last executing test programs: 4m37.935127388s ago: executing program 32 (id=184): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0xf) writev(r0, &(0x7f0000000100)=[{&(0x7f00000008c0)="ac", 0x1}], 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x70, 0x0, &(0x7f0000000280)=[@clear_death={0x400c630f, 0x3}, @dead_binder_done, @increfs={0x40046304, 0x3}, @transaction_sg={0x40486311, {0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/200, 0xc8, 0x0, 0x7}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/99, 0x63, 0x1, 0x17}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 4m16.601390184s ago: executing program 33 (id=484): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x1c, 0x80800) r1 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r1, &(0x7f00000000c0)) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r1}, 0x80000001, 0x752, 0x7}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x1, 'veth0_to_team\x00', {}, 0x3}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 3m39.168350491s ago: executing program 0 (id=1067): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 32) r1 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 32) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@mcast2}, 0x14) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000280)) (async, rerun: 32) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 3m39.100780328s ago: executing program 0 (id=1068): r0 = memfd_secret(0x80000) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000080)=ANY=[@ANYBLOB="5e76a9d40d870b7262cf74cc7311dcef740792aabab397ff0bac2a8d0f0279d3569cc711e9b948f5ae1ec030c2c09771f7da283211636a3b68834bb48d29187245961939e2f90d9410c3e1baae350e3af6dffc97ea7b832a231710139d344d"], 0x13, 0x3) 3m39.097005608s ago: executing program 0 (id=1069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "145aa359352e4de0", "e8a1056a7c356ba2b862ef0800000087", "28bc90f4", "d80f59276094db31"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000100081000000000000800000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) write$tun(r1, &(0x7f0000000300)={@val={0x0, 0x88a2}, @void, @eth={@random="39001e424dd4", @broadcast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @empty, @private1, @multicast, @rand_addr=' \x01\x00'}}}}}, 0x46) 3m39.038090784s ago: executing program 0 (id=1070): socket$inet6(0xa, 0x2, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x10000, @empty}, 0x1c) mknodat(0xffffffffffffffff, 0x0, 0x1000, 0x10008) pipe2$9p(0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) umount2(0x0, 0x1) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, 0x0) lchown(0x0, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x40, &(0x7f0000000dc0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) sendmmsg(r2, 0x0, 0x0, 0x9200000004000014) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGREP(r4, 0x80084503, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 3m37.584013766s ago: executing program 0 (id=1090): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read(r0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) read$FUSE(r3, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r3, &(0x7f0000000000)={0x30, 0x0, r4, [{0x5, 0x2, 0x8, 0x5, 'overlay\x00'}]}, 0x30) unshare(0x30000000) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}, {@version_L}], [], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xac, r8, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f86ff13f27"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "2961ec456ea75d89c353694638"}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f27c95e15d7b423561b358dc59"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @NL80211_ATTR_MAC={0xa, 0x6, @random="239c7c9ec97d"}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x80) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000009b000040"]) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) sendfile(r6, r5, 0x0, 0xffffffff) 3m37.566468888s ago: executing program 0 (id=1091): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x2004e000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000080000000000000001000000003300000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/176], 0xf8}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r4, 0xf, &(0x7f0000000140)) (async, rerun: 32) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)) (async, rerun: 32) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) r6 = geteuid() (async) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000040)={0x9, 0x9, 0x4}) (async) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000400, r6, &(0x7f0000000180)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/209, 0xd1, 0x2, 0x23}, @fda={0x66646185, 0x3, 0x2, 0xf}, @fda={0x66646185, 0x4, 0x1, 0x35}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 3m37.533016921s ago: executing program 34 (id=1091): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x2004e000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000080000000000000001000000003300000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/176], 0xf8}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r4, 0xf, &(0x7f0000000140)) (async, rerun: 32) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)) (async, rerun: 32) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) r6 = geteuid() (async) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000040)={0x9, 0x9, 0x4}) (async) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000400, r6, &(0x7f0000000180)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/209, 0xd1, 0x2, 0x23}, @fda={0x66646185, 0x3, 0x2, 0xf}, @fda={0x66646185, 0x4, 0x1, 0x35}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 2m3.957015083s ago: executing program 4 (id=2254): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc}) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@noxattr}, {@version_L}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@noxattr}, {@version_L}], [], 0x6b}}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@uuid_on}]}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setrlimit(0x7, &(0x7f0000000400)) (async) setrlimit(0x7, &(0x7f0000000400)) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setresuid(0xee01, 0xee01, 0x0) (async) setresuid(0xee01, 0xee01, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) faccessat(0xffffffffffffffff, 0x0, 0x3) sendfile(r5, r3, 0x0, 0xffffffff) 2m3.884033471s ago: executing program 4 (id=2255): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfffffffffffff000}) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x5) (async) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@broadcast, @private=0xa010102, @multicast1}, 0xc) fchdir(r4) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x300fff2) (async) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000002200)=0xf1eb) (async, rerun: 32) close_range(0xffffffffffffffff, r5, 0x2) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x59, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2m3.827754876s ago: executing program 4 (id=2256): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000025000100000000000000000008000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x1000007fd) 2m3.826624416s ago: executing program 4 (id=2257): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @request_death], 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x7, 0x0, 0x4, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x0, 0x7f}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092d917d39ed975", "98999999", "50f641306280c4e9"}, 0x28) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x49}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000240)={r2, 0x1, 0x0, 0x4000}) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000340)={'tunl0\x00', r3, 0x20, 0x7800, 0x4, 0x1ff, {{0x22, 0x4, 0x0, 0xc, 0x88, 0x65, 0x0, 0xf, 0x2f, 0x0, @multicast2, @private=0xa010102, {[@timestamp_prespec={0x44, 0x14, 0xda, 0x3, 0x1, [{@multicast2}, {@rand_addr=0x64010100, 0xe}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @rr={0x7, 0x1b, 0x31, [@multicast1, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local]}, @end, @timestamp_prespec={0x44, 0x1c, 0xbc, 0x3, 0x7, [{@local, 0x63}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x8000}, {@broadcast, 0xff}]}, @end, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x1f, [@dev={0xac, 0x14, 0x14, 0x28}, @multicast1, @multicast2, @local, @broadcast]}]}}}}}) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000002c0)=0x4) 2m3.811127798s ago: executing program 4 (id=2258): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='tmpfs\x00', 0x380000, 0x0) 2m3.800005929s ago: executing program 4 (id=2259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (rerun: 32) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x564b143a, 0x83, 0xfffb, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000004}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000400)={0xffffffff, 0x4, 0x8, 0x7, 0x80000001, 0x3}) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfe20d7130d5148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf867323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cf07794776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820809ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6680200000000000000e05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f921ebc17ea8aaf13902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90caf1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6bf52f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2058, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x78, 0x0, 0x80, {0x7, 0x3, 0x0, {0x5, 0x4, 0xfffffffffffffff8, 0x0, 0x5, 0xffffffff, 0xfffffffb, 0x0, 0x40, 0xc000, 0x3, 0x0, r4, 0x8, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (rerun: 64) write$FUSE_OPEN(r5, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (rerun: 32) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0xc, 0x81}, 0x2404c840) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m48.407923741s ago: executing program 35 (id=2259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (rerun: 32) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x564b143a, 0x83, 0xfffb, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000004}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000400)={0xffffffff, 0x4, 0x8, 0x7, 0x80000001, 0x3}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2058, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x78, 0x0, 0x80, {0x7, 0x3, 0x0, {0x5, 0x4, 0xfffffffffffffff8, 0x0, 0x5, 0xffffffff, 0xfffffffb, 0x0, 0x40, 0xc000, 0x3, 0x0, r4, 0x8, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (rerun: 64) write$FUSE_OPEN(r5, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (rerun: 32) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0xc, 0x81}, 0x2404c840) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m46.469921531s ago: executing program 6 (id=2422): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="024c25b4ed6cc2b4fe05490604000000000000000000000002000100ffffff7da1b7389fdbf7a6aebb611758bbb2fd51ec66a3bf3fc9"], 0x20}}, 0x84) getsockopt$inet6_int(r1, 0x29, 0x7, 0x0, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x34, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffeb4, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0xa9}}, 0x400}], 0x0, 0x0, 0x0}) 1m46.396478639s ago: executing program 6 (id=2423): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) (async) connect$can_bcm(r3, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x48}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r8, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x24b12012, 0xed, 0x1005, 0x0, 0x3}}, 0x50) (async) write$FUSE_INIT(r8, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x24b12012, 0xed, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap}]}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1m46.308711377s ago: executing program 6 (id=2424): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000000)={0x100000, 0x1000f7, 0x40000}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x12b8b000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) iopl(0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m46.294685179s ago: executing program 6 (id=2425): unshare(0x62040200) (async) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (rerun: 64) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) (async, rerun: 32) close_range(r3, 0xffffffffffffffff, 0x0) (rerun: 32) 1m46.170920081s ago: executing program 6 (id=2427): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x12b8b000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x3, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0xc79a, 0x2, 0xe, 0x8, 0x8, 0x4, 0x5, 0xe1, 0xed, 0x15, 0x9b, 0xe, 0x1}, {0x2, 0x101, 0x8f, 0xd9, 0x0, 0x6, 0x8, 0x8, 0x22, 0x38, 0xc, 0x4, 0x96ee}, {0xffff, 0x7, 0x2, 0x7, 0xf6, 0x4, 0x0, 0x5, 0xbf, 0x0, 0xb, 0x8, 0x1}], 0x3}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) getdents(r2, &(0x7f0000000080)=""/127, 0x7f) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)={0xaa24}) fadvise64(r0, 0x3, 0x0, 0x4) 1m46.170379971s ago: executing program 6 (id=2429): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="3163c2bfd5ec0259e09b41acfdfe3a406f1b20d78ed9a653b69ea2228b7cc97fb4291a5acbb774ee2e65899366f0e3f161f1834736a0687b85e3d3a841ea02f6db4f8b6597bb1e5bc1c3711db73a3dcdd4cda506fe76c4da39d60021bb58a3a1d0e17742636314f2c56b4acf15f49c2e3636d6f33dbe10286edfe046e4df4f4aa646c581df83f5d8", 0x88}], 0x1}, 0x4008000) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) (async) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000480)={0x0, 0xea60}, 0x10) accept(r1, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000009cc0), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000009d80)={0x0, 0x0, &(0x7f0000009d40)={&(0x7f0000009d00)={0x14, r3, 0x701, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) write$tcp_mem(r5, &(0x7f0000000480)={0x7fffffff, 0x20, 0x0, 0x20, 0x3}, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) 1m31.124580259s ago: executing program 36 (id=2429): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="3163c2bfd5ec0259e09b41acfdfe3a406f1b20d78ed9a653b69ea2228b7cc97fb4291a5acbb774ee2e65899366f0e3f161f1834736a0687b85e3d3a841ea02f6db4f8b6597bb1e5bc1c3711db73a3dcdd4cda506fe76c4da39d60021bb58a3a1d0e17742636314f2c56b4acf15f49c2e3636d6f33dbe10286edfe046e4df4f4aa646c581df83f5d8", 0x88}], 0x1}, 0x4008000) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) (async) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000480)={0x0, 0xea60}, 0x10) accept(r1, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000009cc0), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000009d80)={0x0, 0x0, &(0x7f0000009d40)={&(0x7f0000009d00)={0x14, r3, 0x701, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) write$tcp_mem(r5, &(0x7f0000000480)={0x7fffffff, 0x20, 0x0, 0x20, 0x3}, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) 1m15.361327147s ago: executing program 2 (id=2691): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0c00, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='X\x00\x00\x00', 0x4}], 0x1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002200)={0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) readv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2) dup3(r0, r0, 0x80000) read$FUSE(r2, &(0x7f0000003400)={0x2020}, 0x2020) 1m12.203118038s ago: executing program 2 (id=2709): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) (async) r2 = socket$key(0xf, 0x3, 0x2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000001040)={0x2, 0x7, 0x0, 0x7, 0x10, 0x0, 0xfffffffe, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e20, 0x100, @loopback, 0x10001}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x910, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}]}, 0x80}}, 0x4000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xf, 0x32, 0xffffffffffffffff, 0x2ec37000) (async) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 1m12.201802078s ago: executing program 2 (id=2711): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0xa, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x41}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_COMMENT={0x6, 0x1a, '\\\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x30555530c89d554c}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000180)={'binder0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x2d8, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5355}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x280}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0c8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb21f05b1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "51fac9f5ed9f112aae3495f9f0613b45684d112cf37e69"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd03}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x41}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5c5098f5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x226}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x40010}, 0x801) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000085}, 0x40010) r4 = syz_usb_connect$cdc_ecm(0x1, 0x65, &(0x7f0000000800)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x1, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xa4, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "18e705"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x180000, 0x10, 0x4, 0xfb}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0x6, 0x44, 0x9, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0xaf}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x80, 0x8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6d, 0x6, 0x2}}}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x310, 0x2, 0x6, 0xd7, 0x9f, 0x5}, 0xdc, &(0x7f00000008c0)={0x5, 0xf, 0xdc, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x80, 0x1, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x9e, 0x5, 0xc, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc2, 0x5, 0x79, 0x1, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x0, 0xf, 0xad7}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x3, 0x780, 0x9, [0x3e80, 0xc000, 0x30]}, @generic={0x95, 0x10, 0xb, "1e70bd29e330a79341c95212911809672bf04144db53ea6d042090ed1e1020f8460a19a5589c278c7671478e09f8c040b2c110f10f7ee787e9f8e783eaa2ac54a0e674d6efb3a564423033c5c93d255b3b1e8b74532886b3787b1a28befccba29df2ac41411e6b65b3bbdde1c96b69e120ad23647a6c50bf738c5af0761fafadda33fb063292b16d6fc4da84dc795d094cf1"}]}, 0x8, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x406}}, {0x78, &(0x7f0000000ac0)=@string={0x78, 0x3, "83732daf55381df394ee4c5753e810da7bae429f64db5d3609d3449499e56fc51636633c8a532da15e54772ac2782e8f0d59fae9617188a0cdf08f9dc16b6b6c5d796b25630b63425714cee9be3f16594d82a66a4e84564d53dc8c4f410f95675e487d46adb6fa1eca4e396beeaa5d3f199a9b2804a5"}}, {0x50, &(0x7f0000000b40)=@string={0x50, 0x3, "a395f1f81e4ace79153aacf4ad92388777b1fc12d4bbc879529a82d5c81ec98db2fb008ffbe4fcca7e2f59b2ebfc0d62a96674a862e115a96727317d0961a98b1ab3f8856fe0d4f30cabbb0f4672"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_control_io(r4, &(0x7f0000000ec0)={0x2c, &(0x7f0000000cc0)={0x0, 0x8, 0xf9, {0xf9, 0xe, "f42b3d838d6f37cf179ae72f602076118bcc5b9648388c66deb662a36d5b5216d0ac7cf71a43f5e21a61e03279658ebd2e7b05040a1c43052765d15b6e85440b7e966e782b663fe92283c6a10881c10ad6efa3a7d67ec6f8000a4eb4326b276063b4b39b10288271c5fa02a22c95424b9021fb5d26c71ae8e57a61379ba35afa7bdfd68047b596f8cc316bdd36f0bbe96e0aefdc298fe2451723031214ecab61cc4127fd653964060419d708c27554ef3ccde2d2c9e2bf35984477e0f2693083f46e1436fcf562bb83768821496763c94ec97014e03d093da83dfb75722eb2ce5321bf4d3cfd7687b819165cffe41405f2c629eccb7d76"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, &(0x7f0000000e00)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xa, 0x81, 0xf, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x78, "616927f5b4c258bd3838ae5b95d53fc2"}]}}, &(0x7f0000000e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0xea, 0x5, "abbe17ad", "4a7e82de"}}, &(0x7f0000000e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x1, 0x9, 0x6, 0x6, 0xffff}}}, &(0x7f0000001380)={0x84, &(0x7f0000000f00)={0x0, 0x30, 0x8f, "54dde5dd43bed5d915df538b492fde3bf782139a2d453c9bac4d30a0baa4bd45b2116c0ed50dd254e2f4eef4d72671708534812d9bb7fba0103ae698cc7d74ae9dc56299d47f074abb68128844a3ca18dde76ac7ae118049e83a631aa8f7e7067c140f0d56b67350d9578ee0936880d664e4d5141ec1f9a0596174422f739e79c179bc76e0751b26855aaace94246f"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000001040)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000001080)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f00000010c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000001100)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000001140)={0x40, 0xb, 0x2, "ae66"}, &(0x7f0000001180)={0x40, 0xf, 0x2, 0xb}, &(0x7f00000011c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001200)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, &(0x7f0000001240)={0x40, 0x19, 0x2, "97b2"}, &(0x7f0000001280)={0x40, 0x1a, 0x2, 0xc3}, &(0x7f00000012c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001300)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000001340)={0x40, 0x21, 0x1, 0xe}}) r5 = syz_open_dev$hiddev(&(0x7f0000001440), 0xffff, 0x80) ioctl$HIDIOCGDEVINFO(r5, 0x801c4803, &(0x7f0000001480)=""/147) write$P9_RMKNOD(r0, &(0x7f0000001540)={0x14, 0x13, 0x1, {0x75, 0x4, 0x2}}, 0x14) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername$netlink(r6, &(0x7f0000001580), &(0x7f00000015c0)=0xc) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001640)=[@text16={0x10, &(0x7f0000001600)="9af6ff5100666536660f71d400660fd6f80f3564f32ef0082f660fc7369900ba2000ec66b96906000066b839d8000066ba000000000f300f15b80000d0b8fcff", 0x40}], 0x1, 0x0, &(0x7f0000001680)=[@cstype3={0x5, 0xa}], 0x1) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001700), r0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, r7, 0x10, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r8 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000001800)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x80, 0xc7, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xe, 0x7, 0x10}}, [{{0x9, 0x5, 0x82, 0x2, 0x1bf, 0x6, 0xe, 0x3a}}]}}}]}}]}}, &(0x7f0000001dc0)={0xa, &(0x7f0000001840)={0xa, 0x6, 0x300, 0x0, 0x8, 0x1, 0xff, 0x8}, 0x13, &(0x7f0000001880)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x3, 0x9, 0x7fff, 0x3}]}, 0xa, [{0x6c, &(0x7f00000018c0)=@string={0x6c, 0x3, "f0de4b9b8243f6bb39fdc499f365fea766905af35da838795ac823da2e03ff366b98089ec9f98edcf88de45cc039f3a8059cdf8e8d880d67d05a4f164d37af29f7bc32b03bca1d0277847e6d0b8f7f1650190ec06c2ba6ba71e6cc25826e848b0d33d9216843f4fa0f16"}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x427}}, {0x5, &(0x7f0000001980)=@string={0x5, 0x3, "02d38d"}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4e, &(0x7f0000001a00)=@string={0x4e, 0x3, "fc4b884e4c3f992affb2791a0e0f89c767cdadae99053acd19ba5624cc21bbf6fad5185a3cc2a8c25d8e4379e006cadfeaa0b51a8aa5878a258db628e079024f33316cc63254932d70d255b5"}}, {0xac, &(0x7f0000001a80)=@string={0xac, 0x3, "b8b0f8251028bc64925b1ba85204e3491b25d38fbbafad76ddbfd0388486419072e029de5c008a1f946ca68bf0e5e2615494562f1e5a4602003d0a4e9c3ac225d96aeeb1d7795420a0f4c39037a19d93e6a81d131cfea71cc68d2cb069c80984263abe63c022b1a9d3d6a2cbe888c5f72c5066945d2f059efb752c0c16f6622631706e86af59bc5f9b59fb95de707dbb0239de33f2adf5f879debba1e01bd01f76bca24e6c1363d7581e"}}, {0x8c, &(0x7f0000001b40)=@string={0x8c, 0x3, "e0b66579b461f3cf259ef3844fa07d4fd39180f0319c54764cf6c412d0d4d5c73b8575eb36654c2f9846c841c8647fc8fba97d437f39c98e6af47629a4eff44a303e9c092e1cf3e9f154432e3cbb93ce32cb0c8ae4f1b0515a612af6712b7d5b0194ccf5e3603e692fc4f1f2af108a5200825f75e0e340a72603519a0c86a485a6e028e3eabe8fb03003"}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x2c09}}, {0x98, &(0x7f0000001c40)=@string={0x98, 0x3, "d667eaa85fb18956fae7720f3ea4358c0c937fece42c89e11f436be5a34a9f2341eb040a7c82b20a1118de0ecade685ef80da652e71eb7a18966c377e3bea162db146f151f45a69740e34d362c2c831610bc0a08f3507799981d9588446f25229394d2919be66f52420196d0e41b078a0fc4411765a13fcfe602bc6e4cc388bc025842ee7bdc8d6e4ed465eeb4fffd893c23e2d71e93"}}, {0x94, &(0x7f0000001d00)=@string={0x94, 0x3, "3de0654651d68ff9f6d177d652b7af0dede7ee4c86b6b11da1a20c8265048c1fa45cc5f7abf29fbc30f080ee1920010c8fc4339c2e1695d830304a7b5914a4107f3b062268627aa47c667936497f47167c324549fa5878cf1ca5e96a83919513ed8d6f659180defd7563173a5691b5bf7c7d75202733709d993f3c8d225bacb000fcc87b5de58431a4a8a849bee5fcc8956f"}}]}) syz_usb_control_io$printer(r8, &(0x7f0000001f80)={0x14, &(0x7f0000001e80)={0x40, 0x21, 0x8b, {0x8b, 0xa, "514988d669a7dd07b223481557a859441335b90b32c95c2245e4a28e8088f95206ed04c193835c13f06c5c29543625d855cd40a7b0d039b8acfc7ff26a5fd968424149728564c90f741571b2eb443444efd82296b671f31ad7039a5aea5b51da306ef7c3d33c937d2ea869dd6fae5d21498bb4c3eca3c67050317350ed09b70ec34359ff89b405e3db"}}, &(0x7f0000001f40)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "3d7c5d24a601af00161fe19e6fa28adf97c51d1f48312ca6"}}}, &(0x7f0000002280)={0x34, &(0x7f0000001fc0)={0x20, 0xe, 0xe0, "dff0acfebffe8a47ac96442defc73ed7b299ab10dee0ac35850837bdad019aaffbf15f546b7e85cd70534aaf402db117614eea999eb818cdd82d5bfd5d4852c9e5700dd86d3ab0950d53e8704a4cdba6db114edabb44f97e61ee220b2f843433466619d7e0054abf4b88289c5b48e99ca4b4927be57840cb149ebe2c2ede128184ad77b0e6f40fafc80ef881c5fb97b945b12d52ebc2bd145d00353d42c63a4ef0c56d8380b0fe7c3529ce03d5a7cbed92abd6b69ab218e7e8901788d5f0412a01ccc68c0b17c7c6fe66b31e8343dc1f8655888a35c392320a21d124be99d307"}, &(0x7f00000020c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000002100)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002140)={0x20, 0x0, 0x8e, {0x8c, "e8ef2bdca38e2f72d5903fde954f59422b084b39ccae88fd22594b8ec862284e8eb067825177ad9834938491b3a6785b7854a62d75e26cccdae1cd2e69a0a156e0eb724d6e8c7f915d3487e7de57c28948919866f3b25c294d13347e66bfc2f7454be94422ec81c7113f99326aa3c4abc381fab85d4cda0d6bee5d879cb06232a8a97d532e71bb0a3cc8fd49"}}, &(0x7f0000002200)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000002240)={0x20, 0x0, 0x1, 0xc}}) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f00000022c0)={0xd6, "e4e78bf3685ff96920b25d9c06b1c350918e8b4e10b897a27435a4f814d3de8313160a60d71f5c07f8fc7e54a667708a6a8ec2f503be8529da7d7773f01b358c8b74518383d0578e40363242849d69fb3a6700e2468dffe0fdcb5a25747164ddc4279e5af6335ae345b4a6288a5c30e2190f03461d15679cc8687517666dd1b76cd85317eb3b3277d8d282ebfe853d4a9354f6ff77e42d598909f845a7ff4e1f498c8e46a205e001912e0cfc211b3dcc4d04fda0f3b6ee0fd8a65f97d50f948ac017bb57a1e7f14aa942ac332d5d556c88f9a87a7644"}) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000023c0)={0x10000, 0x5, 0xdddd0000, 0x2000, &(0x7f0000ffa000/0x2000)=nil}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), r2) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000002640)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002600)={&(0x7f0000002480)={0x150, r10, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x20}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x545}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xf5, 0xbe, "9e3dcb7f65507e85e581eb0b2f9231bda51f5e7ed1b25a1c629c5e40cbfc0128dc872e5dba2f5b2352233f09e5524f749b21f04468c0e2e6202e7203f3cbea9c07ba05d65d41e2d115ab2a8e404896556b7551459c60e56e569639feefab6d876f4134e05a1052a6748344d422949f7827b07ce7733dc46012c5f56ef550736630723fb947ec525c6b3077f6683ef5259df5358aa00d99443d6e1386dde87bd2752d962d1778ac5f27cbabe56aa608f7a4dcc0656c74d5f79edd7b746ac19f1f5cd8a0fbf963d66435c94fb2076aae6fb804a7dda93821537dbdcccaac49a9020cfc4b73f582a5de477aff54edcd12b671"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x400c015) pwritev(r5, &(0x7f0000002c00)=[{&(0x7f0000002680)="94", 0x1}, {&(0x7f00000026c0)="e37b563299ca90519e95ca8be6c7fba63a2b4417c928461e0cefcaa60b753b172ee9e8202474a500ffadd5ab602b5da3f1cd94214a278378717361d92d327254362db5ddba462dcfd90af0ef9a13bd2fdae6bc14de48bbd4e4a944c9a94d5abb3f6cb363e14b", 0x66}, {&(0x7f0000002740)="9fceea995de6a291d51a703cdef7513461e82786d8bbb2152c5afe650aaa2c3b934b3f8670e204a8f49b9eacccf2c33ebe919a1df728620f49ee1794c48408b49ef0ce315679f989e42ad8d932e93968eb7aa4b200ae7c64d1555e2096734947b3b81b1f5d27e8be790623022286fe46901f6a02ac347096fb6e429f4907e7267d6f250558926b59e379861ecf7f18cebcdd3130e1ae9f0fc984499af36e3fd959034fba4b7f7d942b65322740aac08db462ea7a2177b019d86c08d475c3abd3010f220914a26316ca78bba4c3b1707f65fe543145ad49af2060c5deef47e1f64225bcf68fced195012ab60696cd5c2c933a4b12ed", 0xf5}, {&(0x7f0000002840)="c0380b887a69ab194d6a27afca7cccbe33379d00e906041052e0b0bbae091131d11eb0c5a8534997d0c2cd95dc6ef4b104d7c886d54bdf0c96", 0x39}, {&(0x7f0000002880)="fbf326d8ca883a17d37d6eaab1fb55fb30bc1ed00599617ec537c4c1fc8b422b9d87f1eff1231ffd77271fc308f913e9f06ec20341bad13096c409765e2c657b4729d3ce29200e1ba7ff4663b305f462a18aafe400bd0d61fb22a8e21fe045893b22e11d604d28f5d6d426f677f4fe84ae9f7a6abb122d4ba6efbab3cfdca92e02c57fd282f977e99860fee0e400bc97deadaae85dce3c0cc754a195265f2ab4d31eb2d1a265e78cf3bb13b0702e2c97ddc9892beeaad53b513b8fcad144ba3122f5b14ceb34c38197e86cf2f71e20130d9372297dd70134cf98769be3f3759debe1aab5a6", 0xe5}, {&(0x7f0000002980)="a5e906b2e5fd41dc1952fbdfc5f368d74920", 0x12}, {&(0x7f00000029c0)="aaf0ff0831a42166e2920eb3a524e9fd853eb2a32bce0d94df6783d2a76218ef7aa5a355ebfc8a83697bad7dff2c648fe624a0114018c609625ffdf5c95c81ac2f7feca4a384ee5d4020dbdac3ff9cc19db3d55d4bd1c769c8ccdb0d6a3d05f44d22ec8b039af9d21852d2e603d646d2ed129c0334abc64739275bde0f3c12711ca7ff332b034cbf1a33c4beef366e6cebfb0655ea84f9d8a6fc9a6f96a68eff4f0368cb4e43a6579f6d8614ae7b1e044b6583463e77954a2883b70b0c89d08da15f0e457dd952af3844c9aa9015e9cd21fe05b0a08addb21d5b042b57762154e199428abdad4b9585ac77f77a6c77aa06fc8a404ef7752e", 0xf8}, {&(0x7f0000002ac0)="c416696bb0392e868963011c3f8ad1571f2b1606e2b5a17fcdd9c6a54b1c", 0x1e}, {&(0x7f0000002b00)="10d1b82348982be9a1648e45a067e2ed7ec0af82162a6f1f21a92fc1216965b3820f7f4440a2d3a92371eae4b92807503e602d4379c55c5a995488c625c6f527b9d095405f83aec884239c50a4df9f587c15ef014a4853a9a9d49f923496170aabc4d3d11519af23f4239de967379e83fed3450b8405986ef52e4507904ac988c866959ad166432f29b9ad19e7c1a399b6fa5994f4b1a5f27a334364650168a8bc919bff4ad5a0a6285cd7e3731d5a8b320201c58c260eadc0e79565dd83ebb96443e4c5774f00cb30720dd62907f46429385b21117977ef35a60a", 0xdb}], 0x9, 0xf, 0x85f) r11 = socket$nl_audit(0x10, 0x3, 0x9) syz_clone3(&(0x7f0000002f40)={0x200102000, &(0x7f0000002d00), &(0x7f0000002d40), &(0x7f0000002d80)=0x0, {0x4}, &(0x7f0000002dc0)=""/51, 0x33, &(0x7f0000002e00)=""/205, &(0x7f0000002f00)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x9, {r1}}, 0x58) sendmsg$AUDIT_SET(r11, &(0x7f0000003040)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x3c, 0x3e9, 0x400, 0x70bd26, 0x25dfdbfb, {0x2, 0x1, 0x0, r12, 0x3, 0xd94b2a24, 0x8, 0x3, 0x0, 0x5, 0x8}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 1m11.97140501s ago: executing program 7 (id=2719): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000040)={0x5000, 0x8000000, 0x6, 0x1, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 1m11.942576853s ago: executing program 7 (id=2720): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) pwrite64(r0, &(0x7f00000000c0)="8140a9f9deb8d3d150af62a606516665a622d787ba3dedf136fea9427999e37aa0fc463eae7dd446dd0f352975ccfa9972ba91e4b3b35d6ce1b4505d5f36f918fddf1c31e1e5542fa92d20ff798da5fd1a901a0167782c5f3627f4817cd01b11be992b194f51cbbd804b77a64c4965ae84611b0fef2d5a7108851f600dfd0fbe8b1ad925668f928f85d40760c2670e5e7e51a85aac425cbe643067b0afc68052f2bb611152943a00fb2574a9bfafca010607ab1e7f51990a30c431fd913ed6783175aef7db7506b8482e2df1", 0xcc, 0x7) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) 1m11.930918534s ago: executing program 7 (id=2721): syz_open_dev$evdev(&(0x7f0000000000), 0xb5, 0x22000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x4, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x4, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xc, 0x13, r0, 0xca639000) 1m11.87044209s ago: executing program 7 (id=2722): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)=0x2c) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) setuid(0xee01) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00008ae000/0x4000)=nil, 0x4000, 0x15) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)=0x2c) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) (async) setuid(0xee01) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f00008ae000/0x4000)=nil, 0x4000, 0x15) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000100)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) (async) connect$netlink(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) 1m11.815366655s ago: executing program 7 (id=2723): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000240)="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", 0x2000, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c020000210001000000000000000000fe8000000000000000000000000000bbac1e0101000000000000000000000000000000044e20fffa0a00000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x1000000003}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x18, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m11.759356541s ago: executing program 7 (id=2724): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b143a, 0x83, 0xfffb, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000004}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000006c0)={0x0, 0x7, 0x9}) 1m9.281397734s ago: executing program 2 (id=2739): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f00000000c0)="1080", 0x2, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r2 = syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(r2, 0x0, 0x40000000, 0x0) ioprio_get$pid(0x2, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0xfffff801, 0x1, &(0x7f0000000040)=0x45f9b412}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x345, 0x0, 0x6}]}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f00005a9000/0x3000)=nil, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0xd, 0x59}) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f00000000c0)="1080", 0x2, 0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (async) syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace$setopts(0x4206, r2, 0x0, 0x0) (async) wait4(r2, 0x0, 0x40000000, 0x0) (async) ioprio_get$pid(0x2, r2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0xfffff801, 0x1, &(0x7f0000000040)=0x45f9b412}) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x345, 0x0, 0x6}]}) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) (async) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) (async) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f00005a9000/0x3000)=nil, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0xd, 0x59}) (async) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r1, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 1m9.108660651s ago: executing program 2 (id=2741): setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="1015053da9dddd249ad99df72c7464f9", 0x10) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@mcast2}, 0xfffffffffffffe58) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = eventfd(0x800007) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x1, r2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 1m8.937585728s ago: executing program 2 (id=2744): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x10003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x10, 0xffffffffffffffff, 0xb235a000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1m8.902245712s ago: executing program 37 (id=2744): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x10003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x10, 0xffffffffffffffff, 0xb235a000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 56.745213966s ago: executing program 38 (id=2724): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b143a, 0x83, 0xfffb, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000004}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000006c0)={0x0, 0x7, 0x9}) 42.807023355s ago: executing program 8 (id=2981): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x69) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x69) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000003cc0)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair(0x7b5a159feb2a4d66, 0x4, 0x88, &(0x7f0000000000)) 42.364750309s ago: executing program 8 (id=2986): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000000)) r2 = open(&(0x7f0000001440)='./file1\x00', 0x14d77e, 0xc2) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000400)=0x20) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)=[@enter_looper, @dead_binder_done, @dead_binder_done, @exit_looper, @dead_binder_done, @increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 42.196669555s ago: executing program 8 (id=2989): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000001c0)) (async) r3 = inotify_init1(0xc00) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000040)={0x0, @aes128, 0x0, @desc3}) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) 39.199432649s ago: executing program 8 (id=3015): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) brk(0x689d80000000) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) brk(0x326) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000040)={r1}) pwritev(r3, &(0x7f0000000280)=[{&(0x7f0000000000)="2d74115fd9", 0x2}], 0x1, 0x4, 0xa) close_range(r3, r2, 0x0) 39.024680096s ago: executing program 8 (id=3017): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0xf) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r3 = syz_open_pts(r0, 0x80) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000040)=0xb959) 38.732753815s ago: executing program 8 (id=3020): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='!(+.\x00') r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) mmap(&(0x7f0000018000/0x3000)=nil, 0x3000, 0x4, 0x20010, r1, 0x9bbe9000) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 38.694003409s ago: executing program 39 (id=3020): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='!(+.\x00') r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) mmap(&(0x7f0000018000/0x3000)=nil, 0x3000, 0x4, 0x20010, r1, 0x9bbe9000) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 3.552608221s ago: executing program 1 (id=3465): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3d29) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async, rerun: 32) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x200000c, 0x4000010, r0, 0x134e0000) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x82) (rerun: 64) fcntl$setlease(r1, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x103000, 0x191) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) (rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x183040, 0x0) (async) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x41) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) chdir(&(0x7f00000001c0)='./bus\x00') (async, rerun: 32) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) (rerun: 32) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000140)={0x1, 0x1}) (async) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', r3, &(0x7f0000000200)='./file0\x00', 0x5) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) (async, rerun: 64) close_range(r4, r0, 0x0) (rerun: 64) 3.377991648s ago: executing program 1 (id=3468): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000300)={0x0, 0x1000000, 0x1000, 0x1, 0x2}, 0x20) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103", @ANYRES64=r1, @ANYRESHEX=r0, @ANYRES32=r2], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x4, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 1.673765166s ago: executing program 5 (id=3487): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r1 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@mcast2}, 0x14) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x7, 0x0, &(0x7f0000000140)) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) 1.672354015s ago: executing program 3 (id=3488): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="1015053da9dddd249ad99df72c7464f9", 0x10) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@mcast2}, 0xfffffffffffffe58) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0x6, 0x3, 0x4, 0x101}, 0x14) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000080)={0x1}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 1.654354767s ago: executing program 3 (id=3490): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'sit0\x00', 0xfffffffffffffffe}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000008d80402c000000000000109022400010000000b09040000040303ff03c9ff000d46a7a4b1307c626909da3a0b256cc4a643115a29e10e808ac501e0b9a94f055776bbdaee92f618401907579ad8833f18b81a4c6acfdebbdc09e7081238315a1a16893c2b63b32225f3fa939955daca7e6cd0703c3ca737897d1d0df743e276a5903ec83f80701335809a75e4df6b471d20bf7f5528ed46ab0676b7232cfd7ef86580c557fd65e52e94aa5905ceb1624090607911036077cf4f64c25ea15f0000000000"], 0x0) r2 = socket(0x2b, 0x800, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0) write$rfkill(r4, &(0x7f0000000100)={0x80000001, 0x2, 0x0, 0x0, 0x1}, 0x8) setresuid(r3, r3, r3) setfsuid(0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x2, 0x0, 0x7}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x4) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000280)='./file0\x00', r5, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) io_setup(0x0, &(0x7f00000001c0)=0x0) io_cancel(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000200)="d954ed841d37ce95f70de7f029385b8a9bf6150d7955452f43f80c9ed9dc01c9f3227a8881a9eff719c04eb0d09550728090790c97c248d914e4e12f14f839665561e6ef67b872c8dbf72c5fe68766cbaf835e3613f68b6f38c70f0bdc5d3a3ff7e14db0b38e18f1bd5f14cbfd05f27bc6c90d4ef5c069d0", 0x78, 0x1, 0x0, 0x2}, &(0x7f00000002c0)) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000e325b1a0376bda"], 0x0}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fremovexattr(r8, &(0x7f0000000080)=@known='system.posix_acl_default\x00') mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r9 = fcntl$getown(r0, 0x9) sched_rr_get_interval(r9, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$PPPIOCSPASS(r10, 0x1263, 0x0) 1.62618848s ago: executing program 5 (id=3491): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x60, 0xa, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0x80, 0xff}}}}}]}}]}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$inet(r1, 0x0, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 944.795797ms ago: executing program 5 (id=3492): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 942.361407ms ago: executing program 5 (id=3493): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x123501) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) close_range(r2, 0xffffffffffffffff, 0x0) 929.530228ms ago: executing program 5 (id=3494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000380)={@empty, 0x0}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x19, r5, 0x1, 0x62}, 0x14) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000580)=""/88, 0x128000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000080)=0xb9a98a7d0144fcdc, 0x4) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0xd, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040020}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r10, &(0x7f0000000180)={0x2c, 0xa, r12}, 0x10) bind$xdp(r6, &(0x7f0000000240)={0x2c, 0x1, r9, 0x0, r10}, 0x60) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="000225bd7000fddbdf250b0000003c000180060001000a00000008000700", @ANYRES32=r2, @ANYBLOB="a486bce68fb45d44a8079a7463d3f9d800", @ANYRES8=r7, @ANYBLOB="0500020009000000060001000200000008000700", @ANYRES64=r11, @ANYBLOB="0800060008000000"], 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x46001) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="3895eb1b", @ANYRES16=r1, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800030081000000"], 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pread64(r13, &(0x7f00000000c0)=""/105, 0x69, 0xfff) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000300)={0x7c, 0x0, &(0x7f0000000780)=[@exit_looper, @release, @clear_death={0x400c630f, 0x1}, @decrefs={0x40046307, 0x2}, @release={0x40046306, 0x2}, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/62, 0x3e, 0x0, 0x36}, @fda={0x66646185, 0x9, 0x1, 0x3b}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000200)={0x0, 0x28, 0x48}}, 0x1000}], 0x8c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699dc92e635dfe04d081660855e27931aa1f03febf3038a198b14796efb44103b42a"}) 842.102327ms ago: executing program 5 (id=3495): ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)={0x2, 0x0, [{0x8080000, 0x6d, &(0x7f0000000080)=""/109}, {0x0, 0x4c, &(0x7f0000000100)=""/76}]}) poll(&(0x7f0000000200)=[{r0, 0x210}, {r0, 0x8000}, {r0, 0x20}, {r0, 0x8a8}, {r0, 0x50a0}, {r0, 0x1000}, {r0, 0x1042}], 0x7, 0x331) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x2, 0x3, 0x1}}, 0x26) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='stat\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r4) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4064840}, 0x19) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000500)={0x32, 0x4, 0x0, {0x1, 0xffffffff, 0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x32) r5 = accept4$inet6(r4, &(0x7f0000000540)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000580)=0x1c, 0xb0d72ea1fb929e1f) fcntl$lock(r5, 0x26, &(0x7f00000005c0)={0x0, 0x3, 0x304, 0x7, 0xffffffffffffffff}) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000600)={0x8, 0x7, 0x400, 0x9, 0x0, 0x9}) faccessat2(r4, &(0x7f0000000640)='./file0\x00', 0x29, 0x100) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x4a0, 0xe8, 0x0, 0x1d0, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f0000000680), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xe, 0x1ff}}}, {{@arp={@remote, @loopback, 0xffffff00, 0xffffffff, 0x2, 0xd, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x620, 0x2, 0x1, 0x4, 0x5, 0x9f, 'gretap0\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x0, 0xd}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:userio_device_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x4f0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x6, 0x4) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000bc0)=0x0) write$FUSE_ATTR(r4, &(0x7f0000000c00)={0x78, 0x0, 0x0, {0xf65, 0xa, 0x0, {0x0, 0x5, 0x3a6, 0x6904746d, 0x9, 0x467, 0x4, 0x1, 0x400, 0x4000, 0xfffffffe, r6, 0xffffffffffffffff, 0x7, 0x4}}}, 0x78) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000c80)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000cc0)={0x0}, &(0x7f0000000d00)=0xc) fcntl$setown(r7, 0x8, r8) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000d40)='stat\x00') mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000c, 0x12, 0xffffffffffffffff, 0x37f52000) 764.253394ms ago: executing program 1 (id=3497): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) (async) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x1, 0x1, 0x1000, &(0x7f000098e000/0x1000)=nil}) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) (rerun: 32) 718.251179ms ago: executing program 9 (id=3498): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0xfffffffffffffdae, 0x0, 0x0}) 631.243537ms ago: executing program 9 (id=3499): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000140)="df970f") r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000000)="3950eb2d8e99a92d9ee2f508ea7ba4cc9c8a02501216cb28a7417a2568462e80bb9c59fd1a5d48f6c3ca6ba7554aefc9592017777c6cc272ccd6868e29d4e10df1522a77c81659be20c5eb8758217e9fb3c087b42a0529cefe9f28b83fd0891c6371a1d3", 0x64}, {&(0x7f0000000100)="a1675b912d0ae25940cc66b2762110bd0bdb6f3fdd1413c167f17f49166adba2e3be605ebaf11b99c113ccbc5a88d2b95268692dbf1e5c971112bbf1a4de84370dec0eee1a346ec208da68cb87c198fd500240bb8938ffd74d326ea9b668f4825dbe80cd53fd3d486bb1a89ad7e09ec8ca330cc2a48a7478a18738f0139d4e572e49b00575b90f857d9ca8285c468419549ef85695f4429b12545f5e947f6823db27d879650ff2600e586e44fdf15c2e9c1ed57c911b6eee7f1822a28dd9794cd2e17106774df893dd9aace74c92aecacfaa259d05", 0xd5}], 0x2, 0x0, 0x4) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, &(0x7f0000000080)) 548.465546ms ago: executing program 1 (id=3500): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000f4000100000000000000009bf3110585cf451eb5ac03a3002f0000000c000000001645005b24ada6bb8640a847a225b35e18502e373e85eebf64a6461add1d758263cdf68d8ab14ea26af46f6f24e720a0b4015f9649f7e1da7cb4e2598cfa9a502024a3493d0ecf943fba5b1887532ad626266d9c16df3b121d2d62ff02019173c60ee6e5286f84b989058e21ae83f6929551b31bf0a86ce68f7432362ab13ccf47c673efdbab38ca93676a3779976b21ceaf8d08c98ae840578878834b39cf0e2f60e4f47afb1bd4ae21"], 0x28}], 0x1}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_DEV_CREATE(r3, 0x5501) read$hiddev(r3, 0x0, 0x0) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = memfd_create(&(0x7f00000000c0)='/\x00', 0x1) (async) r6 = memfd_secret(0x0) ppoll(&(0x7f0000000180)=[{r5, 0x10}, {r6, 0xa491}], 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x1]}, 0x8) (async) rt_sigaction(0x3b, &(0x7f00000003c0)={&(0x7f0000000380)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x3782]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x238c40, 0x104) r9 = openat$incfs(r8, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0xc058671e, &(0x7f00000000c0)) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000340)={'batadv0\x00', 0x2000}) (async) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xf, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x4c}}, 0x0) close(r0) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) 322.651238ms ago: executing program 9 (id=3501): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x220, 0x4) r1 = syz_socket_connect_nvme_tcp() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$sock(r1, &(0x7f0000000780)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x4, 0x3, 0x1, {0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x38}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="1c166bbe4fbc88a5e9eceecda93816efbce91315fde323b5f837e3ec29572e722d1ee6323e56ba62f760f39ed3e70d8456b4d3af5a47401674963c0a3a6b461485cc963f328a0df5e42d8cdfdc54cee11f5f35ac6f2d2df458da3567222a83ce5970945c259dc26ab26af6625b20657bb1e5f7a413b38e8fca2101846204fc28b0ad83cd92b20d0b7ddc1422b50ba65e8b48946b85f4308a9c85b2b38ea1a5fa63744a23accfbdc2c69da1afcb78f18144554aa2dd7838e72a35f52ec332396a7ade691842e8d80ce880dcd15e169b7f525e07ce1b1515abe24872fac69752a1744c1a30b24ad19984903596b9053b8f69", 0xf1}, {&(0x7f0000000240)="08dd44f61a20c183a23b1ee899ebe684d02f4dbca1294e3098e69775a0be8bf6018ce0414269e72e15c0e5e9efaba988d69c22953da12988b063e65df255a592b2ca00686144d72fadf18264148558b9c275a3784c6b0260d7dae8b5019796e9176d5258ef23664f23", 0x69}, {&(0x7f00000002c0)="f26e0e6a5c6ed623b8f63bab274524382700d063eb0e75234c87c5f4ae43599f57ffb263e7171fba050db5dad36c2c98a9291de18a56420b9107b93662806f17faff925a7d3d48f74789", 0x4a}], 0x3, &(0x7f0000000380)=[@txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x30}}, {{&(0x7f00000003c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="802a9b65a1b64d52031ee275dded9e00ea8035742568c51ff9464ac79ea97beb6405a06a0979fef89a55ec40b2c8d18eb6e506975201074c577a32ed40c45f444ae87bbcb640a700e236196651e7a65e0621ec654fb0ea14d7eb25447199b556967416b711d01128192b01ab582d316f866ff62f34ae9eb29642ac029a23d9f15a48669237319aa1af2d2083b6539c5123c4bc3f", 0x94}], 0x1}}, {{&(0x7f0000000540)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)="123c44def00f87391c053306830b4d8023cf5a9be3640255b851560e320ebaa6706c833f2699dbbcc7af542bae0daa272d93504218f0461a80b2644068506c974c26381ee6968a30618e772fac0288ab31a0d27df070f52cc45e2204989887b6c629a7863e14f66b1c7ecb3bc46b480fba6686a33aaf570047922261bb31b3f78cb2503a8b7a2ba0a4d610331501df94903cefbc2c8d9a404f50b4fceb7d5d73", 0xa0}], 0x1, &(0x7f00000006c0)=[@mark={{0x14, 0x1, 0x24, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0xad7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff8}}], 0x90}}], 0x3, 0x24009184) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000840)=""/220, &(0x7f0000000940)=0xdc) r4 = fsopen(&(0x7f0000000980)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f00000009c0)='\x00', &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c) r5 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r5, &(0x7f0000000a40)={0x2, 0x4e24, @empty}, 0x10) lsetxattr$security_evm(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), &(0x7f0000000b00)=@ng={0x4, 0x4, "f0ca2fd08249fa297fbdbef03b4a9f6d09"}, 0x13, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000b40)='./file0/file0\x00', 0x4200, 0x1ca) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000b80)=""/4096, &(0x7f0000001b80)=0x1000) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001bc0), 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001c40)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000001d00)={{r5}, r7, 0x18, @inherit={0x50, &(0x7f0000001c80)={0x1, 0x1, 0x9b, 0x100, {0x1, 0x8, 0x7, 0x8, 0xffffffffffffffff}, [0x2]}}, @name="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"}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setflags(r8, 0x2, 0x1) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000002d00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000003100)={0x1d, 0x2, {0x851, @struct={0x7, 0x8}, 0x0, 0x1, 0x1, 0xffffffffffff8001, 0xffffffffffffffff, 0x3, 0x400, @struct={0x80000001, 0x4}, 0x4806, 0x4e00, [0x9, 0xeb, 0x9, 0x5, 0x8, 0x6]}, {0x7, @struct={0x5, 0x3}, 0x0, 0x58, 0x4188, 0x0, 0xffffffff, 0x8, 0x40, @usage=0xfffffffffffffffb, 0x5, 0xa, [0x1, 0x80, 0x7, 0x6, 0x6, 0x3]}, {0x4, @usage=0xffff, 0x0, 0x7fff, 0x3, 0x400, 0xffff, 0x8, 0x86, @usage=0x5, 0x8, 0x8, [0x586, 0xb, 0x5, 0x1, 0x800, 0xe]}, {0x3, 0x1, 0x6}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000003500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r9, 0xc4009420, &(0x7f0000003900)={0x0, 0x4, {0xffffffff7fffffff, @struct={0x3, 0x481}, r10, 0x1ff, 0xcb, 0x4, 0x5, 0xad2d, 0x20, @usage=0xc, 0x8, 0xe, [0x100000000, 0x2, 0xe, 0x4, 0x80000001, 0x7]}, {0x8, @struct={0x3, 0xf1d6}, r11, 0x9, 0xa, 0x2, 0xc5c, 0x4, 0x21, @usage=0xbe, 0xfffffff0, 0x4e, [0x40, 0x5, 0xfffffffffffffff8, 0x8, 0x1, 0x101]}, {0xfe, @struct={0x7, 0x6}, r12, 0x6, 0xad5b, 0x2, 0xabb, 0xc, 0x401, @struct={0x8, 0x1}, 0x6, 0x7, [0x2, 0x8, 0xfff, 0x7fffffffffffffff, 0x3, 0x4c7]}, {0x3, 0x100000000, 0x7fff}}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r13, &(0x7f0000003dc0)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x2c}}, 0x24048045) stat(&(0x7f0000003e40)='./file0\x00', &(0x7f0000003e80)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005200)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000051c0)={&(0x7f0000003f00)={0x12a4, 0x35, 0x8, 0x70bd28, 0x25dfdbff, {0x6}, [@typed={0x8, 0xc5, 0x0, 0x0, @uid=r14}, @generic="2f8f50eb14f2a718d89838a4074e565b01025e8e0ac12217900ff3cacee8974b5dafafe53a54c8654d6b100a73077e733b7a6c4f81991d60ac8b50ff4887562498ce3203d94498eb202ad22721aa6c8e28fd353b7ed2a66c5b6fcf1bd664bc59155eaa349772b536a0cc6675748c3d0fb3b2a9c4c07905890f7a027529adefc85d58b21fc74ffff3f473965a50470c0720e673a7182a2c97e85641948dc46ba109bfe71a8dc106641fd56965bbc1b9e95fb382b26c6b1c4cbf389e", @typed={0xc, 0x142, 0x0, 0x0, @u64=0xffffffffffffffff}, @generic="f203db7bb63f73ef5b58fa2a1daafc6a2307a52d36f54d7fd8457d1631839f380ffdd02afd97a8ca2a10a2dbf776974ad5a84085ee224f6cdb8a464e6b66ca4126fffb4f9da1978b44178bdc24f9bc1ed935e17c160c692e21d26d3e51f514ad6d77752abe0512b2d6bd5f21a0b769fb9174e1d8aacd97f2d76f4bd641c0ddf9465ffaae5be65af81a52f734adc6c6b78c3d151c66973b668e4f5516cda66f6f3b3c820dbb12e81b82c271755312cd81f64d3772d4450c5e33e0d46fe2ebc72ffc894e1a33b576db6645caad7fa5bda18875bdae39a52c7fa347ef227c03d233d289259212b30fb50705a97e221d25fafa2048056625cc1320469856b6ecc7a472077f9d92338898f18f7e808d1951b16565176e56955ef62608ae4147d6e1b7eb578952a4354e8cab1e324ad07ca62c25e014bfdfc7ecde3969a64f45240975b52657e3c33f28e5609febf8996d110d99437960c0ebb075862f7a76ea705f868b1f4313e0823aa7e7fc55dac6fb2be23b5df1ada9eebeb25afed1f0d397ea4a40082a9562c76936ad364fc600fdef6d4a3274ec5674bff230be59458b08c7c9151a48d63e7e274a5a591d3dae19031e1f2076d6d52160542c8d3679f4c64d47ed46ced08f35f298af32295cc606839561ff6393b21ed5a0ad8d66751a0ecdbbd6c3f39054a5009b4ebe1d54dfd61930dd072098484953db1b7c7936bb32d0d7a4bee1c10aef354716957046457f4a205791cfce9c8627fb2e4bdfc58c953938240c7e419bee7db538ba9673ace9e0a19f06e54b58095524f610d9f303b9dc5aafd74c80db2c86247dfb6270934bb1b74430a24b8bfd7339dc172a51d8a0e9031174be2fa034da0ccd815a9720e6db838d304d79082e0112ed6412875d65333adf0c87ef4451b9e9c3fcd9c9666be2c0f2808e18b7b23445c0f485bb2dcb3f166c4582118eee00030abb9a7d3f4726a0fff6965ee3a8ac491dc8986f33c2c77196944b35dbe8d436128bafd7305ec2dfbcce1e789e2728c907fb096a1da400caf55caebe790d16eff2a5c2133be1c559f8ece05a27900c8feaa3d4ebfa4e46546d5f14dcaa3064d69e8df2cc4888b3c624dc31b606174e6828ea0552310daf47a9a6ac028313618e41f9f95f6a4a36c2ade2bbb7e6c76d20fc27dd13777e1cb32ac498f7fe67bf5c299f8efc1029b4d67bf7dcb3a5a83fa66a1551185d5bf023bec4cd357f149665c85a97b76a2a524f6828e215c4fe2b00147cc3a16e019dc7da1682f2ae57bbac311faee3040391581bf4cb67b63030f352694b1fed70e098e649645158e09895e4acec1e283ed9d85ae5a643fc3e638633843184ee9fcdb2c0420a77e01d50934573a25e6a5ea502ce8841f5239a9b2e34e47c826e1ba802e7e663803f075dd5ff57c10a680d114bfd6949053238ff46ae4beb4e1c03abdb7440c31fd84fdb66e808e18304fd6d6575e335eafd0a859164d506e79395d0a00cf2acc0ebf9b0fe9b5147cb59b5a211470d395e2059b30f1ca86e146d37050d85a1720f5de762bcde1a7bbce990aff9ba4b5de0405243dbd9a3d54a2ee10159955cb8e7a3dbef553bdb5b9798a87b47b58d926abca710c5b1a81f234da362775be6697e0341b364bbabef6f8a4ea33ccdbf61dbfb037cb1bd0a13b29de05e41306874a7933c54adeeb4d9df6a9f2725c88995f04fcc1974ac0efdc5bf1241ea4c18154678d64a31088d1c516bc9225be20dbb13a5e2303df858faffc39e99840f56788647dd835e2a0eade2ee51db9b8376ff1b33744d1eca8513efd5a7237e91807ad7f3323c090248c92b9543a4aad10b9fa6c78598f82f81771446cb6f04fac01911d2d140981c13ac374555758c6f2b6b4be814c2b8f9a4bc64705a80976df5cbb26b3748a6b4debcaaf53391fefa66fb9a9f69774d60b305760b2fe41d59cf270711a528e268cc701dd3e1a72535c613bffff2441740402e8da447ef25ed6190167d1e3551beaa08896e84661059169e50457062b08b98be67eea602ce0166b75f42bb60a6504c0624db51b7d9380c1b1a4fd2e3bfc340cd373a5ac3e6e995bf1504e531e2ce43c668ef1261aa122f2dd945a4d75fadcb2f8a530891fc7165ff6a6a608f615ca63cfe0355f7b479dabd2eb677d1d6c7762d9a53cee9c2e5e8c757fbcb0931cbb6a43c2dae807d6437c3761657b96f8e34cdb8ca63f564ecdb8280c41819de6bd1dfe272ebcd3d8d3bb53dab6eff757c99961b53ee585d73d3abab5245e9c210bbae247182a57d01b6fbfeeb6b7ef6f2a02cd8ada00e053fbd85d4ea7ad060554136097379955a018fb9251297368db76fb304b3a382b418e287feb9aff0df69870c87424758363227c0b16f312d51fa2dbe76c17391ebb1cb26fb38a82c41cb0755a7f79ea0bc195e47f7b186963a4926963505dcab4c36f1f4bff63f281e9a1fd766dfb5a278747b007bbc15aae28bee66130c5289bd907bad311bf908920b9d3bbad9f7455ebcd240fa6ee7114c6c6f59d9df6296271cee81506b0b25c08ba155983a7bf4b14b7bd81723153fb540c97c634e6e98cc96797e3c4d6188c1fdaa863882ecbfd871a8ef2862f555113765d1a3810b6fdc9305c2fd1a2fcc2a83297c846c2e89dcd372eedf1fa063b34723aa84cc950136fe7b8eee312775803fbccbc21c514ae011de644d598372ffe1cd557cd4e37d8f1a1aa08cf6533053a064a6f85a282ff2df842d6f127c68ea8425ec7ce2c3dfc62bfed92ce8b8d8e22fb6d7b4a953718c52ad66c665aff68df4d07d61d7dcbbfa8c4066599dda68ff06b9436917ad02e11349b1f3b13a57695fc8ac7badceda90da04927e99f166698d9378d4977262e2d42fccf3a17daa942bc9042960dbc547c5733283b6ce8d62987393352b963bcf343809d1234ecae80058d98ff2fd61de470b90ddfc55f80ef806316c76b018aafcc453c4e024c1368c2d35d94113e9303d70125988f157b2b87364d4f878c0e9b751337874ec0594a0b1c4cf5356f16ec49acaeaaa29d12f6aec5fd7324d13656ec2f1a445eb9703b50d74952611b537bc935f28657261ddd1c0afc767a2210acbd0574cfaf6c8acec367ff9e7b285a2c58b2f80b4fc3e78a5334a5dff8841e07c26fcc59767aeca825c8f8554b859b049d8815041350f4bce2bdaf1da6c36bc89456578f1d368206eb9bef70c99621bc49a486aa3a11ac0f16b50efc206040db79ab601b0c74361964c093948295e14aefb2a049ccebe759b8171fbc80198dea60c6be4094c08d6882fa99911d6e371c128f8ff104c6d6508d7beb8459576d65a47874cf2a73783fc5f1a3dbeff6ea926aaf56ebde9b7ccd3c8e70ed18772a5037e6b80409a3dc321114c43378fa0ddd839a29f8399ac9036f549fe4a47073dea9cb2ed00eadf11f8e74fae46cb19a9dfedfe3f06ceac94ae3b46f782e5ea27dfabbcc11dba849843a26430d3d77fb40f8dcd727bc7214cd668bbec28708f5815b36a4f2018b0869c50b717f300be3f5b0b152eec0de8ee874e1facd79f986a8fad25dbd3b435f01923a8afd457fb51d729d25ccc2127088415b218203c8b419ff1095be70c8c9ee5dde833b2a1cc300b91c79eb988a972186e00b38db9b5b0c114c18fb4925bb34619e249d884fb241e0d6608bf724b0e90cc98c04614b8f6ba721ca93967b5cc2eb4536c86202550dbecc6213e5910c4177434b1b021e243d8f39d97eb677de396d7f148ea96cf37193601214fcdfdd637b54678da725ed415e10ac5ed4e82ace90f853cfbac254f487a79ae43f8f8d8182953c65f5f75166e32b1df64c70439c1e414880a6b162797f20544b3746d3c0ca7775ca993c136064305425e815cc1fd9a380e4319df54f3df9e1578f2471b72fb28ea6406662d014daf5b1983119dfcfce445bd8dd655feeed68b4d359206b1c8eb0f51f562c7222e76cd5294cd133f040e99caa6df51cdcf72be57258531d22f3be8bbf482495708565e0668532ccfa8f4556be66aff88436502c5c3dd2ade200bbcb50f41846a848657dc2792bac84ec4a55aa82f7c9002ddbf4b5427a6387fa416728b2dddeb91ed76e881baa71020ae7ddb0e35913f03f73965aadd196407d3ba4983747644841a0b6e58a48505e04f584ebde41ffd0de01b115bb48a84a8c7cbd171837f96cfc76c567a7cf537326712c5ce089cc064a16fc81c94d801a9f3e5107d1119a6037346dff1388e4e59ebaeec49709970a8e289dc0a1192b7479983564a57c9f0a6cd9eff58043f02c2aa6eb57db0451b008cb529c618bfd842f3662ba8b4b600bab0f446d1cdd5a815f9bfe7d1aa7254f0a0f19474e1a37cfbf0370a5afff505381e93d708ac21828a472ee87a33dd546c36436cee57da7bee54cbf40450f9adae1e38b6fbb4f64e86cfe014b16118ae3ce05278033016cf7b66e4e2e6eacf6d9a5ec4ccd7f20d8320b257b83fbb386fb230a7fe92f4d21611d43b3691bff6a60093abcbc15d23334750ac3e45a79384ab8dd97eba6735529ea0956c06b49f9219b71a82c627e23fd7144eebf7c25e6c5cf006c5673f93696ce41733a811e18f5dfb8dd745ff2aaff3f1dd7cdfb52a50a824c314dcc7704495d1c5214a1e867a7a6ed0d85eb7faa23d83942f7c999f446a551097f8301c69568909cd2b941e78cddff07d2effdaa4edcbfdd241cf4ca906ff6369b30eda7d2072a253a807b1b55a33fe72f135df3eb4093351e9aef3d4a34d97851e241f1daa74ab354ea7352a04c84fc67d8b53d65f341258cb594fe884396b6d490265bf399621d676788446250933e74617701ade15318ac237b89fe059b5ea5109c53dbf086d4b3a881341c511361051bfc47b0b663f22a190473a0b03596fa9ec3c433e0306bb7fca12170a026901107430831643fa3e9c8245a270d9026eaa6d6061e4ed87d919d4adef59d3d9877f0f4fb418e9bf25683a50e587976137b45f643283ae3a60f056f9af6ab3921bb862cd5093ed1f83056a1b945b967f2b8ce93ba269085506b2fc306f0bd6ab8b13ed684ed0684ed8d6c75482193ca70c1106018397d3db7ae35b764f1d4cde54a1425c3368ce5eecc442785998e40f098484ed26d737607ea8b39f99a1424cef895e26e2c7192a29e594c335b7baf215df3d6396c9c55fba0d82590998787f3d3b1eab7bb9f97ef281e9cc74e6179ea7c9e9936b0b15208b89b73cf0bd7330be97728b4f84eef1e87f17dc8077087d24672c3ab2cfd65b43739b3ef65844ba5523a03ac3121e18b71d98794ef85d7a6d312744abeafb25e1296cf0df0035a5d961b8f080143ba5c6955243602001d16b7c52256188532050e55fe0517933622395d792ab8330ed800884daa53d44324d82edb56bf1295a2637a4fd354b761846536e2913b7b8f44cc911688d60119c12caa757d433e79bf7eab857b17ea613ed0c3cb6f574754fbb2f0eab1e73e060bb1c1186f1042eefa90a4bbdf3c768bc6ec07f262aa96c67dd1848f70aeeb2d9441fa6c77c6bd1e755bd040c9014a8372015bae15161c797a08a592b6008fbe1324b169bcbed5b4c27fa329e27a7e58a90dda82848753f67093a7d8bdf3d55f94fe2b78f35c32f234090b442e048c6cffbb0bb0399e7e12f269cc283c22fc4b203578960735934f58f30a1de9e582c44c084a14222c11b86e718e10bd139b520f6e226f6b0898287e04fa99309725611232b40cd31c7c776c2e12c99ec55d3a20c0fd11ad1af89ec6c4a1a9ce5a7a64642c1b271ccaeec68f6a97c46", @nested={0x10f, 0x12, 0x0, 0x1, [@generic="920d217600c26039991b211a5b6fbef20d04313a9ede49dfdec84d716e3aa4afd53f1129be16d106fb191ee9621adf24b1f41426df198947944858fc228f", @nested={0x4, 0xd4}, @typed={0x8, 0x12b, 0x0, 0x0, @pid=r15}, @generic="04994c481069728c370bb7ee0e14cace0080d5be0fbcd9162d228a4583ae0999574eed5808d453e9fa9a3bdcaf381451cd5f469c3ca8f6cb1b3aaf01ed220204196dd8267678fd16c5", @nested={0x4, 0x11e}, @typed={0x72, 0xe2, 0x0, 0x0, @binary="757a9e7b6a06f72b290a12ef7b794f65f39d07220be95d1f23f2301028c6ac49942df0c7410905c46994422213776a065e5bc7d4cd92639a5c46a3b428467ca434e449a605285f65d720c332a5156e477be3c3df43f264118c1811ab02739fe01df26a912fdec3eccefb5a03537e"}]}, @generic="115b2b8fa28ee7b7810fd948274b3c2b42d618147dac0794885c288080b1937773c305cce0aac185de0db2ed73f77189a61e1c290da26b94fb994e3288f5525b2765549fc725af8d3af5786ce7b3d657b4e304dffcce652a758505293643160ce0e3fea2d25cf2691a65b294f6e62696d456d3171be24d03becdf275b9ff20a81724beab3f87b1b6d360828e9febe18d2a340f1e3eb9566ff9", @typed={0x4, 0x89}, @typed={0x14, 0xa1, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x12a4}, 0x1, 0x0, 0x0, 0x4004881}, 0x4040004) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000005240)=0x8, 0x4) 322.369868ms ago: executing program 1 (id=3502): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x12000, 0x0, 0x0) (async) recvfrom$inet6(r3, 0x0, 0x0, 0x12000, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) creat(&(0x7f0000000240)='./file0\x00', 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x80080, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000100)) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000100)) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000001400)=0xe) socket$inet6(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 315.810589ms ago: executing program 3 (id=3503): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r5 = dup(r4) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xc3) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1f}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 315.284699ms ago: executing program 9 (id=3504): openat$uinput(0xffffffffffffff9c, &(0x7f0000001180), 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28131, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28131, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='5\"']) read$watch_queue(r0, &(0x7f0000000240)=""/106, 0x6a) (async) read$watch_queue(r0, &(0x7f0000000240)=""/106, 0x6a) 314.439899ms ago: executing program 3 (id=3505): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x0, r0, 'id0\x00'}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x6, 0x0, 0x4, 0x200, 0x62c, 0x86100100, r3}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) 247.107945ms ago: executing program 1 (id=3506): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') exit(0xfffffffffffffff7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r1) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@empty, @in6=@private0, 0x4e20, 0x6, 0x4e22, 0xfc00, 0x2, 0x20, 0x0, 0x1d, 0x0, 0xee01}, {0x3, 0x0, 0x3, 0x0, 0x5, 0x1, 0x83a, 0x4}, {0x8, 0x7, 0x5, 0x7}, 0x100, 0x6e6bb0, 0x2, 0x0, 0x1}, {{@in=@loopback, 0x4d4, 0xd4}, 0x0, @in6=@mcast1, 0x0, 0x4, 0x2, 0xee, 0x1, 0x80000001, 0x2}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) 179.539632ms ago: executing program 3 (id=3507): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000811}, 0x20040011) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, ':'}}], [], 0x6b}}) (async, rerun: 64) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private0, @in6=@empty, 0x0, 0x57, 0x0, 0x0, 0xa, 0x0, 0x110, 0x32}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000, 0x2, 0x80000000}, {0x7, 0x0, 0x4}, 0x7, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2, 0x3, 0x6c}, 0x2, @in=@broadcast, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffc, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r4, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) (async) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0xffffffff) (async) getsockopt$netlink(r3, 0x10e, 0x1, &(0x7f0000000080)=""/122, &(0x7f0000000140)=0x7a) 171.342043ms ago: executing program 9 (id=3508): futex_waitv(&(0x7f0000001c80)=[{0x2, &(0x7f0000000000)=0xa3f7def, 0x2}, {0xb56, &(0x7f0000000040)=0x8001, 0x2}, {0x0, &(0x7f0000000080)=0xa78, 0x82}, {0x7fffffffffffffff, &(0x7f00000000c0)=0x56d, 0x2}, {0xff, &(0x7f0000000100)=0x8, 0x2}, {0x4, &(0x7f0000000140)=0x101, 0x2}, {0x4, &(0x7f0000000180)=0x73da9d2e, 0x2}, {0x0, &(0x7f00000001c0)=0x2, 0x82}, {0x6000000000, &(0x7f0000000200)=0x8, 0x2}, {0x800, &(0x7f0000000240)=0x2, 0x82}, {0x7b, &(0x7f0000000280)=0xfff, 0x2}, {0x9, &(0x7f00000002c0)=0x8, 0x2}, {0xffff, &(0x7f0000000300)=0x2, 0x2}, {0x8, &(0x7f0000000340)=0x9, 0x2}, {0x4, &(0x7f0000000380), 0x82}, {0x4, &(0x7f00000003c0)=0x8f}, {0x2, &(0x7f0000000400)=0x3, 0x2}, {0x2, &(0x7f0000000440)=0x4, 0x82}, {0xe, &(0x7f0000000480)=0x4, 0x82}, {0x43, &(0x7f00000004c0)=0x8, 0x82}, {0x8, &(0x7f0000000500)=0x6, 0x82}, {0x7fffffffffffffff, &(0x7f0000000540)=0x1ff, 0x2}, {0x2, &(0x7f0000000580)=0x8000000000000001, 0x2}, {0x8, &(0x7f00000005c0)=0x401, 0x2}, {0x40, &(0x7f0000000600)=0x2, 0x2}, {0x0, &(0x7f0000000640)=0xf1, 0x83}, {0xd0000000000000, &(0x7f0000000680)=0x6, 0x82}, {0x6, &(0x7f00000006c0)=0x2400000000000, 0x82}, {0x1, &(0x7f0000000700)=0x9}, {0x2400000000, &(0x7f0000000740)=0x1, 0x80}, {0x800, &(0x7f0000000780), 0x82}, {0xffffffffffffffff, &(0x7f00000007c0)=0x2, 0x82}, {0x0, &(0x7f0000000800)=0x7, 0x82}, {0x3, &(0x7f0000000840)=0x6, 0x2}, {0x400000, &(0x7f0000000880)=0x9, 0x2}, {0xffffffffffffffff, &(0x7f00000008c0)=0x52bc786e, 0x82}, {0x97, &(0x7f0000000900)=0x40, 0x2}, {0xffff, &(0x7f0000000940)=0xc, 0x82}, {0x38c8, &(0x7f0000000980)=0x7, 0x82}, {0x2, &(0x7f00000009c0)=0x689, 0x82}, {0x17d0, &(0x7f0000000a00)=0x4, 0x2}, {0xfffffffffffffff8, &(0x7f0000000a40)=0x4, 0x2}, {0x9, &(0x7f0000000a80), 0x82}, {0x9952, &(0x7f0000000ac0)=0xe, 0x82}, {0x3, &(0x7f0000000b00)=0x5, 0x186}, {0xfffffffffffffff7, &(0x7f0000000b40)=0x6, 0x82}, {0x9, &(0x7f0000000b80)=0xfffffffffffffffe, 0x82}, {0xd, &(0x7f0000000bc0)}, {0x4c4, &(0x7f0000000c00)=0xfffffffffffffffc, 0x82}, {0xcb, &(0x7f0000000c40)=0x3, 0x82}, {0x6, &(0x7f0000000c80)=0x6, 0x82}, {0xfffffffffffffffb, &(0x7f0000000cc0)=0x7ff, 0x2}, {0xe508, &(0x7f0000000d00)=0x10, 0x82}, {0x3, &(0x7f0000000d40)=0x3ff, 0x2}, {0x8000000000000000, &(0x7f0000000d80)=0xa, 0x82}, {0x2, &(0x7f0000000dc0)=0x7, 0x82}, {0x2, &(0x7f0000000e00)=0x8001, 0x2}, {0x4, &(0x7f0000000e40)=0x5, 0x82}, {0x44d, &(0x7f0000000e80)=0x7fffffffffffffff, 0x82}, {0xf0, &(0x7f0000000ec0)=0xc, 0x106}, {0x3, &(0x7f0000000f00)=0xd42, 0x82}, {0x0, &(0x7f0000000f40)=0x3ff, 0x2}, {0x8, &(0x7f0000000f80)=0x4, 0x2}, {0x6, &(0x7f0000000fc0)=0xffffffffffffff81, 0x82}, {0x9, &(0x7f0000001000)=0x9, 0x82}, {0x68, &(0x7f0000001040)=0x8000, 0x2}, {0x0, &(0x7f0000001080)=0x1, 0x4}, {0x7fff, &(0x7f00000010c0)=0x4, 0x2}, {0x2, &(0x7f0000001100)=0x4, 0x2}, {0x345, &(0x7f0000001140)=0xc, 0x2}, {0x8, &(0x7f0000001180), 0x82}, {0x1, &(0x7f00000011c0)=0x8, 0x82}, {0x3, &(0x7f0000001200), 0x2}, {0x225, &(0x7f0000001240)=0x10001, 0x82}, {0x7, &(0x7f0000001280)=0xa, 0x2}, {0x0, &(0x7f00000012c0)=0x2, 0x2}, {0x80000001, &(0x7f0000001300)=0x8, 0x2}, {0x3, &(0x7f0000001340)=0x3, 0x82}, {0x2, &(0x7f0000001380)=0x4, 0x2}, {0x1, &(0x7f00000013c0)=0x9, 0x2}, {0x45, &(0x7f0000001400)=0x5, 0x2}, {0x5, &(0x7f0000001440), 0x82}, {0xa9e2, &(0x7f0000001480)=0x1, 0x82}, {0x1, &(0x7f00000014c0)=0x42e, 0x82}, {0x21, &(0x7f0000001500)=0xfffffffffffffffd, 0x82}, {0x7, &(0x7f0000001540)=0x8}, {0x9523, &(0x7f0000001580)=0x4, 0x2}, {0xffff, &(0x7f00000015c0)=0x3ff, 0x2}, {0x401, &(0x7f0000001600)=0x5}, {0x1, &(0x7f0000001640)=0x4d03, 0x2}, {0x26, &(0x7f0000001680)=0x80, 0x2}, {0x3, &(0x7f00000016c0)=0xeed, 0x2}, {0x2, &(0x7f0000001700)=0x9, 0x2}, {0x8000000000000001, &(0x7f0000001740)=0x4, 0x82}, {0x2, &(0x7f0000001780)=0xa, 0x82}, {0x733, &(0x7f00000017c0)=0x80000001, 0x82}, {0xd0, &(0x7f0000001800)=0xfffffffffffffe00, 0x82}, {0x1, &(0x7f0000001840)=0x3, 0x82}, {0x1, &(0x7f0000001880)=0x3, 0x82}, {0xe, &(0x7f00000018c0)=0x3, 0x82}, {0xfffffffffffffffe, &(0x7f0000001900)=0x7, 0x2}, {0x6, &(0x7f0000001940)=0x10001, 0x82}, {0x3, &(0x7f0000001980), 0x82}, {0x0, &(0x7f00000019c0)=0x1ff, 0x2}, {0x8001, &(0x7f0000001a00)=0x71d5, 0x86}, {0x1, &(0x7f0000001a40)=0x9, 0x2}, {0x2, &(0x7f0000001a80)=0xffffffffffff6f47, 0x2}, {0x4, &(0x7f0000001ac0)=0x10000, 0x2}, {0x80000000, &(0x7f0000001b00)=0xffffffff, 0x2}, {0x1ff, &(0x7f0000001b40)=0xff, 0x2}, {0xb05c, &(0x7f0000001b80)=0x10000, 0x82}, {0x1, &(0x7f0000001bc0)=0x6, 0x2}, {0x200, &(0x7f0000001c00)=0x800, 0x82}, {0xffffffffffffffff, &(0x7f0000001c40)=0x4, 0x82}], 0x72, 0x0, &(0x7f0000002740)={0x77359400}, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002780)='./binderfs/binder0\x00', 0x0, 0x0) r1 = memfd_secret(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002b40)={0xd0, 0x0, &(0x7f0000002940)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f00000027c0)={@flat=@handle={0x73682a85, 0x1100, 0x3}, @fda={0x66646185, 0x3, 0x1, 0x3f}, @flat=@binder={0x73622a85, 0x100, 0x2}}, &(0x7f0000002840)={0x0, 0x18, 0x38}}, 0x40}, @increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002880)={@fda={0x66646185, 0x1, 0x1, 0x23}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x0, 0x27}}, &(0x7f0000002900)={0x0, 0x20, 0x38}}}, @free_buffer, @increfs_done={0x40106308, 0x3}, @acquire_done={0x40106309, 0x2}, @register_looper], 0xfe, 0x0, &(0x7f0000002a40)="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"}) r2 = openat(r1, &(0x7f0000002b80)='./file0\x00', 0x400400, 0x30) sendfile(r2, r1, &(0x7f0000002bc0)=0x5, 0x100000000) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000002c00)={'\x00', 0x8, 0x2, 0x8, 0x0, 0x3, 0x2000, 0xdddd1000, '\x00', 0x4}) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002dc0), 0x1, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000002e00)) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002e40), 0x1, 0x0) fchdir(r0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x39) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002e80)={0x0, 0x0}, &(0x7f0000002ec0)=0xc) getdents(r2, &(0x7f0000002f00)=""/5, 0x5) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000002f40)={'bond_slave_0\x00'}) sendmsg$nl_netfilter(r2, &(0x7f0000003340)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003300)={&(0x7f0000002fc0)={0x338, 0xc, 0x7, 0x5, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x8}, [@nested={0x324, 0xbf, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @u32=0xff}, @generic="73471e6beeb38cdbb3b7723f31a92bb145beb61274d371b44862227cd1530edce229dc5038c3c47c001ba3550ec4738a75cedaa5142de996a51018258a0d41027c98de69294608972b6d2db4f7e8e1b0f5b9aeff934f78eaeb41e4b4e16399f884c2ebf1c7e3d41be57006389b30d6e222872e6fff2ea311d36f3236591ef4c548bd7793627f84cf65277790abb2668180d29c530e6fb5a438b43638f0e899ebe0d3bfb44723a2ff6f50a1af0098a82c3fb12d990bb85f1b24170da16d47bc4758f334d6fa385d942904efd62ce570ac81e2906fc9f49b58e54dff8c7d8133200fb158607079678a3eb36c71", @typed={0x47, 0x35, 0x0, 0x0, @binary="c67b132d30050f57d155ecfa7fe341a623a5b1d78ac34ef9709c40127076f7d4310e50dd861c8ea3da7534c0ff314a40f6780c90214b683ff62214ee00154c8213caf4"}, @generic="0c34f6785c54025a0f544ac00e99cf71e5ebc5af82ecc711c8c5b44a12554ee90fea91926a2f1169e8772167439b81d2285dc1173b8bbc81734f3223c0cdc8b118f877a7d7687d4858f803984e88410820c2362fd06ebfc2b5b1aef50adb78dc18369613e85467f16058bebc81ed95b44f49a4f31744016f7b02c6382faff60a7669e9e98d900069c358b9c18e3466468395073f54b59bdd7a92473b191340bd63c55b8c6517059141106e891933e6abf57d5d52802a45d629a09555f2effd19ab569243f5782f46c9c4931f9fce7d274b9a8d5fd49a0356e34cd0eec27bc3cbf756e52e046aa09c07b3a19f61", @typed={0x4, 0x3b}, @nested={0x4, 0xb}, @generic="86164bb4d1081f8093d8318c822e2164c1098091fb0d169051d9783b5e9f7e8408f65d76c49b0da0215e65041e77738b64497575207eaaaf789584dcb78cd825c85ef6964b42968bbe0ca5906d0d8d617d8310da5105dae789ec7d37689a2df069a897d6bad0318a17c9e58bd23fa9d6153921567971589f411188c832297276b49ef70f12d17d39e669188d9f646f9cfab1d7b5547d23be16f887c4231ac3540a3df9a19b93135ab6d4ca420a4fb9c77a0156230513b96aa9c481f4809a9577d8a02dfd1f2eae4645624aa2109c46546a32dbdce726715b2295c6bc69c30745ba78b65e6ffda65c661fd9ca5c50ee"]}]}, 0x338}, 0x1, 0x0, 0x0, 0x8042}, 0x10) close_range(r3, r2, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000003380)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000033c0)={'vxcan1\x00', {0x2, 0x4e24, @multicast1}}) recvmmsg$unix(r2, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000003400)=""/79, 0x4f}, {&(0x7f0000003480)=""/54, 0x36}, {&(0x7f00000034c0)=""/147, 0x93}, {&(0x7f0000003580)=""/226, 0xe2}, {&(0x7f0000003680)=""/4096, 0x1000}], 0x5, &(0x7f0000004700)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x0, &(0x7f0000004840)) r13 = openat$incfs(r11, &(0x7f0000004880)='.log\x00', 0x60000, 0x1a0) fchown(r10, r5, r6) ioctl$RTC_WIE_OFF(r7, 0x7010) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x7fffffff) write$selinux_load(r7, &(0x7f00000048c0)={0xf97cff8c, 0x8, 'SE Linux', "463e998df592c99f2d616bb7f385f1cfee92fe091d4b56b92d221997fe58d155eb3035ec8885c53e58d4ac228b380611e83519173c56ead732eff799dae75676898920a3290f49925663ff3cd1c6bb0fac97617001f031d6"}, 0x68) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000004940)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r13, 0xd000943d, &(0x7f0000005940)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "08befe4a4ede5e"}) ioctl$BTRFS_IOC_TREE_SEARCH(r12, 0xd0009411, &(0x7f0000006940)={{0x0, 0x7, 0x4536, 0x5, 0xb4a6, 0x4, 0x5, 0x10001, 0x1, 0x7e80, 0x5, 0x401, 0x400, 0x1b76, 0xd86}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000007940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000011aec0)={0x2, [{r14, r15}, {r16, r17}], 0xc, "a41ba8561d15fc"}) 47.323965ms ago: executing program 9 (id=3509): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000280)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/183, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x100}, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000080)}}], 0xac, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205dad1d02a2a4524d5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f6282e980021d25789ea8edc9"}) 0s ago: executing program 3 (id=3510): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$fuse(0x0, &(0x7f0000008340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000001040)=ANY=[]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xff7ffffd, 0x34034c40, 0x0, 0x0, 0x0, 0x5acb8411, 0x0, 0x0, 0x10}}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r6, r7, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000201, r6, &(0x7f0000000000)='./bus\x00') r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x633, 0x200, 0x25dfdbfc, {{@in=@rand_addr=0x64010100, @in=@multicast2, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x88}, {@in6=@mcast1, 0x0, 0x3c}, @in=@rand_addr=0x64010101, {0x1fe, 0x0, 0x2, 0x2dcd, 0x8, 0x0, 0x400000, 0x8000}, {}, {0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e20, 0x4e22, @in6=@remote}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24008000}, 0x4048040) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000001040)={0x18, 0x0, 0x0, {0x2000}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc}) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c69676e6f726571762c6e6f78617474722c76657273696f6ec2ccfcb759ea6cd1b5ec843d3970323030302e4c2c6b"]) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r10, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f000000a600)={0x18, 0x35, 0x1, 0x1, 0x0, "", [@typed={0x8, 0x103, 0x0, 0x0, @pid=r8}]}, 0x18}], 0x1, 0x0, 0x0, 0x24008015}, 0x20040010) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc002) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) kernel console output (not intermixed with test programs): 84] rust_binder: Failed copying remainder into alloc: EFAULT [ 257.827121][ T8684] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 257.834439][ T8684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 257.842741][ T8684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:262 [ 257.914617][ T31] usb 3-1: device descriptor read/64, error -71 [ 257.947006][ T8691] rust_binder: Error in use_page_slow: ESRCH [ 257.947032][ T8691] rust_binder: use_range failure ESRCH [ 257.953257][ T8691] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 257.959347][ T8691] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 257.967515][ T8691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:269 [ 257.977259][ T8692] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.009373][ T8696] rust_binder: Error while translating object. [ 258.015888][ T8696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 258.022143][ T8696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:274 [ 258.032565][ T8696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.042232][ T8696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 258.048745][ T8696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 258.164512][ T31] usb 3-1: device descriptor read/64, error -71 [ 258.327505][ T8703] input: syz1 as /devices/virtual/input/input36 [ 258.384907][ T4475] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 258.385039][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 258.414473][ T31] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 258.544471][ T31] usb 3-1: device descriptor read/64, error -71 [ 258.784923][ T31] usb 3-1: device descriptor read/64, error -71 [ 258.894449][ T31] usb usb3-port1: attempt power cycle [ 259.234273][ T31] usb 3-1: new low-speed USB device number 110 using dummy_hcd [ 259.255263][ T31] usb 3-1: device descriptor read/8, error -71 [ 259.385560][ T31] usb 3-1: device descriptor read/8, error -71 [ 259.624204][ T31] usb 3-1: new low-speed USB device number 111 using dummy_hcd [ 259.645235][ T31] usb 3-1: device descriptor read/8, error -71 [ 259.744174][ T4475] Bluetooth: hci2: command 0x1003 tx timeout [ 259.744172][ T596] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 259.771736][ T8707] loop2: detected capacity change from 0 to 7 [ 259.778253][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.787512][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 259.795610][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.804969][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 259.806073][ T31] usb 3-1: device descriptor read/8, error -71 [ 259.813026][ T8707] loop2: unable to read partition table [ 259.825225][ T8707] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 259.826383][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.847879][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 259.858224][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.867441][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 259.875907][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.885092][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 259.893279][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.902639][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 259.910960][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.920144][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 259.931924][ T31] usb usb3-port1: unable to enumerate USB device [ 259.985891][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2729'. [ 260.310592][ T8728] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 260.310620][ T8728] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 260.329370][ T8732] /dev/rnullb0: Can't open blockdev [ 260.658722][ T8742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1587 [ 260.743350][ T8748] rust_binder: 278: no such ref 3 [ 260.759118][ T8748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 260.837064][ T330] bridge_slave_1: left allmulticast mode [ 260.851946][ T330] bridge_slave_1: left promiscuous mode [ 260.858256][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.866196][ T330] bridge_slave_0: left allmulticast mode [ 260.871961][ T330] bridge_slave_0: left promiscuous mode [ 260.878553][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.889061][ T330] tipc: Resetting bearer [ 260.940001][ T330] tipc: Disabling bearer [ 261.025634][ T8757] vcan0: entered allmulticast mode [ 261.050646][ T330] tipc: Left network mode [ 261.062846][ T330] veth1_macvtap: left promiscuous mode [ 261.068597][ T330] veth0_vlan: left promiscuous mode [ 261.116697][ T8760] sit0: entered promiscuous mode [ 261.122768][ T8760] netlink: 'syz.5.2748': attribute type 1 has an invalid length. [ 261.130550][ T8760] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2748'. [ 261.158393][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.165524][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.172651][ T8755] bridge_slave_0: entered allmulticast mode [ 261.191675][ T8755] bridge_slave_0: entered promiscuous mode [ 261.198485][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.206287][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.213457][ T8755] bridge_slave_1: entered allmulticast mode [ 261.219982][ T8755] bridge_slave_1: entered promiscuous mode [ 261.294151][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.301251][ T8755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.308646][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.315725][ T8755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.343506][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.363662][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.383107][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.390262][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.402081][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.409181][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.450984][ T8755] veth0_vlan: entered promiscuous mode [ 261.465045][ T8755] veth1_macvtap: entered promiscuous mode [ 261.763812][ T8802] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 261.763911][ T8801] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 261.770364][ T8801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 261.780389][ T36] audit: type=1400 audit(2000000475.003:911): avc: granted { setsecparam } for pid=8800 comm="syz.9.2757" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 262.079382][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2763'. [ 262.088565][ T8821] tipc: Started in network mode [ 262.095929][ T8821] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 262.108294][ T8821] tipc: Enabling of bearer rejected, failed to enable media [ 262.118448][ T8821] rust_binder: Got transaction with invalid offset. [ 262.118493][ T8821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 262.125208][ T8821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299 [ 262.159155][ T8828] binder: Bad value for 'defcontext' [ 262.185426][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 262.202133][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2769'. [ 262.247936][ T36] audit: type=1400 audit(2000000475.473:912): avc: denied { ioctl } for pid=8838 comm="syz.5.2770" path="socket:[52532]" dev="sockfs" ino=52532 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 262.645038][ T8853] rust_binder: Write failure EFAULT in pid:52 [ 262.647434][ T36] audit: type=1326 audit(2000000475.873:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8852 comm="syz.9.2775" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72c838eec9 code=0x0 [ 262.763434][ T31] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 262.914779][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 262.922943][ T31] usb 6-1: not running at top speed; connect to a high speed hub [ 262.931805][ T31] usb 6-1: config 13 has an invalid interface number: 90 but max is 0 [ 262.940271][ T31] usb 6-1: config 13 has no interface number 0 [ 262.947257][ T31] usb 6-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 262.961118][ T31] usb 6-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 262.970486][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.978781][ T31] usb 6-1: Product: syz [ 262.983055][ T31] usb 6-1: Manufacturer: syz [ 262.987973][ T31] usb 6-1: SerialNumber: syz [ 263.577439][ T8857] loop2: detected capacity change from 0 to 7 [ 263.584274][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.593468][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 263.601471][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.610681][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 263.618729][ T8857] loop2: unable to read partition table [ 263.624505][ T8857] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 263.627001][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.647156][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 263.673563][ T8858] loop2: detected capacity change from 7 to 4 [ 263.681472][ T8857] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 263.681506][ T8857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:56 [ 263.718665][ T31] usb 6-1: USB disconnect, device number 38 [ 263.778904][ T8862] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 263.778958][ T8862] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 263.782503][ T8861] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 263.788372][ T8862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:59 [ 263.796802][ T8861] rust_binder: Write failure EINVAL in pid:316 [ 263.867689][ T8874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8874 comm=syz.9.2783 [ 264.133075][ T335] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 264.223080][ T596] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 264.223112][ T4475] Bluetooth: hci0: command 0x1003 tx timeout [ 264.294177][ T335] usb 10-1: config 0 has an invalid interface number: 20 but max is 0 [ 264.302551][ T335] usb 10-1: config 0 has no interface number 0 [ 264.309060][ T335] usb 10-1: config 0 interface 20 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.320628][ T335] usb 10-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.334765][ T335] usb 10-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 264.344211][ T335] usb 10-1: New USB device strings: Mfr=51, Product=0, SerialNumber=0 [ 264.352418][ T335] usb 10-1: Manufacturer: syz [ 264.358160][ T335] usb 10-1: config 0 descriptor?? [ 264.373014][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 264.522964][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 264.781806][ T8900] binder: Unknown parameter 'appraise_type<' [ 264.815233][ T8904] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.815400][ T8904] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 264.829161][ T8904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 264.830265][ T8904] netlink: 'syz.8.2792': attribute type 4 has an invalid length. [ 264.851892][ T8904] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 264.851918][ T8904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:134 [ 264.894283][ T8911] rust_binder: Write failure EFAULT in pid:141 [ 264.988081][ T8921] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.127225][ T335] usbhid 10-1:0.20: can't add hid device: -71 [ 265.139871][ T335] usbhid 10-1:0.20: probe with driver usbhid failed with error -71 [ 265.148933][ T335] usb 10-1: USB disconnect, device number 2 [ 265.284040][ T8935] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2803'. [ 265.323511][ T8953] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.324396][ T8953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 265.330901][ T8953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:167 [ 265.573276][ T8965] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 266.144737][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 266.160799][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 266.168411][ T9] usb 6-1: can't read configurations, error -71 [ 266.717482][ T36] audit: type=1400 audit(2000000479.944:914): avc: denied { mounton } for pid=8988 comm="syz.9.2819" path="/file0" dev="ramfs" ino=53760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 266.755334][ T36] audit: type=1400 audit(2000000479.974:915): avc: denied { read write } for pid=8755 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 266.756199][ T8991] binder: Bad value for 'defcontext' [ 266.785405][ T36] audit: type=1400 audit(2000000479.974:916): avc: denied { open } for pid=8755 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 266.810270][ T36] audit: type=1400 audit(2000000479.974:917): avc: denied { ioctl } for pid=8755 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 266.815922][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2820'. [ 266.889273][ T8999] rust_binder: Fixups oob 178 180 369 186 [ 266.889305][ T8999] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 266.892398][ T36] audit: type=1400 audit(2000000480.114:918): avc: denied { set_context_mgr } for pid=8998 comm="syz.5.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 266.896245][ T8999] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 266.910996][ T36] audit: type=1400 audit(2000000480.114:919): avc: denied { call } for pid=8998 comm="syz.5.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 266.930177][ T8999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 266.957659][ T36] audit: type=1400 audit(2000000480.184:920): avc: denied { read } for pid=9001 comm="syz.9.2824" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 267.012409][ T36] audit: type=1400 audit(2000000480.184:921): avc: denied { read open } for pid=9001 comm="syz.9.2824" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 267.086484][ T9005] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.092369][ T36] audit: type=1400 audit(2000000480.184:922): avc: denied { create } for pid=9001 comm="syz.9.2824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.093911][ T9007] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.120170][ T9005] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 267.442303][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 267.592239][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 267.600136][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 267.608706][ T9] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 267.616807][ T9] usb 10-1: can't read configurations, error -71 [ 267.982660][ T9015] SELinux: syz.5.2829 (9015) set checkreqprot to 1. This is no longer supported. [ 269.398083][ T9032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:383 [ 269.631796][ T31] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 269.734421][ T9035] PM: Enabling pm_trace changes system date and time during resume. [ 269.734421][ T9035] PM: Correct system time has to be restored manually after resume. [ 269.754086][ T9035] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 269.793882][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.804017][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.816905][ T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.839374][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.851673][ T31] usb 6-1: Product: syz [ 269.855874][ T31] usb 6-1: Manufacturer: syz [ 269.860491][ T31] usb 6-1: SerialNumber: syz [ 270.104174][ T31] usb 6-1: 0:2 : does not exist [ 270.118339][ T31] usb 6-1: USB disconnect, device number 41 [ 270.197068][ T7163] udevd[7163]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 270.778274][ T9065] rust_binder: Got transaction with invalid offset. [ 270.778317][ T9065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 270.785690][ T9065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 271.331349][ T31] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 271.491322][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 271.498570][ T31] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 271.506820][ T31] usb 10-1: config 0 has no interface number 0 [ 271.513126][ T31] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 271.523067][ T31] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 271.533086][ T31] usb 10-1: config 0 interface 41 has no altsetting 0 [ 271.543385][ T31] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 271.552589][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.560773][ T31] usb 10-1: Product: syz [ 271.565065][ T31] usb 10-1: Manufacturer: syz [ 271.569792][ T31] usb 10-1: SerialNumber: syz [ 271.576363][ T31] usb 10-1: config 0 descriptor?? [ 271.583639][ T9076] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 271.591314][ T9076] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 271.703256][ T9081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.800014][ T36] kauditd_printk_skb: 503 callbacks suppressed [ 271.800036][ T36] audit: type=1400 audit(2000000485.025:1369): avc: denied { ioctl } for pid=9075 comm="syz.9.2849" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.801388][ T9076] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 271.807288][ T36] audit: type=1400 audit(2000000485.025:1370): avc: denied { ioctl } for pid=9075 comm="syz.9.2849" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.813513][ T9076] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 271.840107][ T36] audit: type=1400 audit(2000000485.025:1371): avc: denied { ioctl } for pid=9075 comm="syz.9.2849" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.902747][ T36] audit: type=1400 audit(2000000485.035:1372): avc: denied { ioctl } for pid=9075 comm="syz.9.2849" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.927666][ T36] audit: type=1400 audit(2000000485.045:1373): avc: denied { ioctl } for pid=9075 comm="syz.9.2849" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.952547][ T36] audit: type=1400 audit(2000000485.075:1374): avc: denied { ioctl } for pid=9075 comm="syz.9.2849" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.023164][ T36] audit: type=1400 audit(2000000485.255:1375): avc: denied { read write } for pid=7757 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.057919][ T36] audit: type=1400 audit(2000000485.255:1376): avc: denied { read write open } for pid=7757 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.062604][ T9076] SELinux: security_context_str_to_sid (syste_uGй :00000000000000000000003) failed with errno=-22 [ 272.085493][ T36] audit: type=1400 audit(2000000485.255:1377): avc: denied { ioctl } for pid=7757 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.127349][ T31] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 272.131644][ T36] audit: type=1400 audit(2000000485.285:1378): avc: denied { read } for pid=9085 comm="syz.5.2853" name="binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 272.160614][ T31] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 272.180424][ T31] usb 10-1: USB disconnect, device number 5 [ 272.302687][ T9089] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 272.303063][ T9089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:400 [ 272.373111][ T9091] rust_binder: Error in use_page_slow: ESRCH [ 272.383494][ T9091] rust_binder: use_range failure ESRCH [ 272.389500][ T9091] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 272.395046][ T9091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 272.403070][ T9091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:402 [ 272.414538][ T9092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 272.660856][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2859'. [ 272.687469][ T9103] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 272.687503][ T9103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:127 [ 272.811039][ T31] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 272.897747][ T9105] tmpfs: Unknown parameter 'noinode32' [ 272.970996][ T31] usb 6-1: Invalid ep0 maxpacket: 32 [ 273.106871][ T31] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 273.274022][ T9111] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.281164][ T31] usb 6-1: Invalid ep0 maxpacket: 32 [ 273.281407][ T9111] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.287099][ T31] usb usb6-port1: attempt power cycle [ 273.293853][ T9111] bridge_slave_0: entered allmulticast mode [ 273.305541][ T9111] bridge_slave_0: entered promiscuous mode [ 273.313035][ T9111] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.320116][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.327279][ T9111] bridge_slave_1: entered allmulticast mode [ 273.333638][ T9111] bridge_slave_1: entered promiscuous mode [ 273.427264][ T9111] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.434395][ T9111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.441729][ T9111] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.448769][ T9111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.503422][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.510859][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.524963][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.532067][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.543578][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.550800][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.636062][ T9111] veth0_vlan: entered promiscuous mode [ 273.641722][ T31] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 273.661885][ T31] usb 6-1: Invalid ep0 maxpacket: 32 [ 273.681187][ T9111] veth1_macvtap: entered promiscuous mode [ 273.800389][ T9122] 9pnet_fd: Insufficient options for proto=fd [ 273.806622][ T31] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 273.838964][ T31] usb 6-1: Invalid ep0 maxpacket: 32 [ 273.844504][ T31] usb usb6-port1: unable to enumerate USB device [ 273.983630][ T9127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.059303][ T9130] netlink: 'syz.9.2865': attribute type 64 has an invalid length. [ 274.094009][ T9130] netlink: 'syz.9.2865': attribute type 4 has an invalid length. [ 274.231125][ T9138] rust_binder: Error while translating object. [ 274.231171][ T9138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 274.237517][ T9138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 274.530581][ T710] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 274.690571][ T710] usb 2-1: Using ep0 maxpacket: 32 [ 274.698359][ T710] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.708576][ T710] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 274.717715][ T710] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 274.726799][ T710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.736464][ T710] usb 2-1: config 0 descriptor?? [ 274.949363][ T9141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.959022][ T9141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.968729][ T31] usb 2-1: USB disconnect, device number 6 [ 275.010801][ T9147] random: crng reseeded on system resumption [ 275.037405][ T9147] Unrecognized hibernate image header format! [ 275.043547][ T9147] PM: hibernation: Image mismatch: architecture specific data [ 275.522789][ T9150] rust_binder: Error while translating object. [ 275.522847][ T9150] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 275.529370][ T9150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:16 [ 275.853783][ T9166] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 275.936511][ T9169] Invalid ELF header magic: != ELF [ 276.078041][ T9175] __vm_enough_memory: pid: 9175, comm: syz.1.2879, bytes: 18014402804453376 not enough memory for the allocation [ 276.090068][ T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 276.230201][ T9] usb 6-1: device descriptor read/64, error -71 [ 276.480152][ T9] usb 6-1: device descriptor read/64, error -71 [ 276.720108][ T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 276.800528][ T36] kauditd_printk_skb: 569 callbacks suppressed [ 276.800548][ T36] audit: type=1400 audit(2000000490.036:1948): avc: denied { ioctl } for pid=9161 comm="syz.5.2875" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.860036][ T9] usb 6-1: device descriptor read/64, error -71 [ 276.970699][ T36] audit: type=1400 audit(2000000490.206:1949): avc: denied { ioctl } for pid=9161 comm="syz.5.2875" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.995766][ T36] audit: type=1400 audit(2000000490.206:1950): avc: denied { ioctl } for pid=9161 comm="syz.5.2875" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.020870][ T36] audit: type=1400 audit(2000000490.226:1951): avc: denied { ioctl } for pid=9161 comm="syz.5.2875" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.045832][ T36] audit: type=1400 audit(2000000490.226:1952): avc: denied { ioctl } for pid=9161 comm="syz.5.2875" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.071570][ T36] audit: type=1400 audit(2000000490.226:1953): avc: denied { ioctl } for pid=9161 comm="syz.5.2875" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.096573][ T36] audit: type=1400 audit(2000000490.226:1954): avc: denied { ioctl } for pid=9161 comm="syz.5.2875" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.121564][ T36] audit: type=1400 audit(2000000490.226:1955): avc: denied { ioctl } for pid=9161 comm="syz.5.2875" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.146499][ T9] usb 6-1: device descriptor read/64, error -71 [ 277.148329][ T36] audit: type=1400 audit(2000000490.306:1956): avc: denied { ioctl } for pid=9161 comm="syz.5.2875" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.182303][ T36] audit: type=1400 audit(2000000490.416:1957): avc: denied { read write } for pid=8755 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.260443][ T9] usb usb6-port1: attempt power cycle [ 277.480435][ T9194] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 277.599921][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 277.622166][ T9] usb 6-1: device descriptor read/8, error -71 [ 277.752230][ T9] usb 6-1: device descriptor read/8, error -71 [ 277.862667][ T9197] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.867856][ T9197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:191 [ 277.933419][ T9199] x_tables: duplicate underflow at hook 1 [ 277.989745][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 278.015359][ T9202] __vm_enough_memory: pid: 9202, comm: syz.8.2890, bytes: 18014402804453376 not enough memory for the allocation [ 278.030425][ T9] usb 6-1: device descriptor read/8, error -71 [ 278.086737][ T9204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 278.089234][ T9204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:198 [ 278.166205][ T9] usb 6-1: device descriptor read/8, error -71 [ 278.193592][ T9207] binder: Unknown parameter 'defcontext01777777777777777777777' [ 278.310197][ T9] usb usb6-port1: unable to enumerate USB device [ 278.611657][ T9230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:36 [ 278.730238][ T9237] rust_binder: Write failure EFAULT in pid:214 [ 278.926490][ T9248] 9pnet_fd: Insufficient options for proto=fd [ 279.100950][ T9253] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 279.100979][ T9253] rust_binder: Error while translating object. [ 279.125635][ T9253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 279.139518][ T9253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:422 [ 279.435223][ T9276] rust_binder: 62: no such ref 0 [ 279.450724][ T9276] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 279.457979][ T9276] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 279.512713][ T9279] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2916'. [ 279.525181][ T9279] rust_binder: Write failure EFAULT in pid:65 [ 279.729440][ T696] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 279.806516][ T9289] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2921'. [ 279.911692][ T696] usb 6-1: config 5 has an invalid interface number: 157 but max is 0 [ 279.919986][ T696] usb 6-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 279.928673][ T696] usb 6-1: config 5 has no interface number 0 [ 279.934837][ T696] usb 6-1: config 5 interface 157 altsetting 200 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 279.946072][ T696] usb 6-1: config 5 interface 157 altsetting 200 has an invalid descriptor for endpoint zero, skipping [ 279.957331][ T696] usb 6-1: config 5 interface 157 altsetting 200 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 279.968596][ T696] usb 6-1: config 5 interface 157 altsetting 200 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 279.980042][ T696] usb 6-1: config 5 interface 157 altsetting 200 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 280.006700][ T696] usb 6-1: config 5 interface 157 altsetting 200 endpoint 0x8C has invalid maxpacket 6150, setting to 64 [ 280.018115][ T696] usb 6-1: config 5 interface 157 altsetting 200 has a duplicate endpoint with address 0xE, skipping [ 280.029111][ T696] usb 6-1: config 5 interface 157 altsetting 200 has an invalid descriptor for endpoint zero, skipping [ 280.041131][ T696] usb 6-1: config 5 interface 157 altsetting 200 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 280.075196][ T696] usb 6-1: config 5 interface 157 has no altsetting 0 [ 280.093391][ T696] usb 6-1: New USB device found, idVendor=04cb, idProduct=0129, bcdDevice=b7.5a [ 280.103307][ T696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.105449][ T9294] rust_binder: Write failure EFAULT in pid:72 [ 280.112060][ T696] usb 6-1: Product: syz [ 280.124116][ T696] usb 6-1: Manufacturer: ᐌ [ 280.128955][ T696] usb 6-1: SerialNumber: syz [ 280.138246][ T9267] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 280.161919][ T9267] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 280.405612][ T696] usb 6-1: USB disconnect, device number 50 [ 280.472396][ T9312] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 280.505250][ T9314] rust_binder: Write failure EFAULT in pid:206 [ 280.642533][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.754758][ T9321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 280.769105][ T9321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:210 [ 280.989023][ T696] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 281.189089][ T696] usb 2-1: Using ep0 maxpacket: 32 [ 281.208893][ T696] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.229046][ T9330] binder: Unknown parameter '0x0000000000000003' [ 281.249901][ T696] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 281.274359][ T696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.291705][ T696] usb 2-1: Product: syz [ 281.298576][ T696] usb 2-1: Manufacturer: syz [ 281.304124][ T696] usb 2-1: SerialNumber: syz [ 281.311605][ T696] usb 2-1: config 0 descriptor?? [ 281.325929][ T696] ums-jumpshot 2-1:0.0: USB Mass Storage device detected [ 281.354760][ T696] ums-jumpshot 2-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 281.449604][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.449924][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.457667][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.477201][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.487347][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.518121][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.518473][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.527771][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.528014][ T9337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 281.536792][ T9320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.565604][ T9320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.586052][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.586372][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.595497][ T9337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:438 [ 281.600889][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.615652][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.624500][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.629672][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.636547][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.657182][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.657925][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.675136][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.689942][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.698445][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.706447][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.728466][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.731587][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.745107][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.745459][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.769190][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.769549][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.777071][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.785607][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.802798][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.811072][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.813910][ T36] kauditd_printk_skb: 862 callbacks suppressed [ 281.813927][ T36] audit: type=1400 audit(2000000495.048:2820): avc: denied { map } for pid=9335 comm="syz.5.2936" path="/dev/binderfs/binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 281.822609][ T36] audit: type=1400 audit(2000000495.048:2821): avc: denied { read } for pid=9335 comm="syz.5.2936" path="/dev/binderfs/binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 281.851119][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.883766][ T36] audit: type=1400 audit(2000000495.058:2822): avc: denied { map } for pid=9335 comm="syz.5.2936" path="/dev/binderfs/binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 281.949805][ T9346] netlink: 380 bytes leftover after parsing attributes in process `syz.9.2940'. [ 281.968793][ T36] audit: type=1400 audit(2000000495.058:2823): avc: denied { read } for pid=9335 comm="syz.5.2936" path="/dev/binderfs/binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 282.011852][ T9336] audit: audit_backlog=65 > audit_backlog_limit=64 [ 282.020559][ T36] audit: type=1400 audit(2000000495.088:2824): avc: denied { ioctl } for pid=9335 comm="syz.5.2936" path="/dev/binderfs/binder1" dev="binder" ino=22 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 282.027890][ T9346] overlay: ./file0 is not a directory [ 282.055611][ T9348] audit: audit_backlog=65 > audit_backlog_limit=64 [ 282.068806][ T9336] audit: audit_lost=21 audit_rate_limit=0 audit_backlog_limit=64 [ 282.078764][ T9348] audit: audit_lost=22 audit_rate_limit=0 audit_backlog_limit=64 [ 282.088741][ T36] audit: type=1400 audit(2000000495.128:2825): avc: denied { read write } for pid=8755 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.345677][ T369] usb 2-1: USB disconnect, device number 7 [ 282.758594][ T369] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 282.954865][ T369] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.973895][ T369] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.008223][ T369] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.024718][ T369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.049949][ T369] usb 2-1: Product: syz [ 283.060242][ T369] usb 2-1: Manufacturer: syz [ 283.070379][ T369] usb 2-1: SerialNumber: syz [ 283.211848][ T9390] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.212287][ T9390] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.440432][ T9406] can0: slcan on ptm0. [ 283.459312][ T9406] overlay: Unknown parameter 'dont_measure' [ 283.478482][ T9404] rust_binder: Error while translating object. [ 283.478519][ T9404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 283.484845][ T9404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233 [ 283.500297][ T369] usb 2-1: cannot find UAC_HEADER [ 283.522164][ T369] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 283.536583][ T369] usb 2-1: USB disconnect, device number 8 [ 283.609058][ T9405] can0 (unregistered): slcan off ptm0. [ 283.680172][ T9409] udevd[9409]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 284.048320][ T66] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 284.188922][ T66] usb 6-1: device descriptor read/64, error -71 [ 284.314508][ T9446] netlink: 'syz.1.2965': attribute type 1 has an invalid length. [ 284.336988][ T9446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2965'. [ 284.438244][ T66] usb 6-1: device descriptor read/64, error -71 [ 284.534480][ T31] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 284.565202][ T31] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 284.666398][ T9464] netlink: 'syz.9.2971': attribute type 16 has an invalid length. [ 284.678137][ T66] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 284.774758][ T9465] fido_id[9465]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 284.828142][ T66] usb 6-1: device descriptor read/64, error -71 [ 284.852336][ T9462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 284.852375][ T9462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 285.078061][ T66] usb 6-1: device descriptor read/64, error -71 [ 285.198102][ T66] usb usb6-port1: attempt power cycle [ 285.536595][ T9483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260 [ 285.544419][ T66] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 285.612941][ T66] usb 6-1: device descriptor read/8, error -71 [ 285.675814][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.677114][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.688458][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.695298][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.702163][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.709000][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.715814][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.722745][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.729623][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.736454][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.752702][ T66] usb 6-1: device descriptor read/8, error -71 [ 285.776470][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.776810][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.783706][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.791258][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.798871][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.807682][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.815466][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.824152][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.831690][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.840669][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.847543][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.854421][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.861187][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.868052][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.874817][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.881594][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.888360][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.895049][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.899249][ T696] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 285.903284][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.910086][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 285.915912][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.929878][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.936722][ T9490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.017886][ T66] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 286.050493][ T66] usb 6-1: device descriptor read/8, error -71 [ 286.067815][ T696] usb 10-1: Using ep0 maxpacket: 32 [ 286.073128][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 286.081672][ T696] usb 10-1: config 0 has an invalid interface number: 72 but max is 0 [ 286.090033][ T31] usb 2-1: config 250 has an invalid interface number: 8 but max is 0 [ 286.098301][ T696] usb 10-1: config 0 has no interface number 0 [ 286.104480][ T696] usb 10-1: config 0 interface 72 has no altsetting 0 [ 286.111583][ T31] usb 2-1: config 250 has an invalid descriptor of length 64, skipping remainder of the config [ 286.122213][ T31] usb 2-1: config 250 has no interface number 0 [ 286.128552][ T31] usb 2-1: config 250 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.141844][ T31] usb 2-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=b6.f9 [ 286.151066][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.163272][ T696] usb 10-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 286.172671][ T696] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.180892][ T696] usb 10-1: Product: syz [ 286.185302][ T696] usb 10-1: Manufacturer: syz [ 286.190097][ T696] usb 10-1: SerialNumber: syz [ 286.198178][ T66] usb 6-1: device descriptor read/8, error -71 [ 286.217945][ T696] usb 10-1: config 0 descriptor?? [ 286.307908][ T66] usb usb6-port1: unable to enumerate USB device [ 286.387004][ T31] usb 2-1: string descriptor 0 read error: -71 [ 286.395067][ T31] usb 2-1: USB disconnect, device number 9 [ 286.435225][ T696] usb 10-1: MIDIStreaming interface descriptor not found [ 286.462912][ T696] usb 10-1: USB disconnect, device number 6 [ 286.523919][ T7163] udevd[7163]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.72/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 286.790749][ T9495] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.803171][ T9495] rust_binder: Failed to allocate buffer. len:4294966736, is_oneway:false [ 286.809953][ T9495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 286.822151][ T9495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:249 [ 286.838654][ T36] kauditd_printk_skb: 1042 callbacks suppressed [ 286.838676][ T36] audit: type=1400 audit(2000000500.079:3857): avc: denied { read write } for pid=7757 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 286.927601][ T36] audit: type=1400 audit(2000000500.079:3858): avc: denied { read write open } for pid=7757 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.037375][ T36] audit: type=1400 audit(2000000500.079:3859): avc: denied { ioctl } for pid=7757 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.094106][ T36] audit: type=1400 audit(2000000500.129:3860): avc: denied { read write } for pid=8216 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.155415][ T36] audit: type=1400 audit(2000000500.129:3861): avc: denied { read write open } for pid=8216 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.206031][ T36] audit: type=1400 audit(2000000500.129:3862): avc: denied { ioctl } for pid=8216 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.248188][ T9514] fuse: Unknown parameter '' [ 287.255186][ T36] audit: type=1400 audit(2000000500.139:3863): avc: denied { read } for pid=9496 comm="syz.5.2977" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 287.283803][ T36] audit: type=1400 audit(2000000500.139:3864): avc: denied { read open } for pid=9496 comm="syz.5.2977" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 287.344539][ T36] audit: type=1400 audit(2000000500.139:3865): avc: denied { ioctl } for pid=9496 comm="syz.5.2977" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 287.433445][ T9518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 287.481576][ T9522] rust_binder: 260: no such ref 0 [ 287.501777][ T9525] sock: sock_set_timeout: `syz.5.2985' (pid 9525) tries to set negative timeout [ 287.517686][ T9522] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 287.535863][ T9522] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 287.557472][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 287.709910][ T9] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 287.719127][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.729151][ T9] usb 10-1: config 0 descriptor?? [ 287.887399][ T66] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 288.037338][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 288.045586][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 288.055361][ T9532] rust_binder: Write failure EFAULT in pid:115 [ 288.061495][ T66] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 288.075366][ T66] usb 2-1: can't read configurations, error -71 [ 288.545039][ T9514] netlink: 'syz.9.2982': attribute type 4 has an invalid length. [ 288.553477][ T9] usb 10-1: Cannot set autoneg [ 288.564927][ T9] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 288.597735][ T9] usb 10-1: USB disconnect, device number 7 [ 289.427070][ T9577] netlink: 'syz.5.3004': attribute type 4 has an invalid length. [ 289.507016][ T696] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 289.657030][ T696] usb 10-1: Using ep0 maxpacket: 8 [ 289.665275][ T696] usb 10-1: unable to get BOS descriptor or descriptor too short [ 289.675316][ T696] usb 10-1: config 4 has an invalid interface number: 147 but max is 0 [ 289.683646][ T696] usb 10-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 289.692465][ T696] usb 10-1: config 4 has no interface number 0 [ 289.701653][ T696] usb 10-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 289.710839][ T696] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.719173][ T696] usb 10-1: Product: syz [ 289.723470][ T696] usb 10-1: Manufacturer: syz [ 289.728184][ T696] usb 10-1: SerialNumber: syz [ 289.947007][ T9571] rust_binder: Error while translating object. [ 289.947052][ T9571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 289.953258][ T9571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:275 [ 289.966331][ T696] usb 10-1: Found UVC 0.02 device syz (04f2:b746) [ 289.985634][ T696] usb 10-1: No valid video chain found. [ 289.993546][ T696] usb 10-1: USB disconnect, device number 8 [ 290.566770][ T335] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 290.735237][ T335] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 290.775369][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.795658][ T335] usb 2-1: config 0 descriptor?? [ 290.901482][ T9610] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 291.045039][ T331] bridge_slave_1: left allmulticast mode [ 291.050918][ T331] bridge_slave_1: left promiscuous mode [ 291.057503][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.065879][ T331] bridge_slave_0: left allmulticast mode [ 291.071741][ T331] bridge_slave_0: left promiscuous mode [ 291.077749][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.200070][ T331] veth1_macvtap: left promiscuous mode [ 291.205700][ T331] veth0_vlan: left promiscuous mode [ 291.236592][ T66] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 291.272891][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'. [ 291.290933][ T9591] rust_binder: Error while translating object. [ 291.290984][ T9591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 291.297248][ T9591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 291.350618][ T9614] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.366929][ T9614] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.374076][ T9614] bridge_slave_0: entered allmulticast mode [ 291.381842][ T9614] bridge_slave_0: entered promiscuous mode [ 291.387724][ T66] usb 10-1: Using ep0 maxpacket: 16 [ 291.390774][ T9614] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.395993][ T66] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.400309][ T9614] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.418654][ T335] usb 2-1: Cannot set MAC address [ 291.423759][ T335] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 291.426530][ T66] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 291.435552][ T9614] bridge_slave_1: entered allmulticast mode [ 291.455100][ T335] usb 2-1: USB disconnect, device number 12 [ 291.470035][ T66] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 291.471297][ T9614] bridge_slave_1: entered promiscuous mode [ 291.480616][ T66] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.516104][ T66] usb 10-1: config 0 descriptor?? [ 291.621219][ T9614] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.628337][ T9614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.635651][ T9614] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.642725][ T9614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.702490][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.709977][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.725976][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.733089][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.745558][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.752665][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.847035][ T9614] veth0_vlan: entered promiscuous mode [ 291.857704][ T36] kauditd_printk_skb: 601 callbacks suppressed [ 291.857724][ T36] audit: type=1400 audit(2000000505.090:4465): avc: denied { sys_module } for pid=9614 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 291.889371][ T36] audit: type=1400 audit(2000000505.090:4466): avc: denied { sys_module } for pid=9614 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 291.896734][ T9614] veth1_macvtap: entered promiscuous mode [ 291.911991][ T36] audit: type=1400 audit(2000000505.090:4467): avc: denied { sys_module } for pid=9614 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 291.953143][ T36] audit: type=1400 audit(2000000505.090:4468): avc: denied { sys_module } for pid=9614 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 291.957059][ T66] usbhid 10-1:0.0: can't add hid device: -71 [ 291.981411][ T36] audit: type=1400 audit(2000000505.090:4469): avc: denied { sys_module } for pid=9614 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 292.037324][ T66] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 292.037559][ T36] audit: type=1400 audit(2000000505.090:4470): avc: denied { sys_module } for pid=9614 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 292.070834][ T66] usb 10-1: USB disconnect, device number 9 [ 292.086413][ T36] audit: type=1400 audit(2000000505.100:4471): avc: denied { sys_module } for pid=9614 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 292.119552][ T36] audit: type=1400 audit(2000000505.100:4472): avc: denied { sys_module } for pid=9614 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 292.167153][ T36] audit: type=1400 audit(2000000505.100:4473): avc: denied { sys_module } for pid=9614 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 292.226429][ T36] audit: type=1400 audit(2000000505.100:4474): avc: denied { sys_module } for pid=9614 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 292.251855][ T9633] syzkaller0: entered promiscuous mode [ 292.259612][ T9630] binder: Bad value for 'stats' [ 292.264628][ T9633] syzkaller0: entered allmulticast mode [ 292.457083][ T9641] netlink: 'syz.1.3025': attribute type 4 has an invalid length. [ 292.466065][ T9642] netlink: 'syz.1.3025': attribute type 4 has an invalid length. [ 292.631585][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.658356][ T9656] rust_binder: Write failure EFAULT in pid:140 [ 292.680533][ T9661] netlink: 182 bytes leftover after parsing attributes in process `syz.9.3029'. [ 292.708215][ T9661] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 292.775069][ T9664] rust_binder: Error while translating object. [ 292.775103][ T9664] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 292.777391][ T9663] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 292.782997][ T9664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:301 [ 292.791157][ T9663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 292.883714][ T9669] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.901863][ T9669] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.917107][ T9669] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 294.745785][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 294.853855][ T9763] rust_binder: Error while translating object. [ 294.853895][ T9763] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 294.860165][ T9763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:37 [ 294.905731][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 294.944650][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 294.953617][ T9] usb 2-1: config 179 has no interface number 0 [ 294.960180][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 294.971548][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 295.000507][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 295.014037][ T9] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 295.028827][ T9] usb 2-1: config 179 interface 65 has no altsetting 0 [ 295.038684][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 295.056520][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.311026][ T9] usb 2-1: USB disconnect, device number 13 [ 295.928477][ T9814] rust_binder: Write failure EINVAL in pid:330 [ 296.353502][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3086'. [ 296.389625][ T9838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=9838 comm=syz.9.3086 [ 296.427323][ T9838] SELinux: security_context_str_to_sid () failed with errno=-22 [ 296.778246][ T9851] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3092'. [ 296.895967][ T36] kauditd_printk_skb: 1621 callbacks suppressed [ 296.895988][ T36] audit: type=1400 audit(2000000510.142:6096): avc: denied { ioctl } for pid=9850 comm="syz.9.3092" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 296.965861][ T36] audit: type=1400 audit(2000000510.212:6097): avc: denied { ioctl } for pid=9850 comm="syz.9.3092" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.025303][ T369] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 297.033716][ T36] audit: type=1400 audit(2000000510.272:6098): avc: denied { ioctl } for pid=9850 comm="syz.9.3092" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.059732][ T36] audit: type=1400 audit(2000000510.282:6099): avc: denied { ioctl } for pid=9850 comm="syz.9.3092" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.088880][ T36] audit: type=1400 audit(2000000510.282:6100): avc: denied { ioctl } for pid=9850 comm="syz.9.3092" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.114969][ T36] audit: type=1400 audit(2000000510.352:6101): avc: denied { ioctl } for pid=9850 comm="syz.9.3092" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.185405][ T369] usb 10-1: Using ep0 maxpacket: 8 [ 297.191219][ T36] audit: type=1400 audit(2000000510.432:6102): avc: denied { ioctl } for pid=9850 comm="syz.9.3092" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.217268][ T36] audit: type=1400 audit(2000000510.462:6103): avc: denied { ioctl } for pid=9850 comm="syz.9.3092" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.218642][ T369] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 297.242317][ T36] audit: type=1400 audit(2000000510.462:6104): avc: denied { ioctl } for pid=9850 comm="syz.9.3092" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.251285][ T369] usb 10-1: config 179 has no interface number 0 [ 297.277879][ T36] audit: type=1400 audit(2000000510.462:6105): avc: denied { ioctl } for pid=9850 comm="syz.9.3092" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.309002][ T369] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 297.344981][ T9854] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.350775][ T369] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 297.352173][ T9855] 2N: renamed from vcan0 (while UP) [ 297.370988][ T369] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 297.423418][ T369] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 297.457275][ T369] usb 10-1: config 179 interface 65 has no altsetting 0 [ 297.471598][ T369] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 297.505355][ T369] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.703763][ T9865] incfs_lookup_dentry err:-13 [ 297.919774][ T9883] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3101'. [ 298.195339][ T66] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 298.252026][ T696] usb 10-1: USB disconnect, device number 10 [ 298.301601][ T9893] __vm_enough_memory: pid: 9893, comm: syz.9.3107, bytes: 18014402804453376 not enough memory for the allocation [ 298.325370][ T335] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 298.345350][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 298.364146][ T66] usb 2-1: config 8 has an invalid interface number: 203 but max is 0 [ 298.383566][ T66] usb 2-1: config 8 has no interface number 0 [ 298.395313][ T66] usb 2-1: config 8 interface 203 has no altsetting 0 [ 298.419585][ T66] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 298.438888][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.455436][ T66] usb 2-1: Product: syz [ 298.465909][ T66] usb 2-1: Manufacturer: syz [ 298.473139][ T66] usb 2-1: SerialNumber: syz [ 298.475311][ T335] usb 4-1: device descriptor read/64, error -71 [ 298.595447][ T9907] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 298.602146][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 298.715294][ T335] usb 4-1: device descriptor read/64, error -71 [ 298.747829][ T9882] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.965290][ T335] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 299.115296][ T335] usb 4-1: device descriptor read/64, error -71 [ 299.355333][ T335] usb 4-1: device descriptor read/64, error -71 [ 299.465804][ T335] usb usb4-port1: attempt power cycle [ 299.805302][ T335] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 299.827876][ T335] usb 4-1: device descriptor read/8, error -71 [ 299.957650][ T335] usb 4-1: device descriptor read/8, error -71 [ 300.195321][ T335] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 300.217598][ T335] usb 4-1: device descriptor read/8, error -71 [ 300.349766][ T335] usb 4-1: device descriptor read/8, error -71 [ 300.465399][ T335] usb usb4-port1: unable to enumerate USB device [ 300.615311][ T596] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 300.615321][ T4475] Bluetooth: hci0: command 0x1003 tx timeout [ 300.952696][ T66] usb 2-1: USB disconnect, device number 14 [ 301.070267][ T9927] rust_binder: Write failure EFAULT in pid:191 [ 301.426477][ T9942] binder: Unknown parameter '00000000000000000003' [ 301.519625][ T9946] rust_binder: 200: no such ref 0 [ 301.533229][ T9946] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 301.544652][ T9946] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 301.612009][ T9950] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 301.612039][ T9950] rust_binder: Error while translating object. [ 301.635290][ T9950] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 301.641521][ T9950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:383 [ 301.838147][ T9959] rust_binder: Error while translating object. [ 301.852600][ T9961] rust_binder: 206: no such ref 3 [ 301.875349][ T9959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 301.875390][ T9959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 301.887165][ T9961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:206 [ 301.916430][ T36] kauditd_printk_skb: 579 callbacks suppressed [ 301.916450][ T36] audit: type=1400 audit(2000000515.162:6685): avc: denied { mounton } for pid=9960 comm="syz.1.3132" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 302.035352][ T36] audit: type=1400 audit(2000000515.172:6686): avc: denied { create } for pid=9962 comm="syz.9.3133" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.119544][ T36] audit: type=1400 audit(2000000515.172:6687): avc: denied { map } for pid=9962 comm="syz.9.3133" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=59709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.196683][ T36] audit: type=1400 audit(2000000515.172:6688): avc: denied { read write } for pid=9962 comm="syz.9.3133" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=59709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.236401][ T9972] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3131'. [ 302.272146][ T36] audit: type=1400 audit(2000000515.172:6689): avc: denied { create } for pid=9962 comm="syz.9.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 302.275319][ T9972] gretap0: entered promiscuous mode [ 302.297891][ T36] audit: type=1400 audit(2000000515.182:6690): avc: denied { write } for pid=9962 comm="syz.9.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 302.297928][ T36] audit: type=1400 audit(2000000515.182:6691): avc: denied { nlmsg_write } for pid=9962 comm="syz.9.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 302.297958][ T36] audit: type=1400 audit(2000000515.182:6692): avc: denied { create } for pid=9962 comm="syz.9.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 302.297988][ T36] audit: type=1400 audit(2000000515.192:6693): avc: denied { setopt } for pid=9962 comm="syz.9.3133" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 302.298017][ T36] audit: type=1400 audit(2000000515.192:6694): avc: denied { create } for pid=9962 comm="syz.9.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 302.477676][ T9985] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.479362][ T9985] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 302.486767][ T9985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:213 [ 302.615318][ T335] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 302.644652][ T9986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:396 [ 302.797908][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 302.820892][ T335] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 302.834239][ T9994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:400 [ 302.834315][ T335] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 302.852696][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.863041][ T335] usb 4-1: config 0 descriptor?? [ 302.869544][ T9978] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 303.245328][ T9] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 303.282252][ T335] smartjoyplus 0003:0925:8866.0014: hidraw0: USB HID vff.fa Device [HID 0925:8866] on usb-dummy_hcd.3-1/input0 [ 303.304315][ T335] smartjoyplus 0003:0925:8866.0014: no output reports found [ 303.405293][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 303.413033][ T9] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 303.421813][ T9] usb 10-1: config 1 has no interface number 0 [ 303.428087][ T9] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 303.441160][ T9] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 303.465278][ T9] usb 10-1: config 1 interface 105 has no altsetting 0 [ 303.478998][ T9] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 303.490244][ T696] usb 4-1: USB disconnect, device number 18 [ 303.495275][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.521894][ T9] usb 10-1: Product: syz [ 303.526294][ T9] usb 10-1: Manufacturer: syz [ 303.531007][ T9] usb 10-1: SerialNumber: syz [ 303.548505][T10001] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 303.559412][T10001] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 303.777875][T10001] can0: slcan on ptm0. [ 303.986427][T10041] 9pnet_fd: Insufficient options for proto=fd [ 303.989925][T10001] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 304.005836][T10001] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 304.064836][T10044] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 304.468164][T10069] binder: Unknown parameter 'fscontext?}' [ 304.879216][T10000] can0 (unregistered): slcan off ptm0. [ 304.885167][ T9] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 304.914212][ T9] aqc111 10-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 304.955337][ T9] usb 10-1: USB disconnect, device number 11 [ 304.961925][ T9] aqc111 10-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 305.064410][ T9] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 305.078040][ T9] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 305.095350][ T9] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 305.339180][T10114] rust_binder: Write failure EFAULT in pid:105 [ 305.378871][T10119] netlink: 'syz.1.3177': attribute type 4 has an invalid length. [ 305.417991][T10119] netlink: 'syz.1.3177': attribute type 4 has an invalid length. [ 305.554673][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3181'. [ 305.596563][T10130] rust_binder: Error while translating object. [ 305.596610][T10130] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 305.602828][T10130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 305.917370][T10143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 305.960795][T10143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253 [ 305.976322][T10147] netlink: 'syz.3.3186': attribute type 4 has an invalid length. [ 306.003946][T10147] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3186'. [ 306.049643][T10151] netlink: 'syz.3.3186': attribute type 1 has an invalid length. [ 306.091452][T10147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 306.113425][T10151] netlink: 'syz.3.3186': attribute type 2 has an invalid length. [ 306.199435][T10165] input: syz0 as /devices/virtual/input/input40 [ 306.457202][T10175] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 306.464526][T10175] rust_binder: Write failure EINVAL in pid:116 [ 306.765352][T10189] rust_binder: 266: no such ref 0 [ 306.942551][ T36] kauditd_printk_skb: 1202 callbacks suppressed [ 306.942571][ T36] audit: type=1400 audit(2000000520.182:7897): avc: denied { read write } for pid=9614 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.993719][ T36] audit: type=1400 audit(2000000520.222:7898): avc: denied { ioctl } for pid=10186 comm="syz.1.3196" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.020277][T10209] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.020700][T10209] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.055512][ T36] audit: type=1400 audit(2000000520.222:7899): avc: denied { read write open } for pid=9614 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 307.090731][T10211] netlink: 'syz.5.3202': attribute type 1 has an invalid length. [ 307.100467][T10211] 9pnet_fd: Insufficient options for proto=fd [ 307.106625][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 307.115405][ T36] audit: type=1400 audit(2000000520.222:7900): avc: denied { ioctl } for pid=9614 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 307.178024][ T36] audit: type=1400 audit(2000000520.222:7901): avc: denied { read write } for pid=10206 comm="syz.9.3200" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.212846][T10213] netlink: 'syz.3.3203': attribute type 32 has an invalid length. [ 307.220747][ T36] audit: type=1400 audit(2000000520.222:7902): avc: denied { read write open } for pid=10206 comm="syz.9.3200" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.245441][ T335] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 307.253804][ T36] audit: type=1400 audit(2000000520.222:7903): avc: denied { ioctl } for pid=10206 comm="syz.9.3200" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.281364][ T36] audit: type=1400 audit(2000000520.222:7904): avc: denied { ioctl } for pid=10206 comm="syz.9.3200" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.307418][ T36] audit: type=1400 audit(2000000520.232:7905): avc: denied { ioctl } for pid=10206 comm="syz.9.3200" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.332539][ T36] audit: type=1400 audit(2000000520.232:7906): avc: denied { ioctl } for pid=10206 comm="syz.9.3200" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.357571][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 307.364987][ T9] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 307.373788][ T9] usb 2-1: config 0 has no interface number 0 [ 307.380631][ T9] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 307.392385][ T9] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 307.403517][ T9] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 307.425339][ T9] usb 2-1: config 0 interface 200 has no altsetting 0 [ 307.436006][ T9] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 307.446301][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.454331][ T9] usb 2-1: Product: syz [ 307.459395][ T9] usb 2-1: Manufacturer: syz [ 307.464873][ T9] usb 2-1: SerialNumber: syz [ 307.473103][T10217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.482289][T10217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.492472][ T9] usb 2-1: config 0 descriptor?? [ 307.501088][T10189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 307.531534][T10207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.546011][T10207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.596554][ T335] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 307.604323][ T335] usb 10-1: can't read configurations, error -71 [ 307.696202][T10225] incfs: Options parsing error. -22 [ 307.701533][T10225] incfs: mount failed -22 [ 307.736033][T10189] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 307.765525][T10189] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 307.781691][ T9] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input41 [ 307.798503][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.805868][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.813270][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.820571][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.827877][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.835188][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.842497][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.849801][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.857099][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.864383][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.871774][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.879082][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.886396][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.893700][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.901015][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.908330][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.915636][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.922940][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.930115][ T9] usb 2-1: USB disconnect, device number 15 [ 307.930247][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 307.943184][ C1] usb 2-1: hanwang_irq - usb_submit_urb failed with result -19 [ 307.968603][T10229] SELinux: policydb version -182773761 does not match my version range 15-33 [ 307.979368][T10229] SELinux: failed to load policy [ 308.160002][T10241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3213'. [ 308.366388][T10248] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.387568][T10248] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 308.491055][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3217'. [ 308.635512][ T696] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 308.678042][T10260] rust_binder: 10257 RLIMIT_NICE not set [ 308.772134][T10263] rust_binder: Error in use_page_slow: ESRCH [ 308.772163][T10263] rust_binder: use_range failure ESRCH [ 308.802099][T10263] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 308.802131][T10263] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 308.824402][ T696] usb 2-1: config 66 has an invalid interface number: 105 but max is 0 [ 308.848202][ T696] usb 2-1: config 66 has no interface number 0 [ 308.854470][ T696] usb 2-1: config 66 interface 105 has no altsetting 0 [ 308.861550][T10263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:149 [ 308.869890][ T696] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.7d [ 308.889698][ T696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.903136][ T696] usb 2-1: Product: syz [ 308.909569][ T696] usb 2-1: Manufacturer: syz [ 308.926016][ T696] usb 2-1: SerialNumber: syz [ 309.065599][ T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 309.172026][ T696] usb 2-1: USB disconnect, device number 16 [ 309.250373][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 309.259124][ T9] usb 10-1: config 0 has an invalid interface number: 200 but max is 0 [ 309.275639][ T9] usb 10-1: config 0 has no interface number 0 [ 309.290616][ T9] usb 10-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 309.322722][ T9] usb 10-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 309.345651][ T9] usb 10-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 309.375744][ T9] usb 10-1: config 0 interface 200 has no altsetting 0 [ 309.399684][ T9] usb 10-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 309.423686][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.431883][ T9] usb 10-1: Product: syz [ 309.436194][ T9] usb 10-1: Manufacturer: syz [ 309.440909][ T9] usb 10-1: SerialNumber: syz [ 309.448350][ T9] usb 10-1: config 0 descriptor?? [ 309.454820][T10266] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 309.679956][ T9] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.200/input/input42 [ 309.699801][ T9] usb 10-1: USB disconnect, device number 14 [ 309.754608][T10300] tipc: Started in network mode [ 309.759739][T10300] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 309.770022][T10300] tipc: Enabled bearer , priority 10 [ 309.781233][T10300] +$<: renamed from bridge0 (while UP) [ 309.889043][T10303] rust_binder: Write failure EFAULT in pid:273 [ 310.289446][ T369] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 310.455977][ T369] usb 4-1: device descriptor read/64, error -71 [ 310.505956][ T696] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 310.645995][ T696] usb 2-1: device descriptor read/64, error -71 [ 310.696011][ T369] usb 4-1: device descriptor read/64, error -71 [ 310.886079][ T710] tipc: Node number set to 4269801494 [ 310.891564][ T696] usb 2-1: device descriptor read/64, error -71 [ 310.936080][ T369] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 311.076141][ T369] usb 4-1: device descriptor read/64, error -71 [ 311.136125][ T696] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 311.215662][T10349] binder: Unknown parameter 'context[7' [ 311.296334][ T696] usb 2-1: device descriptor read/64, error -71 [ 311.316189][ T369] usb 4-1: device descriptor read/64, error -71 [ 311.358365][T10353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:441 [ 311.433271][ T369] usb usb4-port1: attempt power cycle [ 311.531433][T10366] __vm_enough_memory: pid: 10366, comm: syz.9.3255, bytes: 18014402804453376 not enough memory for the allocation [ 311.543740][ T696] usb 2-1: device descriptor read/64, error -71 [ 311.666322][ T696] usb usb2-port1: attempt power cycle [ 311.679280][T10376] futex_wake_op: syz.5.3259 tries to shift op by 144; fix this program [ 311.806319][ T369] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 311.828737][ T369] usb 4-1: device descriptor read/8, error -71 [ 311.947403][ T36] kauditd_printk_skb: 1264 callbacks suppressed [ 311.947421][ T36] audit: type=1400 audit(2000000525.191:9171): avc: denied { ioctl } for pid=10317 comm="syz.1.3238" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.981673][ T36] audit: type=1400 audit(2000000525.221:9172): avc: denied { ioctl } for pid=10306 comm="syz.3.3236" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.983524][ T369] usb 4-1: device descriptor read/8, error -71 [ 312.006923][ T696] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 312.020304][ T36] audit: type=1400 audit(2000000525.221:9173): avc: denied { ioctl } for pid=10306 comm="syz.3.3236" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.045421][ T36] audit: type=1400 audit(2000000525.221:9174): avc: denied { ioctl } for pid=10306 comm="syz.3.3236" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.071252][ T36] audit: type=1400 audit(2000000525.221:9175): avc: denied { ioctl } for pid=10306 comm="syz.3.3236" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.100509][ T696] usb 2-1: device descriptor read/8, error -71 [ 312.106325][ T36] audit: type=1400 audit(2000000525.221:9176): avc: denied { ioctl } for pid=10306 comm="syz.3.3236" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.132817][ T36] audit: type=1400 audit(2000000525.251:9177): avc: denied { ioctl } for pid=10306 comm="syz.3.3236" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.157949][ T36] audit: type=1400 audit(2000000525.261:9178): avc: denied { create } for pid=10407 comm="syz.5.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.177614][ T36] audit: type=1400 audit(2000000525.261:9179): avc: denied { setopt } for pid=10407 comm="syz.5.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.197885][ T36] audit: type=1400 audit(2000000525.261:9180): avc: denied { create } for pid=10407 comm="syz.5.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.248897][ T696] usb 2-1: device descriptor read/8, error -71 [ 312.256399][ T369] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 312.279318][ T369] usb 4-1: device descriptor read/8, error -71 [ 312.423391][ T369] usb 4-1: device descriptor read/8, error -71 [ 312.486451][ T696] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 312.519200][ T696] usb 2-1: device descriptor read/8, error -71 [ 312.540473][ T369] usb usb4-port1: unable to enumerate USB device [ 312.648822][ T696] usb 2-1: device descriptor read/8, error -71 [ 312.756572][ T696] usb usb2-port1: unable to enumerate USB device [ 313.071272][T10445] rust_binder: 174: no such ref 1 [ 313.371854][T10457] serio: Serial port ptm1 [ 313.489697][T10463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 313.489729][T10463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:187 [ 313.656904][ T4475] Bluetooth: hci0: command 0x1003 tx timeout [ 313.666850][ T596] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 313.796653][T10470] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 313.796686][T10470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 313.906888][T10481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3292'. [ 314.048275][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 314.216042][T10494] overlayfs: failed to clone upperpath [ 314.221809][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 314.234060][ T10] usb 2-1: config 128 has an invalid interface number: 89 but max is 0 [ 314.252853][ T10] usb 2-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 314.273491][ T10] usb 2-1: config 128 has an invalid descriptor of length 100, skipping remainder of the config [ 314.288320][ T10] usb 2-1: config 128 has no interface number 0 [ 314.291742][T10497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 314.298549][ T10] usb 2-1: config 128 interface 89 altsetting 9 endpoint 0x8E has an invalid bInterval 94, changing to 10 [ 314.319292][T10497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:454 [ 314.319436][ T10] usb 2-1: config 128 interface 89 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 314.341741][ T10] usb 2-1: config 128 interface 89 has no altsetting 0 [ 314.357064][ T10] usb 2-1: string descriptor 0 read error: -22 [ 314.363367][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=99.4d [ 314.383915][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.406908][ T696] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 314.577216][ T696] usb 4-1: Using ep0 maxpacket: 8 [ 314.585218][ T696] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 314.603888][ T696] usb 4-1: config 179 has no interface number 0 [ 314.616979][ T696] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 314.629234][ T9] usb 2-1: USB disconnect, device number 21 [ 314.646946][ T696] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 314.686963][ T31] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 314.694739][ T696] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 314.725525][ T696] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 314.756231][ T696] usb 4-1: config 179 interface 65 has no altsetting 0 [ 314.777595][ T696] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 314.796855][ T696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.877034][ T31] usb 10-1: device descriptor read/64, error -71 [ 315.049886][ T10] usb 4-1: USB disconnect, device number 23 [ 315.129989][ T31] usb 10-1: device descriptor read/64, error -71 [ 315.367195][ T31] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 315.487247][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 315.507176][ T31] usb 10-1: device descriptor read/64, error -71 [ 315.640134][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 315.658034][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.678329][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.688850][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 315.704732][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 315.722718][ T10] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 315.731612][ T10] usb 2-1: Manufacturer: syz [ 315.740638][ T10] usb 2-1: config 0 descriptor?? [ 315.757279][ T31] usb 10-1: device descriptor read/64, error -71 [ 315.880032][ T31] usb usb10-port1: attempt power cycle [ 316.153341][T10562] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.158560][ T10] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 316.183491][ T10] appleir 0003:05AC:8243.0015: No inputs registered, leaving [ 316.196701][ T10] appleir 0003:05AC:8243.0015: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 316.237344][ T31] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 316.282824][ T31] usb 10-1: device descriptor read/8, error -71 [ 316.431841][T10572] sock: sock_set_timeout: `syz.3.3324' (pid 10572) tries to set negative timeout [ 316.432707][ T31] usb 10-1: device descriptor read/8, error -71 [ 316.456525][T10572] overlayfs: cannot append lower layer [ 316.518052][ T10] usb 2-1: USB disconnect, device number 22 [ 316.677730][T10575] cgroup: Need name or subsystem set [ 316.687461][ T31] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 316.719013][ T31] usb 10-1: device descriptor read/8, error -71 [ 316.850040][ T31] usb 10-1: device descriptor read/8, error -71 [ 316.957672][ T31] usb usb10-port1: unable to enumerate USB device [ 316.958109][ T36] kauditd_printk_skb: 695 callbacks suppressed [ 316.958129][ T36] audit: type=1400 audit(2000000530.199:9876): avc: denied { ioctl } for pid=10504 comm="syz.9.3301" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 317.037289][ T36] audit: type=1400 audit(2000000530.269:9877): avc: denied { read write } for pid=9111 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.068519][ T36] audit: type=1400 audit(2000000530.279:9878): avc: denied { read write open } for pid=9111 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.094647][ T36] audit: type=1400 audit(2000000530.279:9879): avc: denied { ioctl } for pid=9111 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.123894][ T36] audit: type=1400 audit(2000000530.299:9880): avc: denied { mounton } for pid=10580 comm="syz.1.3328" path="/105/file0" dev="tmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 317.160676][ T36] audit: type=1400 audit(2000000530.369:9881): avc: denied { read write } for pid=10580 comm="syz.1.3328" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 317.189984][ T36] audit: type=1400 audit(2000000530.369:9882): avc: denied { read write open } for pid=10580 comm="syz.1.3328" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 317.214712][ T36] audit: type=1400 audit(2000000530.369:9883): avc: denied { ioctl } for pid=10580 comm="syz.1.3328" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 317.243434][ T36] audit: type=1400 audit(2000000530.369:9884): avc: denied { map } for pid=10580 comm="syz.1.3328" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 317.266656][ T36] audit: type=1400 audit(2000000530.369:9885): avc: denied { read } for pid=10580 comm="syz.1.3328" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 317.533079][T10603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:322 [ 317.696606][T10610] rust_binder: Failed to allocate buffer. len:4248, is_oneway:true [ 317.705963][T10610] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 317.722993][T10610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:462 [ 317.885855][T10616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:464 [ 317.913747][T10616] rust_binder: Write failure EINVAL in pid:464 [ 318.013067][T10629] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 318.101463][T10631] batadv_slave_1: entered promiscuous mode [ 318.168058][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3344'. [ 318.215503][T10630] batadv_slave_1: left promiscuous mode [ 318.488624][T10652] netlink: 'syz.9.3353': attribute type 1 has an invalid length. [ 318.498630][T10652] netlink: 'syz.9.3353': attribute type 2 has an invalid length. [ 318.602795][T10664] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 318.688017][ T335] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 318.913139][T10673] IPv6: NLM_F_CREATE should be specified when creating new route [ 318.920966][ T335] usb 4-1: Using ep0 maxpacket: 32 [ 318.956802][ T335] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.988068][ T335] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.018961][ T335] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 319.038033][ T335] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 319.046423][ T335] usb 4-1: Product: syz [ 319.060785][ T335] usb 4-1: Manufacturer: syz [ 319.091872][ T335] hub 4-1:4.0: USB hub found [ 319.118194][T10681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 319.118226][T10681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:336 [ 319.136024][T10682] rust_binder: Error while translating object. [ 319.145414][T10682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 319.151871][T10682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:493 [ 319.298088][ T335] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 319.385993][T10698] netlink: 'syz.1.3369': attribute type 12 has an invalid length. [ 319.529243][T10705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.537774][T10705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.563184][T10704] rust_binder: Write failure EFAULT in pid:346 [ 319.565499][T10650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.591425][T10650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.608265][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 319.616819][T10706] random: crng reseeded on system resumption [ 319.622740][ T66] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 319.778208][ T66] usb 10-1: Using ep0 maxpacket: 16 [ 319.791540][ T66] usb 10-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 319.801166][ T66] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.810486][ T66] usb 10-1: Product: syz [ 319.814759][ T66] usb 10-1: Manufacturer: syz [ 319.820688][ T66] usb 10-1: SerialNumber: syz [ 320.052040][T10696] rust_binder: Error while translating object. [ 320.052084][T10696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 320.053595][T10735] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 320.058336][T10696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:499 [ 320.080634][ T66] snd-usb-audio 10-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 320.102201][ T66] usb 10-1: USB disconnect, device number 19 [ 320.160487][ T9409] udevd[9409]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 320.258374][ T335] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 320.408398][ T335] usb 2-1: Using ep0 maxpacket: 32 [ 320.415820][ T335] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 320.424059][ T335] usb 2-1: config 0 has no interface number 0 [ 320.430217][ T335] usb 2-1: config 0 interface 184 has no altsetting 0 [ 320.440502][ T335] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 320.449688][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.457701][ T335] usb 2-1: Product: syz [ 320.461935][ T335] usb 2-1: Manufacturer: syz [ 320.466549][ T335] usb 2-1: SerialNumber: syz [ 320.473067][ T335] usb 2-1: config 0 descriptor?? [ 320.486930][ T335] smsc75xx v1.0.0 [ 320.679057][T10753] 9pnet_fd: Insufficient options for proto=fd [ 320.753414][T10725] kvm: pic: non byte write [ 320.845434][T10758] netlink: 'syz.9.3387': attribute type 4 has an invalid length. [ 320.853215][T10758] netlink: 17 bytes leftover after parsing attributes in process `syz.9.3387'. [ 321.051896][T10768] rust_binder: Write failure EFAULT in pid:518 [ 321.165058][ T335] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 321.182108][ T335] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 321.276746][ T335] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 321.297325][ T335] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 321.308349][T10773] bpf: Bad value for 'uid' [ 321.321838][ T335] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 321.333027][ T335] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 321.346783][ T335] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 321.356964][ T335] usb 2-1: USB disconnect, device number 23 [ 321.461662][T10779] rust_binder: Error while translating object. [ 321.461703][T10779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 321.467963][T10779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:529 [ 321.658660][ T596] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 321.658680][ T4475] Bluetooth: hci0: command 0x1003 tx timeout [ 321.788845][ T66] usb 4-1: USB disconnect, device number 24 [ 321.916699][T10799] rust_binder: Error while translating object. [ 321.916752][T10799] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 321.924511][T10799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:363 [ 321.988045][ T36] kauditd_printk_skb: 786 callbacks suppressed [ 321.988065][ T36] audit: type=1400 audit(2000000535.228:10672): avc: denied { unmount } for pid=8755 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 322.056984][ T36] audit: type=1400 audit(2000000535.238:10673): avc: denied { read write } for pid=9111 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.137289][ T36] audit: type=1400 audit(2000000535.238:10674): avc: denied { read write open } for pid=9111 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.228820][ T36] audit: type=1400 audit(2000000535.238:10675): avc: denied { ioctl } for pid=9111 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.313438][ T36] audit: type=1400 audit(2000000535.278:10676): avc: denied { read write } for pid=8755 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.401935][ T36] audit: type=1400 audit(2000000535.278:10677): avc: denied { read write open } for pid=8755 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.484393][ T36] audit: type=1400 audit(2000000535.278:10678): avc: denied { ioctl } for pid=8755 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.535441][T10834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 322.549238][T10834] audit: audit_lost=27 audit_rate_limit=0 audit_backlog_limit=64 [ 322.558067][ T36] audit: type=1400 audit(2000000535.328:10679): avc: denied { mounton } for pid=10801 comm="syz.3.3401" path="/78/file0" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 322.723766][T10846] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 323.036878][T10862] rust_binder: Error while translating object. [ 323.060714][T10862] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 323.068077][T10862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:267 [ 323.239874][T10866] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 323.430829][T10877] rust_binder: Error while translating object. [ 323.479882][T10877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 323.479956][T10877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:276 [ 323.511410][T10879] 9pnet: Could not find request transport: rdma [ 324.079003][ T369] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 324.152130][T10904] binder: Binderfs stats mode cannot be changed during a remount [ 324.238954][ T369] usb 10-1: Using ep0 maxpacket: 16 [ 324.258968][ T369] usb 10-1: too many configurations: 97, using maximum allowed: 8 [ 324.273288][ T369] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.289305][ T369] usb 10-1: config 0 has no interfaces? [ 324.296858][ T369] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.329456][ T369] usb 10-1: config 0 has no interfaces? [ 324.345935][ T369] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.356914][ T369] usb 10-1: config 0 has no interfaces? [ 324.364603][ T369] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.375301][ T369] usb 10-1: config 0 has no interfaces? [ 324.382696][ T369] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.393631][ T369] usb 10-1: config 0 has no interfaces? [ 324.401006][ T369] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.411296][ T369] usb 10-1: config 0 has no interfaces? [ 324.418523][ T369] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.428815][ T369] usb 10-1: config 0 has no interfaces? [ 324.436314][ T369] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.446623][ T369] usb 10-1: config 0 has no interfaces? [ 324.456649][T10892] netlink: 'syz.9.3431': attribute type 13 has an invalid length. [ 324.518944][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 324.537981][ T369] usb 10-1: string descriptor 0 read error: -71 [ 324.558203][ T369] usb 10-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 324.576335][ T369] usb 10-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 324.601743][ T369] usb 10-1: config 0 descriptor?? [ 324.617242][ T369] usb 10-1: can't set config #0, error -71 [ 324.633596][ T369] usb 10-1: USB disconnect, device number 20 [ 324.676168][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 324.701390][ T9] usb 2-1: config 2 has an invalid interface number: 34 but max is 2 [ 324.721150][ T9] usb 2-1: config 2 has an invalid interface number: 6 but max is 2 [ 324.741204][ T9] usb 2-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 324.755736][ T9] usb 2-1: config 2 has no interface number 0 [ 324.762719][ T9] usb 2-1: config 2 has no interface number 2 [ 324.770749][ T9] usb 2-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 324.788548][ T9] usb 2-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 324.822190][ T9] usb 2-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 324.836002][ T9] usb 2-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 324.852348][ T9] usb 2-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 324.866201][ T9] usb 2-1: config 2 interface 1 has no altsetting 0 [ 324.873688][ T9] usb 2-1: config 2 interface 34 has no altsetting 0 [ 324.882878][ T9] usb 2-1: config 2 interface 6 has no altsetting 0 [ 324.898965][ T9] usb 2-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 324.910178][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.918283][ T9] usb 2-1: Product: syz [ 324.923770][ T9] usb 2-1: Manufacturer: syz [ 324.928475][ T9] usb 2-1: SerialNumber: syz [ 324.957569][T10939] kvm: pic: non byte write [ 325.048966][ T710] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 325.146010][T10916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 325.146046][T10916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:380 [ 325.161201][ T9] usb 2-1: selecting invalid altsetting 0 [ 325.186741][ T9] usb 2-1: USB disconnect, device number 24 [ 325.203590][ T710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.231111][ T710] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 325.255334][ T710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.273668][ T710] usb 4-1: config 0 descriptor?? [ 325.292231][ T9409] udevd[9409]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 325.883110][T10976] rust_binder: Write failure EFAULT in pid:579 [ 325.951260][T10977] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 326.013226][T10977] rust_binder: Write failure EINVAL in pid:384 [ 326.089429][T10936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.111772][T10936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.139162][T10936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.161580][T10991] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.161883][T10991] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.168645][T10991] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.230304][T10996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 326.477629][T11006] netlink: 'syz.9.3467': attribute type 2 has an invalid length. [ 326.550640][T11007] netlink: 'syz.9.3467': attribute type 2 has an invalid length. [ 326.791992][ T710] usbhid 4-1:0.0: can't add hid device: -71 [ 326.799720][ T710] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 326.812821][ T710] usb 4-1: USB disconnect, device number 25 [ 326.888939][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 326.934005][T11018] 9pnet_fd: Insufficient options for proto=fd [ 326.999448][ T36] kauditd_printk_skb: 1450 callbacks suppressed [ 326.999469][ T36] audit: type=1400 audit(2000000541.247:12099): avc: denied { connect } for pid=11019 comm="syz.5.3472" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 327.017025][T11022] rust_binder: 600: no such ref 0 [ 327.050813][T11022] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 327.058949][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 327.064173][ T36] audit: type=1400 audit(2000000541.247:12100): avc: denied { read } for pid=11021 comm="syz.9.3473" name="binder0" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 327.068288][T11022] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 327.110018][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.121131][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 327.138189][ T36] audit: type=1400 audit(2000000541.247:12101): avc: denied { read open } for pid=11021 comm="syz.9.3473" path="/dev/binderfs/binder0" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 327.163099][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.173658][ T31] usb 2-1: config 0 descriptor?? [ 327.178831][ T36] audit: type=1400 audit(2000000541.247:12102): avc: denied { ioctl } for pid=11021 comm="syz.9.3473" path="/dev/binderfs/binder0" dev="binder" ino=29 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 327.207487][ T31] hub 2-1:0.0: USB hub found [ 327.259421][ T36] audit: type=1400 audit(2000000541.267:12103): avc: denied { setopt } for pid=11019 comm="syz.5.3472" laddr=fe80::2c lport=58 faddr=ff03::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 327.328941][ T36] audit: type=1400 audit(2000000541.277:12104): avc: denied { setopt } for pid=11019 comm="syz.5.3472" laddr=fe80::2c lport=58 faddr=ff03::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 327.367373][ T36] audit: type=1400 audit(2000000541.277:12105): avc: denied { write } for pid=11019 comm="syz.5.3472" laddr=fe80::2c lport=58 faddr=ff03::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 327.391250][ T36] audit: type=1400 audit(2000000541.297:12106): avc: denied { ioctl } for pid=11021 comm="syz.9.3473" path="/dev/binderfs/binder0" dev="binder" ino=29 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 327.439003][ T31] hub 2-1:0.0: 1 port detected [ 327.451957][ T36] audit: type=1400 audit(2000000541.337:12107): avc: denied { ioctl } for pid=11009 comm="syz.1.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 327.485537][ T36] audit: type=1400 audit(2000000541.337:12108): avc: denied { ioctl } for pid=11009 comm="syz.1.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 327.561792][T11039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11039 comm=syz.3.3478 [ 327.585987][T11040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11040 comm=syz.3.3478 [ 327.716160][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3482'. [ 327.778241][T11050] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 327.778273][T11050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:292 [ 327.811835][T11051] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 327.821581][T11051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:292 [ 327.950997][T11057] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 327.979701][T11057] rust_binder: Read failure Err(EFAULT) in pid:610 [ 328.250317][T11078] vlan1: entered promiscuous mode [ 328.291834][T11078] vlan1: entered allmulticast mode [ 328.306621][T11078] veth0_vlan: entered allmulticast mode [ 328.459305][T11011] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 328.459334][T11011] rust_binder: Error while translating object. [ 328.468052][T11011] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 328.474342][ T710] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 328.475437][T11011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:400 [ 328.492701][ T66] usb 2-1: USB disconnect, device number 25 [ 328.631502][ T710] usb 4-1: config 0 has an invalid descriptor of length 201, skipping remainder of the config [ 328.642095][ T710] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 328.655156][ T710] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 328.664354][ T710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.674506][ T710] usb 4-1: config 0 descriptor?? [ 328.892287][ T710] usb 4-1: string descriptor 0 read error: -71 [ 328.909055][ T710] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 328.929284][ T710] usb 4-1: USB disconnect, device number 26 [ 329.170094][T11101] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 329.170119][T11101] rust_binder: Read failure Err(EFAULT) in pid:622 [ 329.270753][T11105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=244 sclass=netlink_route_socket pid=11105 comm=syz.1.3500 [ 329.311626][T11106] input: syz1 as /devices/virtual/input/input43 [ 329.362759][T11105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3500'. [ 329.460468][T11111] rust_binder: Error while translating object. [ 329.460516][T11111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 329.471919][T11111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:304 [ 329.572676][T11116] 9pnet_fd: Insufficient options for proto=fd [ 329.829064][ T37] INFO: task syz.4.2259:7274 blocked for more than 122 seconds. [ 329.860720][ T37] Not tainted syzkaller #0 [ 329.865711][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.875289][ T37] task:syz.4.2259 state:D stack:0 pid:7274 tgid:7271 ppid:7036 flags:0x00004004 [ 329.885528][ T37] Call Trace: [ 329.888837][ T37] [ 329.891829][ T37] __schedule+0x1322/0x1df0 [ 329.896561][ T37] ? __sched_text_start+0x10/0x10 [ 329.901644][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 329.907160][ T37] ? _raw_spin_lock+0x8c/0x120 [ 329.911979][ T37] ? __kasan_check_write+0x18/0x20 [ 329.917157][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 329.923141][ T37] schedule+0xc6/0x240 [ 329.927478][ T37] __fuse_simple_request+0xdb1/0x1980 [ 329.931902][T11136] rust_binder: Write failure EFAULT in pid:633 [ 329.932912][ T37] ? __cfi___fuse_simple_request+0x10/0x10 [ 329.944948][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 329.951069][ T37] ? kasan_save_alloc_info+0x40/0x50 [ 329.956664][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 329.962794][ T37] ? __kmalloc_cache_noprof+0x24c/0x490 [ 329.968369][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 329.974498][ T37] fuse_file_open+0x47c/0x910 [ 329.975902][T11138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=11138 comm=syz.3.3510 [ 329.979217][ T37] ? __cfi_fuse_file_open+0x10/0x10 [ 329.979257][ T37] ? kernel_text_address+0xa9/0xe0 [ 329.979287][ T37] fuse_open+0x83d/0x1ba0 [ 330.006578][ T37] ? __cfi_fuse_open+0x10/0x10 [ 330.011402][ T37] ? __cfi_avc_has_perm+0x10/0x10 [ 330.016471][ T37] ? selinux_file_open+0x457/0x610 [ 330.021654][ T37] ? __cfi_selinux_file_open+0x10/0x10 [ 330.027155][ T37] ? bpf_lsm_file_open+0xd/0x20 [ 330.032076][ T37] ? __cfi_fuse_open+0x10/0x10 [ 330.036873][ T37] do_dentry_open+0x97b/0x1510 [ 330.041699][ T37] vfs_open+0x86/0x230 [ 330.045803][ T37] ? __cfi_vfs_open+0x10/0x10 [ 330.050525][ T37] ? may_open+0x352/0x430 [ 330.054886][ T37] path_openat+0x2b6c/0x34b0 [ 330.059508][ T37] ? kasan_save_track+0x3e/0x80 [ 330.064378][ T37] ? kasan_save_alloc_info+0x40/0x50 [ 330.069720][ T37] ? getname+0x1b/0x30 [ 330.073844][ T37] ? x64_sys_call+0xe69/0x2ee0 [ 330.078634][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 330.084765][ T37] ? do_filp_open+0x3e0/0x3e0 [ 330.089497][ T37] do_filp_open+0x1c6/0x3e0 [ 330.094050][ T37] ? __cfi_do_filp_open+0x10/0x10 [ 330.099141][ T37] ? alloc_fd+0x4e7/0x5a0 [ 330.103494][ T37] do_sys_openat2+0x12c/0x1c0 [ 330.108289][ T37] ? do_sys_open+0x100/0x100 [ 330.112928][ T37] __x64_sys_openat+0x13a/0x170 [ 330.117826][ T37] x64_sys_call+0xe69/0x2ee0 [ 330.122570][ T37] do_syscall_64+0x58/0xf0 [ 330.127023][ T37] ? clear_bhb_loop+0x50/0xa0 [ 330.131739][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 330.137673][ T37] RIP: 0033:0x7fc39e58eec9 [ 330.142190][ T37] RSP: 002b:00007fc39cfd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 330.150658][ T37] RAX: ffffffffffffffda RBX: 00007fc39e7e6180 RCX: 00007fc39e58eec9 [ 330.158648][ T37] RDX: 0000000000020c01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 330.166663][ T37] RBP: 00007fc39e611f91 R08: 0000000000000000 R09: 0000000000000000 [ 330.174697][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.182733][ T37] R13: 00007fc39e7e6218 R14: 00007fc39e7e6180 R15: 00007ffcbd14d3b8 [ 330.190757][ T37] [ 330.194211][ T37] NMI backtrace for cpu 0 [ 330.194228][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 82d251c860f9666d1b439a89588215a6c0522fea [ 330.194257][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 330.194272][ T37] Call Trace: [ 330.194280][ T37] [ 330.194290][ T37] __dump_stack+0x21/0x30 [ 330.194324][ T37] dump_stack_lvl+0x10c/0x190 [ 330.194354][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 330.194385][ T37] dump_stack+0x19/0x20 [ 330.194412][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 330.194438][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 330.194466][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 330.194493][ T37] ? sched_show_task+0x379/0x560 [ 330.194522][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 330.194549][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 330.194577][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 330.194607][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 330.194637][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 330.194666][ T37] watchdog+0xd8f/0xed0 [ 330.194698][ T37] ? __cfi_watchdog+0x10/0x10 [ 330.194728][ T37] ? __kasan_check_read+0x15/0x20 [ 330.194761][ T37] ? __kthread_parkme+0x138/0x180 [ 330.194782][ T37] ? schedule+0xc6/0x240 [ 330.194814][ T37] kthread+0x2ca/0x370 [ 330.194837][ T37] ? __cfi_watchdog+0x10/0x10 [ 330.194868][ T37] ? __cfi_kthread+0x10/0x10 [ 330.194891][ T37] ret_from_fork+0x67/0xa0 [ 330.194923][ T37] ? __cfi_kthread+0x10/0x10 [ 330.194947][ T37] ret_from_fork_asm+0x1a/0x30 [ 330.194981][ T37] [ 330.194989][ T37] Sending NMI from CPU 0 to CPUs 1: [ 330.354362][ C1] NMI backtrace for cpu 1 [ 330.354377][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 82d251c860f9666d1b439a89588215a6c0522fea [ 330.354400][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 330.354412][ C1] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 330.354437][ C1] Code: cc cc cc b8 a2 3a fb 4f 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 02 3a 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 330.354453][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 330.354472][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366cc00 RCX: ffffffff858d50be [ 330.354487][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000041e47c [ 330.354498][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f39733 R09: 1ffff1103ede72e6 [ 330.354513][ C1] R10: dffffc0000000000 R11: ffffed103ede72e7 R12: 1ffff110206cd980 [ 330.354526][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87cb2068 [ 330.354539][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 330.354553][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.354566][ C1] CR2: 00007f72c85b4198 CR3: 000000010ae68000 CR4: 00000000003526b0 [ 330.354582][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000007ea2 [ 330.354593][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 330.354604][ C1] Call Trace: [ 330.354611][ C1] [ 330.354618][ C1] default_idle+0x17/0x30 [ 330.354639][ C1] arch_cpu_idle+0xd/0x20 [ 330.354658][ C1] default_idle_call+0x3f/0x80 [ 330.354678][ C1] do_idle+0x1a0/0x470 [ 330.354696][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 330.354716][ C1] cpu_startup_entry+0x48/0x70 [ 330.354733][ C1] start_secondary+0x12e/0x140 [ 330.354756][ C1] common_startup_64+0x13b/0x157 [ 330.354782][ C1]