usb 10-1: config 0 interface 0 has no altsetting 0 [ 389.032857][ T373] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.043016][ T373] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.054136][ T373] usb 10-1: config 0 interface 0 has no altsetting 0 [ 389.061549][ T373] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.071386][ T373] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.082844][ T373] usb 10-1: config 0 interface 0 has no altsetting 0 [ 389.090828][ T373] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.101372][ T373] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.112460][ T373] usb 10-1: config 0 interface 0 has no altsetting 0 [ 389.120140][ T373] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.129256][ T373] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.140395][ T373] usb 10-1: config 0 interface 0 has no altsetting 0 [ 389.148009][ T373] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.157092][ T373] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.168189][ T373] usb 10-1: config 0 interface 0 has no altsetting 0 [ 389.175724][ T373] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.184774][ T373] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.195904][ T373] usb 10-1: config 0 interface 0 has no altsetting 0 [ 389.204365][ T373] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 389.213643][ T373] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 389.222125][ T373] usb 10-1: Product: syz [ 389.226409][ T373] usb 10-1: Manufacturer: syz [ 389.231147][ T373] usb 10-1: SerialNumber: syz [ 389.236625][ T373] usb 10-1: config 0 descriptor?? [ 389.446174][T11021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.454813][T11021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.621875][ T373] usb 10-1: USB disconnect, device number 6 [ 392.546513][ T634] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 392.696528][ T634] usb 6-1: Using ep0 maxpacket: 8 [ 392.702824][ T634] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 392.711091][ T634] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.720917][ T634] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 392.730821][ T634] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.741093][ T634] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.754360][ T634] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 392.766974][ T634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.936529][ T9] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 393.087757][ T9] usb 10-1: config 0 has no interfaces? [ 393.094935][ T9] usb 10-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 393.104474][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.112787][ T9] usb 10-1: Product: syz [ 393.117133][ T9] usb 10-1: Manufacturer: syz [ 393.121870][ T9] usb 10-1: SerialNumber: syz [ 393.127294][ T9] usb 10-1: config 0 descriptor?? [ 395.046962][T11163] kvm: pic: non byte write [ 395.319763][ T481] usb 6-1: USB disconnect, device number 27 [ 395.731142][ T634] usb 10-1: USB disconnect, device number 7 [ 396.631031][T11192] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.643049][T11192] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.653053][T11192] bridge_slave_0: entered allmulticast mode [ 396.660974][T11192] bridge_slave_0: entered promiscuous mode [ 396.671194][T11192] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.678772][T11192] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.686127][T11192] bridge_slave_1: entered allmulticast mode [ 396.696738][T11192] bridge_slave_1: entered promiscuous mode [ 396.837218][T11192] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.844329][T11192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.851727][T11192] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.858832][T11192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.941861][ T2256] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.951665][ T2256] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.009544][ T2256] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.016704][ T2256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.034739][ T2242] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.041904][ T2242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.110626][T11217] tipc: Failed to remove unknown binding: 66,1,1/0:2215491503/2215491505 [ 397.222913][T11192] veth0_vlan: entered promiscuous mode [ 397.265622][T11192] veth1_macvtap: entered promiscuous mode [ 397.758887][ T634] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 397.986517][ T634] usb 6-1: Using ep0 maxpacket: 32 [ 397.992972][ T634] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 398.004724][ T634] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 398.013858][ T634] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 398.022151][ T634] usb 6-1: Product: syz [ 398.026359][ T634] usb 6-1: Manufacturer: syz [ 398.031028][ T634] usb 6-1: SerialNumber: syz [ 398.036307][ T634] usb 6-1: config 0 descriptor?? [ 398.041822][T11221] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 398.049927][ T634] hub 6-1:0.0: bad descriptor, ignoring hub [ 398.055905][ T634] hub 6-1:0.0: probe with driver hub failed with error -5 [ 398.264185][ T36] audit: type=1326 audit(653.874:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.9.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ff78ebe9 code=0x7fc00000 [ 398.756884][ T6377] usb 6-1: USB disconnect, device number 28 [ 399.980535][T11285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 403.953950][T11394] rust_binder: 134: no such ref 0 [ 403.969301][T11394] rust_binder: 134: no such ref 3 [ 403.974443][T11394] rust_binder: 134: no such ref 4294967295 [ 403.980352][T11394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 403.980667][T11394] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 403.997208][T11394] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 404.020113][T11396] TCP: out of memory -- consider tuning tcp_mem [ 404.296590][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 404.447860][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 404.456717][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 404.464408][ T9] usb 6-1: can't read configurations, error -61 [ 404.596667][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 404.747934][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 404.756992][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 404.764600][ T9] usb 6-1: can't read configurations, error -61 [ 404.771642][ T9] usb usb6-port1: attempt power cycle [ 404.858809][T11419] rust_binder: 111: no such ref 0 [ 404.864096][T11419] rust_binder: 111: no such ref 3 [ 404.869280][T11419] rust_binder: 111: no such ref 4294967295 [ 404.875240][T11419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 404.875494][T11419] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 404.891938][T11419] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 404.966098][T11422] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 404.966155][T11422] rust_binder: Error in use_page_slow: EFAULT [ 404.976704][T11422] rust_binder: use_range failure EFAULT [ 404.982820][T11422] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 404.988448][T11422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 404.996712][T11422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:113 [ 405.116559][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 405.148694][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 405.157883][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 405.165533][ T9] usb 6-1: can't read configurations, error -61 [ 405.296557][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 405.318410][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 405.327422][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 405.335023][ T9] usb 6-1: can't read configurations, error -61 [ 405.341433][ T9] usb usb6-port1: unable to enumerate USB device [ 405.493927][T11424] /dev/sg0: Can't lookup blockdev [ 405.586228][T11432] fuse: Bad value for 'fd' [ 405.667316][T11439] rust_binder: 988: no such ref 0 [ 405.672716][T11439] rust_binder: 988: no such ref 3 [ 405.678182][T11439] rust_binder: 988: no such ref 4294967295 [ 405.684038][T11439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:988 [ 405.684300][T11439] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 405.701603][T11439] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 405.790462][T11448] netlink: 'syz.7.3503': attribute type 4 has an invalid length. [ 405.963184][T11460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 405.979980][T11462] fuse: Bad value for 'fd' [ 406.090684][ T373] rust_binder: 11452: removing orphan mapping 0:24 [ 406.109082][T11467] rust_binder: 129: no such ref 0 [ 406.114466][T11467] rust_binder: 129: no such ref 3 [ 406.119830][T11467] rust_binder: 129: no such ref 4294967295 [ 406.125876][T11467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 406.126105][T11467] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 406.144144][T11467] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 406.852238][T11493] rust_binder: 134: no such ref 0 [ 406.857554][T11493] rust_binder: 134: no such ref 3 [ 406.862619][T11493] rust_binder: 134: no such ref 4294967295 [ 406.868533][T11493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 406.868774][T11493] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 406.885377][T11493] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 407.162101][T11502] rust_binder: Error while translating object. [ 407.162189][T11502] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 407.169002][T11502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1011 [ 407.338410][T11515] rust_binder: 86: no such ref 0 [ 407.353046][T11515] rust_binder: 86: no such ref 3 [ 407.358071][T11515] rust_binder: 86: no such ref 4294967295 [ 407.363842][T11515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 407.364083][T11515] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 407.365187][T11513] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 407.373371][T11515] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 407.380831][T11513] rust_binder: 1015: no such ref 0 [ 407.429015][ T36] audit: type=1326 audit(663.044:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.5.3531" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effdad8ebe9 code=0x0 [ 407.548719][T11526] netlink: 'syz.4.3534': attribute type 12 has an invalid length. [ 407.652056][T11530] rust_binder: Error while translating object. [ 407.652095][T11530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 407.658586][T11530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:95 [ 407.903740][T11532] rust_binder: Write failure EFAULT in pid:98 [ 408.111430][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.117798][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.129781][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.136259][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.142947][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.149512][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.161548][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.168118][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.174508][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.181158][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.193038][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.199573][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.206057][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.213279][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.228537][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.234904][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.241583][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.248090][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.270838][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.277443][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.283785][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.290414][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.296927][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.303416][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.311848][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.318394][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.324776][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.331407][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.337952][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.344636][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.351203][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.357823][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.364266][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.371466][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.378024][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.384418][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.401992][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.408884][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.415254][T11543] rust_binder: 139: no such ref 0 [ 408.427174][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.427211][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.433529][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.440247][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.440946][T11543] rust_binder: 139: no such ref 3 [ 408.446875][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.458491][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.464796][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.466569][T11543] rust_binder: 139: no such ref 4294967295 [ 408.471579][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.483585][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.486880][T11543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 408.490194][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.505615][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.512499][T11544] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 408.526587][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.526623][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.532957][T11544] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 408.546705][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.546741][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.553036][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.561625][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.568599][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.575555][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.593693][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.600826][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.608524][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.615679][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.635868][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.645840][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.652779][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.659834][T11540] rust_binder: Write failure EFAULT in pid:1018 [ 408.835731][T11555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 409.096507][ T36] audit: type=1400 audit(664.704:1431): avc: denied { ioctl } for pid=11562 comm="syz.9.3548" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 409.140759][T11567] rust_binder: 1024: no such ref 0 [ 409.152378][T11567] rust_binder: 1024: no such ref 3 [ 409.166486][T11567] rust_binder: 1024: no such ref 4294967295 [ 409.172772][T11567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1024 [ 409.222865][T11573] can0: slcan on ptm0. [ 409.346588][T11573] can0 (unregistered): slcan off ptm0. [ 409.787781][T11595] syz.9.3555: attempt to access beyond end of device [ 409.787781][T11595] loop9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 409.862291][T11625] rust_binder: 1046: no such ref 0 [ 409.876684][T11625] rust_binder: 1046: no such ref 3 [ 409.881868][T11625] rust_binder: 1046: no such ref 4294967295 [ 409.906496][T11625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1046 [ 410.160121][T11633] rust_binder: 11631 RLIMIT_NICE not set [ 410.172450][T11631] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 4096) [ 410.180736][T11631] rust_binder: Error while translating object. [ 410.191908][T11631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 410.198321][T11631] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 410.208133][T11631] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1051 [ 410.220256][T11633] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 410.235959][ T9] rust_binder: 11630: removing orphan mapping 0:24 [ 410.318550][T11638] rust_binder: Fixups oob 156 120 160 164 [ 410.318578][T11638] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 410.326746][T11638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 410.336052][T11638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1056 [ 410.604372][T11645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=11645 comm=syz.5.3565 [ 410.605980][T11646] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3565'. [ 410.713707][T11654] rust_binder: 167: no such ref 0 [ 410.719094][T11654] rust_binder: 167: no such ref 3 [ 410.724184][T11654] rust_binder: 167: no such ref 4294967295 [ 410.730198][T11654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167 [ 410.959631][T11666] FAULT_INJECTION: forcing a failure. [ 410.959631][T11666] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 410.982038][T11666] CPU: 0 UID: 0 PID: 11666 Comm: syz.5.3573 Not tainted 6.12.38-syzkaller-gaffdb774d7ec #0 e0a1c643210c02f57d3116610c17ac272852aef3 [ 410.982075][T11666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.982095][T11666] Call Trace: [ 410.982103][T11666] [ 410.982115][T11666] __dump_stack+0x21/0x30 [ 410.982151][T11666] dump_stack_lvl+0x10c/0x190 [ 410.982181][T11666] ? __cfi_dump_stack_lvl+0x10/0x10 [ 410.982213][T11666] dump_stack+0x19/0x20 [ 410.982241][T11666] should_fail_ex+0x3d9/0x530 [ 410.982276][T11666] ? __cfi_kvm_vfio_set_attr+0x10/0x10 [ 410.982302][T11666] should_fail+0xf/0x20 [ 410.982331][T11666] should_fail_usercopy+0x1e/0x30 [ 410.982353][T11666] _copy_from_user+0x22/0xb0 [ 410.982376][T11666] ? __cfi_kvm_vfio_set_attr+0x10/0x10 [ 410.982401][T11666] kvm_device_ioctl+0x296/0x4b0 [ 410.982429][T11666] ? __kasan_check_write+0x18/0x20 [ 410.982461][T11666] ? __cfi_kvm_device_ioctl+0x10/0x10 [ 410.982490][T11666] ? __fget_files+0x2c5/0x340 [ 410.982515][T11666] ? __fget_files+0x2c5/0x340 [ 410.982539][T11666] ? bpf_lsm_file_ioctl+0xd/0x20 [ 410.982568][T11666] ? security_file_ioctl+0x34/0xd0 [ 410.982592][T11666] ? __cfi_kvm_device_ioctl+0x10/0x10 [ 410.982621][T11666] __se_sys_ioctl+0x135/0x1b0 [ 410.982645][T11666] __x64_sys_ioctl+0x7f/0xa0 [ 410.982669][T11666] x64_sys_call+0x1878/0x2ee0 [ 410.982702][T11666] do_syscall_64+0x58/0xf0 [ 410.982728][T11666] ? clear_bhb_loop+0x50/0xa0 [ 410.982748][T11666] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 410.982781][T11666] RIP: 0033:0x7effdad8ebe9 [ 410.982800][T11666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.982820][T11666] RSP: 002b:00007effdbb13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.982844][T11666] RAX: ffffffffffffffda RBX: 00007effdafb5fa0 RCX: 00007effdad8ebe9 [ 410.982862][T11666] RDX: 00002000000001c0 RSI: 000000004018aee1 RDI: 0000000000000005 [ 410.982878][T11666] RBP: 00007effdbb13090 R08: 0000000000000000 R09: 0000000000000000 [ 410.982892][T11666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.982906][T11666] R13: 00007effdafb6038 R14: 00007effdafb5fa0 R15: 00007ffefe8f08f8 [ 410.982926][T11666] [ 411.099144][ T36] audit: type=1326 audit(666.694:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.7.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02cb8ebe9 code=0x7fc00000 [ 411.251926][T11678] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 411.259424][T11678] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 411.360178][T11691] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3580'. [ 411.556706][T11708] FAULT_INJECTION: forcing a failure. [ 411.556706][T11708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.572777][T11708] CPU: 0 UID: 0 PID: 11708 Comm: syz.4.3586 Not tainted 6.12.38-syzkaller-gaffdb774d7ec #0 e0a1c643210c02f57d3116610c17ac272852aef3 [ 411.572819][T11708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 411.572835][T11708] Call Trace: [ 411.572843][T11708] [ 411.572853][T11708] __dump_stack+0x21/0x30 [ 411.572890][T11708] dump_stack_lvl+0x10c/0x190 [ 411.572920][T11708] ? __cfi_dump_stack_lvl+0x10/0x10 [ 411.572953][T11708] dump_stack+0x19/0x20 [ 411.572982][T11708] should_fail_ex+0x3d9/0x530 [ 411.573017][T11708] should_fail+0xf/0x20 [ 411.573048][T11708] should_fail_usercopy+0x1e/0x30 [ 411.573070][T11708] _copy_to_user+0x24/0xa0 [ 411.573095][T11708] simple_read_from_buffer+0xed/0x160 [ 411.573125][T11708] proc_fail_nth_read+0x19e/0x210 [ 411.573155][T11708] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 411.573186][T11708] ? bpf_lsm_file_permission+0xd/0x20 [ 411.573217][T11708] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 411.573247][T11708] vfs_read+0x278/0xb60 [ 411.573304][T11708] ? __cfi_vfs_read+0x10/0x10 [ 411.573335][T11708] ? __kasan_check_write+0x18/0x20 [ 411.573366][T11708] ? mutex_lock+0x92/0x1c0 [ 411.573396][T11708] ? __cfi_mutex_lock+0x10/0x10 [ 411.573427][T11708] ? __fget_files+0x2c5/0x340 [ 411.573452][T11708] ksys_read+0x141/0x250 [ 411.573472][T11708] ? __cfi_ksys_read+0x10/0x10 [ 411.573492][T11708] ? __kasan_check_read+0x15/0x20 [ 411.573524][T11708] __x64_sys_read+0x7f/0x90 [ 411.573544][T11708] x64_sys_call+0x2638/0x2ee0 [ 411.573576][T11708] do_syscall_64+0x58/0xf0 [ 411.573603][T11708] ? clear_bhb_loop+0x50/0xa0 [ 411.573624][T11708] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 411.573657][T11708] RIP: 0033:0x7fe83598d5fc [ 411.573676][T11708] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 411.573695][T11708] RSP: 002b:00007fe8343f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 411.573719][T11708] RAX: ffffffffffffffda RBX: 00007fe835bb5fa0 RCX: 00007fe83598d5fc [ 411.573737][T11708] RDX: 000000000000000f RSI: 00007fe8343f70a0 RDI: 0000000000000006 [ 411.573753][T11708] RBP: 00007fe8343f7090 R08: 0000000000000000 R09: 0000000000000000 [ 411.573768][T11708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.573782][T11708] R13: 00007fe835bb6038 R14: 00007fe835bb5fa0 R15: 00007ffd15dc15b8 [ 411.573802][T11708] [ 411.649287][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3583'. [ 412.083432][T11734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=11734 comm=syz.5.3595 [ 412.138682][ T36] audit: type=1400 audit(667.754:1433): avc: denied { checkpoint_restore } for pid=11737 comm="syz.9.3597" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 412.206364][T11749] SELinux: security_context_str_to_sid () failed with errno=-22 [ 412.216140][ T36] audit: type=1400 audit(667.834:1434): avc: denied { listen } for pid=11748 comm="syz.9.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 412.486533][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 412.637669][ T9] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.649373][ T9] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 412.660672][ T9] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 412.672064][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 412.681138][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.690149][T11751] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 412.697519][ T373] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 412.846889][ T373] usb 10-1: Using ep0 maxpacket: 32 [ 412.853943][ T373] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 412.862501][ T373] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 412.871283][ T373] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 412.880467][ T373] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 412.890254][ T373] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 412.900078][ T373] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 412.902967][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3601'. [ 412.913203][ T373] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 412.931539][ T373] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.940587][ T373] usb 10-1: config 0 descriptor?? [ 413.148391][ T373] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 413.167601][ T373] usb 10-1: USB disconnect, device number 8 [ 413.179754][ T373] usblp0: removed [ 413.184647][T11765] SELinux: security_context_str_to_sid () failed with errno=-22 [ 413.214199][T11767] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 413.229044][T11770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11770 comm=syz.9.3607 [ 413.250437][T11770] rust_binder: Write failure EFAULT in pid:224 [ 413.596562][ T373] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 413.757664][ T373] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.768794][ T373] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 413.779747][ T373] usb 10-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 413.788925][ T373] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.798039][ T373] usb 10-1: config 0 descriptor?? [ 413.803472][T11777] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 414.213366][ T373] cypress 0003:04B4:DE61.0024: unknown main item tag 0x0 [ 414.220565][ T373] cypress 0003:04B4:DE61.0024: unknown main item tag 0x0 [ 414.227777][ T373] cypress 0003:04B4:DE61.0024: unknown main item tag 0x0 [ 414.235191][ T373] cypress 0003:04B4:DE61.0024: unknown main item tag 0x0 [ 414.242459][ T373] cypress 0003:04B4:DE61.0024: unknown main item tag 0x0 [ 414.249760][ T373] cypress 0003:04B4:DE61.0024: unknown main item tag 0x0 [ 414.256983][ T373] cypress 0003:04B4:DE61.0024: unknown main item tag 0x0 [ 414.265060][ T373] cypress 0003:04B4:DE61.0024: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.9-1/input0 [ 414.277768][ T9] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 414.294402][ T9] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input50 [ 414.307031][ T9] usb 6-1: USB disconnect, device number 33 [ 414.417599][T11777] __vm_enough_memory: pid: 11777, comm: syz.9.3609, bytes: 18014402804453376 not enough memory for the allocation [ 414.431009][ T45] usb 10-1: USB disconnect, device number 9 [ 414.540250][T11781] can0: slcan on ptm0. [ 414.582662][T11780] can0 (unregistered): slcan off ptm0. [ 414.766899][ T37] INFO: task syz.3.2364:8183 blocked for more than 122 seconds. [ 414.774638][ T37] Not tainted 6.12.38-syzkaller-gaffdb774d7ec #0 [ 414.781554][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.790323][ T37] task:syz.3.2364 state:D stack:0 pid:8183 tgid:8182 ppid:291 flags:0x00004004 [ 414.800741][ T37] Call Trace: [ 414.804104][ T37] [ 414.807095][ T37] __schedule+0x1322/0x1df0 [ 414.811649][ T37] ? __sched_text_start+0x10/0x10 [ 414.816763][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 414.822325][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 414.828179][ T37] schedule+0xc6/0x240 [ 414.832283][ T37] super_lock+0x150/0x300 [ 414.836648][ T37] ? user_get_super+0x350/0x350 [ 414.841522][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 414.847034][ T37] ? __kasan_check_write+0x18/0x20 [ 414.852174][ T37] iterate_supers+0x8a/0x560 [ 414.856807][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 414.862016][ T37] ? security_quotactl+0x3b/0xf0 [ 414.866984][ T37] __se_sys_quotactl+0x308/0x7d0 [ 414.871942][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 414.876996][ T37] ? __kasan_check_write+0x18/0x20 [ 414.882136][ T37] ? do_user_addr_fault+0xbc4/0x1200 [ 414.887456][ T37] ? __kasan_check_read+0x15/0x20 [ 414.892539][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 414.898728][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 414.903610][ T37] x64_sys_call+0x2818/0x2ee0 [ 414.908320][ T37] do_syscall_64+0x58/0xf0 [ 414.912771][ T37] ? clear_bhb_loop+0x50/0xa0 [ 414.917488][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 414.923400][ T37] RIP: 0033:0x7f61a798ebe9 [ 414.927849][ T37] RSP: 002b:00007f61a878e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 414.936273][ T37] RAX: ffffffffffffffda RBX: 00007f61a7bb5fa0 RCX: 00007f61a798ebe9 [ 414.944271][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000101 [ 414.952280][ T37] RBP: 00007f61a7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 414.960292][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.968283][ T37] R13: 00007f61a7bb6038 R14: 00007f61a7bb5fa0 R15: 00007ffd136caca8 [ 414.976278][ T37] [ 414.984119][ T37] INFO: task syz.3.2364:8184 blocked for more than 123 seconds. [ 414.992047][ T37] Not tainted 6.12.38-syzkaller-gaffdb774d7ec #0 [ 414.999281][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.008057][ T37] task:syz.3.2364 state:D stack:0 pid:8184 tgid:8182 ppid:291 flags:0x00004004 [ 415.018451][ T37] Call Trace: [ 415.021761][ T37] [ 415.024713][ T37] __schedule+0x1322/0x1df0 [ 415.029283][ T37] ? __sched_text_start+0x10/0x10 [ 415.034350][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 415.039877][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 415.045722][ T37] schedule+0xc6/0x240 [ 415.049850][ T37] super_lock+0x150/0x300 [ 415.054239][ T37] ? user_get_super+0x350/0x350 [ 415.059141][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 415.064811][ T37] ? __kasan_check_write+0x18/0x20 [ 415.070001][ T37] iterate_supers+0x8a/0x560 [ 415.074654][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 415.080137][ T37] ? security_quotactl+0x3b/0xf0 [ 415.085117][ T37] __se_sys_quotactl+0x308/0x7d0 [ 415.090269][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 415.095341][ T37] ? __kasan_check_write+0x18/0x20 [ 415.100645][ T37] ? do_user_addr_fault+0xbc4/0x1200 [ 415.105994][ T37] ? __kasan_check_read+0x15/0x20 [ 415.111112][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 415.117399][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 415.122285][ T37] x64_sys_call+0x2818/0x2ee0 [ 415.126993][ T37] do_syscall_64+0x58/0xf0 [ 415.131445][ T37] ? clear_bhb_loop+0x50/0xa0 [ 415.136190][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 415.142155][ T37] RIP: 0033:0x7f61a798ebe9 [ 415.146591][ T37] RSP: 002b:00007f61a876d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 415.155076][ T37] RAX: ffffffffffffffda RBX: 00007f61a7bb6090 RCX: 00007f61a798ebe9 [ 415.163546][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 415.171544][ T37] RBP: 00007f61a7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 415.179530][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.187547][ T37] R13: 00007f61a7bb6128 R14: 00007f61a7bb6090 R15: 00007ffd136caca8 [ 415.195531][ T37] [ 415.209494][ T37] INFO: task syz.3.2364:8185 blocked for more than 123 seconds. [ 415.217297][ T37] Not tainted 6.12.38-syzkaller-gaffdb774d7ec #0 [ 415.224426][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.233452][ T37] task:syz.3.2364 state:D stack:0 pid:8185 tgid:8182 ppid:291 flags:0x00004004 [ 415.244016][ T37] Call Trace: [ 415.247662][ T37] [ 415.250624][ T37] __schedule+0x1322/0x1df0 [ 415.255275][ T37] ? __sched_text_start+0x10/0x10 [ 415.261320][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 415.266930][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 415.272863][ T37] schedule+0xc6/0x240 [ 415.277117][ T37] super_lock+0x150/0x300 [ 415.281506][ T37] ? user_get_super+0x350/0x350 [ 415.286397][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 415.291920][ T37] ? __kasan_check_write+0x18/0x20 [ 415.297134][ T37] iterate_supers+0x8a/0x560 [ 415.301790][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 415.307373][ T37] ? security_quotactl+0x3b/0xf0 [ 415.312353][ T37] __se_sys_quotactl+0x308/0x7d0 [ 415.318330][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 415.323622][ T37] ? __kasan_check_write+0x18/0x20 [ 415.328953][ T37] ? do_user_addr_fault+0xbc4/0x1200 [ 415.334317][ T37] ? __kasan_check_read+0x15/0x20 [ 415.339524][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 415.345744][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 415.350661][ T37] x64_sys_call+0x2818/0x2ee0 [ 415.355406][ T37] do_syscall_64+0x58/0xf0 [ 415.360081][ T37] ? clear_bhb_loop+0x50/0xa0 [ 415.364868][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 415.370819][ T37] RIP: 0033:0x7f61a798ebe9 [ 415.375353][ T37] RSP: 002b:00007f61a874c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 415.383838][ T37] RAX: ffffffffffffffda RBX: 00007f61a7bb6180 RCX: 00007f61a798ebe9 [ 415.391860][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 415.399908][ T37] RBP: 00007f61a7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 415.407994][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.415995][ T37] R13: 00007f61a7bb6218 R14: 00007f61a7bb6180 R15: 00007ffd136caca8 [ 415.424355][ T37] [ 415.427497][ T37] NMI backtrace for cpu 1 [ 415.427514][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-gaffdb774d7ec #0 e0a1c643210c02f57d3116610c17ac272852aef3 [ 415.427542][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.427557][ T37] Call Trace: [ 415.427564][ T37] [ 415.427574][ T37] __dump_stack+0x21/0x30 [ 415.427608][ T37] dump_stack_lvl+0x10c/0x190 [ 415.427637][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 415.427668][ T37] dump_stack+0x19/0x20 [ 415.427704][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 415.427730][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 415.427758][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 415.427783][ T37] ? sched_show_task+0x379/0x560 [ 415.427812][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 415.427836][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 415.427865][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 415.427893][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 415.427920][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 415.427948][ T37] watchdog+0xd8f/0xed0 [ 415.427978][ T37] ? __cfi_watchdog+0x10/0x10 [ 415.428006][ T37] ? __kasan_check_read+0x15/0x20 [ 415.428036][ T37] ? __kthread_parkme+0x138/0x180 [ 415.428057][ T37] ? schedule+0xc6/0x240 [ 415.428085][ T37] kthread+0x2ca/0x370 [ 415.428107][ T37] ? __cfi_watchdog+0x10/0x10 [ 415.428135][ T37] ? __cfi_kthread+0x10/0x10 [ 415.428158][ T37] ret_from_fork+0x67/0xa0 [ 415.428189][ T37] ? __cfi_kthread+0x10/0x10 [ 415.428211][ T37] ret_from_fork_asm+0x1a/0x30 [ 415.428247][ T37] [ 415.583459][ T37] Sending NMI from CPU 1 to CPUs 0: [ 415.588718][ C0] NMI backtrace for cpu 0 [ 415.588733][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.38-syzkaller-gaffdb774d7ec #0 e0a1c643210c02f57d3116610c17ac272852aef3 [ 415.588755][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.588767][ C0] RIP: 0010:sched_balance_rq+0x95d/0x5060 [ 415.588792][ C0] Code: 24 c0 00 00 00 49 8d 46 48 48 89 84 24 a0 00 00 00 4c 89 74 24 68 49 8d 46 50 48 89 84 24 f8 00 00 00 45 31 ed 4c 89 7c 24 40 <48> 89 5c 24 18 eb 25 49 bc 00 00 00 00 00 fc ff df 4c 8b 7c 24 40 [ 415.588807][ C0] RSP: 0018:ffffc90000007820 EFLAGS: 00000246 [ 415.588822][ C0] RAX: ffffc90000007b78 RBX: ffff888103e51828 RCX: 0000000000000000 [ 415.588835][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000007b80 [ 415.588847][ C0] RBP: ffffc90000007cd0 R08: ffffc90000007b7f R09: 0000000000000000 [ 415.588859][ C0] R10: ffffc90000007b28 R11: fffff52000000f70 R12: dffffc0000000000 [ 415.588871][ C0] R13: 0000000000000000 R14: ffffc90000007b28 R15: ffffc90000007b48 [ 415.588883][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 415.588897][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.588909][ C0] CR2: 00007ffeb4a2bf48 CR3: 0000000121958000 CR4: 00000000003526b0 [ 415.588924][ C0] Call Trace: [ 415.588931][ C0] [ 415.588937][ C0] ? sched_clock_cpu+0x75/0x400 [ 415.588965][ C0] ? sched_balance_update_blocked_averages+0x1320/0x1320 [ 415.588984][ C0] ? psi_task_change+0x1ce/0x360 [ 415.589013][ C0] ? sched_balance_update_blocked_averages+0x1320/0x1320 [ 415.589034][ C0] ? ttwu_do_activate+0x630/0x630 [ 415.589053][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 415.589068][ C0] ? sched_clock_noinstr+0xd/0x30 [ 415.589094][ C0] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 415.589117][ C0] ? update_irq_load_avg+0xcb/0xe60 [ 415.589139][ C0] sched_balance_domains+0x4b4/0xa10 [ 415.589156][ C0] ? pick_eevdf+0x970/0x970 [ 415.589173][ C0] _nohz_idle_balance+0x3e3/0x5a0 [ 415.589199][ C0] ? lapic_next_event+0x15/0x20 [ 415.589225][ C0] ? nohz_run_idle_balance+0x160/0x160 [ 415.589246][ C0] ? sched_clock+0x44/0x60 [ 415.589266][ C0] ? sched_clock_cpu+0x75/0x400 [ 415.589288][ C0] sched_balance_softirq+0x8a/0x170 [ 415.589313][ C0] handle_softirqs+0x1ab/0x630 [ 415.589339][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 415.589360][ C0] __irq_exit_rcu+0x48/0xc0 [ 415.589384][ C0] irq_exit_rcu+0xd/0x30 [ 415.589407][ C0] sysvec_call_function_single+0x7f/0x90 [ 415.589432][ C0] [ 415.589438][ C0] [ 415.589444][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 415.589469][ C0] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 415.589485][ C0] Code: cc cc cc b8 c4 ff 37 a6 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 91 3b 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 415.589499][ C0] RSP: 0018:ffffffff87207da0 EFLAGS: 000002c6 [ 415.589513][ C0] RAX: ffff8881f6e00000 RBX: ffffffff87215540 RCX: ffffffff858bc09e [ 415.589525][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000007ab4ec [ 415.589536][ C0] RBP: ffffffff87207da0 R08: ffff8881f6e39733 R09: 1ffff1103edc72e6 [ 415.589549][ C0] R10: dffffc0000000000 R11: ffffed103edc72e7 R12: 1ffffffff0e42aa8 [ 415.589561][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87cad7a8 [ 415.589574][ C0] ? ct_kernel_exit+0x7e/0xb0 [ 415.589591][ C0] default_idle+0x17/0x30 [ 415.589607][ C0] arch_cpu_idle+0xd/0x20 [ 415.589623][ C0] default_idle_call+0x3f/0x80 [ 415.589640][ C0] do_idle+0x1a0/0x470 [ 415.589656][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 415.589675][ C0] cpu_startup_entry+0x48/0x70 [ 415.589691][ C0] rest_init+0x10b/0x130 [ 415.589708][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 415.589733][ C0] start_kernel+0x46a/0x4bb [ 415.589750][ C0] x86_64_start_reservations+0x2e/0x30 [ 415.589772][ C0] x86_64_start_kernel+0x6a/0x7b [ 415.589792][ C0] common_startup_64+0x13b/0x157 [ 415.589816][ C0] [ 424.369811][ T2242] bridge_slave_1: left allmulticast mode [ 424.376032][ T2242] bridge_slave_1: left promiscuous mode [ 424.382814][ T2242] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.390845][ T2242] bridge_slave_0: left allmulticast mode [ 424.396559][ T2242] bridge_slave_0: left promiscuous mode [ 424.402184][ T2242] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.488233][ T2242] tipc: Disabling bearer [ 424.493544][ T2242] tipc: Disabling bearer [ 424.499045][ T2242] tipc: Left network mode [ 424.504019][ T2242] veth1_macvtap: left promiscuous mode [ 424.509646][ T2242] veth0_vlan: left promiscuous mode