last executing test programs: 8m46.891278429s ago: executing program 32 (id=91): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5m27.594758603s ago: executing program 33 (id=2383): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = userfaultfd(0x801) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r2, 0xc004ae0a, &(0x7f0000000080)={0x23, [0x0, 0x0, 0x0]}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f00000001c0)={0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000a97000/0x1000)=nil, 0x1000}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000600)=[@acquire_done={0x40106309, 0x1}], 0x43, 0x0, &(0x7f0000000740)="ff9388205610ea990eaaba1fb8f28d721321e0ee676b6be7e753dfed4627798d969499de1f768fb7f709a95a8827959fc3a7c7d5b2375ce7636e7fa23142d3c6fb86e6"}) 4m31.502698775s ago: executing program 34 (id=3030): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x15, 0x0, &(0x7f0000000140)) move_mount(r1, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfd000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@rdmsr={0x32, 0x18, {0x40000104}}, @out_dx={0xaa, 0x28, {0x1a, 0x3, 0x6}}], 0x40}) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r9) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000300, r9, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x6) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="816d1dbdc3b76b927bb0b9113cf7117eae5b09d8a4dd79cde96ee79f5c0c91fcf876d096ff958ee4cc301091535a4f4902909b4283cc1a03eed93594cf7339d10dba2e880a0819d5f2d22d48b830f9470ba29edc0c1f63d21a9ce0868ce180cb26e8e1ac9efd0aaa9864ea152082fcbb152f57c0f1d2a1c78d4fc5106ac7ab3765753fb037033d0f8dc41f75a1e606557b7a6b1ec168408d400d6fd0c0c784f2f1140229223fc7d35e36c9f4538cc1083fc7b07cc2f96ecabf045967c4050a249c221ba454d96bbe41bbce6a5eb2ae244174c19df422a1b96ce78fa6851cfe25fa1e1c3def", 0xe5}, {&(0x7f0000000680)="b70bb2ce9167d8257883f07ef98fa5f9c4fd8481ec5324f291fd769f81a2b092389885962104d4dd6d8a9d7347b30922879e83a04ed7ed551f9228563daea4dce3cff2c62b53dd45b6739334d1c27c62ed6abf1c59ce7411c68f7eba80fcae5f180b61ab538af38e334ab6ee633e6f9249a1bf7476986ebfa4185fc777b5d91421921f4ef693a209295af483fde479ea378f1cb86f36f6f8be6d8352e8d13b29a3bb20026a4745998c1847b9057092ae569d9f464f5549167312fadc68fb7b2760a4384559a7873e0d03bfb018cc28e9a5e229de", 0xd4}, {&(0x7f0000000200)="83b00f48bb15eb334199d2e009", 0xd}], 0x3, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 4m7.344894586s ago: executing program 35 (id=3282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x400000, 0x2a, 0x5}, 0x18) (async) openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x400000, 0x2a, 0x5}, 0x18) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000180)=""/21, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0xffffffffffffff38, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x40000000000011e, 0x2100, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x10000, 0x1, 0xc3}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 2m45.735291868s ago: executing program 4 (id=4424): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e24, 0x4, @mcast2, 0x9}}, 0x0, 0x0, 0x25, 0x0, "99881ea6de4adad550f2dea7923a6e6dfa54f0beb690ae573c2d0f3e863133514224db25b91d5918f76fc5cd80655186d851c8e4bc0b33c57c300519cf8db06ef67cea15b9c9b2490ea614d4c9859c95"}, 0xd8) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$FUSE(r1, &(0x7f0000001500)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 64) r5 = syz_clone(0xa0a40000, &(0x7f0000000080)="3a4ef93844221ba1ea5e6b7c10b0a23ac7e3f6b26d", 0x15, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000380)="7a58046e84959ee3e8525ae4fa87d87fb81c36190849dbe31d3f6bd960bdcc14b15b20b2c05e931f96fe10394287e853af7a0fd21424e0443dfbf39045d187d68f5b37aa8db23bf0c1d827519911bde2141b979a48ce04e2d2fc91fdd41794b315b532f8ba207c07b6a0dbdd0b57bb1e3b05585c3037a6ab3d7b66955354da5cb76818db7d751f793ffb2d3040b627e376fc3f9c233832051d104ff438d31cf0767815b9fdbf7ddc380d261fcb00825db8c59c6a2ff48c5134bf0ed5c6098e645ac24bf2c1254e1e9a6c7578cc95fd0cdda243852bd0622b7420d2532891ee7d45127c1d6663760841047252e8587dd3") (rerun: 64) write$FUSE_LK(r3, &(0x7f0000000180)={0x28, 0xfffffffffffffff5, r4, {{0x3, 0x9, 0x0, r5}}}, 0x28) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x660901b6178c4a08, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x3}) 2m44.991459253s ago: executing program 4 (id=4435): setresgid(0xee00, 0xee01, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 2m44.300165757s ago: executing program 4 (id=4446): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x10, 0x4, 0x0, 0x1, [@typed={0xb, 0x20, 0x0, 0x0, @str='{&(/(:\x00'}]}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r7, r7) linkat(r6, &(0x7f00000001c0)='./file1\x00', r6, 0x0, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 2m43.674375162s ago: executing program 4 (id=4450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000001c0)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/7, 0x7, 0x2, 0x21}, @fda={0x66646185, 0x9, 0x0, 0x29}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death={0x400c630f, 0x1}], 0x56, 0x0, &(0x7f0000000380)="f22439c47e109c6096ea2bae1f7d03b8c44245ee48a8a255e0db445a21505ddddb4f9e2515db95a1de45d524bb52899f326bab2c88053f7a7475b3ec0373c50a7a4d67df5fde31db1a31325bebcf85b344c0596e65b8"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 2m43.638694302s ago: executing program 4 (id=4452): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x1, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0x40, 0x0, {0x4, 0x6, 0x0, 0x80000001, 0xc, 0x1, 0xa, 0x35741061, 0x6, 0xa593e9c1ca988eda, 0x3, 0x0, 0x0, 0x10, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000002100)="226affa83b80322045f48acd99336fed08e9709f2c063a3d5edafbbc36aca9c31f86884d78102948d1596bf7a4226946e424bd68c2e5a4dfb0347f1d0a4df44eeeb25bce9e5b536d5b65568e0a09c09e14dc8420e0c691bf1c3d3c2f66c2ca16e3e656b4850583f8d8bb62020cd30a4954a83bae0615ee34b4ae09824c49e2aaddb73654b151deb7ab4a68a89d10fcbc0024ea12d96c091a3fa4677ee20fdc4840323bf9e584230d27f1922a23b3783191a956dae08a7c382da01dff9ecf3693ccc3e3c5750085d31a94b3507220804a717b0232f227ad11ac98a929b62911fb6c4d4ff1a5ca10b56a8de912c7d1ad091efcb81b064a83b87685b4d658a138030ac0d6195d517aefb1b1a4657403ad471d2cce84b32405f3c1f51dfcf8080be4d5a1d9183d8105dfa4edb3eece9bffec0a79d8ec0372d162c63be10f185830f34b4559def3bc10d15d5651add999dad2c178a36147ee244a83e2b88f7e5aeb6f74295d667a1bb97628cdbca3a6ac7dd0025033225af7c34ba408b91fc7a9f089882b9c225a1574a4ba54c83c3ab872608b4bed54a2f29b69c795ddea42461320e89b7b213fd5c54aa89df2c4a0dba139744aad66d814ee972be59cef530085a4bcbfa7ce5cd0c0fa5ec78995652abc1cdc3ea93446a4f37b8205e92da4cceea1b93c8c706e45cd6c781d89f7c1141f752b21a8cfbc7a0b78e4c0589332c36b64df66009da094d2427e70af9710ac80167bddf0b1a2ea2caace1e1f655c96859c330d523d58d95fdcbba22ac9e87a3c6ec40e7d09adc44614e60f7f37f760db291ff506eccb73c90f3a011412fca57870a4e2fc85435a61483abbf4cd996f59fc3cc121dfe2790e6a3e0daf52c3ee47f458e4c88a6cb45818512489f34f4f709d568a9dac32844094a40f005d4230f0d4ae45935e08fff424d93a72d2892e076112e6198baff660f7ce1e23e7f403e428fd6dbb5be7d094e187e5cc59866bf28520cafe336c5c0dc6528de7a8c25e4ada4df86eaee44a0474a8684ad6df48d59ad313925a85255c9ec5eaae873ea089efc6a44e65dc77600c10e09b6b069d5c60a8671b8e53df88336a77eb7c46aaf5fc0d3641e1271ccd00e29c6f4d6646404cda5fa266b128be473e816e9286dce1f717363f456406ea0b7564cce0f2fa75a9bb13ff22d4be79b0a1cf224609a46af926d7100d364f2c4095efd86cb435a883307bfc59d7bd4913fade2168d046b676290b45d403e76cd05f5c09a75aced31c9632fc060b7293fc060412588e4f3c7a172f76a01e04e606cf851f18b573243c1a0723861a19d0517a2be84b6c6301c8dab6486179d440e4d986aea241df7259525ad43676a146bdae44887306043cf4d553ec592a2fa7b1cf0badae51b3e7d205e91ac9c358eebfc971a4848f52a860e5c068354d218e2333a3d5f1ce51c0728a41c58d3ba1c209a903a43c47a7d7d1aa55cef3a24277b31806663f7ccc4fb1bcb5049db1e7172cc86c32d57823621d8a8393e90ba4a3414d28ae135f747d9a33a4a6ae8b31726328ff5b8df51270a1ca64e3bc9ddf375e71f962540974084a602675b1a20992abb04586e818344c2460212c9f440367173119447dff55e3e9837c489ead62c428728925f221973d972a133caaca52867a0b853b09b969795b701e1c4214e7132108e4981bbd2ee3c81e168d66e07c620a0d6ff881bac65f3d8afb952adb873f7ef188d8719089d4cb3d1be540eaceb998e23738d8c276a2937f72ff1fdd6bc44bc1cf69efdf41879618994723c8b87dc7f93b432db396b3bb47ff4c182bae185d42578ac9f4b37abee0469cac5ecf8249ef765c2aa8392df89ca8883a4fb009ca41ffae299dc7a79caa2b64e8e7b65cbf941243121d4dbd36301cde190e6743682bfbafecb4e863433e820a8326ec3d8343c46b622b52731808e5f3369c2612a1d55d76a9fefe711680a1079cce6f0a75482093ed2e598126830388dec7024ba699a0acca5ae04dfb20c3c1ada5986e398c3e6a18ed9640f9aa2a3610694403284a2dcc45ae24639f33802c53924028a911e0504d5166b214431a6f64242a905ce92ed8c9c8703c8948cfd0991248579fdafb30334064a56afe3a21f0b37ecbbf9cf490c728fef1bac3f6131d23c47194d1e0e71f62037da29e3b1f623d990af7f3e186b091b45f8d719061c5ec6c92f2e3f0f9cca9670ccc18b47c134ea48d318e78e9622fe42e024b8902b36af661d8d6eeae00dc859aac85c5f42840d67625303896d264c6aea3f798522b3a9c8b770c01ed7e3e745aee85040f4525e8f5e786e800b20a03231d6ed6d8967914da2aa83c9cf2764db02ecb853fb983e59bd2e17bf50c1091760ba917ed93836a4498ce47b30b3fd87b809fc6714dde17fc9739e8cc602a5e370b5e8ee6d3efa0a27522ad82d6b9b76ec3c5a832ce5c24ecd8ef97c869829d8a133570b9b4688b41c1762dacd71fab5ac005916e7efcd670ca2900ee51ca7dfbd07d3ae4ec423af8d745d8fe4a31a15a61d8df38270537e67a7869fca54e46cc9cb82ba200df9fa41767eb634176f1f1e98907ba3c4d2ceb847bbc628a557d334ae8fef566e2083d6f68c750abd9d278ad754ba8e01e2f4123a840de8e42641bb245cde8bde0be9e6f61746649691781f6a343b07eda53f9cece96cbe231b9323a3422b16d14a832e45de313a8ec37fbc0c6f711284683de1b2a56663aba1dea5a59306e2770dfa430e4258d135acec8a6288830fbfbc6d370947e3468f3a31bba02a94a97391c9b405ba44af7b29e7640f051c483f9024178d2985680d52bcdef65cd44003d679934f88284f7c203c30e17bd4e80b7b332da6222f806b76ca67b83c73e13166a10fd089318dbe80a77a6fbb34a4d3046624205121dad6e94408de20532ca682de0f75ac8b74d0b015a10b6288fc62a6ffb8d463fb52cb2b37a3ab959a0cc84a5cbc67fabefa2eefbe7318409eea8e4aec8d963f98f79aaca8c3ba38868cca490c312038f604192c007baee65302556eab69151e725f7fdc8a5f38604099dea6c45ddbec76374493e864befb035ff12a2d9c15c4746428d1b394749c8aa7c1ea85cb50ad85743c055ca701f4d58affde605d5687af8f1d90872bf3f7ab36b98863ddf7182fc73dc4e91a1be12ee6f802e0321285b5754fbd6bbe517c9e73e97d42ce9b46f8bcdce85599975a487c8e6d9397bafee8e9589390f6d250451d1eafb4c0022162d37df33ed4641f5141d2b130149e5d5f443392016d534e1873aedd3bb84f087e8d764dd58063615d38fef5506d08e233139ea95148f8170dcf8526c3171bbf316d4d70d737fcc28d79ca3f56ff4c66dfdba20e9cc656b68f631e3dd850eb26243c01a042c651bdcb06e038b0a3b7cff34af875f5cbfe590660fc4fa021d7db5299ce9efb22ffa414156c9d6f0c09a2151b9f27d886e4ae417180750114288adf21f1406c8ae92f2a8c9ab5fcb04f5e86799a8dc07103d080b386d9b56664acfc461095aff1503eff88dbe92540b753c642d2c0f89c5c36f800317b21361053b04438cf69781dc29f12dc175ef56401baa45eab8e0b2c9e3cbf7a88b091ea03d01e86351df37f556ff4c97be6be07f577e21dafbedefef8c8d4d39c6545ded30cca6e1b0600626f965813c2f4b8d1d4608be0232cdbdd47b1511f68989ff52131af43daea32c4dcff194ac84479393b3face417e88f7460a3bee07b4f27888de49e5c49790c718b6b6277745208b20d00fb2555b920f6a4da7189ce4826503334d40b0e17013e77557907ec088485c32e1db4f632a6c889b0ec6fc959c6f6b8ac33fb4daae0c78388dfbc6cf29753b17269deaa0416c36fbbe4d5a6e72ce945629f959af96f6756e2e6123232ca84e6fc7c12aaf4e861a0c8de3fa037013d3d9b1ad6cb35b7876f86e93a6f0736fa84b7e925ec53de04a87a510d61e2bf92f985f6a9ab42900002292c9deae617299992edbf1d5101fb2a9c198d3d59ddd637bca5b6f6b9cab02defb0d7b3de87db84585c87d9c9678d00d37fc55691900fda813d7435ccb43625b43fcea300439eee1a8a42d4c1bc9309fa0dc90f8856aaac1ead9012ec5caec5a28660209fed84d7c218306db6cc4a99ff0a4fa33ca101309a77390ae61c8243ddd966da2b41188356d38d5c570f183c46ea9fdaf32433c7207b9e9c3e2f6946038b2bb6b8a63dd6844e429803f1a756e6a70d94cdddcd87fd841a117055c48e669c2d965aaeecec805b059b56f7c87dc7df35c2540a95d780bb0b1ddde49c85c6356baeac40a352492a42af421a55c8d1076e3b833fc1d9b6a93982774cfd3f3505170a12220e297310746a2c467090b5aff643514ab415dfa3836f1eb130fab37802b28e1131ac7a9f76bf9315f1b82e213bf8f9eedb9bd8811be141e72a1c23bf97244c05a1ca7eefe90240f95262e53ec87f34fa576efca0bf50d84102030ec389afbd904c128e2c5d4ee1eb45679a8612d5666ec081a23023467e192bd0e212dd445c0e8571bc7aaa65e6c35443a4ed31ff7a20724a329aae679f1bec075591a2e4443c6f73641493871ba2901cf4f3f66aee41242274e097bb94858d02b96e2b6fad8feace7322e9c342670aaf0ff06a65bcaae221b09b691c9c957f1de6dfcb4e56e9cdc3f545a14db4966e4d6225fec575a2f94f964477ed9009adee989d7460d2d6e1443385534d993aacb9241abc0e270b6770b918bb7dd993ad5376d7d2391dd631a091f25e7847805209c8f31849b3cb4eccc7415abc771a7588a15880432fe4738374fe7d7fcf569fa46d211179d3ef0f27b1289b3b92510b7b9f8319ae866e83ea5cbbce1052c36bae2c8c00d37d83c808c845230709a20935286249f15d41f318de2a09fcadfb2a0f50a7696ed46be906bf30b0772a1ce9187363904243190e8cd4756f60142225d6051e912b4afed87e10f4277fd3ca784293651486486328f64aa55e4e87df1f8c1d09015810aeb07545bc3dcfefc4aae87876da85b6c53e38f54de7b02ba4d1c5f886aace629aa0fe3f83d1ef7d2ddc71c88decb76ba3898d8dd8dc8bef37509495a622324e905eeec85da6c3a36dc9134541a106ad13e7f7cbcea4126592017522bcaa3633b3bdb26bad102c5cd406183f3491c48a672d87f709f09cc6cce346900f940372f1be2a3cbe70f4bccc95c4a9843b33abe21872382582c77202e1b12b95c66af94a84639de01adcc193be2f162f4e8ee4af3032a84ef4b62cfb5a3766545b33e028ddcba9fa1b4be3d8075dcef7dbb574862657e69832f1607c8fde474be2d53c9a880b3d93c637a1262524999ece5ecb971166aa7e33196b292202c8b63a8ae518e4cb266dfbcc67b3bff19eea4d6d6696207cfff012148344085fc5ba7644b6291f70c3a3a586dc07bc2757ab6afefac20e0502c30afd820d3ad165cef8caf89fc5fe7e159461016c3a19f2b105cfb2296ed211b210e93aae0cc913bfb75db18f45a88324eb40a7d4bfe844edfaf1100177a2f81cead4b2cb21684e3dfa076783a6b3cc7ef780a674bb7bd4046066ea6435f1af8ffc1a3f6975b9df5582523f0352c19af3936c5b2f6668990dcee4413aeb1665ec58526d239d77122e78f25a237bf783f2fb6bd09273fb8fe6978b2853bc52ca2769eaa2737c748ee071afa473add77081c3c5426bf81f5150fa7933c084e4b6fba4290b1cc451b09a623be2839fd9abdd754ccb645e5a7502a787ccd821c2f5206a99b781c310a8f85921c94f9cdfada0673c217c5c8bb3660cb96db4b5e3f63313b9b8f1edc145f8c6a5edd3402f093a42deb7fa5fde367a45312e218600a3dc641c4020e84712f419167e72aeb48e4f7200bde586854fee456e22efb84ae67ae506f5799ab86eefac5d8bc0ffb726d9fc57f29f3cf9f62ae555baf111348c990ad6b7f70941220646bf0749530e4f46539f87f87ccb0b706c2f7626fb2e903f0608fe5c94891533340297fefd46b37608a536634bdcabb3f2f35977bb72f1749fc238b3d9040b23fa1a7ce67de9013b1c16a7383825f8ba141d91bcf5e60d034945d8342d23b527cbf3b3b82412c4c1d875ccc94bda70ff2956eb12c63828a0939248159bb4aed04697b0aaa3cbcd107c4e61beef821874bdcda7ff978377d091d7b8b14aa3d7a63b4953e5bfe387cc7ab4efee2677500447824cff49ea9d3c43adf7ea0d188470f53a5a12ecac7e9f98cbc00012873160517fac9eef9ea4a0540544c6355c3fb632fb8732608bee9bf1c11ea1a0e253d9eea72f99c6028a21c77e553d7092b8eee5edf580ef9f5a110a1c42f210fc0227d608e8761b64b0602f9e4d94c1907ab2de1dbebbdf8e537b8fadddbe44e977003454040f91e553ae4acb6067db8a0aa5cb6a87003b87e1f9053636e43fbd187b9ad47eb2d81d790d554b702ce2178b7b1c5320f48e80d9a06f94753e9cb621840c0d2eaece89ff1d2435a96a306e08e9f1838a670a4a3b240c6434bc112bab465b6eeb6cfd6de326fb1ec1ee336e728a24523155c718054b95e433b0c0abf4d21f6f09d8ca76ef2bf575d1a43fd711c2302a15ecd8e5c812890f125634722b3c08c2127bd5e1dce929505d8310cb8f8a922abf497e8d3f1bec8571a151e8b23c6f90a04d2656cef255aab2fc62e6db1a8fcc8a6fc8cf3cdd008f78b50bb70d0e20140f7b91836bbe3d5a3d3b3933f01b3e447b872aa9a43260dd73c41a017eb010f10d76f6c5f9388275276866b3c9236dc01503c6b8bf4ff63d6aad51d1b4e00b765b9844b820ecdfcd3d403551b35f2a922dd1b12763dcacdd43fce7ed97e7aa828a1c131ecfdfa96df119c7b1f9558693fc1be5820007c26aa8e536ec120bed4b0b45da0bcecaf635280dc02c4f9550d84559460ea8ff3da256fa042c1886a7b60f373bc42b5e917e2850d485c3c0c5d3273deb9f38b7a1b24f1d8ea0d64b292b3cdc1501865bb4c124ae1ae34261c3b96cb647930259379b0f3d1529403d484a1a56dce65dd0e39536cc45298efd75c3866020ae1339b73588e973c2eb22accccbc45a560b807b086975cd802802387a26fc180012f489fd5a4fb27a94418aeae36b25df4a0837a593a92049c7b1bba8336df2e551eaf99116c85aba9da7da8d59db0640ea86ce5b6adb301ab09addf1073b379ed92af912bf4e3c37799968030839366187836aea62158d62a06605594e59aa769a4f8d771c35f33ec22db99aa38e0149204ad332c2847f3181ed66645b36cdcbf4c4013d2957cae897da79df8b1d76cf1bfe4abdcf39118f9734e9c8ba8db815748ae306acb516f609dfcdf471e5c7daac6cfd4b1c7f7b979ac7cea3924726502592cfe98d45d9b629adc0bf266a243aca0d67f989429b87b3649f899fe17ee231f3c51756076849fbae6c8f9c50e70fda08bf88e9b8b095852b4cc2a9a4aa2278949f8d5eadf7f8cc30d44af60cedf4f94c44d7807b1b31f5367c4a2451e854eb368da946e591e28627425be569c4c1d7a795bc9d79af35d51d7454fd12aa431dfb06370066823d18e0bedd6c98ce935d1685365df8722c52b7ddd39a32e2ea93f860debe7c270c22c16702c0452f93af1cb4b4ef82f9cc622fedce9e7a46c09916783dd0245624219d63b20c9ffeeeb8c4913e7d5ea98e37c27c97b14c44da9bb8db8eaab726a97741b763e4cdac77f51df8d4206467105b9073ca105777c7e27ec7a630436b9d938812c9f97c42f52b1bc7e7f75d62195b8a8606187c78cd2a07bfbef38d6eb41e5b2a9ec0dba59a30c371ed782a8d3c0ac17183bd77e01fc77bcafea6786996d0ae4689aecea6307e2d55b43b79813a5a9fea30f13d9fe04e20e7540495945b7f4d7086a101484635dedbc4658c1f20d00bead8cc1617e7fb9eed1e96114c9a5881ea30195778b5c398f37fbccdf6ba4f415ad5c984a8d197d703df860063167ded92b14eb0023ce2dbae0477eec5eebdde69aa70c32a818ea8bdcb7d3a3d87643cbd47a9a4bb31475771e319003f16cf0f8e6aed343ed819b1e7407cb9962317afc584d0e7addc6df6a33d943819c71f7c9b05cd8f3436b78295151a13a3394e052b175811a0a802b5a18a2aaf84fd8af9fc6e00b73837b92c48f13fb23609f3d56a11238f3b84cb74b57ef8051d05e8f813d52c78f12a2513da1ea29f20970bd8b5e37985528c8cc4c6d77e2210046e9f51d8c0d52ecbc34e06d30a052fbae82b4f10ab256869fdb61a6096a01d47b00ed710682fe37a4a0ae621cbcdd61acf3c8b8729a325f1f0bb17c6d756a6c1b5954493d4c379e14a5326521da4c6c2eb138c40d2b779922decae844a9142584cfa27c7132714fd637074e4fa09c15c06003a5f144595022914655b452c600294e891ba5a53e7d92c4d9e7259ab4d57f77ddceaf3abd78bee9ee83538fee5e8dae5836fc7c3d241c4ded561b9bb343c88867f6b4aed12e3536c37749803e005592bd3b9819ed239ce8ae381be80c3b68aeebbf90dff95f10c4a6ac65fe9307dcc707d1b5d6869c74da70360362ebe8447a06c08a2d8e0e6381df7fa8319af7c277f92c64ae15d34fb446af72ae9cfa38c71694b4503ca59e79b25fe307c2e8b356e31578d13f29261ad750dfe05542ba2eaad97fc1dba144dbbe86e4c58f9d0dc40c048ff09c2ed6dbbb9ce4f40fd77700c2ee3627af3e80ea01761cb9eef1152d5548d8e7297c7b30530b329eeecb1a5cd80d8c85b7d5acc3f44ea71092aa157f0d8f6752c2d809116330b6c81b6c8848f28ab01c309bb722fbd5b4050659c995253a67fac8d6f62f26e6e45ac0563c67da6c21fd9f0c52d62d34d508fa9e20af230f03e756ea19c1137a4aec58b444216737d6e4cd02991307e0c91fd9792b60959993d3cc7afa2e39ae77fe61c481d91f55e030b44d7cdf0e4a7984fe5de00e2a62987e71fa868cd23021e2642ed815296eae7eb996ffaacde9596bfd74aad78ef69f28d4b8376308c65b066762260af7f54e6b898be07172c7d130b0b4d23c6bfca00ed47df3817da9afd7ce005a9822439de51864fb2349337f05f455c16c1e4efb88146c73615732166fb49c74ca1e5ffb2e6dc958ddd75d7534736acb07cddf8f8bbd5c755b25100b84713f9ede377f2a99b2e1e4bb8ed1a6203536c5dd9230d6e7bb4440e9881db00071340a025a3265de93eab4c1186b90f8804425dfe44c9f934c764359257cd5711dbaff235514535c38797b6016c8cd11ed8203cd3c0ddc146260c773fa2c7a7df459f1092f44d4514c8b64e9b28d3d665dee73d90f1cd11d55d09a693529e62cc8c7e54805df106aaca73149031bb15fe3bac19651c1889ca1557eaee2e8d166a6662395971fd69988e47dde0f6ec5ee0d43292ddbadccd508fd6650a77529bc19f42ed8fcf62a2f1d37ffd30026da4acf917754c587f2b2b9681941d2bbe11b002c1cd701d39e372db2e525c03b39d95868f357e096303a5893e32f2eb63dca762d9875e14ca06b2d013834e20ad69b227e03aae2c76fc7c888bda05872c5b5f8ac3787ccc85886263b2e425fa4d69ef287625f4b321a8f5b0f1b08cc4a097ec39aa0fded71d25668f93938a8cd8d681c333a0cb3bc671635418ade90cc91e97d76cbf558ed290daf1982c348af3181d6beee1644963f9d2843ba8bd096e7febc9a564e4530197129a7a7c79e0b32e0cbe977095708c76754c66844c44e080a1428db28ce27a6569e3b68868eac07abe0d2c6b82f2bf2a3148213b68d876c26b38f1c4982bbdd812285dd749b21fa271af902593a95749b29a3c4d10321093e79a8a6a0c27305ab48b813e62b2c26df90ab04abcea1fb73ef6516eeec1c41a03b7e72eb4d2e02bac6380556f6ffe7ed7f496a0472825b74e82082b6dd92e1a59b7c1726ed7fad882bc3ac06d3d778b90ab91955d6c7516cf2999c867476148b3b665181bf47618759b3ecf266417e7de98fa26edc7cfc8fb3dd545f49b352fea7ba11718cde5619f81afd19af36edc62043535d252fd4e552f0030ae0f8afa3b6e1c14848aa75d288dd04d2f6608f6842e17a3a9ae5c465e76d01cd44747c509aca0ccc1dab65ffe0d0267f0d9260f68c17f61835ab3b09b666ae63b20929fc04d1dcf6fd047c3f2e786cc643caedca1527682b6554d93251bcef129e814dc2ef004108384b0020435aedc8edb580ecf83a3ef7624b0fa700c766f6cffc93cd45b3419bcaa43b83586c44255cb20a4fe365ab4e981a030ab82c89adcb1fbc00e2ad2266fa9cb178ace7f383dcb7dcb03612d0dcaddf3166f145057ec1b4f378e626911b2875ff7f1fd8bf5dc2ae4f6cf32ebe3118ef81b91b3ce21ba9a30cf5ab820483ba7de72991eb1237691f4e747dab64f339fba51ea2b5ba558c75ebe57357cb1f257db5fa20813363afb796a22a18410d7b6339d0e1a3e5d11d00de5302e3df67ab6c3c2c5f20a5a99ad1dc9983d5d7c08985c19b416bafb64b9e7bde6c580d4e055fb8eb223929f612e48a00baf2e7208c3ca1a482e8043c5d2bc8a9646b75ae5c7ec502daf9838d1dd06119ab66099910ffb354e6ab9fb217f6bf9415d4630c1e09a1ade2684df5a2d7a773a00c6c70c6bd474f066b23d1adc9d8bede00af2e09769b259095a024cec547d6f9e5065dfc6e38db1c70b9f7a4e5f65558ddb2934fb28a7a1f052b30abe8938323ebd260bc24e8efe535c7ab79034e8bea651a0b601aa947f22192d91a90918b3f1586770516f2d04a14a2efc94bc4e9f194d15273e684d1e24ebb8d2d042ff59f8daca1e777eaa893bd08a8d9c342d2097c990054ddea9384ce964c129b7dc8e2a551bbe4a8fcef0ab47fee5dedd084539446639edf9fbab53e855eed39659b22c0b5327ed9440adc26430aefc28840e27c3b30ca020e298187bbfa9cec940b8bdea5109320e4ad70dbc6c7029a20fce4b833274476fe93250d2aad4477ec4cac0bec99b75a12571490cc00feccd3ab447c02697543fc76c87232679c9a93ede6472c1482e3a9ede17fa73ea51c8837d63bed3fa8fc8f7b360939a7ac25d2ee9097d414df5e5a8b4186fbfa2d3eb6d93764879c04f7a7405c295b235d845332f196b3b226632561737cce5ef9d7917439617c8113b78e9eb83d977ea7a5fcfbfcc2717e31a54c7616e7cd7d42207c161c30a8d417e7f60a81531aca5629303600c7aeb2f0d59606cf67e940f01f91294ae7290c38cbd28edb1cebe90eab614d2fb7887f5f44fe426f709411d4d81fd8f2ede0dbb034d4658b0f89f3c18665b2592389b79304d2f0cd6758d8fb7b3f96ef6a45517dcf4d44cd16856199df33a3d1bb79bcac061140ffd4c3764bc05659a4b95af2f86f4635903d87dfe489cd8e9e2b9d8fa516e77f5fccaf8f936544f8585bf5889348e683e6650cc50f0735339de0d4fe3f5c517627d5bc509e6cbae7c3f4a3f31d800c3cf48e7b9ed1d4b157e5a3d54d594c47aeac80fb08ed36433132a0c4bd29c189b5f614a09c2441ae8b5940be78f04c92aa0f72353c639dfb55d8ae56c031bc1f6c7b42187865d6a4a001ee9164f8ffd7db4048ff94cda4b41a9c", 0x2000, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x0, 0x3ff, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000004100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r3, &(0x7f0000001040)={0x18, 0x0, r4, {0x5}}, 0x18) ioctl$TCSETSF(0xffffffffffffffff, 0x5457, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "7a58bec239ed2d5a99bbc4bff0ebd318665a8a"}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000180)={0x14, 0xc, 0x4, 0x201, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc000) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000540)={0x0, 0x0, 0x100000001, 0x9}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0xc00, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m43.546353243s ago: executing program 4 (id=4454): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) pwritev(r0, &(0x7f0000000300), 0x0, 0x4, 0x2000004) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="41468e06", 0x4}], 0x1, 0x0, 0x0, 0x11000000}, 0x4000001) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r3, 0x0, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8912, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x93, 0x0, 0x0, {0x7, 0x21, 0x0, 0xffffffff80060249, 0x7d, 0x1005, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}}, 0x14) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r6 = syz_open_procfs(r3, &(0x7f0000000140)='net/ip6_flowlabel\x00') r7 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r7, r6, 0x0, 0xffffffff) 2m38.647152725s ago: executing program 36 (id=4493): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(r1, 0x9) r2 = syz_clone(0x1909f680, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000001500)="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") timer_create(0x7, &(0x7f00000000c0)={0x0, 0x33, 0x2, @tid=r2}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f00000002c0)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) write(r1, &(0x7f0000000400)="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", 0xfffffcf1) 2m28.497243743s ago: executing program 37 (id=4454): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) pwritev(r0, &(0x7f0000000300), 0x0, 0x4, 0x2000004) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="41468e06", 0x4}], 0x1, 0x0, 0x0, 0x11000000}, 0x4000001) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r3, 0x0, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8912, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x93, 0x0, 0x0, {0x7, 0x21, 0x0, 0xffffffff80060249, 0x7d, 0x1005, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}}, 0x14) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r6 = syz_open_procfs(r3, &(0x7f0000000140)='net/ip6_flowlabel\x00') r7 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r7, r6, 0x0, 0xffffffff) 2m22.634237852s ago: executing program 9 (id=4625): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000000c0)={0x3, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x8000, 0x13}}) socket$igmp6(0xa, 0x3, 0x87) r3 = socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r4, &(0x7f0000000480)=[{&(0x7f0000000040)="f32dd1b5da4f86f8cbb16508aca8", 0xe}], 0x1, 0x0, 0xfffffffd) listen(r0, 0xff) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/202, 0x0, 0x2, 0xf}, @fda={0x66646185, 0x3, 0x0, 0x25}, @fd}}}], 0x0, 0x0, 0x0}) 2m21.693722198s ago: executing program 9 (id=4627): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = dup3(r0, r1, 0x80000) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000000)={0x6, 0x4, 0x2, 0x9, 0x4, "a3315dd8a7a4e0de"}) 2m21.691164868s ago: executing program 9 (id=4629): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001000034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x4) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) socketpair(0x23, 0x5, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = open(&(0x7f0000000240)='./file0\x00', 0x482602, 0x104) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000200)={{r0}, {@val={r6}, @actul_num={@val=0x2b, 0x9, 0x4d}}}) r7 = socket$inet(0x2, 0x1, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r10, 0x7709, 0x0) ioctl$ASHMEM_SET_NAME(r10, 0x41007701, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000fc0700000000000010200002ca3e0000"], 0x1c}], 0x1}, 0x0) bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000f751098c1c835554f0359930f78fa26fb1eb34fe559fd3b1889ee9d7af691dd3645f7754d8b58d83773cad4c4dc5fc053caee38c2dd5ebcb8f9d15acb91fec188671fd8b5bb3ccb73fd9b62b3d48f99702033b343fac78c36dae7a7df11815977557e62ddaf1a52192", @ANYRES16=r11, @ANYBLOB="010027bd7000fddb5f2501000000040003000400028004000180"], 0x20}}, 0x20004400) r12 = timerfd_create(0x8, 0x80000) poll(&(0x7f0000000040)=[{r1, 0x4285}, {r0, 0x4002}, {r0}, {r12, 0x1}, {r0, 0x2220}], 0x5, 0x9) 2m21.550134329s ago: executing program 9 (id=4632): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000340)='./file0\x00', 0x22) rt_sigprocmask(0x0, &(0x7f0000000080)={[0x8]}, 0x0, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2e04, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xed) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xed) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b618800000001fcdf250400000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990040000000000000003c001d800c00008005000400000000002c00008005000b0000000000050007004d000000060005004800000005000600000000000500090001000000"], 0x64}}, 0x44000) openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) r5 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) (async) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYRESOCT=r0, @ANYRESDEC=r0], 0x1c}], 0x1}, 0x4000080) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x1f0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r9 = openat$incfs(r8, &(0x7f00000001c0)='.pending_reads\x00', 0x8003, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030db5730303034303030302c757365725f69643d0be9da08a11df8dc619bb8de37b8bae27d7d119fce4875e996c55df219c5583f3beeb22e0430ebb0f22be9c154d467f87d69262964e585de71abe3c982362c926804610725fce26e0e4633bebe79792c5868d174cd75427e21e083e94ee9e159cb74d830822ea6b4051b9ccb48409737e8ad5a7b28c2eb99ae68ac6f2881935025fdbcbbad878a391bd3ade6e2e45f1ec514245ae80d7f49", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0x80106725, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b40)="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", 0x16b}], 0x1, 0x0, 0x0, 0x11000000}, 0x40005) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$setregs(0xd, r10, 0x0, &(0x7f0000000cc0)="a1f2e6ef37822c862c5c24fc7f0de321f9048a1afdfbf195be88579f8d951204f1457d46fedc1cbd2b4ac3ba5d96f4ba4460f21810207888bb9eb93bff04369387e1a2307e2c4512d1c8613b5179fcb3c1099b9728ee72a99bdcfc13658222dde85e700eeac5399e696cb8bf9c2b5dcc72304bfeaeb383e38d672d71fb837f9efe3bddf66d04d7a92e5803a6f1432fcdf84c378e9dec0b42654a2c52959b3ec5700883e983cc0ca1f097d8940e8116b28c82fe0dd4a38d799fdce3efedaa78494d777bcea438b94fe00b1837fca420c5e15dd4c1ce52ea718e48461cd4be427f95702832101fdb57def90f83ac24087c201b1568bbf0df0e207d52f68a1ee8bab5a035a0c76643e26054ec06d835a792af9d7a2666c3d8fc14b09d876fb2e431ebaec95a44f63acf3d0a5e8a010e5b3eb5873883ddcb43abebe185e7c194b9538a4228b0e71881e9c9bf0239808d6a4a518d5f3152b00a10131b21f0bedce674f9c60307dc7eddc529579b8f9961b6558eddd5c86d9315faafc9d669d22dba12a55db3319c301090b0279dffe5822e11d859c5978bec6a957d41366e8bb2a437e928a64ffbb65bb629d1f714e7c5a74578c44f28b9bd0e5a429e8154de6911501ed2208ba98eb6e5e4b71feb1d7a2751f72aaecb192dc3b7838e3bc5feccd1c53e0ac3a9bb93b2671921c71fa14eeb76990f7a99c6e097d335d02c1f5dd34de1612bf05a78e535f845e7ecd829288d1730e1983f8ab31327b3fdbb5b8bc5cd6c73e035054c738f87bfdd076b3010916bb339413bda157c0dafb20501112733e003eb380a7078d4e628d58267e027538c2557e90df51c73e8cc5fd99240ada5f326fd787dcd03f4a7ece09002a912ce0dc5fc6e7c815d7b06723ba2a202bdbff64e52bf6abd82a2a458de477106a11b7f692d64baf347d5ca0fbafd7e581bbe01e4936aa3ceaae254c2f3ae2e691868a0adf092126fed70bf672f4ef377b3dfead261079817c92eabb98dc6b4795b4c0fe449895db82be1b7e6") 2m21.486582359s ago: executing program 9 (id=4634): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000017c0)={0x0, "169b3c6b6e779d7771188e2d71f81b92"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x486, 0x0, 0x32feb97b}]}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000800)={0x10, 0x5, {0xa6a, @usage, 0x0, 0x5, 0x6, 0x80, 0x7, 0x8, 0xc62, @struct={0x4, 0x5}, 0x3, 0x3, [0x20, 0xf, 0x8000000000000000, 0x10000, 0x5, 0x100000001]}, {0xfffffffffffffffc, @struct={0xcc, 0x2}, r3, 0x6c, 0x4, 0xa, 0x9, 0x2, 0x0, @usage=0x2, 0x10, 0x0, [0xfffffffffffffffe, 0x3, 0x3, 0xfffffffffffffff9, 0x4fc, 0xffff]}, {0x200, @usage=0x8000000000000001, r4, 0x6, 0x9, 0x8, 0xae9, 0xbd6, 0x44, @struct={0x64c, 0x9}, 0x3, 0x4, [0x100000000, 0x7, 0xf87, 0x4, 0x100000000, 0x3]}, {0x7, 0x6, 0x9}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x111d804, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) (async) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r10 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendfile(r10, r9, 0x0, 0xffffffff) 2m21.36165952s ago: executing program 9 (id=4635): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902241601000040b109040000010300017b09210101000122050009058103ff030c0000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200a07004103070f04f40000000842cd135e1d4f1b346c8a985cad865f93c2982b6833872ed95e77fad48b06a61268d5ec542b9b5a09f17ba4a56e7feead80d33ff8d13ca9816f005f5ab62c69d5cd5b4d324c117c024baae1768e08e55d9616c6ee8e1a9a12e5e0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) sendfile(r1, r1, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00') r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000380)={0x9a5, "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"}) 2m21.3612799s ago: executing program 38 (id=4635): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902241601000040b109040000010300017b09210101000122050009058103ff030c0000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200a07004103070f04f40000000842cd135e1d4f1b346c8a985cad865f93c2982b6833872ed95e77fad48b06a61268d5ec542b9b5a09f17ba4a56e7feead80d33ff8d13ca9816f005f5ab62c69d5cd5b4d324c117c024baae1768e08e55d9616c6ee8e1a9a12e5e0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) sendfile(r1, r1, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00') r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000380)={0x9a5, "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"}) 2m16.681867261s ago: executing program 1 (id=4669): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4040130, r0, 0x634ba000) 2m16.647892452s ago: executing program 1 (id=4670): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x5, &(0x7f0000000000)=[{0x1, 0x9, 0x0, 0x2}, {0x6, 0x3, 0x3, 0x3}, {0x5, 0xfd, 0x92, 0xf18f}, {0x2799, 0x10, 0xa, 0x10001}, {0x8000, 0x7, 0x6, 0x1000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x7, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) mmap$binder(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100001) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x5, &(0x7f0000000000)=[{0x1, 0x9, 0x0, 0x2}, {0x6, 0x3, 0x3, 0x3}, {0x5, 0xfd, 0x92, 0xf18f}, {0x2799, 0x10, 0xa, 0x10001}, {0x8000, 0x7, 0x6, 0x1000}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) (async) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) (async) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x7, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x2) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x1}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) (async) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100001) (async) 2m16.450485313s ago: executing program 1 (id=4672): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) rt_sigaction(0x7, &(0x7f0000000180)={&(0x7f0000000000)="c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x5c00000c, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x3, 0xf2, 0x3, 0x6, 0xcf4, 0x1, 0x9, 'syz0\x00'}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f00000001c0)=0xf, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x34, 0x874fd42a7836ef6c, 0x4}) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000001f00)=ANY=[], 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer], 0x0, 0x0, 0x0}) timer_create(0x1, &(0x7f0000000080)={0x0, 0x1f, 0x1}, &(0x7f0000000100)) 2m15.851654237s ago: executing program 1 (id=4682): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syslog(0x2, &(0x7f0000000000)=""/41, 0x29) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}, {@redirect_dir_nofollow}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$FIOCLEX(r1, 0x5451) 2m15.163051902s ago: executing program 1 (id=4686): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x40) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x800000000000002) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="0f20c035000000800f22c0c4017a11a58353618ac401d05fd366ba200066b8890066ef66420f72d19ac7442400e4000000c7442402fffae64eff2c24440f20c03504000000440f22c066bad004b885eb0a10efb8010000000f01c1260f884bab0000", 0x62}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m14.446289766s ago: executing program 1 (id=4693): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2840) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_io_uring_setup(0x58f5, &(0x7f00000000c0)={0x0, 0x400289b, 0x10000, 0x1, 0x2000031f}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioprio_set$pid(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2d41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sync() write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ftruncate(r5, 0xc17a) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000004280)) lseek(r5, 0x2000, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) memfd_secret(0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x98, &(0x7f0000000680)={0xd, 0x2, 0x12}}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f00000021c0)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) 2m7.188325124s ago: executing program 0 (id=4741): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x13c, r1, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x7, 0x2}, {0x4, 0x3}, {0x2, 0x7}, {0x2, 0x5}, {0x8, 0x5}], "59793cfb6996cfc8"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x8, 0x7}, {0x9, 0x6}, {0x0, 0x6}, {0x2, 0x4}, {0x4, 0x5}, {0x8, 0x3}, {0x2, 0x2}, {0x1, 0x6}, {0x8}, {0x81, 0x7}, {0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x9f, 0x5}, {0x0, 0x2}, {0x9b, 0x7}, {0x1, 0x3}, {0x8, 0x3}], "96d1b9751fd0d5b5"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x2, 0x6}, {0x1, 0x3}, {0x8, 0x2}, {0x8, 0x2}, {0x9d, 0x7}, {0x81, 0x7}, {0x3, 0x4}, {0xd, 0x3}, {0x4d, 0x6}], "37997834628bb546"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x9}, {0x9, 0x1}, {0x9, 0x6}, {0xda}, {0xc, 0x4}, {0xff, 0x4}, {0x47, 0x6}, {0xb}, {0x8, 0x5}, {0x0, 0x5}, {0x8, 0x6}, {0xad, 0x7}, {0x6, 0x3}, {0x1, 0x6}, {0xe, 0x4}, {0x7f, 0x2}, {0x8, 0x5}, {0x4, 0x5}, {0x3, 0x5}, {0x8, 0x7}], "cbf33c8dfdefbec1"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2e, 0x4}, {0x1, 0x5}, {0x8, 0x1}, {0x7, 0x7}, {0xd7}, {0x6, 0x5}, {0xd}, {0x8, 0x3}, {0x7f, 0x2}, {0x40, 0x3}, {0x3, 0x4}, {0x27}, {0x1, 0x1}, {0x2, 0x2}, {0xf9, 0x2}, {0x5e, 0x3}, {0x5, 0x4}], "5c849ccac87d54a4"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x40, 0x6}, {0x9, 0x1}, {0x0, 0x2}, {0x7, 0x3}, {0x0, 0x5}], "57b59aed4a756a78"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x9, 0x5}, {0x2, 0x2}, {0x1, 0x7}, {0xc0, 0x1}, {0x9, 0x4}, {0x9, 0x1}, {0x9, 0x7}, {0x6, 0x4}, {0x4, 0x3}, {0x2, 0x7}], "0d9cb2f0ecad936d"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xf, 0x3}, {0x80}, {0x7, 0x4}, {0x91, 0x3}, {0xa, 0x4}, {0x5}, {0x9}, {0x2, 0x3}], "397032acf00e8b3d"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000880}, 0x8000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0xd10, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x4f10, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040010}, 0x20040800) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000044}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x400, 0x70bd2c, 0x9, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x0, 0x700, 0x3, 0x3d2, {{0x36, 0x4, 0x3, 0x3e, 0xd8, 0x64, 0x0, 0x9, 0x29, 0x0, @empty, @remote, {[@noop, @generic={0x44, 0x6, "971bc20e"}, @ssrr={0x89, 0x7, 0x4a, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x17, 0x3, 0x1, [{@empty, 0xf9}, {@private=0xa010102, 0x1}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x4}, {@local, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x401}, {@empty, 0xe}, {@remote, 0xfffffffa}]}, @timestamp_addr={0x44, 0x3c, 0xdf, 0x1, 0x0, [{@multicast2, 0xffffffff}, {@broadcast, 0x800}, {@remote, 0x4}, {@multicast1, 0x6}, {@rand_addr=0x64010101, 0x10001}, {@local}, {@multicast2, 0x7fffffff}]}, @timestamp_addr={0x44, 0x3c, 0x91, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010100, 0x28}, {@multicast1, 0x933}, {@multicast1, 0xffff}, {@broadcast, 0x6}, {@broadcast, 0x9}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0}, &(0x7f0000000700)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0xc, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2404a814}, 0x40000) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xb4, r8, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1a4c7904}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x49}, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x2408c8c0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00), 0x204000, 0x0) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r0) sendmsg$GTP_CMD_ECHOREQ(r9, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r10, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xd8, r8, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x1) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xdc, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x1d, 0x6, "8f3b37ca9ded1462f5c621f003ef28ef6c1919b14f6ea69699"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x6a, 0x6, "03424df7afb11bc3276cf1b33d399469b9ce0c6b91963dc3b37abde87b048ebdeddc3caca66b1b1427f4a9f678f175a373e334d180677c6410c19907faffea2a8eca251a96614d7ef8ad868652a661e3ebb330a6401948c626a0d2317ea0926d25c4772412b8"}, @NFTA_TABLE_USERDATA={0x10, 0x6, "7a3ba3ee61d701d4f6ffa17c"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) r12 = dup3(r7, r11, 0x0) write$tun(r12, &(0x7f0000001100)={@val={0x0, 0x88a2}, @void, @x25={0x0, 0xe8, 0xfb, "9573a30d44fa6667199530d699563c9cac60bd6a74bdb1ddf3c6d7d8b07e4872c4582b3d98f2c315d3c7072587a9dcc49f66b88c85e14eda0a76eff9e6a88874cc69339a01562516c5589a1f59c6189ca51c520ef1259aa9bfb9f9dd49e420e8ae96148ab6"}}, 0x6c) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xc4, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xed, 0x2c}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8debd1bc8d94c5c9e10da594e4f8c707ea0e2cc01be92623"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004890}, 0x40050) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000001340)) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001380)='net/nfsfs\x00') sendmsg$IPCTNL_MSG_CT_GET(r13, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x5c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x44, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x800}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xd}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x8}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x10}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5814}, 0x8000) 2m7.095407465s ago: executing program 0 (id=4742): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) prlimit64(0x0, 0xb, 0x0, 0x0) r1 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r1, 0x9, 0x0, 0x0) rt_sigqueueinfo(r1, 0x1a, 0x0) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000100), 0x10) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000e00), 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1400000000000000000000000200000009000000008000009c000000000000000000000007000000442066b0fffffffe00000002000000090000000900f85e0000800000000006830fe87f0000010a010102000000000707c3e0000001891388e0000002ac141441e00000020a010102440cc7f00000000300000400070fa700000000e0000001e00000010717287f000001ac1414aae0000002ac1414bbac14142244108d2000000010000003b20000000300000000001c000000000000000000000008000000", @ANYRES16=r1, @ANYBLOB="ac1414aaac1414bb06e242d01c000000000000000000000088000000e91e55c35a8196dd13ecb3abc7a11067b98a71bf4ad1fe0de9ae4202715836a2d9e23ba78c4e4e629ba36f867871c9947bae020be217c71d439d445ad17d0e725c87d49ddc986970a7bad175af7449dba9cfe22e225e45c8c77c48bc1091a79b569ccb4d66b8", @ANYRES32=0x0, @ANYBLOB="0000000000000000cedc4601"], 0xf8}}], 0x2, 0x4004050) (async) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000440)) (async) r3 = gettid() getpgid(r3) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async) recvmmsg(r5, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) (async) r6 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r6, 0x8fe69000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m6.982336866s ago: executing program 0 (id=4743): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) r1 = socket(0x10, 0x2, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="240000001e000503"], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 2m6.962781866s ago: executing program 0 (id=4744): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x2}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x1000, &(0x7f0000fa3000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 2m6.788827237s ago: executing program 0 (id=4745): mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)={[{@stats}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x35, 0x0, 0x61, 0x64, 0x32, 0x36, 0x34], 0x2d, [0x63, 0x32, 0x32, 0x31], 0x2d, [0x0, 0x61, 0x33, 0x37], 0x2d, [0x35, 0x31, 0x33, 0x61], 0x2d, [0x65, 0x39, 0x66, 0x35, 0x66, 0x37, 0x31, 0x31]}}}]}) 2m6.662275897s ago: executing program 0 (id=4746): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) syz_io_uring_setup(0x58f5, &(0x7f00000000c0)={0x0, 0x400289b, 0x10000, 0x1, 0x2000031f}, 0x0, 0x0) (async) syz_io_uring_setup(0x58f5, &(0x7f00000000c0)={0x0, 0x400289b, 0x10000, 0x1, 0x2000031f}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioprio_set$pid(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sync() write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) dup(r2) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) truncate(&(0x7f0000000240)='./file0\x00', 0x648) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) read(r0, &(0x7f0000000000)=""/183, 0xb7) 1m58.152212474s ago: executing program 39 (id=4693): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2840) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_io_uring_setup(0x58f5, &(0x7f00000000c0)={0x0, 0x400289b, 0x10000, 0x1, 0x2000031f}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioprio_set$pid(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2d41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sync() write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ftruncate(r5, 0xc17a) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000004280)) lseek(r5, 0x2000, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) memfd_secret(0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x98, &(0x7f0000000680)={0xd, 0x2, 0x12}}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f00000021c0)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) 1m50.663563524s ago: executing program 40 (id=4746): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) syz_io_uring_setup(0x58f5, &(0x7f00000000c0)={0x0, 0x400289b, 0x10000, 0x1, 0x2000031f}, 0x0, 0x0) (async) syz_io_uring_setup(0x58f5, &(0x7f00000000c0)={0x0, 0x400289b, 0x10000, 0x1, 0x2000031f}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioprio_set$pid(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sync() write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) dup(r2) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) truncate(&(0x7f0000000240)='./file0\x00', 0x648) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) read(r0, &(0x7f0000000000)=""/183, 0xb7) 1m34.070211784s ago: executing program 7 (id=5052): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) (async) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) (async) r5 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "576b6ef53b7d29775a598a05bd75178e57e16568b009ec328b5d6764d965e1081fc3c390db93cc994509274386773707579006e9c352280cd69fe358a15ef916", 0x36}, 0x48, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r5}) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@chain) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, 0x0) (async) r7 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x80, 0x0, &(0x7f0000000200)=[@free_buffer={0x40086303, r7}, @acquire_done={0x40106309, 0x2}, @dead_binder_done, @clear_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000008c0)}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xb4, 0x0, &(0x7f0000000440)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/47, 0x2f, 0x0, 0x3c}, @fda={0x66646185, 0x8, 0x2, 0x2c}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r7}, @register_looper, @enter_looper, @enter_looper, @free_buffer={0x40086303, r7}], 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0x40087707, 0x2) openat$incfs(r8, &(0x7f0000000140)='.pending_reads\x00', 0x11102, 0x110) 1m33.687087487s ago: executing program 7 (id=5057): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = userfaultfd(0x80801) r2 = socket(0x1d, 0x3, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2a83, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000580)={0x1, 0xd000, 0xffff5896, 0x1, 0xd7d}) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) sendto(r2, &(0x7f0000000400)="a32798214011dbd58f8266174b3366d83923a8c5f012d79fbbb30d7ef21c5a668a7b3b5013f1be8f85ce196dc906d7301aa059ecbb05d9644a2d6619c149f48016cb8ab10a3ffb5ea53c3018bd17bfd177ed8cfa9d12cc9b2a4b4c8a11129760914e24084f98a5a400d37b268f2a6db7ac1be4d382fac2816bfdc1353f62539a49d3ea206dc26c1dc46b7d975ed1b80bb4329a443ab8d4bd68f813259ce9484bf04d27d3e430", 0xa6, 0x20000000, &(0x7f0000000100)=@caif=@dgm={0x25, 0x1, 0xa}, 0x80) syz_usb_connect(0x2, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000040)=0x888b, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x18}, @local, @remote, 0x800000, 0xa, 0x0, 0x0, 0x7ffffffe, 0x140192}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/132, 0x84}], 0x1) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x7, 0x8, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x8000, 0x1, 0x3, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="94010000", @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf25110000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020077673100000000000000000000000000080003000000000008000300000000001400020063616966300000000000000000000000180001801400020076657468305f746f5f626f6e640000004400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006e657464657673696d30000000000000080003000200000030000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="140002007663616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="48000200"/16, @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f68737200000000040001805800018008000300010000000800030002000000140002006d6163766c616e31000000000000000008000100", @ANYRES32=r10, @ANYBLOB="1400020076657468305f766c616e0000000000001400020076657468315f746f5f626f6e64000000"], 0x194}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) 1m31.384549842s ago: executing program 7 (id=5067): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x2) dup3(r0, r0, 0x0) (async) r1 = dup3(r0, r0, 0x0) finit_module(r1, &(0x7f0000000140)='(.%.^%[}{\'\x00', 0x2) (async) finit_module(r1, &(0x7f0000000140)='(.%.^%[}{\'\x00', 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x1, 0x72, 0x80000000, 0x3, 0x7, 0x0, 0x3, 0x800, 0x2, 0x8, 0x6, 0x10, 0x5, 0x4}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1m31.226200393s ago: executing program 7 (id=5068): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000a21000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r0, 0xfe221000) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_misc(r2, &(0x7f00000000c0)='\t', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x458002, 0xd2) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', &(0x7f0000000a80), 0x2000) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xf, r3, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000057b000/0x400000)=nil) mremap(&(0x7f0000357000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000000000/0x2000)=nil) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) 1m31.142089664s ago: executing program 7 (id=5069): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstat(r1, &(0x7f00000000c0)) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)="3c692525bca1ff322ca6e0899174f001fadb90793549b2239ccac13907dc1b674ea6e6ed8c47239b7579b4128f666f4371647e5d2e826cf6462011a0d4b21bbc2743caee32a10cbf2187e1d7020ec377912d2e11879fb366c493ab2dd6c750803743d28923ff889e4241499dec03d3e2b7b157fcb0b3777da19afc5eb7b1e0bbb393aae59baad89d7117e334e25294243eee3cc69d7b6144a34f54311e978340c97e18d2cf572f0156b4c1a7008689d3") mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4841, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000200)) 1m31.052990205s ago: executing program 7 (id=5070): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2e02c1, 0x100) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10, 0x5}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108abf5da000000000000010902240001b30000040904410c17ff5d810009050f"], 0x0) syz_usb_ep_read(r3, 0xf, 0xffffffffffffffd2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0xfffffffffffffffd, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1m30.993600885s ago: executing program 41 (id=5070): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2e02c1, 0x100) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10, 0x5}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108abf5da000000000000010902240001b30000040904410c17ff5d810009050f"], 0x0) syz_usb_ep_read(r3, 0xf, 0xffffffffffffffd2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0xfffffffffffffffd, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 50.678260303s ago: executing program 2 (id=5341): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a006080", @ANYRES32=0x0, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0x100000000}, {0x0, 0x8}}}, 0xb8}}, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x5e) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r4, r0, 0x0) recvmmsg$unix(r5, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r6, 0x5f7b1000) 49.76233885s ago: executing program 2 (id=5354): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc76dc7, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$BLKRAGET(r0, 0x1263, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d0f, &(0x7f0000000000)={0x1, 0xc}) ioctl$BLKRRPART(r0, 0x125f, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0) 49.7237099s ago: executing program 2 (id=5356): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'L-'}, 0x16, 0x2) flock(r0, 0x4) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x1, 0x400040) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f00000000c0)={{0x2, 0x2, 0x3, 0x8, 0x5, 0x40}, 0xa1, [0x9, 0xcb, 0x2, 0x7, 0x401, 0x14f, 0x1, 0x1, 0x5, 0xc04d, 0x4, 0x2, 0x80, 0x6, 0x5, 0xc45, 0xad5, 0x4, 0x3ff, 0x9, 0x4af, 0xe, 0x100, 0x3e3, 0xfffffff1, 0x6, 0x8, 0x517, 0x401, 0xfffffffe, 0x4, 0x7, 0x3ff, 0x7, 0x81f, 0xef, 0x5, 0x7c0, 0x80, 0x2, 0x8, 0xda2, 0x3, 0x1, 0x9, 0xd, 0x0, 0x9, 0xc, 0x4, 0x0, 0x9, 0x81, 0x30, 0x3a, 0x800, 0x2, 0xd, 0x6, 0x3, 0x7fff, 0x6, 0xd00, 0x1, 0x24, 0x8000, 0x800, 0x7, 0xc6, 0xfffffff9, 0x7, 0x5, 0x991, 0x4, 0xfffffffd, 0x1, 0x10, 0x9, 0x6, 0x8, 0x1, 0x1, 0x8001, 0xe1, 0xfffffff3, 0x9, 0x1, 0x8001, 0x5, 0xd, 0x63b, 0x4b, 0x4, 0x59, 0x3, 0xfffffffb, 0xff, 0x401, 0xfffffffa, 0x3, 0x1, 0x4, 0x5, 0x1ff, 0x1000, 0x7, 0x3, 0x1, 0xfffffffc, 0x4, 0x3c93, 0xfc, 0x5, 0x6, 0x0, 0x0, 0x7ff, 0x5, 0x7f, 0xbf99, 0x0, 0x10000, 0x1, 0x7, 0x1, 0x0, 0x7fff, 0x7, 0x6, 0x5, 0x5c2, 0x7, 0x7, 0xe3, 0x7, 0x0, 0xfffffffd, 0x4, 0x380, 0x800, 0xf, 0x10, 0x5, 0x8, 0x8c, 0xffff7fff, 0x3, 0x10000, 0x6, 0x100, 0xffff, 0x80000001, 0x1000, 0x8, 0x4, 0x9, 0x7fff, 0x1, 0x8001, 0x7ff, 0x0, 0x3ff, 0x3, 0x7, 0x5, 0x2, 0xd197, 0x7df, 0x5, 0x9, 0x5cc8, 0x5, 0x57c, 0x8, 0xc809, 0x4, 0x56, 0x1, 0x0, 0x159f8385, 0x8, 0x7, 0x200, 0x0, 0x6, 0x7, 0x7, 0x7fffffff, 0x401, 0x81b, 0x80, 0x4, 0x7, 0x7, 0x2, 0x8d0, 0x2, 0xb, 0x5, 0x4, 0x3, 0x1, 0x5, 0xfc, 0x0, 0x8a1, 0xc803, 0x7ff, 0xfff, 0x80000001, 0x3, 0x1, 0x2, 0x0, 0xda, 0x7fff, 0xb2a, 0x4, 0x4, 0x8, 0x1, 0x56, 0x0, 0x1ff, 0xc9, 0x4, 0x2, 0x6, 0x7, 0x4, 0x81, 0x6, 0x1, 0x9, 0xfe49, 0x7, 0x1, 0xacec, 0x3, 0x77, 0x7f, 0xfffffe5a, 0x0, 0x6, 0x7ff, 0xfff, 0x38, 0x4, 0x7, 0x40, 0xfffffffc, 0xfff, 0x5, 0xa, 0x6, 0x4bb9a9ba, 0xa47, 0x1, 0x6, 0x6, 0x5c, 0x800, 0x2, 0x3, 0x8, 0xe, 0x1, 0x7, 0x2, 0x0, 0x0, 0x7f, 0x7fff, 0x5, 0x8, 0x6, 0x0, 0x8001, 0x1, 0x3f, 0xf, 0x3, 0x1, 0x7f, 0x7ff, 0x80, 0x5, 0x3, 0x10001, 0x6, 0x4, 0x9, 0xe, 0xb, 0x0, 0x2, 0x5, 0x1dc5c44c, 0x3, 0x1, 0x6, 0xfffff000, 0x4, 0x8, 0x8, 0x1, 0xfffffffd, 0x10001, 0x76f, 0x8, 0x6, 0x5, 0x7, 0x8, 0xffff, 0x1, 0xffff, 0x9, 0x400, 0x58000000, 0x75c, 0xff, 0x3, 0x1, 0x9, 0x7, 0xfffffffd, 0xfffffffa, 0x7, 0xffffff80, 0x9, 0x6cf7, 0x3e7, 0x80000001, 0x9, 0x6, 0xffff, 0x1, 0x800, 0x800, 0x40, 0x0, 0x1ff, 0xfffffffd, 0x0, 0x8, 0xa5, 0x1, 0x1, 0x7, 0x100, 0x9, 0x5, 0x2, 0x0, 0x0, 0x5, 0x6, 0x434, 0x1, 0x5, 0x2d6b, 0x6, 0x4, 0x101, 0x8, 0x1, 0x4, 0x9, 0x9, 0x400, 0x1, 0x5, 0x1c0, 0x1, 0x3, 0xea6, 0x6, 0x2, 0xb85, 0x5, 0xe000000, 0x0, 0x9000000, 0xc9, 0x80, 0x1, 0x401, 0x12000000, 0x1, 0x8001, 0xe7a, 0x1, 0x2, 0x8ee, 0x80, 0x6, 0x9, 0x2, 0x6, 0x4, 0x0, 0x6, 0x4, 0xe, 0xb2de, 0xc, 0x4, 0x3, 0x4b4, 0x5, 0x4, 0xffffffff, 0x6, 0x80, 0x6, 0x400, 0x5, 0x1000, 0x1, 0x67, 0x5, 0x4, 0x5, 0x6, 0x0, 0x8001, 0xffffffff, 0xd65, 0x2, 0x1, 0x1, 0x3, 0x8001, 0x7, 0x0, 0xfff, 0x5, 0xc, 0xff, 0x9, 0x3, 0x9, 0x35b2, 0x1, 0x4, 0x5, 0x8, 0x9, 0x5f0, 0x1, 0x0, 0xc2d, 0x9, 0xd, 0x7, 0x7, 0x3, 0x5, 0x9, 0xdef, 0xf32, 0x1000, 0x5, 0x400, 0x8, 0x333, 0xd4, 0xfffffffa, 0x4, 0x7, 0x10001, 0x5, 0xfff, 0x7, 0xf, 0x4, 0x0, 0x10, 0xc5, 0x5, 0xef, 0x0, 0x200, 0x855b, 0x9, 0x7fffffff, 0xfffffff7, 0x7, 0x6, 0x7, 0x5, 0x2, 0x6, 0x0, 0x0, 0xc, 0x100, 0x2, 0x7, 0x7, 0x6, 0x0, 0x3, 0x2, 0x6, 0x0, 0x3, 0x9, 0x3ff, 0x0, 0x3, 0x8, 0x9, 0x5, 0xe, 0xfbbd, 0x10, 0xe, 0x2c50, 0x4, 0x30000000, 0xd4, 0x3ff, 0x7, 0x6, 0x5, 0x6, 0x2, 0x40, 0x5, 0x3, 0xa, 0x0, 0x12, 0x5, 0x2, 0x7, 0x2, 0x7fff, 0x8, 0x9, 0x2, 0x7, 0xe, 0x2f6, 0x9, 0xe, 0x0, 0x91e, 0x1, 0x5c3, 0x10, 0xfffffff8, 0x0, 0x7, 0xa46, 0xc643, 0x7ff, 0xf6, 0x6, 0x1ff, 0x6, 0x3, 0x1ff, 0x7fff00, 0x41, 0x8001, 0xd3, 0x7, 0x8, 0x3, 0xdbef, 0x408, 0x3, 0x6, 0x6, 0x8001, 0x8, 0x2, 0x0, 0x100, 0x9, 0x10000, 0x0, 0x3, 0x87, 0x8, 0x0, 0xa, 0x800, 0x1c000000, 0x0, 0xe, 0x7, 0x5, 0x6, 0x91ac, 0x8, 0xfffffff9, 0x0, 0xc3, 0x9, 0xd, 0x2, 0x2, 0x7, 0xc96, 0x3ff, 0xc1, 0x9, 0x3, 0x0, 0x6, 0x1, 0x2, 0x9b5, 0x0, 0x2, 0x4, 0x2, 0x9, 0xeb0, 0x8, 0x0, 0x4, 0x759, 0x10, 0x2, 0xff, 0x7, 0x9, 0x94, 0x3, 0x81d, 0x1, 0x4, 0x8, 0xfb61, 0x1bf, 0x9, 0x0, 0xcd8, 0x4, 0xff8, 0xb1, 0x4, 0x4, 0x8, 0xcb1, 0x2, 0x200, 0x2, 0x10000, 0xffff, 0x8, 0x83b3, 0x6, 0xffff, 0x330, 0x105, 0x2, 0xfffffffd, 0x0, 0x10001, 0x3, 0x4, 0x1, 0x0, 0x7, 0x3, 0xb, 0x0, 0x4, 0x7, 0x0, 0x9, 0x1, 0x6, 0x0, 0xa3, 0x113ac8d1, 0xfff, 0x7, 0x9, 0x6, 0x7, 0x2, 0x7ff, 0x86f0, 0x9, 0xb, 0x7, 0x5, 0x0, 0xd16, 0x401, 0x1, 0x3, 0x1, 0x5, 0x8, 0x7e1, 0x1, 0xaff1, 0x6, 0x7, 0x2, 0x7f, 0x8, 0x5, 0x7, 0x9, 0x6, 0x5, 0x4, 0x1, 0x8, 0x5, 0x1, 0x8, 0x0, 0x8, 0xcd, 0x5, 0xffffd385, 0x10, 0x80000001, 0x6, 0x1, 0x5, 0x9, 0x8, 0xc, 0x5, 0x3ff, 0xb3, 0x9, 0x5, 0x478, 0x6, 0xd, 0x2d6e, 0x5fa4, 0x0, 0x9900, 0x8000, 0x1, 0x1, 0x3a7, 0x1, 0x4, 0x4, 0x8, 0xf6a, 0x100, 0xfff, 0x6, 0x80, 0x3, 0x2, 0x7fff, 0xe93, 0xd, 0x9, 0x5, 0x7, 0x0, 0x6, 0x9, 0x10000, 0x2, 0xafa, 0x401, 0xbe1, 0x7, 0x9, 0xfffffffd, 0x0, 0x1, 0x80000000, 0x8, 0x1ff, 0xe, 0x0, 0x80000001, 0x10001, 0x1, 0x7fff, 0xac94, 0x5, 0x8, 0x7f, 0x8, 0x5, 0x3, 0x0, 0x7, 0x0, 0x401, 0x80000001, 0x6, 0x3, 0x5, 0x8001, 0x0, 0x0, 0x8, 0x7ff, 0xddbc, 0x1233, 0x100, 0xa51b, 0xff, 0xfd5b, 0x4, 0xfffffffa, 0x9, 0x3, 0x10000, 0x4, 0x7, 0x7fffffff, 0xd, 0x0, 0x7, 0x5, 0x3, 0x9, 0x4, 0x1, 0x8001, 0x6, 0x0, 0x5260, 0x1, 0x2, 0x6, 0x3, 0x7f, 0x9, 0x7fffffff, 0x7, 0x7, 0x7fff, 0xb11e, 0x2, 0xffffffcf, 0x1, 0x2, 0x6, 0x80000000, 0x6, 0xfd, 0x6f, 0x2, 0x4, 0xfffffffd, 0xf8, 0x9, 0x8, 0x3, 0xdee6, 0x281, 0x9, 0x9dbd, 0x6, 0xb9f, 0x46, 0x80, 0x10001, 0x8, 0x8, 0x54eb, 0xb, 0x2, 0x800, 0x40, 0x0, 0x10001, 0x5, 0x7ff, 0x81, 0x1, 0x4, 0x1ff, 0x7, 0xe, 0xfffffff8, 0x6, 0x4, 0x10, 0x8, 0x5, 0xd7c1, 0x9, 0x5, 0xf7, 0x7, 0x5, 0x8, 0x1, 0x3, 0x0, 0x3, 0x9, 0x2b, 0x7ff, 0x0, 0x8, 0xfffffffb, 0x2, 0x3ff, 0x1, 0x8, 0xffff, 0x5, 0xffc00000, 0x7, 0x3, 0x3, 0x7714, 0x9, 0x6, 0x35, 0x6, 0x110c0, 0x8, 0x0, 0x3, 0x6, 0x10001, 0x6, 0x8, 0x2, 0x7, 0x9, 0x3a0, 0x4, 0x81, 0xfffffffe, 0xffff, 0xdb3, 0xc21, 0x5, 0x2, 0x2, 0x4, 0x0, 0x4, 0x9, 0xb56b, 0xeb7d, 0x8, 0x80000001, 0x5, 0x8, 0x200, 0x5, 0x800, 0xce9, 0x4, 0x4, 0x3, 0x800, 0x7, 0xb, 0x4, 0x1, 0x6, 0xb6c, 0xd8, 0xffffa416, 0x1ff, 0x5, 0x0, 0xae0, 0x0, 0x4e7, 0xffffff24, 0x10, 0x9, 0x100, 0x100, 0xfffffff9, 0x10000, 0x2a2, 0xad6, 0x401, 0x6, 0x1, 0x4, 0x5, 0x5, 0x8, 0xffff, 0x6, 0x10000, 0x6, 0xc8, 0x3, 0x20000000, 0x0, 0x2, 0x9f0, 0xb1f, 0x100, 0x6, 0xd734, 0xe5, 0x200, 0x3, 0xff, 0x0, 0xfffffffc, 0x2, 0x6, 0x3, 0x4, 0x8, 0x0, 0x6, 0x85b, 0x8]}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000001100)={0x10000000000, 0x2, 0x7, 0x8, 0x1, 0x0, [{0x100, 0x7, 0x4}]}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000001180)) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f00000011c0)=0x9f9f) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f0000001280)={0x158, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xfffe}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6717}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20001044}, 0x890) close_range(r1, r1, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000001480)={0x24, @short={0x2, 0x3}}, 0x14) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x50, r3, 0x375be000) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f00000014c0)={'\x00', 0x8, 0x3, 0xc}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001540), 0x102, 0x0) write$ppp(r4, &(0x7f0000001580)="7d4d157aab1cbd85bc71948a8c4172700bfa079d28a816ccc8a0da365c8840c8d95f11cbb60cd1d2cb6ac35c115e9c579bccf6fa0b99a17271a7620176191b2986f610a56462cb891b20e7000bdca37c2b84ed87c7283b73141fe85a61c57bd78b15b9ebc5be2f1b2e5f9b75f1499873e2e8d4b8440079f25d4a3aa74b69d7a9c72f52432b1c702cae56c69f0aba246efbfb9dc7a507d0d8acc2e6ed7e235652fc", 0xa1) r5 = syz_open_dev$usbfs(&(0x7f0000001640), 0x6e, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x38, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}}, 0x4041) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000001900)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, r7, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x2a}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x80) r9 = eventfd2(0x800, 0x100801) readv(r9, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/145, 0x91}, {&(0x7f0000001a00)=""/101, 0x65}, {&(0x7f0000001a80)=""/179, 0xb3}, {&(0x7f0000001b40)=""/158, 0x9e}], 0x4) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000001c40)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000001d40)={0x2, 'veth1_to_team\x00', {0xa}, 0x34}) r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000001dc0)=""/125) 49.668610251s ago: executing program 2 (id=5357): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0x1, 0x2, 0x1) bind$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000be6000/0x400000)=nil) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000080000040"]) close_range(r0, 0xffffffffffffffff, 0x0) 49.433789992s ago: executing program 2 (id=5363): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r2 = dup(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9d) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r3) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) execveat$binfmt(r4, r0, 0x0, 0x0, 0x1000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x220102, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x17, 0x5, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000080)={0x1000, 0x0, 0x1}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socket(0x0, 0x2, 0x4cc) 49.343199333s ago: executing program 2 (id=5365): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@newsa={0x2a0, 0x10, 0x4, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@private=0x4, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0x2}, [@algo_crypt={0x14f, 0x2, {{'ecb(cipher_null)\x00'}, 0x838, "4b47cbcd29284d58904ccf25daf8751a22c3060b5747593b32492169b5ced36cf04a229652fb0b3d3039080edd2ffcc96fef38b31eb0e76764234fd81c85f06aca82e222dc23c83001459665cec3eb64a0210090d4a41ced62b77de5cedd5f8aa00f5465b4b5b28ca257a0ed2d6a804ede3278d0b6f78bc5335903ea9ca6dcb1f4151f90ca7a86d92e4775e266e7f11ee1d331c1b3b4fe9aba4b91dc92bc75840dfbbf012336965f106a8cfb77e7517fc45c0928fd0c9ca0c7459d040d8864cdb524009807188d153c7f4096e8750574b0b9d71a728a53bfd99e90c4b61c1f5e3456ebb98044f620d48dabcbb3875527f5987f8b67b277d0f8eb5dd9f6d2e3890cfac8d086599f"}}, @algo_auth={0x60, 0x1, {{'xcbc(aes)\x00'}, 0xc0, "bd47604b63ab6f1ee0fab0861fd447149db52737b0cd641f"}}]}, 0x2a0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x15c, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x140, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x41, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x0, 0x8, 0x0, @private0, @rand_addr=' \x01\x00', 0x7, 0x80, 0x4, 0x4}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @multicast2, @empty}, &(0x7f0000000380)=0xc) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r8, &(0x7f0000001340)="05031600d3fc14000000478836bfdf6321f383a6df1533ba9fc4450d6ed77ad73686e94868c841d8dc4b43e9f842d72ddd5214", 0x33, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x80, 0x700, 0xf28, 0x3b, {{0x15, 0x4, 0x2, 0x6, 0x54, 0x66, 0x0, 0xfa, 0x29, 0x0, @multicast2, @local, {[@ssrr={0x89, 0x13, 0x26, [@dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback]}, @noop, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x24, 0xd7, 0x0, 0x6, [0x0, 0x9, 0xfffffff9, 0xb5, 0x2, 0x5, 0x1, 0xfffffffb]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x3a4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x248, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80e4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xac8a, 0xfe, 0x7, 0x5}, {0x7, 0x0, 0x3, 0xb}, {0x0, 0xfb, 0x10, 0x7fffffff}, {0x2, 0x2, 0x7, 0x4}, {0x1e, 0xcf, 0x80, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r10}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) sync() sync() sync() sync() sync() mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 33.204792896s ago: executing program 42 (id=5365): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@newsa={0x2a0, 0x10, 0x4, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@private=0x4, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0x2}, [@algo_crypt={0x14f, 0x2, {{'ecb(cipher_null)\x00'}, 0x838, "4b47cbcd29284d58904ccf25daf8751a22c3060b5747593b32492169b5ced36cf04a229652fb0b3d3039080edd2ffcc96fef38b31eb0e76764234fd81c85f06aca82e222dc23c83001459665cec3eb64a0210090d4a41ced62b77de5cedd5f8aa00f5465b4b5b28ca257a0ed2d6a804ede3278d0b6f78bc5335903ea9ca6dcb1f4151f90ca7a86d92e4775e266e7f11ee1d331c1b3b4fe9aba4b91dc92bc75840dfbbf012336965f106a8cfb77e7517fc45c0928fd0c9ca0c7459d040d8864cdb524009807188d153c7f4096e8750574b0b9d71a728a53bfd99e90c4b61c1f5e3456ebb98044f620d48dabcbb3875527f5987f8b67b277d0f8eb5dd9f6d2e3890cfac8d086599f"}}, @algo_auth={0x60, 0x1, {{'xcbc(aes)\x00'}, 0xc0, "bd47604b63ab6f1ee0fab0861fd447149db52737b0cd641f"}}]}, 0x2a0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x15c, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x140, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x41, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x0, 0x8, 0x0, @private0, @rand_addr=' \x01\x00', 0x7, 0x80, 0x4, 0x4}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @multicast2, @empty}, &(0x7f0000000380)=0xc) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r8, &(0x7f0000001340)="05031600d3fc14000000478836bfdf6321f383a6df1533ba9fc4450d6ed77ad73686e94868c841d8dc4b43e9f842d72ddd5214", 0x33, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x80, 0x700, 0xf28, 0x3b, {{0x15, 0x4, 0x2, 0x6, 0x54, 0x66, 0x0, 0xfa, 0x29, 0x0, @multicast2, @local, {[@ssrr={0x89, 0x13, 0x26, [@dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback]}, @noop, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x24, 0xd7, 0x0, 0x6, [0x0, 0x9, 0xfffffff9, 0xb5, 0x2, 0x5, 0x1, 0xfffffffb]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x3a4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x248, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80e4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xac8a, 0xfe, 0x7, 0x5}, {0x7, 0x0, 0x3, 0xb}, {0x0, 0xfb, 0x10, 0x7fffffff}, {0x2, 0x2, 0x7, 0x4}, {0x1e, 0xcf, 0x80, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r10}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) sync() sync() sync() sync() sync() mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 4.993942285s ago: executing program 5 (id=5982): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0x1, 0xe, 0x7, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xc8, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xb, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x6, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x5000, 0x7}, 0x80000031, 0x0, 0xeeee0000, 0x2024, 0x0, 0x1500, 0x3000, [0x6800000000000000, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000100)={0x764, 0x19, 0x5}, 0xc) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="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", 0x1000}], 0x1, &(0x7f0000001400)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r8 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238"], 0x0) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000140)={0xc, 0x0, 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x200000000, 0x0, 0x5, 0x0, 0x6b, 0x7ff], 0xeeee8000, 0x2019c0}) fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.23689529s ago: executing program 6 (id=6000): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000021c0), 0x40843, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000002200)={0x0, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x10000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/mnt\x00') sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB='\b\x00!'], 0x2c}], 0x1}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000000c0)) close(0x3) 4.114163122s ago: executing program 6 (id=6002): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1094c0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000005800)=""/238) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000440)={[{@name={'name', 0x3d, 'syz'}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x281, 0x1}) io_setup(0x9, &(0x7f00000003c0)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) io_submit(r2, 0x1, &(0x7f0000002940)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x7fff, r3, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xccf73530754b2b5a}]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e, 0x80800) clock_gettime(0x0, &(0x7f0000005680)={0x0, 0x0}) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000080)=0x200000000) r10 = dup2(r9, r9) read$FUSE(r10, &(0x7f0000000b00)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f0000000040)=0x1) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x540b, &(0x7f0000000140)) recvmmsg$unix(r6, &(0x7f0000005400)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/150, 0x96}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f00000006c0)=""/134, 0x86}], 0x4}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000800)=""/123, 0x7b}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/24, 0x18}, {&(0x7f00000018c0)=""/42, 0x2a}, {&(0x7f0000001900)=""/35, 0x23}, {&(0x7f0000001940)=""/124, 0x7c}], 0x6}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001ac0)=""/135, 0x87}, {&(0x7f0000001b80)=""/231, 0xe7}], 0x2, &(0x7f0000001cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001d80), 0x6e, &(0x7f0000002040)=[{&(0x7f0000001e00)=""/216, 0xd8}, {&(0x7f0000001f00)=""/152, 0x98}, {&(0x7f0000001fc0)=""/84, 0x54}], 0x3}}, {{&(0x7f0000002080), 0x6e, &(0x7f0000002440)=[{&(0x7f0000002100)=""/136, 0x88}, {&(0x7f00000021c0)=""/82, 0x52}, {&(0x7f0000002240)=""/92, 0x5c}, {&(0x7f00000022c0)=""/235, 0xeb}, {&(0x7f00000023c0)=""/76, 0x4c}], 0x5, &(0x7f00000024c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000002980)=[{&(0x7f00000025c0)=""/209, 0xd1}, {&(0x7f00000026c0)=""/79, 0x4f}, {&(0x7f0000002740)=""/40, 0x28}, {&(0x7f0000005700)=""/133, 0x85}, {&(0x7f0000002840)=""/251, 0xfb}, {&(0x7f0000002940)=""/29, 0x1d}], 0x6, &(0x7f0000002a00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000002a80)=@abs, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002b00)=""/212, 0xd4}, {&(0x7f0000002c00)=""/99, 0x63}], 0x2}}, {{&(0x7f0000002cc0), 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002d40)=""/91, 0x5b}, {&(0x7f0000002dc0)=""/15, 0xf}, {&(0x7f0000002e00)=""/151, 0x97}, {&(0x7f0000002ec0)=""/9, 0x9}, {&(0x7f0000002f00)=""/170, 0xaa}, {&(0x7f0000002fc0)=""/202, 0xca}], 0x6, &(0x7f0000003140)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000003240)=""/45, 0x2d}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000042c0)=""/65, 0x41}, {&(0x7f0000004340)=""/4096, 0x1000}], 0x2, &(0x7f0000005380)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}], 0xa, 0x40000000, &(0x7f00000056c0)={r7, r8+10000000}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x68, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x1100, 0x1}, @flat=@weak_binder={0x77622a85, 0x3101, 0x3}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @acquire_done, @release, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 3.938799702s ago: executing program 6 (id=6005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0xffffffff, 0xb7d375beb1f4ba0d}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x5, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4020ae46, &(0x7f00000003c0)=ANY=[]) listen(r3, 0x9) close(0x3) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000340)={0x3, r7, 'id1\x00'}) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) unshare(0x50000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer], 0x0, 0x0, 0x0}) ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f0000000280)) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 3.769488924s ago: executing program 6 (id=6009): rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') 3.729426844s ago: executing program 6 (id=6010): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x802, &(0x7f00000000c0)={[{@name={'name', 0x3d, 'nofavordynmods'}}, {@name={'name', 0x3d, 'nofavordynmods'}}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001680)=""/228, 0xe4}], 0x1}, 0x6}], 0x1, 0x10120, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmsg(r0, &(0x7f0000002c40)={&(0x7f0000000140)=@llc={0x1a, 0x1, 0x81, 0x1, 0x1, 0xa, @local}, 0x80, &(0x7f0000001780)=[{&(0x7f00000001c0)}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b800000000000000000000000000000000000000ac1e010100000000000000000000000000000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000002000000000000000000000000200000000000000000000000000000000000000101000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x141000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/kheaders.tar.xz', 0xa02, 0x161) write$cgroup_pid(r3, &(0x7f00000004c0)=0xffffffffffffffff, 0x12) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/binder1\x00', 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_settime(r4, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) timer_settime(r4, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000300)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000080)={0x4006, 0x0, 0x9}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@local, @private=0xa010102}, 0xc) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000280), 0x3) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r8, 0xae9a) 2.765570151s ago: executing program 6 (id=6031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000540)=0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100), 0x0, 0x33}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x100a41, 0x0) write$UHID_INPUT(r2, &(0x7f000000ad40)={0x8, {"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", 0x1000}}, 0x1006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d007241301"], 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/116) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(r4, &(0x7f0000000100)='./file0\x00', 0x400, 0x44) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) r5 = dup3(r0, r1, 0x0) read$FUSE(r5, &(0x7f0000002780)={0x2020}, 0x2020) 2.330251814s ago: executing program 3 (id=6044): setresgid(0xee00, 0xee01, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='mqueue\x00', 0xa00034, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf8, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb50}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x844}, 0x400c810) 2.325828124s ago: executing program 3 (id=6045): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0x1c, 0x0}}], 0x2, 0x48c0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x24, 0x2a, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x12}]}, 0x24}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) timer_create(0x3, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.4529566s ago: executing program 8 (id=6052): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000040)={0xca2, 0xffff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r2, 0x10020000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000012f80), 0x420800, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000133c0)={0x0, &(0x7f0000012fc0)=[@wr_crn={0x46, 0x20, {0x2, 0xfffffffffffffff7}}, @rdmsr={0x32, 0x18, {0x310}}, @set_irq_handler={0xbe, 0x20, {0xf2, 0x2}}, @in_dx={0x82, 0x20, {0x18d8, 0x1}}, @code={0xa, 0xa2, {"c744240070000000c744240203000000ff1c24c744240081f00000c74424020f000000c7442406000000000f011c24b9190900000f3266baf80cb89aca5587ef66bafc0c66b825d666ef0f01d1460f01f2c7442400f1543b7ac744240208000000c7442406000000000f0114242643dea8fe6f1feef2450f2d864a6e0000c7442400b5000000c744240200400000ff2c24"}}, @rdmsr={0x32, 0x18, {0x9c6}}, @in_dx={0x82, 0x20, {0x1975, 0x2}}, @cpuid={0x14, 0x18, {0x3, 0x9}}, @code={0xa, 0x68, {"c441fe2cb902000000783cc744240005000000c744240213000000c7442406000000000f011c2466b82a010f00d88fe978e3fb66ba4300b008ee363e4599b805000000b90000c0fe0f01c166ba6100b800800000ef0f32"}}, @cpuid={0x14, 0x18, {0x1ff, 0x8}}, @set_irq_handler={0xbe, 0x20, {0xcf, 0x2}}, @cpuid={0x14, 0x18, {0x0, 0x4}}, @out_dx={0xaa, 0x28, {0x36ef, 0x0, 0x4}}, @in_dx={0x82, 0x20, {0x871d, 0x4}}, @wr_drn={0x6e, 0x20, {0x4, 0x6}}, @out_dx={0xaa, 0x28, {0x2cd4, 0x4, 0x8001}}, @wr_crn={0x46, 0x20, {0x0, 0x2}}, @cpuid={0x14, 0x18, {0x3, 0x7}}, @cpuid={0x14, 0x18, {0x4, 0x37c}}, @in_dx={0x82, 0x20, {0xd262, 0x6}}, @set_irq_handler={0xbe, 0x20, {0x56, 0x2}}, @set_irq_handler={0xbe, 0x20, {0xa5, 0x1}}, @cpuid={0x14, 0x18, {0x15, 0x8000}}, @wr_crn={0x46, 0x20, {0x3, 0x9}}, @rdmsr={0x32, 0x18, {0xb37}}, @wrmsr={0x1e, 0x20, {0x31a, 0x1000}}, @wr_drn={0x6e, 0x20, {0x0, 0x1}}], 0x3f2}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000013400)={{0xd000, 0x0, 0x9, 0xfd, 0x9, 0x2, 0x3, 0x6, 0x6, 0x2, 0x9, 0x34}, {0x80a0000, 0xf000, 0x4, 0x1, 0x4, 0x7, 0x2, 0x2, 0x10, 0x0, 0x8, 0x3}, {0x0, 0xdddd1000, 0x3, 0x7, 0x6, 0x1, 0x5, 0x3, 0x7f, 0x40, 0x1, 0x3}, {0x100000, 0x1000, 0xc, 0xf8, 0x4, 0x2, 0x6, 0x2, 0x9, 0x8, 0x7, 0x2}, {0x0, 0xdddd0000, 0x0, 0x9, 0x7, 0x1, 0x2, 0x2, 0x1, 0x11, 0x22, 0xec}, {0x4, 0x4000, 0xa, 0x2, 0x6, 0xa, 0x35, 0xf, 0x0, 0x1, 0x7, 0x2}, {0xd000, 0xdddd0000, 0x0, 0xf8, 0x3, 0x0, 0x9, 0x5, 0x2, 0x9, 0x5, 0x8}, {0xdddd1000, 0x1, 0x9, 0x8, 0xd5, 0xa, 0x3b, 0x8, 0x3, 0xe, 0x1}, {0xf000, 0x5}, {0x5000, 0x2}, 0x40002, 0x0, 0x5000, 0x100, 0xc, 0x401, 0xffff1000, [0x9, 0x0, 0xffffffffffffffdc, 0x1000]}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000013540)=0x6) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000013580)=0xdddd0000) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000013600)={0x4800, 0x28, '\x00', 0x0, &(0x7f00000135c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000013640)=0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000013780)={&(0x7f0000013680)=""/224, 0xe0, 0x3ff, 0x2f33}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000137c0)={0x9, 0xffffffffffffffff, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000013800), 0x0, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000013840), 0x8000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000013980)={&(0x7f0000013880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000013940)={&(0x7f00000138c0)={0x58, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x18000000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x25}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10000}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x50040016}, 0x400000c0) ioctl$TCGETS(r8, 0x5401, &(0x7f00000139c0)) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000013a00)={0x10, 0x0, "b5bf5a4b55677f57889ac00af81774f2"}) syz_open_dev$usbmon(&(0x7f0000013a40), 0xffffffffffffffff, 0x400000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r7, 0x2000000, 0x4010, r4, 0x0) r9 = syz_open_procfs$userns(0x0, &(0x7f0000013a80)) r10 = open_tree(r8, &(0x7f0000013ac0)='./file0\x00', 0x80100) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) poll(&(0x7f0000013b00)=[{0xffffffffffffffff, 0x1211}, {r9, 0x111}, {r6, 0x16}, {r5, 0x2411}, {r10, 0xb108}, {r11, 0x8082}, {r12, 0x6410}], 0x7, 0x9) ioctl$BLKCRYPTOPREPAREKEY(r8, 0xc040128b, &(0x7f0000013c40)={&(0x7f0000013b40)="f73ee71bd2ae137f68e3dc718c7e43a8c711a0b1213e17db9d2884ecafeade180e2800ae7ac552d7c13f585a082556113550d35686124dcd3870e758714e9a65e8ed6acae8b849d5b870bf5a340f802843f2762279509c", 0x57, &(0x7f0000013bc0)=""/87, 0x57}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000013c80)={[0x7bb1, 0x101, 0xa449, 0x0, 0x3, 0x4, 0x8, 0x6, 0x5, 0x200000, 0x1, 0x450, 0xff, 0xffffffffffffff6a, 0xffffffffffffc35c, 0x9], 0x100000, 0x3100}) 1.45226247s ago: executing program 8 (id=6053): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0xa, 0x13, r0, 0x5f454000) 1.44812932s ago: executing program 5 (id=6054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, r2, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) read(r3, &(0x7f0000000000)=""/183, 0xb7) 1.37354701s ago: executing program 3 (id=6055): ftruncate(0xffffffffffffffff, 0x6) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x8b99, 0x1000, 0x8000, 0x40024e}, 0x0, 0x0) (async) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8}, 0x8) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.372167561s ago: executing program 8 (id=6056): sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x2000200, 0x0, 0x1, 0x3}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000002100)={@mcast2, 0xfffffffc, 0x2, 0xff, 0x2, 0x0, 0x151}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) (async) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8931, &(0x7f0000000040)={'bond_slave_0\x00'}) (async) syz_clone(0x56a4a400, &(0x7f00000006c0)="1249bdde1b0cd924493588058c44d6b22311ed14eb3c2c7d5b9fb13ef9d1f19d5d8adaa5bf3a961caf138aafd458abe25e653eb909eff875fd30ec2ef322a59570", 0x41, &(0x7f0000000100), &(0x7f0000000740), &(0x7f0000000780)="620be00d2fd182215d381e96ac0b6d91695b5acf1ea3f437359ce359d59e133a5cdf7d0834f2f173e41d7779cedfe470ecb4019e6ad6f90c61700e567bdf9cb0eaf0ccafd0a90e059c28fd6bd5ecae2b403ea142a23c66568fcda5fb52ec8c8b4f5f17641418ef399b663587d204dc590703dc081b6e7d92f1c74ec3d29412a445f305e7c444eef5a4130c805e5d9b33826b90af7a1bcb6377203c427626b3bcbc59a5e61a8d3a6ae05e64468d7f1bdeb465fdcf19b4bd5bc6f7ad33d366f951af10632e534a0ec9932c71a45b90944934012d422cd3f62b398955fc5ca4c8d08829") read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r6, r3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000080)) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000']) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r7, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x87, 0x1}, 0x47, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x4, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0xfffffffd, 0x4, 0x1, 0x3, 0x0, 0x1, 0x5de82a4e, 0x0, 0x0, 0x9, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x6, 0x2, 0x0, 0x9, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x5, 0x4, 0x1, 0x8, 0x5, 0x3, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x35, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0xfffff303, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0xa, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238c7, 0x0, 0x3, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x20, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0xdb, 0x40, 0x0, 0x21, 0x24000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x200000, 0x200, 0xcc0, 0x3fd, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0x80, 0x921, 0x2f, 0x0, 0x0, 0xfffffffd, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x8, 0x0, 0x80000001, 0x3, 0x0, 0x400, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x10800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x6, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) (async, rerun: 64) clock_settime(0x0, &(0x7f0000000140)={0x0, 0x3938700}) syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904100002e51de5000b2402010302057ff49bfd052406000105240002000d240f010500000009000700080624037f000109050602ff0300000009058202"], 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async, rerun: 64) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000003) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x39}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@handle={0x73682a85, 0xb, 0x1}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.320249151s ago: executing program 5 (id=6058): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000003e40), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000500006804c0004006763732900000000000000000000000000000004000000000000000024000000ff"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r6) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) (async) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000002c0)={0x7, 0x4000, 0x0, 0xffffffffffffffff, 0x9}) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r9, &(0x7f0000000100)={0xa, 0xfffc, 0xfffffffc, @private1, 0x2}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x6, 0x0, 0x1}, @fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 1.238545122s ago: executing program 5 (id=6059): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc40, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x20008a, 0x400000000000002, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) sendfile(r0, r1, 0x0, 0x45e3) 1.127309892s ago: executing program 5 (id=6060): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') (async) sendto(r0, &(0x7f0000000300)="4625bb7328291e27241d5e90a0e4f786d5e28b5af9798b0011691dc45f020e74dfe695eaa8b21bf696c4172679af9fbebebeadf3f63f3cff51e31835d1e764bc726794dbf68c7dff17b92f01be4a847434477d29bda8268314722bf3db3c942259e42b7483ddd643b5adb4669476e969a786b2dce51872be184927eb5046aa12290af71829b2b0b16e346e743d869b125c5ac9ce1b90179eb66a7fc54ba9411187dd8beefef3aa382637103d99a2076f7d615475c100cf3dccf2eccacf20aa5dfa577ab1980dfa4304cf95e68602ee8e573defef035bbf9f34cbc01345", 0xdd, 0x2004c845, &(0x7f0000000440)=@sco={0x1f, @none}, 0xc6) (async) r2 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) close(r1) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x163342, 0x0) (async) read(r1, &(0x7f0000001400)=""/255, 0xff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r6 = dup(r5) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380400001100010400000000000000000a00000008000200", @ANYRES32, @ANYBLOB="1c040080170413"], 0x438}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x8040ae9f, &(0x7f0000000040)) (async) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r6, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@aname={'aname', 0x3d, '9P2000.u'}}, {@cache_loose}], [], 0x6b}}) (async) write(r3, &(0x7f0000000400)="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", 0x1f000) 1.014955113s ago: executing program 5 (id=6061): syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x111200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000000000096000040ed85643dad"]) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) 656.586436ms ago: executing program 8 (id=6057): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r0 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af60, &(0x7f0000000000)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000000)={0x1, 0x7}) 558.237666ms ago: executing program 8 (id=6062): setreuid(0x0, 0xee01) setresuid(0x0, 0xee01, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001180)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x10, 0x8, 0x0, 0x1, [@typed={0xb, 0x20, 0x0, 0x0, @str='{&(/(:\x00'}]}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c7980400000309021b00012000ac000904"], 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7fec}]}) close_range(r3, 0xffffffffffffffff, 0x600000000000000) 479.163377ms ago: executing program 3 (id=6063): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/123, 0x7b}, {&(0x7f0000000140)=""/173, 0xad}, {&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000280)=""/50, 0x32}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/67, 0x43}, {&(0x7f0000001400)=""/20, 0x14}, {&(0x7f0000001440)=""/147, 0x93}, {&(0x7f0000001500)=""/171, 0xab}], 0xa, 0x4, 0x3) (async) pipe(&(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000016c0), &(0x7f0000001700)=0x4) (async, rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001740)={'macvlan0\x00', 0x4000}) (async, rerun: 32) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001780)={0x0, r2, 0x8000000, 0x1, 0xffffffffffff8c28, 0x4}) (async, rerun: 32) execve(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001880)={[&(0x7f0000001800)='/dev/vhost-vsock\x00', &(0x7f0000001840)='macvlan0\x00']}, &(0x7f0000001980)={[&(0x7f00000018c0)='/dev/vhost-vsock\x00', &(0x7f0000001900)='}]{!,..\x00', &(0x7f0000001940)='\xf4\\\x00']}) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000001a40)={0x7, 0x7, 0x4}, &(0x7f0000001a80)=0x28) (async) eventfd(0x1) fdatasync(r0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x990b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x80c0) (rerun: 64) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001c00)={0x1, &(0x7f0000001bc0)=[{0x5, 0x3, 0x7}]}) r5 = signalfd(r4, &(0x7f0000001c40)={[0x8]}, 0x8) (async) sendmsg$nl_generic(r1, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001cc0)={0xac, 0x13, 0x100, 0x70bd2b, 0x25dfdbfd, {0x18}, [@nested={0x4, 0x24}, @nested={0x94, 0x62, 0x0, 0x1, [@generic="9c3be88f9fa40241611eac07d9476985ae17339db790270eb27f91a05f65fae4df54ceeeaa5b719ce0115925a8f2f315d433313fc3124ccbb43589e9e12763677c264ec5cac3d3101a7b8aaf76edb6a4bf9534e87d3bc4c614fcdacd92d0f9c093799207afc37d722e7c45f2aea12ec78984d232166f2149469b884ecdb9b7a76d10831bce0dd358fddd56f50714b0bf"]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20008084}, 0x80) write$cgroup_subtree(r5, &(0x7f0000001e00)={[{0x2b, 'memory'}, {0x56, 'pids'}]}, 0xe) (async) sendto(r5, &(0x7f0000001e40)="cce1d3e08d72bbaf1a0af2e65a5ad840b0ae4aa0d607396a55e9b9042ce1806a604aa7a4535c0b49ce6d9ccfbc3a584aaf92d69d3d5f0b14c9701eb499f731de7ca22ffe7c85dc800d5470c3a4770e908d37676b7b7c6e7c3c1df6447255507c90d1761170a0164465a606c9752e83a57d52efde049ffce6edccae10c7b729808502b47b67d6c90f0baebe554c604cdcdf3b44e096a0bc40053dfcd83c473d91", 0xa0, 0x20000000, &(0x7f0000001f00)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000001f80)=0xfffffff8, 0x4) (async) shutdown(r3, 0x0) (async) sendto$inet(r2, &(0x7f0000001fc0)="779cbaae372f5f57c72e0aadfeaf51641c1c8f2c459b5feb3806cac05b148cd62f597457aa090f4f752e5b7a5b2692b9e1506a20bfda62e33d68e8907b8167140fd2b825f8cbb5aa876bf3f74e45428841705b9a5a7fc482a4c7f3f32b94ab89", 0x60, 0x4000000, &(0x7f0000002040)={0x2, 0x4e21, @remote}, 0x10) (async) r6 = accept4$unix(r1, &(0x7f0000002080)=@abs, &(0x7f0000002100)=0x6e, 0x80000) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000002140), &(0x7f0000002180)=0x4) (async) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000021c0)) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000002380)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x54, r7, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5e}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x40000) 446.331887ms ago: executing program 3 (id=6064): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(r1, 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r3 = dup(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc8) syz_clone(0x6002000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)="5779377856374493573beed0a34827bac7d25e22ed0b013d42d4b5fab076e88fab32ef74ffa9ed64467297bc9f3b9513d88766203b3245636c86752e53dddbe637726f5215c6e4e2f11fe65353cba52f15344fc61147a4e7da204fff6b6159ef7e222018bd4985864e55b29c3d1338217707dd57176ce4f69b5592a92ae5f0422a086a09248d91f86e79dab686771bf4f065d896d7d3e961ee0553bee8e1e2b06206d34e7c863853ecda68918c350e207816400ef43d926584cfc90d013d6f14f137f08e93c873b99b8fb113cde34cfa38a9") 374.177127ms ago: executing program 3 (id=6065): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x44000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x11012, r0, 0x10c000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0xe01a, 0x2, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x800b, 0x6, 0x200, 0x0, 0x5, 0x0, 0x9, 0x7ff], 0xeeee8000, 0x2019c0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYRES16=r4], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r10, &(0x7f0000000100)={0x1d, r11}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f0000000180)=0xfffffffffffffe00) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000003c0)=[{{0x4}, {0x0, 0x0, 0x0, 0x1}}, {{0x2}, {0x1, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x4, 0x1}}, {{0x0, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1}, {0x2, 0x0, 0x1}}], 0x28) close_range(r12, 0xffffffffffffffff, 0x0) setreuid(r9, r9) fsetxattr$system_posix_acl(r7, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000780)=ANY=[@ANYRES64=r1, @ANYRESHEX=r12, @ANYRES64=r11, @ANYBLOB="3b5c33d063696591492d27a5e35904b9fd5c9b81e36074d3368e33f739f44aa77202e40c2e6b879df03e0035569e1db7bf65c7c36a4fff3e3602a035340e5fa73a201d27ff3d6d3ae99a46e12e6367065a55bd", @ANYRES8=r1, @ANYRESHEX=0x0, @ANYRESHEX=r6, @ANYRESDEC=r1, @ANYRES16=r9, @ANYBLOB="c35e377bdbfb899554b17ccf768b859c5948c450cc49f2af82bdd692506fb1d8e6c25c20f96daaedabfa97b39988acd0f64def30134221d3f086d0dcfe8a78bb8e84"], 0x54, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x1}) 0s ago: executing program 8 (id=6066): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x522940, 0x42) stat(&(0x7f0000000100)='./file0/../file0/../file0\x00', &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) creat(0x0, 0xc7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="c19bbcd0020305000000000000000000000000000800010001000000"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000140)=@nl=@unspec, 0x80, &(0x7f0000000980)=[{&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f00000005c0)=""/88, 0x58}, {&(0x7f0000000640)=""/91, 0x5b}, {&(0x7f00000006c0)=""/82, 0x52}, {&(0x7f0000000740)=""/220, 0xdc}, {&(0x7f0000000840)=""/169, 0xa9}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000000900)=""/115, 0x73}, {&(0x7f00000002c0)=""/62, 0x3e}], 0xa, &(0x7f0000000a40)=""/234, 0xea}, 0x2}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001d80)=""/4096, 0x1000}], 0x1, &(0x7f0000000b40)=""/120, 0x78}, 0x2}], 0x2, 0x2, &(0x7f0000000c80)={0x77359400}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) listxattr(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000400)=""/203, 0xcb) kernel console output (not intermixed with test programs): axpacket: 64 [ 450.455291][ T480] usb usb3-port1: unable to enumerate USB device [ 450.571073][T15629] /dev/rnullb0: Can't lookup blockdev [ 451.916827][T15659] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.924079][T15659] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.931274][T15659] bridge_slave_0: entered allmulticast mode [ 451.937464][T15659] bridge_slave_0: entered promiscuous mode [ 451.944656][T15659] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.951708][T15659] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.958785][T15659] bridge_slave_1: entered allmulticast mode [ 451.965230][T15659] bridge_slave_1: entered promiscuous mode [ 452.029493][T15659] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.036656][T15659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.043909][T15659] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.051051][T15659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.088855][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.096592][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.109910][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.117207][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.127839][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.135008][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.194530][T15659] veth0_vlan: entered promiscuous mode [ 452.222388][T15659] veth1_macvtap: entered promiscuous mode [ 452.321658][T15672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 452.321972][T15672] rust_binder: 4: no such ref 1 [ 452.440340][T15680] netlink: 'syz.8.4872': attribute type 2 has an invalid length. [ 452.676884][ T455] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 452.798715][T15696] binder: Unknown parameter '01777777777777777777777' [ 452.821943][T15697] rust_binder: 15694 RLIMIT_NICE not set [ 452.821994][T15697] rust_binder: 642: no such ref 0 [ 452.846516][ T455] usb 4-1: Using ep0 maxpacket: 8 [ 452.861056][ T455] usb 4-1: config 128 has an invalid interface number: 89 but max is 0 [ 452.875527][ T455] usb 4-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 452.884862][ T455] usb 4-1: config 128 has an invalid descriptor of length 100, skipping remainder of the config [ 452.900964][T15699] netlink: 'syz.2.4879': attribute type 46 has an invalid length. [ 452.907911][ T455] usb 4-1: config 128 has no interface number 0 [ 452.922215][ T455] usb 4-1: config 128 interface 89 altsetting 9 endpoint 0x8E has an invalid bInterval 94, changing to 10 [ 452.923278][T15699] netlink: 'syz.2.4879': attribute type 28 has an invalid length. [ 452.951897][ T455] usb 4-1: config 128 interface 89 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 452.995688][ T455] usb 4-1: config 128 interface 89 has no altsetting 0 [ 453.013133][ T455] usb 4-1: string descriptor 0 read error: -22 [ 453.022383][ T455] usb 4-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=99.4d [ 453.069095][ T455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.322934][T15720] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 453.348415][ T9] usb 4-1: USB disconnect, device number 87 [ 453.444704][T15724] SELinux: failed to load policy [ 453.723582][T15733] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4890'. [ 454.294937][ T36] kauditd_printk_skb: 1071 callbacks suppressed [ 454.294955][ T36] audit: type=1400 audit(16777897.315:37792): avc: denied { execmem } for pid=15752 comm="syz.8.4897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 454.321079][ T36] audit: type=1400 audit(16777897.315:37793): avc: denied { execute } for pid=15752 comm="syz.8.4897" path="/151/cpuacct.usage_percpu" dev="tmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 454.345151][ T36] audit: type=1400 audit(16777897.343:37794): avc: denied { create } for pid=15757 comm="syz.8.4898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 454.385978][ T36] audit: type=1400 audit(16777897.371:37795): avc: denied { write } for pid=15757 comm="syz.8.4898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 454.408578][ T36] audit: type=1400 audit(16777897.371:37796): avc: denied { read } for pid=15757 comm="syz.8.4898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 454.433850][ T36] audit: type=1400 audit(16777897.371:37797): avc: denied { create } for pid=15757 comm="syz.8.4898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 454.467553][ T36] audit: type=1400 audit(16777897.371:37798): avc: denied { write } for pid=15757 comm="syz.8.4898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 454.488836][T15765] fuse: Unknown parameter '0x0000000000000004' [ 454.527808][T15769] rust_binder: Write failure EFAULT in pid:15 [ 454.528511][T15765] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4901'. [ 454.547501][ T36] audit: type=1400 audit(16777897.371:37799): avc: denied { read } for pid=15757 comm="syz.8.4898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 454.567734][T15774] audit: audit_backlog=65 > audit_backlog_limit=64 [ 454.567750][T15774] audit: audit_lost=51 audit_rate_limit=0 audit_backlog_limit=64 [ 454.582299][T15765] netlink: 43 bytes leftover after parsing attributes in process `syz.8.4901'. [ 454.592575][T15765] netlink: 'syz.8.4901': attribute type 5 has an invalid length. [ 454.633311][T15765] netlink: 43 bytes leftover after parsing attributes in process `syz.8.4901'. [ 455.120311][T15797] rust_binder: Write failure EFAULT in pid:104 [ 455.138482][ T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 455.231869][T15799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 455.232598][T15799] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 455.333335][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 455.376155][ T9] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 455.393667][ T9] usb 4-1: config 0 has no interface number 0 [ 455.425956][T15789] SELinux: avc: seqno 1 < latest_notif 2 [ 455.431847][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 455.450057][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.468317][ T9] usb 4-1: Product: syz [ 455.472636][ T9] usb 4-1: Manufacturer: syz [ 455.477334][ T9] usb 4-1: SerialNumber: syz [ 455.497321][ T9] usb 4-1: config 0 descriptor?? [ 455.581938][T15815] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 455.725216][T15819] rust_binder: Error while translating object. [ 455.736096][T15791] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 455.738997][T15819] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 455.751417][ T9] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 455.762967][T15819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:120 [ 455.782197][ T9] usb 4-1: No valid video chain found. [ 455.802838][ T9] usb 4-1: USB disconnect, device number 88 [ 455.947940][ T31] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 456.086768][ T31] usb 3-1: device descriptor read/64, error -71 [ 456.342490][ T31] usb 3-1: device descriptor read/64, error -71 [ 456.598119][ T31] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 456.736683][ T31] usb 3-1: device descriptor read/64, error -71 [ 456.992488][ T31] usb 3-1: device descriptor read/64, error -71 [ 457.120486][ T31] usb usb3-port1: attempt power cycle [ 457.493454][ T31] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 457.516822][ T31] usb 3-1: device descriptor read/8, error -71 [ 457.549239][T15871] __vm_enough_memory: pid: 15871, comm: syz.3.4934, bytes: 18014402804453376 not enough memory for the allocation [ 457.665840][ T31] usb 3-1: device descriptor read/8, error -71 [ 457.838774][T15877] __vm_enough_memory: pid: 15877, comm: syz.7.4936, bytes: 18014402804453376 not enough memory for the allocation [ 457.930495][ T31] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 457.954232][ T31] usb 3-1: device descriptor read/8, error -71 [ 458.094254][ T31] usb 3-1: device descriptor read/8, error -71 [ 458.219102][ T31] usb usb3-port1: unable to enumerate USB device [ 458.394642][T15897] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 458.401916][T15897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 458.423121][T15899] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4943'. [ 458.786346][T15923] /dev/rnullb0: Can't lookup blockdev [ 459.017679][ T480] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 459.179604][ T480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.197075][ T480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.207893][ T480] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 459.218139][ T480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.228460][ T480] usb 4-1: config 0 descriptor?? [ 459.248397][T15941] rust_binder: Error while translating object. [ 459.248428][T15941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 459.254725][T15941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:133 [ 459.296915][T15944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 459.413718][T15951] rust_binder: Error while translating object. [ 459.422924][T15951] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 459.429178][T15951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:143 [ 459.459093][ T480] usb 4-1: string descriptor 0 read error: -71 [ 459.488110][ T480] usbhid 4-1:0.0: can't add hid device: -71 [ 459.494098][ T480] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 459.518295][ T480] usb 4-1: USB disconnect, device number 89 [ 459.625723][ T36] kauditd_printk_skb: 1091 callbacks suppressed [ 459.625738][ T36] audit: type=1400 audit(33555347.326:38839): avc: denied { ioctl } for pid=15955 comm="syz.2.4962" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.700463][ T36] audit: type=1400 audit(33555347.391:38840): avc: denied { ioctl } for pid=15955 comm="syz.2.4962" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.763752][ T469] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 459.772023][ T36] audit: type=1400 audit(33555347.448:38841): avc: denied { ioctl } for pid=15955 comm="syz.2.4962" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.797775][ T36] audit: type=1400 audit(33555347.485:38842): avc: denied { ioctl } for pid=15955 comm="syz.2.4962" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.823537][ T36] audit: type=1400 audit(33555347.485:38843): avc: denied { ioctl } for pid=15955 comm="syz.2.4962" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.850499][ T36] audit: type=1400 audit(33555347.485:38844): avc: denied { execmem } for pid=15959 comm="syz.8.4964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 459.871076][ T36] audit: type=1400 audit(33555347.485:38845): avc: denied { execmem } for pid=15959 comm="syz.8.4964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 459.890342][ T36] audit: type=1400 audit(33555347.504:38846): avc: denied { ioctl } for pid=15955 comm="syz.2.4962" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.915484][ T36] audit: type=1400 audit(33555347.504:38847): avc: denied { ioctl } for pid=15955 comm="syz.2.4962" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.941245][ T36] audit: type=1400 audit(33555347.532:38848): avc: denied { ioctl } for pid=15955 comm="syz.2.4962" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.951410][T15970] tipc: Started in network mode [ 459.971418][T15970] tipc: Node identity de706e0ca779, cluster identity 4711 [ 459.978582][T15970] tipc: Enabled bearer , priority 10 [ 459.998237][ T469] usb 3-1: device descriptor read/64, error -71 [ 460.254101][ T469] usb 3-1: device descriptor read/64, error -71 [ 460.509877][ T469] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 460.648447][ T469] usb 3-1: device descriptor read/64, error -71 [ 460.904275][ T469] usb 3-1: device descriptor read/64, error -71 [ 461.021926][ T469] usb usb3-port1: attempt power cycle [ 461.170713][ T480] tipc: Node number set to 2030661132 [ 461.383875][ T469] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 461.419670][ T469] usb 3-1: device descriptor read/8, error -71 [ 461.430442][T15983] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 461.431139][T15983] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false [ 461.440496][T15985] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 461.567368][ T469] usb 3-1: device descriptor read/8, error -71 [ 461.604814][T15990] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 461.604835][T15990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:680 [ 461.714503][ T337] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 461.714517][ T341] Bluetooth: hci0: command 0x1003 tx timeout [ 461.831586][ T469] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 461.854751][ T469] usb 3-1: device descriptor read/8, error -71 [ 461.993487][ T469] usb 3-1: device descriptor read/8, error -71 [ 462.108802][ T469] usb usb3-port1: unable to enumerate USB device [ 462.372663][T16001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32767 sclass=netlink_route_socket pid=16001 comm=syz.8.4979 [ 462.386952][T16001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16001 comm=syz.8.4979 [ 462.492168][T16011] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 462.501449][T16011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4983'. [ 462.521065][T16011] rust_binder: 86: no such ref 0 [ 462.580097][T16012] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 462.587444][T16013] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 462.587505][T16012] rust_binder: Write failure EINVAL in pid:86 [ 462.594906][T16013] rust_binder: Write failure EINVAL in pid:86 [ 462.758107][T16016] cgroup: Name too long [ 462.985458][T16024] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4987'. [ 463.016356][T16028] tipc: Enabled bearer , priority 10 [ 463.053190][T16033] Invalid ELF header magic: != ELF [ 463.131900][ T64] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 463.281112][ T64] usb 3-1: device descriptor read/64, error -71 [ 463.436926][T16056] rust_binder: Write failure EFAULT in pid:90 [ 463.513749][T16060] rust_binder: Got transaction with invalid offset. [ 463.525097][T16060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 463.531910][T16060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:698 [ 463.541365][ T64] usb 3-1: device descriptor read/64, error -71 [ 463.624132][T16064] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 463.631534][T16064] rust_binder: Write failure EINVAL in pid:702 [ 463.728791][ T469] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 463.743166][T16066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.804073][T16067] rust_binder: 704: no such ref 3 [ 463.814064][ T64] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 463.815751][T16067] rust_binder: inc_ref_done called when no active inc_refs [ 463.823157][T16067] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 463.837598][T16067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:704 [ 463.899330][ T469] usb 4-1: Using ep0 maxpacket: 8 [ 463.915522][ T469] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 463.923775][ T469] usb 4-1: config 0 has no interface number 0 [ 463.929916][ T469] usb 4-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=ee.0c [ 463.939113][ T469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.948393][ T469] usb 4-1: config 0 descriptor?? [ 463.963301][ T64] usb 3-1: device descriptor read/64, error -71 [ 464.171573][T16059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.180155][T16059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.190137][ T469] usb 4-1: string descriptor 0 read error: -71 [ 464.201023][ T469] usb 4-1: unsupported MDLM descriptors [ 464.207554][ T469] usb 4-1: USB disconnect, device number 90 [ 464.220931][ T64] usb 3-1: device descriptor read/64, error -71 [ 464.336792][ T64] usb usb3-port1: attempt power cycle [ 464.643580][T16072] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 464.656515][T16072] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 464.663273][T16072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 464.671420][T16072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:707 [ 464.698762][ T64] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 464.737369][ T64] usb 3-1: device descriptor read/8, error -71 [ 464.892433][ T64] usb 3-1: device descriptor read/8, error -71 [ 465.000033][ T36] kauditd_printk_skb: 549 callbacks suppressed [ 465.000065][ T36] audit: type=1400 audit(33555352.364:39398): avc: denied { unmount } for pid=10838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 465.026416][ T36] audit: type=1400 audit(33555352.373:39399): avc: denied { ioctl } for pid=16021 comm="syz.2.4986" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 465.088170][ T36] audit: type=1400 audit(33555352.373:39400): avc: denied { ioctl } for pid=16021 comm="syz.2.4986" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 465.113239][ T36] audit: type=1400 audit(33555352.392:39401): avc: denied { read write } for pid=10838 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.137438][ T394] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 465.137590][ T36] audit: type=1400 audit(33555352.392:39402): avc: denied { read write open } for pid=10838 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.146489][ T64] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 465.170655][ T36] audit: type=1400 audit(33555352.392:39403): avc: denied { ioctl } for pid=10838 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.202122][ T64] usb 3-1: device descriptor read/8, error -71 [ 465.203547][ T36] audit: type=1400 audit(33555352.420:39404): avc: denied { read write } for pid=10838 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.233713][ T36] audit: type=1400 audit(33555352.420:39405): avc: denied { read write open } for pid=10838 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.258852][ T36] audit: type=1400 audit(33555352.420:39406): avc: denied { ioctl } for pid=10838 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.284330][ T36] audit: type=1400 audit(33555352.430:39407): avc: denied { ioctl } for pid=16074 comm="syz.3.5006" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 465.341287][ T64] usb 3-1: device descriptor read/8, error -71 [ 465.347545][ T394] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 465.355670][ T394] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.365767][ T394] usb 4-1: config 0 has no interface number 0 [ 465.374441][ T394] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 465.383561][ T394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.391609][ T394] usb 4-1: Product: syz [ 465.395819][ T394] usb 4-1: Manufacturer: syz [ 465.400405][ T394] usb 4-1: SerialNumber: syz [ 465.406638][ T394] usb 4-1: config 0 descriptor?? [ 465.466251][ T64] usb usb3-port1: unable to enumerate USB device [ 465.643473][ T31] usb 4-1: USB disconnect, device number 91 [ 466.104270][T16121] ./cgroup: Can't lookup blockdev [ 466.115187][T16121] ./cgroup: Can't lookup blockdev [ 466.122242][T16121] ./cgroup: Can't lookup blockdev [ 466.128839][T16121] ./cgroup: Can't lookup blockdev [ 466.134950][T16121] ./cgroup: Can't lookup blockdev [ 466.141376][T16121] ./cgroup: Can't lookup blockdev [ 466.147298][T16121] ./cgroup: Can't lookup blockdev [ 466.153495][T16121] ./cgroup: Can't lookup blockdev [ 466.161486][T16121] ./cgroup: Can't lookup blockdev [ 466.167842][T16121] ./cgroup: Can't lookup blockdev [ 466.191548][T16121] ./cgroup: Can't lookup blockdev [ 466.198748][T16121] ./cgroup: Can't lookup blockdev [ 466.206303][T16121] ./cgroup: Can't lookup blockdev [ 466.213724][T16121] ./cgroup: Can't lookup blockdev [ 466.220636][T16121] ./cgroup: Can't lookup blockdev [ 466.227795][T16121] ./cgroup: Can't lookup blockdev [ 466.233932][T16121] ./cgroup: Can't lookup blockdev [ 466.239884][T16121] ./cgroup: Can't lookup blockdev [ 466.246024][T16121] ./cgroup: Can't lookup blockdev [ 466.248155][T16125] rust_binder: validate_parent_fixup: new_min_offset=63, sg_entry.length=0 [ 466.251109][T16125] rust_binder: Error while translating object. [ 466.252346][T16121] ./cgroup: Can't lookup blockdev [ 466.261125][T16125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 466.267295][T16121] ./cgroup: Can't lookup blockdev [ 466.271871][T16125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 466.281817][T16121] ./cgroup: Can't lookup blockdev [ 466.309902][T16121] ./cgroup: Can't lookup blockdev [ 466.324795][T16121] ./cgroup: Can't lookup blockdev [ 466.341609][T16121] ./cgroup: Can't lookup blockdev [ 466.352782][T16121] ./cgroup: Can't lookup blockdev [ 466.359285][T16121] ./cgroup: Can't lookup blockdev [ 466.366393][T16121] ./cgroup: Can't lookup blockdev [ 466.373913][T16121] ./cgroup: Can't lookup blockdev [ 466.380270][T16121] ./cgroup: Can't lookup blockdev [ 466.394705][T16121] ./cgroup: Can't lookup blockdev [ 466.402781][T16121] ./cgroup: Can't lookup blockdev [ 466.412048][T16121] ./cgroup: Can't lookup blockdev [ 466.418450][T16121] ./cgroup: Can't lookup blockdev [ 466.425525][T16121] ./cgroup: Can't lookup blockdev [ 466.431991][T16121] ./cgroup: Can't lookup blockdev [ 466.439369][T16121] ./cgroup: Can't lookup blockdev [ 466.445696][T16121] ./cgroup: Can't lookup blockdev [ 466.455794][T16121] ./cgroup: Can't lookup blockdev [ 466.462254][T16121] ./cgroup: Can't lookup blockdev [ 466.469021][T16121] ./cgroup: Can't lookup blockdev [ 466.487429][T16131] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5025'. [ 466.489724][T16121] ./cgroup: Can't lookup blockdev [ 466.515038][T16121] ./cgroup: Can't lookup blockdev [ 466.521196][T16121] ./cgroup: Can't lookup blockdev [ 466.527654][T16121] ./cgroup: Can't lookup blockdev [ 466.534072][T16121] ./cgroup: Can't lookup blockdev [ 466.540613][T16121] ./cgroup: Can't lookup blockdev [ 466.548277][T16121] ./cgroup: Can't lookup blockdev [ 466.556086][T16121] ./cgroup: Can't lookup blockdev [ 466.562936][T16121] ./cgroup: Can't lookup blockdev [ 466.574771][T16121] ./cgroup: Can't lookup blockdev [ 466.583332][T16121] ./cgroup: Can't lookup blockdev [ 466.591422][T16121] ./cgroup: Can't lookup blockdev [ 466.598868][T16121] ./cgroup: Can't lookup blockdev [ 466.605543][T16121] ./cgroup: Can't lookup blockdev [ 466.612984][T16121] ./cgroup: Can't lookup blockdev [ 466.620769][T16121] ./cgroup: Can't lookup blockdev [ 466.626789][T16121] ./cgroup: Can't lookup blockdev [ 466.633289][T16121] ./cgroup: Can't lookup blockdev [ 466.639584][T16121] ./cgroup: Can't lookup blockdev [ 466.645503][T16121] ./cgroup: Can't lookup blockdev [ 466.651717][T16121] ./cgroup: Can't lookup blockdev [ 466.657698][T16121] ./cgroup: Can't lookup blockdev [ 466.664161][T16121] ./cgroup: Can't lookup blockdev [ 466.670109][T16121] ./cgroup: Can't lookup blockdev [ 466.719181][T16139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 466.755855][ T469] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 466.860095][T16148] SELinux: security_context_str_to_sid () failed with errno=-22 [ 466.939909][ T469] usb 4-1: config 13 has an invalid interface number: 100 but max is 1 [ 466.958378][ T469] usb 4-1: config 13 has no interface number 1 [ 466.964658][ T469] usb 4-1: config 13 interface 100 altsetting 250 endpoint 0xC has invalid maxpacket 264, setting to 8 [ 466.980559][ T469] usb 4-1: config 13 interface 100 altsetting 250 endpoint 0x6 has invalid maxpacket 32, setting to 8 [ 466.993886][ T469] usb 4-1: config 13 interface 100 has no altsetting 0 [ 467.010899][T16131] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5025'. [ 467.022810][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.025880][T16157] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5035'. [ 467.031465][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.049960][T16158] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5034'. [ 467.052714][ T469] usb 4-1: string descriptor 0 read error: -71 [ 467.075979][ T469] usb 4-1: New USB device found, idVendor=0408, idProduct=ea05, bcdDevice=2c.a8 [ 467.095406][ T469] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.124351][ T469] usb 4-1: can't set config #13, error -71 [ 467.151470][ T469] usb 4-1: USB disconnect, device number 92 [ 467.194648][T16160] netlink: 'syz.2.5036': attribute type 4 has an invalid length. [ 467.202410][T16160] netlink: 'syz.2.5036': attribute type 5 has an invalid length. [ 467.219364][T16160] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5036'. [ 467.237112][T16160] ip6gretap0: entered promiscuous mode [ 467.242692][T16160] ip6gretap0: entered allmulticast mode [ 467.468350][T16175] rust_binder: 169: no such ref 2 [ 467.708321][T16184] rust_binder: validate_parent_fixup: new_min_offset=63, sg_entry.length=0 [ 467.708346][T16184] rust_binder: Error while translating object. [ 467.717751][T16184] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 467.724010][T16184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 467.768563][ T394] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 467.928785][T16193] /dev/rnullb0: Can't lookup blockdev [ 467.943794][ T394] usb 3-1: Using ep0 maxpacket: 16 [ 467.951666][ T394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 467.962568][ T394] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 467.976211][ T394] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 467.987333][ T394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.996898][ T394] usb 3-1: config 0 descriptor?? [ 468.005698][ T394] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 468.229945][T16202] netlink: 188 bytes leftover after parsing attributes in process `syz.7.5050'. [ 468.237473][T16177] futex_wake_op: syz.2.5042 tries to shift op by 32; fix this program [ 468.249532][T16203] netlink: 188 bytes leftover after parsing attributes in process `syz.7.5050'. [ 468.271277][T16202] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 468.271624][T16202] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 468.327547][T16206] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 468.813344][T16229] can: request_module (can-proto-4) failed. [ 468.850761][ T3006] Bluetooth: hci0: Frame reassembly failed (-84) [ 468.930224][ T394] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 469.102175][ T394] usb 4-1: not running at top speed; connect to a high speed hub [ 469.111513][ T394] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 469.119598][ T394] usb 4-1: config 95 has no interface number 0 [ 469.127285][ T394] usb 4-1: config 95 interface 1 has no altsetting 0 [ 469.137891][ T394] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 469.147827][ T394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.156394][ T394] usb 4-1: Product: syz [ 469.160567][ T394] usb 4-1: Manufacturer: syz [ 469.165964][ T394] usb 4-1: SerialNumber: syz [ 469.392848][T16219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:124 [ 469.410107][ T394] usb 4-1: USB disconnect, device number 93 [ 469.457803][T13069] udevd[13069]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 469.961881][T16241] rust_binder: Got transaction with invalid offset. [ 469.961940][T16241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 469.968665][T16241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 470.703009][ T394] usb 3-1: USB disconnect, device number 71 [ 470.721779][ T36] kauditd_printk_skb: 1294 callbacks suppressed [ 470.721801][ T36] audit: type=1400 audit(33555357.712:40702): avc: denied { read write } for pid=15404 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.752531][ T36] audit: type=1400 audit(33555357.712:40703): avc: denied { read write open } for pid=15404 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.778712][ T36] audit: type=1400 audit(33555357.712:40704): avc: denied { ioctl } for pid=15404 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.811164][ T36] audit: type=1400 audit(33555357.730:40705): avc: denied { write } for pid=16243 comm="syz.2.5062" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 470.834184][ T36] audit: type=1400 audit(33555357.730:40706): avc: denied { write } for pid=16243 comm="syz.2.5062" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 470.858744][ T36] audit: type=1400 audit(33555357.730:40707): avc: denied { read } for pid=16243 comm="syz.2.5062" name="binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 470.881856][ T36] audit: type=1400 audit(33555357.730:40708): avc: denied { read open } for pid=16243 comm="syz.2.5062" path="/dev/binderfs/binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 470.896501][T16248] /dev/rnullb0: Can't open blockdev [ 470.908492][ T36] audit: type=1400 audit(33555357.730:40709): avc: denied { ioctl } for pid=16243 comm="syz.2.5062" path="/dev/binderfs/binder1" dev="binder" ino=41 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 470.912104][T16249] /dev/rnullb0: Can't open blockdev [ 470.937093][ T36] audit: type=1400 audit(33555357.862:40710): avc: denied { read write } for pid=15659 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.948324][T16248] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5063'. [ 470.966453][ T36] audit: type=1400 audit(33555357.862:40711): avc: denied { read write open } for pid=15659 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 471.008751][ T337] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 471.014890][ T341] Bluetooth: hci0: command 0x1003 tx timeout [ 471.037731][T16251] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 471.037758][T16251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:178 [ 471.096794][ T3006] Bluetooth: hci0: Frame reassembly failed (-84) [ 471.103765][T16253] overlayfs: conflicting options: userxattr,verity=require [ 471.474709][ T2985] bridge_slave_1: left allmulticast mode [ 471.482100][ T2985] bridge_slave_1: left promiscuous mode [ 471.489239][ T2985] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.496994][ T2985] bridge_slave_0: left allmulticast mode [ 471.503608][ T2985] bridge_slave_0: left promiscuous mode [ 471.509446][ T2985] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.530981][ T480] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 471.662926][ T2985] veth1_macvtap: left promiscuous mode [ 471.668572][ T2985] veth0_vlan: left promiscuous mode [ 471.701533][ T480] usb 4-1: device descriptor read/64, error -71 [ 471.744061][T16264] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.751304][T16264] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.758467][T16264] bridge_slave_0: entered allmulticast mode [ 471.765082][T16264] bridge_slave_0: entered promiscuous mode [ 471.772567][T16264] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.779944][T16264] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.789254][T16264] bridge_slave_1: entered allmulticast mode [ 471.795824][T16264] bridge_slave_1: entered promiscuous mode [ 471.899673][T16264] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.908272][T16264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.915599][T16264] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.922639][T16264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.957470][ T480] usb 4-1: device descriptor read/64, error -71 [ 471.966870][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.974425][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.986753][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.993828][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.003597][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.010671][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.072382][T16264] veth0_vlan: entered promiscuous mode [ 472.100712][T16264] veth1_macvtap: entered promiscuous mode [ 472.234436][ T480] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 472.383665][ T480] usb 4-1: device descriptor read/64, error -71 [ 472.639503][ T480] usb 4-1: device descriptor read/64, error -71 [ 472.757429][ T480] usb usb4-port1: attempt power cycle [ 473.129782][ T480] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 473.140566][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 473.164856][ T480] usb 4-1: device descriptor read/8, error -71 [ 473.282689][T16309] rust_binder: 16306 RLIMIT_NICE not set [ 473.282773][T16309] rust_binder: 195: no such ref 0 [ 473.304562][ T480] usb 4-1: device descriptor read/8, error -71 [ 473.310962][ T341] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 473.311057][ T337] Bluetooth: hci0: command 0x1003 tx timeout [ 473.370841][T16311] fuseblk: Bad value for 'user_id' [ 473.376043][T16311] fuseblk: Bad value for 'user_id' [ 473.453187][T16316] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 473.577451][ T480] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 473.612173][ T480] usb 4-1: device descriptor read/8, error -71 [ 473.760599][ T480] usb 4-1: device descriptor read/8, error -71 [ 473.876031][ T480] usb usb4-port1: unable to enumerate USB device [ 474.199911][T16334] 9pnet_fd: Insufficient options for proto=fd [ 474.389336][T16348] rust_binder: 137: no such ref 1 [ 474.599948][T16368] netlink: 'syz.3.5103': attribute type 8 has an invalid length. [ 474.632850][T16370] rust_binder: 16364 RLIMIT_NICE not set [ 474.632888][T16370] rust_binder: 36: no such ref 0 [ 474.651849][T16372] rust_binder: 16366 RLIMIT_NICE not set [ 474.651963][T16372] rust_binder: 211: no such ref 0 [ 474.888461][ T480] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 475.069666][ T480] usb 4-1: Using ep0 maxpacket: 32 [ 475.082061][ T480] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 475.096889][ T480] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 475.126858][ T480] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 475.139588][ T480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 475.159767][T16399] rust_binder: 221: no such ref 2 [ 475.159954][ T480] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 475.184571][ T480] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 475.197212][T16402] rust_binder: Error while translating object. [ 475.198468][ T480] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 475.205815][T16402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 475.213939][ T480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.231576][T16402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:53 [ 475.233982][ T480] usb 4-1: config 0 descriptor?? [ 475.486654][ T480] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 98 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 475.509006][ T480] usb 4-1: USB disconnect, device number 98 [ 475.529037][ T480] usblp0: removed [ 475.600879][T16421] binder: Unknown parameter 'dirsݛZ\y' [ 475.642479][T16423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 475.642508][T16423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:240 [ 475.711785][T16425] rust_binder: Write failure EINVAL in pid:242 [ 476.018288][ T480] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 476.092888][ T64] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 476.101055][ T36] kauditd_printk_skb: 982 callbacks suppressed [ 476.101172][ T36] audit: type=1400 audit(33555362.769:41694): avc: denied { ioctl } for pid=16431 comm="syz.2.5125" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 476.132534][ T36] audit: type=1400 audit(33555362.769:41695): avc: denied { ioctl } for pid=16431 comm="syz.2.5125" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 476.158158][ T36] audit: type=1400 audit(33555362.769:41696): avc: denied { ioctl } for pid=16431 comm="syz.2.5125" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 476.183173][ T36] audit: type=1400 audit(33555362.806:41697): avc: denied { ioctl } for pid=16369 comm="syz.3.5104" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 476.210672][ T36] audit: type=1400 audit(33555362.881:41698): avc: denied { ioctl } for pid=16431 comm="syz.2.5125" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 476.231474][ T480] usb 4-1: Using ep0 maxpacket: 32 [ 476.241233][ T36] audit: type=1400 audit(33555362.900:41699): avc: denied { ioctl } for pid=16369 comm="syz.3.5104" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 476.244327][ T480] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 476.266264][ T36] audit: type=1400 audit(33555362.900:41700): avc: denied { ioctl } for pid=16369 comm="syz.3.5104" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 476.275842][ T480] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 476.299460][ T36] audit: type=1400 audit(33555362.900:41701): avc: denied { ioctl } for pid=16369 comm="syz.3.5104" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 476.308340][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 476.334348][ T36] audit: type=1400 audit(33555362.909:41702): avc: denied { ioctl } for pid=16369 comm="syz.3.5104" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 476.338494][ T480] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 476.364145][ T36] audit: type=1400 audit(33555362.909:41703): avc: denied { ioctl } for pid=16369 comm="syz.3.5104" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 476.372024][ T480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 476.406673][ T480] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 476.416404][ T480] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 476.429501][ T480] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 476.438712][ T480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.446840][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.457755][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.469089][ T480] usb 4-1: config 0 descriptor?? [ 476.474123][ T64] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 476.486330][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.496185][ T64] usb 3-1: config 0 descriptor?? [ 476.601669][T16437] netlink: 9 bytes leftover after parsing attributes in process `syz.8.5127'. [ 476.610982][T16437] gretap0: entered promiscuous mode [ 476.702498][ T480] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 99 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 476.941366][ T64] elecom 0003:056E:010D.004A: unknown main item tag 0x7 [ 476.950066][ T64] elecom 0003:056E:010D.004A: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.2-1/input0 [ 477.088429][ T455] usb 4-1: USB disconnect, device number 99 [ 477.107962][ T455] usblp0: removed [ 477.147724][T16464] netlink: 'syz.8.5135': attribute type 16 has an invalid length. [ 477.158770][T16464] netlink: 'syz.8.5135': attribute type 2 has an invalid length. [ 477.166544][T16464] netlink: 64086 bytes leftover after parsing attributes in process `syz.8.5135'. [ 477.195473][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5135'. [ 477.277322][ T469] usb 3-1: USB disconnect, device number 72 [ 478.125729][T16503] rust_binder: Write failure EFAULT in pid:153 [ 478.384520][ T455] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 478.567642][ T455] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 478.575898][ T455] usb 3-1: config 1 has no interface number 0 [ 478.582009][ T455] usb 3-1: config 1 interface 105 has no altsetting 0 [ 478.591361][ T455] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 478.600838][ T455] usb 3-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 478.609428][ T455] usb 3-1: Product: syz [ 478.613588][ T455] usb 3-1: Manufacturer: syz [ 478.618159][ T455] usb 3-1: SerialNumber: syz [ 478.712721][T16523] rust_binder: Error in use_page_slow: ESRCH [ 478.712741][T16523] rust_binder: use_range failure ESRCH [ 478.719995][T16523] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 478.725520][T16523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 478.734325][T16523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:59 [ 478.745890][T16522] rust_binder: Error in use_page_slow: ESRCH [ 478.755110][T16522] rust_binder: use_range failure ESRCH [ 478.761163][T16522] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 478.766679][T16522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 478.775019][T16522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:59 [ 479.506339][ T455] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 479.742277][ T455] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 479.778852][ T455] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 26:92:fe:16:39:74 [ 479.806352][ T455] usb 3-1: USB disconnect, device number 73 [ 479.824112][ T455] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 479.891061][ T455] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 479.919370][ T455] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 479.928752][ T455] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 480.042453][T16587] rust_binder: 191: no such ref 1 [ 480.050452][T16587] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 480.686813][ T480] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 480.860015][ T480] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.870665][ T480] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.882396][ T480] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 480.892771][ T480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 480.901634][ T480] usb 3-1: SerialNumber: syz [ 481.132427][ T480] usb 3-1: 0:2 : does not exist [ 481.154422][ T480] usb 3-1: USB disconnect, device number 74 [ 481.236015][T13069] udevd[13069]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 481.477899][ T36] kauditd_printk_skb: 449 callbacks suppressed [ 481.477918][ T36] audit: type=1400 audit(33555367.818:42153): avc: denied { read write } for pid=15659 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.509063][ T36] audit: type=1400 audit(33555367.818:42154): avc: denied { read write open } for pid=15659 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.534035][ T36] audit: type=1400 audit(33555367.818:42155): avc: denied { ioctl } for pid=15659 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.559548][ T36] audit: type=1400 audit(33555367.846:42156): avc: denied { read } for pid=16608 comm="syz.3.5180" dev="nsfs" ino=4026532459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 481.580661][ T36] audit: type=1400 audit(33555367.846:42157): avc: denied { read open } for pid=16608 comm="syz.3.5180" path="net:[4026532459]" dev="nsfs" ino=4026532459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 481.604326][ T36] audit: type=1400 audit(33555367.846:42158): avc: denied { create } for pid=16608 comm="syz.3.5180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 481.624256][ T36] audit: type=1400 audit(33555367.846:42159): avc: denied { setopt } for pid=16608 comm="syz.3.5180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 481.644180][ T36] audit: type=1400 audit(33555367.846:42160): avc: denied { read write } for pid=16608 comm="syz.3.5180" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 481.667640][ T36] audit: type=1400 audit(33555367.846:42161): avc: denied { read write open } for pid=16608 comm="syz.3.5180" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 481.692070][ T36] audit: type=1400 audit(33555367.846:42162): avc: denied { read write } for pid=16608 comm="syz.3.5180" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 481.997816][ T480] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 482.085579][T16617] netlink: 4208 bytes leftover after parsing attributes in process `syz.3.5182'. [ 482.160875][ T480] usb 3-1: config 1 has an invalid interface number: 4 but max is 2 [ 482.169033][ T480] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 482.179511][ T480] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 482.188737][ T480] usb 3-1: config 1 has no interface number 1 [ 482.195157][ T480] usb 3-1: too many endpoints for config 1 interface 4 altsetting 3: 34, using maximum allowed: 30 [ 482.206176][ T480] usb 3-1: config 1 interface 4 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 482.224486][ T480] usb 3-1: config 1 interface 4 has no altsetting 0 [ 482.242961][ T480] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.252060][ T480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.260115][ T480] usb 3-1: Product: syz [ 482.264340][ T480] usb 3-1: Manufacturer: syz [ 482.269044][ T480] usb 3-1: SerialNumber: syz [ 482.330750][T16630] __vm_enough_memory: pid: 16630, comm: syz.6.5185, bytes: 18014402804453376 not enough memory for the allocation [ 482.528427][ T480] usb 3-1: 0:2 : does not exist [ 482.561617][ T480] usb 3-1: USB disconnect, device number 75 [ 482.703979][T13069] udevd[13069]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 482.743951][T16645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 483.002628][T16658] random: crng reseeded on system resumption [ 483.165958][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5197'. [ 483.340808][ T480] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 483.433442][T16684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:109 [ 483.500705][ T480] usb 4-1: Using ep0 maxpacket: 16 [ 483.521199][ T480] usb 4-1: config 1 interface 0 altsetting 114 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.535579][ T480] usb 4-1: config 1 interface 0 has no altsetting 0 [ 483.545826][ T480] usb 4-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.40 [ 483.554938][ T480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.562960][ T480] usb 4-1: Product: syz [ 483.567221][ T480] usb 4-1: Manufacturer: ␊ [ 483.571806][ T480] usb 4-1: SerialNumber: syz [ 483.809765][ T480] usbhid 4-1:1.0: can't add hid device: -71 [ 483.827987][ T480] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 483.860022][ T480] usb 4-1: USB disconnect, device number 100 [ 484.140063][T16705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 484.200931][T16706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:290 [ 484.443237][T16712] netlink: 'syz.3.5211': attribute type 1 has an invalid length. [ 484.466627][T16715] can: request_module (can-proto-0) failed. [ 484.474482][T16715] /dev/rnullb0: Can't lookup blockdev [ 484.482014][T16715] can: request_module (can-proto-0) failed. [ 484.552035][T16725] exFAT-fs (rnullb0): invalid boot record signature [ 484.558767][T16725] exFAT-fs (rnullb0): failed to read boot sector [ 484.565093][T16725] exFAT-fs (rnullb0): failed to recognize exfat type [ 485.171381][T16750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5222'. [ 485.613721][T16758] raw_sendmsg: syz.3.5226 forgot to set AF_INET. Fix it! [ 485.679441][T16761] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 485.941611][ T455] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 486.101723][ T455] usb 4-1: Using ep0 maxpacket: 16 [ 486.109190][ T455] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.119355][ T455] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.130809][ T455] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 486.139918][ T455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.149367][ T455] usb 4-1: Product: syz [ 486.153508][ T455] usb 4-1: Manufacturer: syz [ 486.158125][ T455] usb 4-1: SerialNumber: syz [ 486.854090][ T36] kauditd_printk_skb: 809 callbacks suppressed [ 486.854107][ T36] audit: type=1400 audit(33555372.865:42972): avc: denied { write } for pid=16773 comm="syz.6.5233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 486.868254][T16774] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5233'. [ 486.898097][ T36] audit: type=1400 audit(33555372.865:42973): avc: denied { mounton } for pid=16781 comm="syz.8.5235" path="/277" dev="tmpfs" ino=1526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 486.913101][T16774] incfs: ino conflict with backing FS 1 [ 486.922409][ T36] audit: type=1400 audit(33555372.865:42974): avc: denied { mount } for pid=16781 comm="syz.8.5235" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 486.943173][T16787] overlayfs: failed to resolve './bus': -2 [ 486.949037][ T36] audit: type=1400 audit(33555372.874:42975): avc: denied { create } for pid=16773 comm="syz.6.5233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 486.966684][T16774] overlayfs: failed to resolve 'obj_type=']h+&': -2 [ 486.975414][ T36] audit: type=1400 audit(33555372.874:42976): avc: denied { write } for pid=16773 comm="syz.6.5233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 487.002210][ T36] audit: type=1400 audit(33555372.874:42977): avc: denied { read } for pid=16773 comm="syz.6.5233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 487.035528][ T36] audit: type=1400 audit(33555372.874:42978): avc: denied { read } for pid=16773 comm="syz.6.5233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 487.056657][ T36] audit: type=1400 audit(33555372.874:42979): avc: denied { create } for pid=16773 comm="syz.6.5233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 487.077233][ T36] audit: type=1400 audit(33555372.874:42980): avc: denied { setopt } for pid=16773 comm="syz.6.5233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 487.145968][ T36] audit: type=1400 audit(33555372.874:42981): avc: denied { write } for pid=16773 comm="syz.6.5233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 487.380441][ T337] Bluetooth: hci0: command 0x1003 tx timeout [ 487.380439][ T341] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 488.804007][ T455] usb 4-1: 0:2 : does not exist [ 488.816630][ T455] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 488.830644][ T455] usb 4-1: USB disconnect, device number 101 [ 488.871052][T13069] udevd[13069]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 505.644262][ T36] kauditd_printk_skb: 120 callbacks suppressed [ 505.644280][ T36] audit: type=1400 audit(33555390.494:43102): avc: denied { create } for pid=16826 comm="syz.3.5249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 505.719755][ T36] audit: type=1400 audit(33555390.494:43103): avc: denied { mounton } for pid=16827 comm="syz.8.5251" path="/287/file0" dev="tmpfs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 505.747010][ T36] audit: type=1400 audit(33555390.494:43104): avc: denied { mount } for pid=16827 comm="syz.8.5251" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 505.769257][ T36] audit: type=1400 audit(33555390.494:43105): avc: denied { read } for pid=16829 comm="syz.2.5250" name="binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 505.771812][T16837] overlayfs: conflicting lowerdir path [ 505.799234][T16845] netlink: 'syz.8.5255': attribute type 27 has an invalid length. [ 505.807800][ T36] audit: type=1400 audit(33555390.503:43106): avc: denied { read open } for pid=16829 comm="syz.2.5250" path="/dev/binderfs/binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 505.833023][ T36] audit: type=1400 audit(33555390.503:43107): avc: denied { ioctl } for pid=16829 comm="syz.2.5250" path="/dev/binderfs/binder1" dev="binder" ino=41 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 505.859057][ T36] audit: type=1400 audit(33555390.503:43108): avc: denied { set_context_mgr } for pid=16829 comm="syz.2.5250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 505.879914][ T36] audit: type=1400 audit(33555390.503:43109): avc: denied { read write } for pid=16829 comm="syz.2.5250" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 505.886976][T16845] gretap0: left promiscuous mode [ 505.909890][ T36] audit: type=1400 audit(33555390.503:43110): avc: denied { read write open } for pid=16829 comm="syz.2.5250" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 505.938444][ T36] audit: type=1400 audit(33555390.503:43111): avc: denied { ioctl } for pid=16829 comm="syz.2.5250" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 505.947908][ T64] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 505.976820][ T2985] Bluetooth: hci0: Frame reassembly failed (-84) [ 505.983515][T16845] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.036874][T16845] tipc: Resetting bearer [ 506.150411][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 506.158648][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.176153][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.187869][ T64] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 506.204443][ T64] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 506.215860][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.227075][ T64] usb 3-1: config 0 descriptor?? [ 506.657093][T16890] bridge0: entered allmulticast mode [ 506.670276][T16890] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5267'. [ 506.681348][T16890] bridge_slave_1: left allmulticast mode [ 506.692916][ T64] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.004B/input/input51 [ 506.718974][T16890] bridge_slave_1: left promiscuous mode [ 506.722986][T16901] rust_binder: Error while translating object. [ 506.725775][ T64] appleir 0003:05AC:8241.004B: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 506.735368][T16901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 506.752091][T16899] skbuff: bad partial csum: csum=65506/2 headroom=130 headlen=65526 [ 506.757959][T16901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:248 [ 506.770998][T16890] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.830925][T16890] bridge0 (unregistering): left allmulticast mode [ 506.932570][T16911] 9pnet: Could not find request transport: xen [ 507.080193][T16913] kvm: kvm [16912]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 507.109879][T16913] kvm: kvm [16912]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 507.230554][T16927] exFAT-fs (rnullb0): invalid boot record signature [ 507.237248][T16927] exFAT-fs (rnullb0): failed to read boot sector [ 507.245118][T16927] exFAT-fs (rnullb0): failed to recognize exfat type [ 507.247821][T16913] rust_binder: Error in use_page_slow: ESRCH [ 507.261177][T16913] rust_binder: use_range failure ESRCH [ 507.278705][T16913] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 507.288347][T16913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 507.296949][T16913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:158 [ 507.451808][T16940] rust_binder: 16937 RLIMIT_NICE not set [ 507.471740][T16940] rust_binder: 302: no such ref 0 [ 507.841215][T16965] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 508.143470][T17041] netlink: 'syz.8.5294': attribute type 1 has an invalid length. [ 508.186217][ T341] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 508.610233][T17062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 508.612490][T17062] rust_binder: Error while translating object. [ 508.620374][T17062] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 508.627328][T17062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:319 [ 508.719458][ T480] usb 3-1: USB disconnect, device number 76 [ 509.155972][T17122] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 509.155998][T17122] rust_binder: Read failure Err(EFAULT) in pid:374 [ 509.194331][T17125] netlink: 'syz.2.5308': attribute type 1 has an invalid length. [ 509.373798][T17127] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 509.455905][T17131] 9pnet_fd: Insufficient options for proto=fd [ 509.463583][T17131] overlayfs: overlapping lowerdir path [ 509.481035][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5311'. [ 509.491394][ T2985] Bluetooth: hci0: Frame reassembly failed (-84) [ 509.498069][T17131] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 509.610372][T17149] cgroup: Name too long [ 509.673430][T17153] rust_binder: Error while translating object. [ 509.673484][T17153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 509.684006][T17153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:375 [ 510.572333][T17178] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 510.594693][T17178] rust_binder: Error while translating object. [ 510.594756][T17178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 510.601388][T17178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:379 [ 510.642567][T17182] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 510.724213][T17185] @0: renamed from bond_slave_1 [ 510.859613][T17191] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 510.956919][T17198] rust_binder: Write failure EFAULT in pid:387 [ 510.978841][ T36] kauditd_printk_skb: 1364 callbacks suppressed [ 510.978859][ T36] audit: type=1400 audit(33555395.495:44476): avc: denied { ioctl } for pid=15659 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 511.025465][ T36] audit: type=1400 audit(33555395.541:44477): avc: denied { unmount } for pid=17201 comm="syz.3.5335" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 511.061825][ T36] audit: type=1400 audit(33555395.570:44478): avc: denied { sys_module } for pid=17201 comm="syz.3.5335" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 511.098523][ T36] audit: type=1400 audit(33555395.616:44479): avc: denied { name_bind } for pid=17206 comm="syz.3.5336" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 511.120315][ T36] audit: type=1400 audit(33555395.616:44480): avc: denied { node_bind } for pid=17206 comm="syz.3.5336" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 511.142658][ T36] audit: type=1400 audit(33555395.654:44481): avc: denied { ioctl } for pid=17199 comm="syz.6.5334" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.167904][ T36] audit: type=1400 audit(33555395.654:44482): avc: denied { map } for pid=17199 comm="syz.6.5334" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.190967][ T36] audit: type=1400 audit(33555395.654:44483): avc: denied { read } for pid=17199 comm="syz.6.5334" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.547579][ T36] audit: type=1400 audit(33555396.029:44484): avc: denied { create } for pid=17210 comm="syz.8.5337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 511.568169][ T36] audit: type=1400 audit(33555396.029:44485): avc: denied { write } for pid=17210 comm="syz.8.5337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 511.669461][T17216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5339'. [ 511.682362][ T337] Bluetooth: hci0: command 0x1003 tx timeout [ 511.688399][ T341] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 511.724773][T17218] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 511.731688][T17218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:386 [ 511.879549][T17226] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 512.952663][T17280] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 512.960658][T17278] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 512.971827][T17280] rust_binder: Write failure EINVAL in pid:182 [ 513.301256][T17297] netlink: 'syz.8.5367': attribute type 11 has an invalid length. [ 513.410825][T17306] VFS: Mount too revealing [ 513.453704][T17310] /dev/rnullb0: Can't lookup blockdev [ 513.886554][T17343] overlayfs: failed to clone upperpath [ 516.451661][ T36] kauditd_printk_skb: 295 callbacks suppressed [ 516.451693][ T36] audit: type=1400 audit(33555400.636:44781): avc: denied { unmount } for pid=16264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 516.484753][ T36] audit: type=1400 audit(33555400.664:44782): avc: denied { read write } for pid=16264 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 516.510128][ T36] audit: type=1400 audit(33555400.664:44783): avc: denied { read write open } for pid=16264 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 516.540576][ T36] audit: type=1400 audit(33555400.664:44784): avc: denied { ioctl } for pid=16264 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 516.566744][ T36] audit: type=1400 audit(33555400.711:44785): avc: denied { read } for pid=17369 comm="syz.6.5393" name="binder1" dev="binder" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 516.589987][ T36] audit: type=1400 audit(33555400.711:44786): avc: denied { read open } for pid=17369 comm="syz.6.5393" path="/dev/binderfs/binder1" dev="binder" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 516.614426][ T36] audit: type=1400 audit(33555400.711:44787): avc: denied { create } for pid=17369 comm="syz.6.5393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 516.636902][ T36] audit: type=1400 audit(33555400.711:44788): avc: denied { ioctl } for pid=17369 comm="syz.6.5393" path="socket:[88142]" dev="sockfs" ino=88142 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 516.661793][ T36] audit: type=1400 audit(33555400.711:44789): avc: denied { setopt } for pid=17369 comm="syz.6.5393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 516.681453][ T36] audit: type=1400 audit(33555400.711:44790): avc: denied { write } for pid=17369 comm="syz.6.5393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 519.273433][T17470] /dev/rnullb0: Can't lookup blockdev [ 519.676534][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5437'. [ 519.790031][T17517] rust_binder: Got transaction with invalid offset. [ 519.790068][T17517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 519.799363][T17517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 519.826876][T17519] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5442'. [ 519.850209][T17519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17519 comm=syz.3.5442 [ 520.003320][T17528] overlayfs: failed to clone upperpath [ 520.114259][T17535] overlayfs: failed to clone lowerpath [ 520.222753][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5451'. [ 520.235403][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5451'. [ 520.240672][T17548] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5451'. [ 520.245889][T17547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17547 comm=syz.3.5451 [ 520.268253][T17547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17547 comm=syz.3.5451 [ 520.282421][T17547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17547 comm=syz.3.5451 [ 520.297212][T17547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17547 comm=syz.3.5451 [ 520.310826][T17547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17547 comm=syz.3.5451 [ 520.324463][T17547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17547 comm=syz.3.5451 [ 520.337983][T17547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17547 comm=syz.3.5451 [ 520.388910][T17547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17547 comm=syz.3.5451 [ 520.405938][T17547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17547 comm=syz.3.5451 [ 520.534153][T17556] overlay: ./file0 is not a directory [ 520.541719][T17564] overlayfs: failed to clone upperpath [ 520.562047][T17565] rust_binder: 199: no such ref 0 [ 520.567142][T17565] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 520.574241][T17565] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 520.581476][T17565] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 520.590099][T17565] rust_binder: 199: no such ref 0 [ 520.643148][T17575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 520.643181][T17575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:202 [ 520.645439][T17574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 520.847902][T17592] overlayfs: failed to clone upperpath [ 520.904141][T17597] rust_binder: Error while translating object. [ 520.904172][T17597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 520.913539][T17597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:210 [ 521.273431][T17626] overlayfs: failed to clone upperpath [ 521.356267][T17633] /dev/rnullb0: Can't lookup blockdev [ 521.437823][T17642] netlink: 'syz.8.5482': attribute type 1 has an invalid length. [ 521.690186][T17658] overlayfs: failed to clone upperpath [ 521.792986][ T36] kauditd_printk_skb: 765 callbacks suppressed [ 521.793003][ T36] audit: type=1400 audit(33555405.646:45556): avc: denied { mounton } for pid=17670 comm="syz.8.5492" path="/384/file0" dev="tmpfs" ino=2117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 521.823156][ T36] audit: type=1400 audit(33555405.655:45557): avc: denied { execute } for pid=17670 comm="syz.8.5492" name="file0" dev="tmpfs" ino=2117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 521.847015][ T36] audit: type=1400 audit(33555405.693:45558): avc: denied { associate } for pid=17672 comm="syz.8.5493" name="memory.numa_stat" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 521.870168][ T36] audit: type=1400 audit(33555405.693:45559): avc: denied { create } for pid=17672 comm="syz.8.5493" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 521.892455][ T36] audit: type=1400 audit(33555405.693:45560): avc: denied { ioctl } for pid=17672 comm="syz.8.5493" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=88624 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 522.337673][ T36] audit: type=1400 audit(33555406.152:45561): avc: denied { create } for pid=17678 comm="syz.3.5495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 522.357650][ T36] audit: type=1400 audit(33555406.152:45562): avc: denied { setopt } for pid=17678 comm="syz.3.5495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 522.377413][ T36] audit: type=1400 audit(33555406.171:45563): avc: denied { read } for pid=17678 comm="syz.3.5495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 522.421512][ T36] audit: type=1400 audit(33555406.228:45564): avc: denied { write } for pid=17678 comm="syz.3.5495" path="socket:[88633]" dev="sockfs" ino=88633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 522.422740][T17680] netlink: 'syz.3.5495': attribute type 10 has an invalid length. [ 522.445150][ T36] audit: type=1400 audit(33555406.228:45565): avc: denied { write } for pid=17678 comm="syz.3.5495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 523.260337][T17707] overlayfs: failed to clone upperpath [ 523.406846][T17733] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5514'. [ 524.008009][T17742] overlayfs: failed to clone upperpath [ 524.232765][T17779] tipc: Enabling of bearer rejected, failed to enable media [ 525.456771][T17824] netlink: 'syz.3.5545': attribute type 3 has an invalid length. [ 525.563874][T17831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 525.563906][T17831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:223 [ 525.571197][T17830] overlayfs: failed to clone upperpath [ 525.950174][T17862] overlayfs: failed to clone upperpath [ 526.789834][T17884] overlayfs: failed to clone upperpath [ 526.969199][T17904] overlayfs: failed to clone upperpath [ 527.596513][ T36] kauditd_printk_skb: 314 callbacks suppressed [ 527.596531][ T36] audit: type=1400 audit(33555411.087:45880): avc: denied { execmem } for pid=17914 comm="syz.3.5579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 527.622075][ T36] audit: type=1400 audit(33555411.087:45881): avc: denied { execute } for pid=17914 comm="syz.3.5579" path="/dev/rnullb0" dev="tmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 528.219792][ T36] audit: type=1400 audit(33555411.669:45882): avc: denied { execmem } for pid=17920 comm="syz.3.5581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 528.310755][ T36] audit: type=1400 audit(33555411.763:45883): avc: denied { create } for pid=17927 comm="syz.8.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 528.351751][ T36] audit: type=1400 audit(33555411.763:45884): avc: denied { create } for pid=17927 comm="syz.8.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 528.373869][ T36] audit: type=1400 audit(33555411.763:45885): avc: denied { write } for pid=17927 comm="syz.8.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 528.395796][ T36] audit: type=1400 audit(33555411.763:45886): avc: denied { read } for pid=17927 comm="syz.8.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 528.417252][ T36] audit: type=1400 audit(33555411.763:45887): avc: denied { read } for pid=17927 comm="syz.8.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 528.440171][ T36] audit: type=1400 audit(33555411.763:45888): avc: denied { write } for pid=17927 comm="syz.8.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 528.461843][ T36] audit: type=1400 audit(33555411.763:45889): avc: denied { create } for pid=17927 comm="syz.8.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 528.505366][T17936] 9pnet_fd: Insufficient options for proto=fd [ 529.287197][T17945] netlink: 'syz.6.5592': attribute type 46 has an invalid length. [ 529.499313][T17957] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.506412][T17957] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.513530][T17957] bridge_slave_0: entered allmulticast mode [ 529.520630][T17957] bridge_slave_0: entered promiscuous mode [ 529.529020][T17957] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.537121][T17957] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.544216][T17957] bridge_slave_1: entered allmulticast mode [ 529.554721][T17957] bridge_slave_1: entered promiscuous mode [ 529.563335][T17973] netlink: 'syz.3.5598': attribute type 16 has an invalid length. [ 529.571395][T17973] netlink: 'syz.3.5598': attribute type 2 has an invalid length. [ 529.580092][T17973] netlink: 64086 bytes leftover after parsing attributes in process `syz.3.5598'. [ 529.717989][T17957] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.725111][T17957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.732454][T17957] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.739492][T17957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.800272][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.808135][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.824584][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.831664][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.842774][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.849845][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.911988][T17999] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5605'. [ 529.924628][T17999] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5605'. [ 529.943000][T17957] veth0_vlan: entered promiscuous mode [ 529.985491][T17957] veth1_macvtap: entered promiscuous mode [ 530.071465][T18005] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 530.196875][T18011] tmpfs: Unknown parameter 'noinode32' [ 530.211025][T18011] 9pnet_fd: Insufficient options for proto=fd [ 530.388494][ T31] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 530.547355][T18029] syz.6.5617: attempt to access beyond end of device [ 530.547355][T18029] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 530.560496][T18029] exFAT-fs (loop6): unable to read boot sector [ 530.566716][T18029] exFAT-fs (loop6): failed to read boot sector [ 530.575900][ T31] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 530.577660][T18029] exFAT-fs (loop6): failed to recognize exfat type [ 530.590874][ T31] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 530.610589][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 530.623121][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 530.634923][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 530.665418][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 530.682666][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.693534][ T31] usb 6-1: config 0 descriptor?? [ 530.700570][T18007] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 530.836358][T18045] binder: Unknown parameter 'dont_hash' [ 531.098231][T18063] tipc: Started in network mode [ 531.103188][T18063] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 531.112063][T18063] tipc: Enabling of bearer rejected, failed to enable media [ 531.140444][ T31] plantronics 0003:047F:FFFF.004C: unknown main item tag 0xd [ 531.152625][ T31] plantronics 0003:047F:FFFF.004C: No inputs registered, leaving [ 531.173984][ T31] plantronics 0003:047F:FFFF.004C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 531.221492][T18069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:291 [ 531.415472][T18007] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5607'. [ 531.459383][T18007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5607'. [ 531.469748][T18007] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5607'. [ 531.478741][T18007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5607'. [ 531.485057][T18087] netlink: 'syz.3.5634': attribute type 1 has an invalid length. [ 531.487717][T18007] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5607'. [ 531.507407][ T64] usb 6-1: USB disconnect, device number 45 [ 532.145455][T18102] __vm_enough_memory: pid: 18102, comm: syz.6.5640, bytes: 18014402804453376 not enough memory for the allocation [ 532.485912][T18112] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 532.727468][T18126] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5649'. [ 532.925091][ T64] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 533.000294][ T36] kauditd_printk_skb: 1762 callbacks suppressed [ 533.000311][ T36] audit: type=1400 audit(33555416.163:47652): avc: denied { ioctl } for pid=18113 comm="syz.5.5646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.085162][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 533.090903][ T36] audit: type=1400 audit(33555416.238:47653): avc: denied { ioctl } for pid=18113 comm="syz.5.5646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.092710][ T64] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 533.115919][ T36] audit: type=1400 audit(33555416.238:47654): avc: denied { ioctl } for pid=18113 comm="syz.5.5646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.129074][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 95, changing to 10 [ 533.152268][ T36] audit: type=1400 audit(33555416.238:47655): avc: denied { ioctl } for pid=18113 comm="syz.5.5646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.164637][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 41157, setting to 1024 [ 533.220958][ T36] audit: type=1400 audit(33555416.238:47656): avc: denied { ioctl } for pid=18113 comm="syz.5.5646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.237375][ T64] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 533.247775][ T36] audit: type=1400 audit(33555416.238:47657): avc: denied { ioctl } for pid=18113 comm="syz.5.5646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.266151][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.281125][ T36] audit: type=1400 audit(33555416.285:47658): avc: denied { ioctl } for pid=18113 comm="syz.5.5646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.292321][ T64] usb 6-1: Product: syz [ 533.319901][ T36] audit: type=1400 audit(33555416.341:47659): avc: denied { read write } for pid=16264 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 533.338719][ T64] usb 6-1: Manufacturer: syz [ 533.350225][ T64] usb 6-1: SerialNumber: syz [ 533.390982][ T36] audit: type=1400 audit(33555416.341:47660): avc: denied { read write open } for pid=16264 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 533.404703][ T64] usb 6-1: config 0 descriptor?? [ 533.466444][ T36] audit: type=1400 audit(33555416.341:47661): avc: denied { ioctl } for pid=16264 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 533.831721][T18148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.840591][T18148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.999940][ T387] usb 6-1: USB disconnect, device number 46 [ 534.123012][T18171] binder: Bad value for 'max' [ 534.269093][T18177] rust_binder: Error while translating object. [ 534.269115][T18177] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 534.275362][T18177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:315 [ 534.481250][ T387] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 534.581218][T18193] rust_binder: Error while translating object. [ 534.581249][T18193] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 534.587502][T18193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:331 [ 534.663674][T18203] netlink: 'syz.8.5676': attribute type 6 has an invalid length. [ 534.680629][T18203] netlink: 'syz.8.5676': attribute type 4 has an invalid length. [ 534.688909][T18203] netlink: 'syz.8.5676': attribute type 6 has an invalid length. [ 534.703101][T18203] netlink: 'syz.8.5676': attribute type 13 has an invalid length. [ 534.712892][T18203] netlink: 'syz.8.5676': attribute type 15 has an invalid length. [ 534.721048][ T387] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 534.728053][T18203] netlink: 'syz.8.5676': attribute type 19 has an invalid length. [ 534.739370][ T387] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 534.740421][T18203] netlink: 3684 bytes leftover after parsing attributes in process `syz.8.5676'. [ 534.753424][ T387] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.774987][ T387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.787709][ T387] usb 6-1: Product: syz [ 534.792395][ T387] usb 6-1: Manufacturer: ਿ혽蚂妰⋫Ꞛ끎訃鹼毩嘮놖臮䐶嫨 [ 534.809615][ T387] usb 6-1: SerialNumber: syz [ 534.967395][T18220] loop7: detected capacity change from 0 to 7 [ 535.052299][ T387] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 535.081240][ T387] cdc_ncm 6-1:1.0: bind() failure [ 535.099017][ T387] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 535.109815][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 535.119880][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 535.128424][ T387] cdc_ncm 6-1:1.1: bind() failure [ 535.138875][ T387] usb 6-1: USB disconnect, device number 47 [ 535.276095][T18238] 9pnet_fd: Insufficient options for proto=fd [ 535.300089][T18238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 535.300118][T18238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:346 [ 535.644696][T18255] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 535.654269][T18255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 535.662389][T18255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:19 [ 535.757127][T18264] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 535.839536][T18273] tmpfs: Unknown parameter '0x0000000000000003' [ 535.853677][T18273] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5697'. [ 536.261279][ T64] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 536.424679][ T64] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 536.433019][ T64] usb 6-1: can't read configurations, error -22 [ 536.570362][ T64] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 536.745862][ T64] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 536.763997][ T64] usb 6-1: can't read configurations, error -22 [ 536.779842][ T64] usb usb6-port1: attempt power cycle [ 537.152708][T18347] selinux_netlink_send: 22 callbacks suppressed [ 537.152727][T18347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=18347 comm=syz.8.5726 [ 537.154034][T18348] netlink: 'syz.8.5726': attribute type 3 has an invalid length. [ 537.179490][ T64] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 537.203939][ T64] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 537.211932][ T64] usb 6-1: can't read configurations, error -22 [ 537.317991][T18367] fuse: Bad value for 'fd' [ 537.369680][ T64] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 537.394969][ T64] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 537.402988][ T64] usb 6-1: can't read configurations, error -22 [ 537.409877][ T64] usb usb6-port1: unable to enumerate USB device [ 537.466471][T18376] /dev/sr0: Can't lookup blockdev [ 537.663913][T18396] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18396 comm=syz.8.5742 [ 538.358605][T18407] /dev/rnullb0: Can't lookup blockdev [ 538.364136][ T36] kauditd_printk_skb: 672 callbacks suppressed [ 538.364158][ T36] audit: type=1400 audit(2000000001.707:48334): avc: denied { mounton } for pid=18397 comm="syz.8.5743" path="/syzcgroup/unified/syz8" dev="tmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 538.399985][ T36] audit: type=1400 audit(2000000001.745:48335): avc: denied { create } for pid=18408 comm="syz.3.5746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 538.420590][ T36] audit: type=1400 audit(2000000001.745:48336): avc: denied { setopt } for pid=18408 comm="syz.3.5746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 538.441388][ T36] audit: type=1400 audit(2000000001.773:48337): avc: denied { setopt } for pid=18408 comm="syz.3.5746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 538.497112][ T36] audit: type=1400 audit(2000000001.838:48338): avc: denied { create } for pid=18412 comm="syz.3.5748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 538.519046][ T36] audit: type=1400 audit(2000000001.838:48339): avc: denied { write } for pid=18412 comm="syz.3.5748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 538.550330][ T36] audit: type=1400 audit(2000000001.838:48340): avc: denied { write } for pid=18412 comm="syz.3.5748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 538.570133][ T36] audit: type=1400 audit(2000000001.838:48341): avc: denied { write } for pid=18412 comm="syz.3.5748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 538.589716][ T36] audit: type=1400 audit(2000000001.904:48342): avc: denied { mounton } for pid=18415 comm="syz.3.5749" path="/272/file0" dev="tmpfs" ino=1505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 538.626124][ T36] audit: type=1400 audit(2000000001.913:48343): avc: denied { create } for pid=18415 comm="syz.3.5749" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 539.309125][T18438] fuse: Bad value for 'rootmode' [ 539.369192][T18448] overlayfs: failed to clone lowerpath [ 539.388728][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5760'. [ 539.640124][ T455] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 539.802346][ T455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.813387][ T455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.823245][ T455] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 539.836282][ T455] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 539.845619][ T455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.854876][ T455] usb 6-1: config 0 descriptor?? [ 540.292949][ T455] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 540.303337][ T455] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 540.310927][ T455] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 540.329242][ T455] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 540.342430][ T455] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 540.351428][ T455] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 540.359449][ T455] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 540.373760][ T455] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 540.382703][ T455] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 540.390288][ T455] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 540.397917][ T455] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 540.405631][ T455] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 540.413150][ T455] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 540.421349][ T455] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 540.428876][ T455] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 540.436448][ T455] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 540.447148][ T455] plantronics 0003:047F:FFFF.004D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 540.568693][ T394] usb 6-1: USB disconnect, device number 52 [ 541.145423][T18477] SELinux: security_context_str_to_sid () failed with errno=-22 [ 542.234566][T18498] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5775'. [ 542.432517][T18514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 542.432546][T18514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:45 [ 543.595512][T18551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:374 [ 543.723063][ T36] kauditd_printk_skb: 485 callbacks suppressed [ 543.723084][ T36] audit: type=1400 audit(2000000006.745:48829): avc: denied { create } for pid=18563 comm="syz.8.5798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 543.761564][ T36] audit: type=1400 audit(2000000006.783:48830): avc: denied { read } for pid=18564 comm="syz.5.5797" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 543.808959][ T36] audit: type=1400 audit(2000000006.783:48831): avc: denied { read open } for pid=18564 comm="syz.5.5797" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 543.892964][ T36] audit: type=1400 audit(2000000006.783:48832): avc: denied { ioctl } for pid=18564 comm="syz.5.5797" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 543.928584][ T36] audit: type=1400 audit(2000000006.801:48833): avc: denied { create } for pid=18563 comm="syz.8.5798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 543.999390][ T36] audit: type=1400 audit(2000000006.801:48834): avc: denied { write } for pid=18563 comm="syz.8.5798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 544.016878][T18583] rust_binder: Write failure EFAULT in pid:383 [ 544.028433][T18585] audit: audit_backlog=65 > audit_backlog_limit=64 [ 544.043835][ T36] audit: type=1400 audit(2000000006.801:48835): avc: denied { read } for pid=18563 comm="syz.8.5798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 544.057343][T16264] audit: audit_backlog=65 > audit_backlog_limit=64 [ 544.071426][ T36] audit: type=1400 audit(2000000006.801:48836): avc: denied { read } for pid=18563 comm="syz.8.5798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 544.086450][T18587] fuseblk: Bad value for 'fd' [ 544.171691][T18591] rust_binder: 385: no such ref 0 [ 544.176855][T18591] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 544.212626][T18591] rust_binder: 385: no such ref 2 [ 544.231215][T18601] rust_binder: 385: no such ref 0 [ 544.244675][T18601] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 544.251766][T18601] rust_binder: 385: no such ref 2 [ 544.336644][T18608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 544.336675][T18608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:388 [ 544.951597][T18653] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5826'. [ 545.095419][T18657] ./cgroup: Can't lookup blockdev [ 545.491715][ T31] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 545.651574][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 545.658946][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.669923][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.679780][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 545.692589][ T31] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 545.701741][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.711156][ T31] usb 6-1: config 0 descriptor?? [ 545.896561][T18686] Invalid ELF header type: 0 != 1 [ 545.903291][T18686] Invalid ELF header type: 2 != 1 [ 545.909925][T18686] Invalid ELF header type: 2 != 1 [ 545.919211][T18686] Invalid ELF header type: 2 != 1 [ 546.019741][T18696] netlink: 'syz.8.5842': attribute type 16 has an invalid length. [ 546.028706][T18696] netlink: 'syz.8.5842': attribute type 16 has an invalid length. [ 546.152709][ T31] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0 [ 546.160087][ T31] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0 [ 546.168115][ T31] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0 [ 546.175515][ T31] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0 [ 546.182908][ T31] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0 [ 546.190289][ T31] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0 [ 546.197726][ T31] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0 [ 546.204978][ T31] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0 [ 546.212231][ T31] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0 [ 546.219575][ T31] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0 [ 546.228404][ T31] microsoft 0003:045E:07DA.004E: No inputs registered, leaving [ 546.237268][ T31] microsoft 0003:045E:07DA.004E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 546.248705][ T31] microsoft 0003:045E:07DA.004E: no inputs found [ 546.255038][ T31] microsoft 0003:045E:07DA.004E: could not initialize ff, continuing anyway [ 546.377079][ T31] usb 6-1: USB disconnect, device number 53 [ 546.949004][T18709] fuse: Invalid gid '00000000000037777777777' [ 547.004428][T18714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 548.013439][T18730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=18730 comm=syz.5.5855 [ 548.250457][T18747] /dev/rnullb0: Can't lookup blockdev [ 548.514569][T18754] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 548.518346][T18755] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 548.526082][T18755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 548.534869][T18755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:416 [ 548.638054][T18758] loop2: detected capacity change from 0 to 8388607 [ 548.831287][T18762] tipc: Started in network mode [ 548.841834][T18762] tipc: Node identity 4, cluster identity 4711 [ 548.854969][T18762] tipc: Node number set to 4 [ 549.062644][ T36] kauditd_printk_skb: 649 callbacks suppressed [ 549.062660][ T36] audit: type=1400 audit(2000000011.755:49480): avc: denied { name_bind } for pid=18764 comm="syz.5.5867" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 549.094419][T18767] audit: audit_backlog=65 > audit_backlog_limit=64 [ 549.101128][T18767] audit: audit_lost=72 audit_rate_limit=0 audit_backlog_limit=64 [ 549.103981][ T36] audit: type=1400 audit(2000000011.755:49481): avc: denied { name_bind } for pid=18764 comm="syz.5.5867" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 549.109101][T18767] audit: backlog limit exceeded [ 549.131499][ T36] audit: type=1400 audit(2000000011.755:49482): avc: denied { name_bind } for pid=18764 comm="syz.5.5867" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 549.148291][T17957] audit: audit_backlog=65 > audit_backlog_limit=64 [ 549.159476][ T36] audit: type=1400 audit(2000000011.755:49483): avc: denied { name_bind } for pid=18764 comm="syz.5.5867" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 549.164273][T17957] audit: audit_lost=73 audit_rate_limit=0 audit_backlog_limit=64 [ 549.186575][ T36] audit: type=1400 audit(2000000011.755:49484): avc: denied { name_bind } for pid=18764 comm="syz.5.5867" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 549.324318][T18779] x_tables: unsorted underflow at hook 4 [ 549.325901][T18780] x_tables: unsorted underflow at hook 4 [ 550.248345][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5884'. [ 550.268198][T18822] rust_binder: Write failure EINVAL in pid:119 [ 550.268497][T18822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 550.513818][T18838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5892'. [ 550.671824][ T9] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 550.833563][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 550.844490][ T9] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 550.853634][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.863168][ T9] usb 6-1: config 0 descriptor?? [ 550.875543][T18831] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 551.110068][ T9] hid-generic 0003:04F3:0755.004F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 551.319667][ T9] usb 6-1: USB disconnect, device number 54 [ 551.497368][T18855] netlink: 'syz.3.5896': attribute type 2 has an invalid length. [ 551.992061][T18887] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 551.999529][T18887] rust_binder: Write failure EINVAL in pid:130 [ 552.052545][T18894] binder: Bad value for 'defcontext' [ 552.084591][T18895] overlayfs: failed to clone lowerpath [ 552.611357][T18941] rust_binder: Write failure EFAULT in pid:143 [ 552.677653][T18946] can0: slcan on ptm0. [ 552.742158][T18943] can0 (unregistered): slcan off ptm0. [ 552.763218][T18949] netlink: 'syz.3.5927': attribute type 4 has an invalid length. [ 552.792618][T18949] netlink: 'syz.3.5927': attribute type 5 has an invalid length. [ 552.802546][T18949] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.5927'. [ 552.924428][T18964] netlink: 'syz.5.5932': attribute type 4 has an invalid length. [ 552.943675][T18964] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.5932'. [ 553.056860][T18974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.114336][T18974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.396331][T18987] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 553.400503][T18987] rust_binder: Error in use_page_slow: ESRCH [ 553.407118][T18987] rust_binder: use_range failure ESRCH [ 553.414136][T18987] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 553.419825][T18987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 553.429148][T18987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:166 [ 553.945568][T19004] rust_binder: Write failure EFAULT in pid:177 [ 554.285111][ T64] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 554.456154][ T36] kauditd_printk_skb: 772 callbacks suppressed [ 554.456168][ T36] audit: type=1400 audit(2000000016.812:50249): avc: denied { ioctl } for pid=19012 comm="syz.5.5948" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 554.457979][ T64] usb 6-1: config 1 has an invalid interface number: 253 but max is 1 [ 554.462413][ T36] audit: type=1400 audit(2000000016.812:50250): avc: denied { ioctl } for pid=19012 comm="syz.5.5948" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 554.487930][ T64] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.497032][ T36] audit: type=1400 audit(2000000016.812:50251): avc: denied { ioctl } for pid=19012 comm="syz.5.5948" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 554.521187][ T64] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 554.531840][ T36] audit: type=1400 audit(2000000016.812:50252): avc: denied { ioctl } for pid=19012 comm="syz.5.5948" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 554.556190][ T64] usb 6-1: config 1 has no interface number 2 [ 554.565821][ T36] audit: type=1400 audit(2000000016.812:50253): avc: denied { ioctl } for pid=19012 comm="syz.5.5948" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 554.590220][ T64] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.597126][ T36] audit: type=1400 audit(2000000016.850:50254): avc: denied { ioctl } for pid=19012 comm="syz.5.5948" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 554.621505][ T64] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 554.667684][ T64] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 554.677432][ T64] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.690210][ T64] usb 6-1: config 1 interface 1 has no altsetting 0 [ 554.697328][ T36] audit: type=1400 audit(2000000017.037:50255): avc: denied { ioctl } for pid=19012 comm="syz.5.5948" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 554.699720][ T64] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 554.722916][ T36] audit: type=1400 audit(2000000017.037:50256): avc: denied { ioctl } for pid=19012 comm="syz.5.5948" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 554.733580][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.757423][ T36] audit: type=1400 audit(2000000017.037:50257): avc: denied { ioctl } for pid=19012 comm="syz.5.5948" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 554.766055][ T64] usb 6-1: Product: syz [ 554.791194][ T36] audit: type=1400 audit(2000000017.037:50258): avc: denied { ioctl } for pid=19012 comm="syz.5.5948" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 554.794452][ T64] usb 6-1: Manufacturer: syz [ 554.824004][ T64] usb 6-1: SerialNumber: syz [ 554.832857][ T64] cdc_ncm 6-1:1.253: CDC Union missing and no IAD found [ 554.840114][ T64] cdc_ncm 6-1:1.253: bind() failure [ 555.114933][T19066] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 555.124307][T19066] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 557.224774][ T31] usb 6-1: USB disconnect, device number 55 [ 557.270900][T19107] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 557.274538][T19107] rust_binder: Error in use_page_slow: ESRCH [ 557.290903][T19107] rust_binder: use_range failure ESRCH [ 557.296980][T19107] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 557.302953][T19107] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 557.310966][T19107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:183 [ 557.366919][T19112] rust_binder: 188: no such ref 2 [ 557.593945][ T2991] Bluetooth: hci0: Frame reassembly failed (-84) [ 557.679734][T19129] binder: Unknown parameter 'obj_role' [ 557.731617][T19133] overlayfs: failed to clone upperpath [ 557.845136][ T31] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 558.026323][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 558.033467][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.043565][ T31] usb 6-1: config 0 has no interfaces? [ 558.048112][T19160] rust_binder: Error while translating object. [ 558.049104][T19160] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 558.050497][ T31] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 558.055417][T19160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:491 [ 558.065925][ T31] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 558.091878][ T31] usb 6-1: Manufacturer: syz [ 558.098048][ T31] usb 6-1: config 0 descriptor?? [ 558.142863][T19164] overlayfs: failed to clone upperpath [ 558.177349][T19167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 558.178064][T19167] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 558.193897][T19167] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 558.204419][T19167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:496 [ 558.288900][T19171] netlink: 'syz.6.6000': attribute type 33 has an invalid length. [ 558.296744][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6000'. [ 558.359750][T19176] cgroup: No subsys list or none specified [ 558.428762][T19176] rust_binder: Error while translating object. [ 558.428808][T19176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 558.435006][T19176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:500 [ 558.624325][T19196] overlayfs: failed to clone upperpath [ 558.636553][T19189] overlayfs: failed to clone upperpath [ 558.778679][T19207] cgroup: name respecified [ 558.843432][T19208] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=19208 comm=syz.6.6010 [ 558.961842][T19216] tipc: Bearer : already 2 bearers with priority 10 [ 558.969665][T19216] tipc: Bearer : trying with adjusted priority [ 558.978233][T19216] tipc: Enabling of bearer rejected, failed to enable media [ 559.324674][T19228] overlayfs: failed to clone upperpath [ 559.582647][T19256] overlayfs: failed to clone upperpath [ 559.774471][ T341] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 559.774841][ T337] Bluetooth: hci0: command 0x1003 tx timeout [ 559.796298][ T36] kauditd_printk_skb: 479 callbacks suppressed [ 559.796323][ T36] audit: type=1400 audit(2000000021.822:50738): avc: denied { read } for pid=19274 comm="syz.8.6033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.830146][ T36] audit: type=1400 audit(2000000021.822:50739): avc: denied { read } for pid=19274 comm="syz.8.6033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.873875][ T36] audit: type=1400 audit(2000000021.897:50740): avc: denied { create } for pid=19284 comm="syz.8.6036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 559.893812][ T36] audit: type=1400 audit(2000000021.897:50741): avc: denied { mounton } for pid=19283 comm="syz.3.6037" path="/353/file0" dev="tmpfs" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 559.939984][T19291] /dev/rnullb0: Can't lookup blockdev [ 559.941266][ T36] audit: type=1400 audit(2000000021.953:50742): avc: denied { mounton } for pid=19290 comm="syz.8.6039" path="/syzcgroup/unified/syz8" dev="tmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 559.987510][ T36] audit: type=1400 audit(2000000021.991:50743): avc: denied { create } for pid=19292 comm="syz.3.6040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 560.009670][ T36] audit: type=1400 audit(2000000021.991:50744): avc: denied { sys_admin } for pid=19292 comm="syz.3.6040" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 560.031585][ T36] audit: type=1400 audit(2000000021.991:50745): avc: denied { sys_admin } for pid=19292 comm="syz.3.6040" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 560.053397][ T36] audit: type=1400 audit(2000000021.991:50746): avc: denied { sys_admin } for pid=19292 comm="syz.3.6040" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 560.078977][ T36] audit: type=1400 audit(2000000021.991:50747): avc: denied { sys_admin } for pid=19292 comm="syz.3.6040" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 560.997812][ T31] usb 6-1: USB disconnect, device number 56 [ 561.087701][T19330] tipc: Started in network mode [ 561.092792][T19330] tipc: Node identity ac14142f, cluster identity 4711 [ 561.109354][T19330] tipc: New replicast peer: 0.0.0.0 [ 561.114811][T19330] tipc: Enabled bearer , priority 10 [ 561.330498][T19349] netlink: 'syz.5.6060': attribute type 19 has an invalid length. [ 561.394050][T19347] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.401285][T19347] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.408628][T19347] bridge_slave_0: entered allmulticast mode [ 561.414946][T19347] bridge_slave_0: entered promiscuous mode [ 561.422093][T19347] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.429171][T19347] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.436338][T19347] bridge_slave_1: entered allmulticast mode [ 561.442854][T19347] bridge_slave_1: entered promiscuous mode [ 561.551822][T19347] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.558879][T19347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.566165][T19347] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.573183][T19347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.614228][ T3006] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.621819][ T3006] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.634426][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.641509][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.652072][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.659123][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.719010][T19347] veth0_vlan: entered promiscuous mode [ 561.746195][ T455] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 561.750185][T19347] veth1_macvtap: entered promiscuous mode [ 561.831719][T19365] usb usb8: usbfs: process 19365 (syz.8.6057) did not claim interface 0 before use [ 561.848607][T19365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 561.848635][T19365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:2 [ 561.908885][ T455] usb 6-1: config 7 descriptor has 1 excess byte, ignoring [ 561.925576][ T455] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 561.937816][ T455] usb 6-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 561.946868][ T455] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.954905][ T455] usb 6-1: Product: syz [ 561.959138][ T455] usb 6-1: Manufacturer: syz [ 561.963896][ T455] usb 6-1: SerialNumber: syz [ 561.975376][ T455] rndis_host 6-1:7.0: skipping garbage [ 561.981833][ T455] usb 6-1: bad CDC descriptors [ 562.196805][ T455] usb 6-1: USB disconnect, device number 57 [ 562.311131][ T387] tipc: Node number set to 2886997039 [ 562.503835][ T37] INFO: task syz.1.4693:15120 blocked for more than 122 seconds. [ 562.511705][ T37] Not tainted syzkaller #0 [ 562.517294][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.526453][ T37] task:syz.1.4693 state:D stack:0 pid:15120 tgid:15119 ppid:13794 flags:0x00004004 [ 562.537449][ T37] Call Trace: [ 562.540732][ T37] [ 562.543653][ T37] __schedule+0x1322/0x1df0 [ 562.548791][ T37] ? __sched_text_start+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 562.553861][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 562.559990][ T37] ? mutex_unlock+0x8b/0x240 [ 562.567954][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 562.575121][ T37] schedule+0xc6/0x240 [ 562.579952][ T37] super_lock+0x150/0x300 [ 562.585029][ T37] ? user_get_super+0x350/0x350 [ 562.590501][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 562.596059][ T37] ? __kasan_check_write+0x18/0x20 [ 562.601250][ T37] iterate_supers+0x8a/0x560 [ 562.605853][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 562.611425][ T37] ksys_sync+0x95/0x160 [ 562.615589][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 562.620373][ T37] ? switch_fpu_return+0x12/0x20 [ 562.625313][ T37] __ia32_sys_sync+0x12/0x20 [ 562.629936][ T37] x64_sys_call+0x2a58/0x2ee0 [ 562.634643][ T37] do_syscall_64+0x58/0xf0 [ 562.639077][ T37] ? clear_bhb_loop+0x50/0xa0 [ 562.643868][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 562.649760][ T37] RIP: 0033:0x7f3f4ed8f6c9 [ 562.654191][ T37] RSP: 002b:00007f3f4fbcc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 562.662601][ T37] RAX: ffffffffffffffda RBX: 00007f3f4efe5fa0 RCX: 00007f3f4ed8f6c9 [ 562.670595][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 562.678636][ T37] RBP: 00007f3f4efe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 562.687138][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.695128][ T37] R13: 00007f3f4efe6038 R14: 00007f3f4efe5fa0 R15: 00007ffff940acc8 [ 562.703103][ T37] [ 562.717950][ T37] NMI backtrace for cpu 0 [ 562.717966][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 562.717990][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 562.718001][ T37] Call Trace: [ 562.718007][ T37] [ 562.718014][ T37] __dump_stack+0x21/0x30 [ 562.718047][ T37] dump_stack_lvl+0x10c/0x190 [ 562.718069][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 562.718091][ T37] dump_stack+0x19/0x20 [ 562.718111][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 562.718133][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 562.718155][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 562.718175][ T37] ? sched_show_task+0x379/0x560 [ 562.718198][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 562.718218][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 562.718239][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 562.718260][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 562.718282][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 562.718303][ T37] watchdog+0xd8f/0xed0 [ 562.718327][ T37] ? __cfi_watchdog+0x10/0x10 [ 562.718349][ T37] ? __kasan_check_read+0x15/0x20 [ 562.718374][ T37] ? __kthread_parkme+0x138/0x180 [ 562.718390][ T37] ? schedule+0xc6/0x240 [ 562.718414][ T37] kthread+0x2ca/0x370 [ 562.718433][ T37] ? __cfi_watchdog+0x10/0x10 [ 562.718455][ T37] ? __cfi_kthread+0x10/0x10 [ 562.718473][ T37] ret_from_fork+0x67/0xa0 [ 562.718497][ T37] ? __cfi_kthread+0x10/0x10 [ 562.718516][ T37] ret_from_fork_asm+0x1a/0x30 [ 562.718542][ T37] [ 562.718549][ T37] Sending NMI from CPU 0 to CPUs 1: [ 562.877549][ C1] NMI backtrace for cpu 1 [ 562.877562][ C1] CPU: 1 UID: 0 PID: 18 Comm: rcu_preempt Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 562.877581][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 562.877589][ C1] RIP: 0010:x2apic_send_IPI+0x76/0xe0 [ 562.877608][ C1] Code: 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 44 41 8b 16 0f ae f0 0f ae e8 83 fb 02 b8 00 04 00 00 0f 45 c3 b9 30 08 00 00 0f 30 <66> 90 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 89 fe 41 89 fe 48 [ 562.877620][ C1] RSP: 0018:ffffc90000127760 EFLAGS: 00000006 [ 562.877633][ C1] RAX: 00000000000000fb RBX: 00000000000000fb RCX: 0000000000000830 [ 562.877642][ C1] RDX: 0000000000000000 RSI: 00000000000000fb RDI: 0000000000000000 [ 562.877651][ C1] RBP: ffffc90000127780 R08: ffffc90000127727 R09: 1ffff92000024ee4 [ 562.877661][ C1] R10: 0000000000000000 R11: ffffffff81421720 R12: dffffc0000000000 [ 562.877671][ C1] R13: dffffc0000000000 R14: ffff8881f6e21168 R15: ffffffff86f6cb80 [ 562.877682][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 562.877694][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.877703][ C1] CR2: 00005618c490cb98 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 562.877717][ C1] Call Trace: [ 562.877722][ C1] [ 562.877728][ C1] ? irq_work_queue_on+0x150/0x210 [ 562.877743][ C1] native_send_call_func_single_ipi+0x12/0x20 [ 562.877759][ C1] __smp_call_single_queue+0xd5/0x390 [ 562.877782][ C1] ? irq_work_queue_on+0x145/0x210 [ 562.877795][ C1] irq_work_queue_on+0x150/0x210 [ 562.877808][ C1] tell_cpu_to_push+0x5ac/0x650 [ 562.877826][ C1] ? pull_rt_task+0x120/0x120 [ 562.877842][ C1] balance_rt+0x29b/0x440 [ 562.877857][ C1] ? __cfi_balance_rt+0x10/0x10 [ 562.877871][ C1] ? _raw_spin_unlock+0x45/0x60 [ 562.877888][ C1] ? __switch_to_asm+0x3d/0x70 [ 562.877908][ C1] __schedule+0x966/0x1df0 [ 562.877926][ C1] ? __sched_text_start+0x10/0x10 [ 562.877944][ C1] ? __kasan_check_write+0x18/0x20 [ 562.877963][ C1] ? enqueue_timer+0x1a4/0x480 [ 562.877977][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 562.877994][ C1] ? __mod_timer+0x8ba/0xd60 [ 562.878012][ C1] schedule+0xc6/0x240 [ 562.878029][ C1] schedule_timeout+0x139/0x3a0 [ 562.878044][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 562.878059][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 562.878075][ C1] ? __cfi_process_timeout+0x10/0x10 [ 562.878087][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 562.878104][ C1] ? prepare_to_swait_event+0x30d/0x330 [ 562.878117][ C1] rcu_gp_fqs_loop+0x2f2/0x12f0 [ 562.878135][ C1] ? __cfi_rcu_watching_snap_recheck+0x10/0x10 [ 562.878152][ C1] ? rcu_gp_init+0x1020/0x1020 [ 562.878168][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 562.878185][ C1] ? finish_swait+0x182/0x1c0 [ 562.878197][ C1] rcu_gp_kthread+0x99/0x380 [ 562.878213][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 562.878229][ C1] ? __kasan_check_read+0x15/0x20 [ 562.878247][ C1] ? __kthread_parkme+0x138/0x180 [ 562.878259][ C1] ? schedule+0xc6/0x240 [ 562.878277][ C1] kthread+0x2ca/0x370 [ 562.878289][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 562.878300][ C1] ? __cfi_kthread+0x10/0x10 [ 562.878309][ C1] ret_from_fork+0x67/0xa0 [ 562.878321][ C1] ? __cfi_kthread+0x10/0x10 [ 562.878331][ C1] ret_from_fork_asm+0x1a/0x30 [ 562.878344][ C1] [ 563.294078][ T2991] bridge_slave_1: left allmulticast mode [ 563.299775][ T2991] bridge_slave_1: left promiscuous mode [ 563.305472][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.312884][ T2991] bridge_slave_0: left allmulticast mode [ 563.318887][ T2991] bridge_slave_0: left promiscuous mode [ 563.324608][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.432871][ T2991] veth1_macvtap: left promiscuous mode [ 563.438379][ T2991] veth0_vlan: left promiscuous mode [ 563.762636][ T2991] bridge_slave_1: left allmulticast mode [ 563.768317][ T2991] bridge_slave_1: left promiscuous mode [ 563.774085][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.781537][ T2991] bridge_slave_0: left allmulticast mode [ 563.787326][ T2991] bridge_slave_0: left promiscuous mode [ 563.792990][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.801168][ T2991] bridge_slave_1: left allmulticast mode [ 563.807044][ T2991] bridge_slave_1: left promiscuous mode [ 563.813260][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.821646][ T2991] bridge_slave_0: left allmulticast mode [ 563.827343][ T2991] bridge_slave_0: left promiscuous mode [ 563.832939][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.029237][ T2991] tipc: Left network mode [ 564.033687][ T2991] tipc: Left network mode [ 564.039656][ T2991] veth1_macvtap: left promiscuous mode [ 564.045140][ T2991] veth0_vlan: left promiscuous mode [ 564.050961][ T2991] veth1_macvtap: left promiscuous mode [ 564.056461][ T2991] veth0_vlan: left promiscuous mode