last executing test programs: 7m17.082564742s ago: executing program 32 (id=495): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c40)={"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"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "d7c594e891a5f615", "1106e806387431e3c2ecd5744c93c329", "28c185c6", "ea466149db760191"}, 0x28) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235004000000f30b9fa000000130f01d9d90f78c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba000000000f30660fc775022e0fba600c9864660ffc76002f3166b857000f00d0", 0x55}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000001000000"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c40)={"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"}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "d7c594e891a5f615", "1106e806387431e3c2ecd5744c93c329", "28c185c6", "ea466149db760191"}, 0x28) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) (async) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235004000000f30b9fa000000130f01d9d90f78c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba000000000f30660fc775022e0fba600c9864660ffc76002f3166b857000f00d0", 0x55}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000001000000"]) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 7m7.42011938s ago: executing program 33 (id=448): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x30e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xdf, 0x10, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x40, 0x23, 0xf, {0xf, 0x21, "d858050352b53739503ed5aa84"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}, 0x0, 0x0, 0x0}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001b00), 0x22000, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0xfa, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x44, 0x8f, 0x8b, 0x8, 0x403, 0xff39, 0xbfda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe8, 0x1, 0x0, 0x0, 0x0, 0xcd, [{{0x9, 0x4, 0x6e, 0x7, 0x1, 0xfd, 0x4f, 0xf, 0x6, [], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x0, 0xa, 0xd6, [@generic={0xc6, 0x3, "d08d891336c165c54f79a217518b43207e5516ee98b024d5095e3ed2a4f09e9a4e4bcb5f5250b49f809c8f0fa28fc79ba0c011b4ecf55e693f5f1bb30ff11e325e099d794b64a397b08e0f04a04243f13147d4322900fc28b0ee64a812bbc474bb38496806f5867488a8a356d58ba058246a77c1b281fa7d166a69b9c68b5e65ec524626dade3659415d173c77389d876b916b9066afdeec2e42d9da5adf530c58cd2aa00ea4a4c57717f42c03b6c2a2a7c78ba90a4caee38fe4f8d3f4327b2a72489e34"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa9, 0x401}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x70, 0x3, 0x67, 0x40}, 0x2b, &(0x7f0000000740)={0x5, 0xf, 0x2b, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0xb, 0x3, 0x7f, 0xff0f, 0x6, [0xff00, 0xffc0c0, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x24, 0x3, 0x0, 0x3, 0x1}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x140a}}, {0x92, &(0x7f0000000900)=@string={0x92, 0x3, "337ddc25aab5aea170076edc67d4b08b3914989873b3217d6440fdfe73ecfd8bc47f656235d43fac873534a9994ec8288b11d6bacc92ec8a84370563c1d38681932fa72874250c906f43d6955c9178a2991e7bc77e374055c3922b50f870593c3e22c92a5e6b7534f285305465b7dce42237582e328cf676674f5702cbd7e27c823e48e35c7d4c09f3e763512b8d4d66"}}]}) syz_open_dev$usbfs(&(0x7f0000000a00), 0x9, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x5c, 0x0, &(0x7f0000000780)=[@register_looper, @register_looper, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)={@flat=@weak_binder={0x77622a85, 0x0, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x3c}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}], 0x84, 0x0, &(0x7f0000000840)="ef1740d2b5e2bde6ba6efdb0401fbe3822fb93701a8b7a068205becdcd71523688aaee2cbc3913027be4c8e3b8247e322c9f3c9742a657d4eb5c30f0a8737c41f1346258fd3c5d200e3bd8590f9d46f3cad919fdd48d65753afa8e86d25b3399b4ad710cdfb2a8a7bb6e567080fad8d454bab98ac824c77e7b03a323bdd8d6b05c8e6698"}) 6m38.496536973s ago: executing program 34 (id=863): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000d0}, 0x40801) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000280)={0x2, 0x5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)={0x1}) statx(r0, &(0x7f0000000300)='./file0\x00', 0x2000, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000044c0)) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000004500)={0x2f, 0x4, 0x0, {0x6, 0x9, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r4, &(0x7f00000065c0)={0x90, 0xffffffffffffffda, r5, {0x6, 0x3, 0x6, 0xf49, 0x2, 0x6a, {0x1, 0x1, 0x2e749da4, 0x5, 0x7ff, 0x1047, 0x9, 0x80, 0xfffffc01, 0x1000, 0x7, r2, r3, 0x7, 0x6}}}, 0x90) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000006680)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006700), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000006800)={&(0x7f00000066c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000067c0)={&(0x7f0000006780)={0x24, r6, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8020) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000006840)=""/14) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006880), 0x81, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r8, 0xc4c03d09, &(0x7f00000068c0)={0x2}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000006d80)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000007180)={0xe, 0x1, {0xa, @usage=0x6, 0x0, 0x100000001, 0xc, 0x4, 0x7fffffff, 0x3, 0x444, @usage=0x800, 0xfffffffc, 0x8, [0x1, 0x7, 0x9, 0x3, 0x14, 0x8]}, {0x6fb, @struct={0xa3, 0x6}, 0x0, 0x9, 0x10001, 0xa80, 0x3, 0x1, 0x88, @usage=0x3, 0x9, 0x0, [0xe, 0x1, 0x7, 0xfffffffffffffff7, 0x3, 0x8]}, {0x1, @usage=0x4, 0x0, 0xfffffffffffffffa, 0x2, 0x5, 0x6, 0x8, 0xf0, @usage=0x4, 0x160a, 0xffffff01, [0xf82e, 0x3, 0x8000000000000000, 0x9, 0x8000000000000000, 0x8]}, {0x0, 0x6, 0x800}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000007580)={0x14, 0x4, {0x6, @usage=0x809e, r9, 0x6, 0xfffffffffffffff3, 0x81, 0xfffffffffffffffb, 0x8f, 0xca, @usage=0x81, 0x9, 0xfffffff7, [0xffffffffffffffff, 0x9, 0x3ff, 0x3677, 0x6, 0xffffffffffffffff]}, {0x8c3, @usage=0xcdc, 0x0, 0xd, 0x9d, 0x0, 0x3, 0x2e, 0xf4, @usage, 0x6, 0x2, [0x100000000, 0x81, 0x3, 0x10000, 0x40, 0x7]}, {0x1, @usage=0xc, r10, 0x1, 0x9, 0x5, 0x5edf2076, 0xb24, 0x50, @usage=0x4d, 0x6, 0xfff, [0x7, 0x35, 0x5000000000000000, 0x2, 0x1c, 0x365000000000000]}, {0xb, 0x10, 0x1}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000079c0), r0) sendmsg$BATADV_CMD_SET_HARDIF(r11, &(0x7f0000007a80)={&(0x7f0000007980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000007a40)={&(0x7f0000007a00)={0x1c, r12, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x8000) r13 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x80010, r8, 0x6a21c000) sendmsg$TIPC_NL_NODE_GET(r13, &(0x7f0000008e40)={&(0x7f0000007ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000008e00)={&(0x7f0000007b40)={0x1284, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x1190, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd7, 0x3, "97e60400c31eec685432d1c2cea147a7e710a80232987f21c74b2e8ca2228e4cdf89c41862158f42bde3cb241de78f7a46afdd4f8fe89bb4ae2e393f2d58a9360ac9193594e072bdadf40eeb9935301672f26dfe3d87d875c8c8f52c393f660dfe865ff321c1ba3b2bfa29f0896f76d376e4076db5ff07de4964605dc032fbfb198b3e2886195c049d89761727fc6dea7cac30ea229d3642e57614f4005e3714badf04cc92485530089101a8eb50ea408af50d97a610167538df3a6698a8e3dbebaff5547edfb9ec9975db3a7579ed8d4b17f1"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xa4, 0x3, "fd9fa5742d1908f67c04ba4428dbaee07d9bcb0dcb3c7482a0c7aa5eb116c1b27ec8fdd3139824c0d6376ed54f235e1b1bed6af3faa3258ddba96b387493db4495ac3ad7652b487611b6f150b71a9f1af904f7324665d967f9e60f406a6f2bbff68b0ec2752a5ff7b7515de3dd61fad518faf43b9f03d48d920fb6514cb0e05d6f7b98943d1dbe6d5ded14b968644acd856e7a21d9f0f05bb21d55b50ac1118f"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf413}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @mcast2, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}]}]}, 0x1284}, 0x1, 0x0, 0x0, 0x4000}, 0x40080c0) 5m10.625261033s ago: executing program 35 (id=1731): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB='\v\x00\x00'], 0x119) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0xfffbffff, 0xffffffff, 0x0, 0x0, 0x6, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 4m16.256521498s ago: executing program 36 (id=2345): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x5e, 0xb9, 0xc4, 0x8, 0x1f38, 0x1, 0x9f80, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x1, 0x7, 0x80, 0x4, [{{0x9, 0x4, 0xb9, 0x8, 0x1, 0xb6, 0x5e, 0x6c, 0x4, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xf2, 0x9, 0x1002}]}], [{{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x0, 0xfd, 0x7}}]}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x5, &(0x7f0000000bc0)={0x5, 0xf, 0x5}}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xa, 0x0, &(0x7f0000000140)=[@exit_looper, @increfs_done={0x40046305, 0x3}, @increfs_done={0x40106308, 0x2}, @free_buffer, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd}, &(0x7f0000000100)}}, @exit_looper], 0x0, 0x0, 0x0}) (async) ioctl$FIONCLEX(r0, 0x5450) (async, rerun: 64) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000d00)={{r0}, "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"}) (async, rerun: 64) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) accept4$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10, 0x80800) 4m1.193120253s ago: executing program 37 (id=2493): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x10000}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0xe5441000) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xff, @mcast1, 0xe3}, {0xa, 0x4e22, 0x9, @private0, 0x7}, 0x1, {[0x1, 0x7fffffff, 0x8, 0x9a, 0x1, 0x6, 0x7, 0x94c0]}}, 0x5c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 3m18.695139868s ago: executing program 9 (id=2940): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80042, 0x94) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) fcntl$setlease(r0, 0x400, 0x1) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0x728, @private1, 0x7}, {0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1, {[0x0, 0x3, 0x424, 0xda, 0x7, 0x9, 0x5, 0x5]}}, 0x5c) prlimit64(0x0, 0x0, &(0x7f0000000540)={0x6, 0x74}, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SUBMITURB(r3, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x48, 0x0, &(0x7f0000000080)=[@request_death={0x400c630e, 0x3}, @increfs_done={0x40106308, 0x3}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) 3m18.441630472s ago: executing program 9 (id=2942): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000140)={{r1}, r2, 0x10, @inherit={0x60, &(0x7f00000000c0)={0x0, 0x3, 0xffffffff, 0xffffffffffffff61, {0x1b, 0x3, 0x401, 0x6}, [0xcd29, 0xffffffff80000000, 0x1ff]}}, @subvolid=0x3ff}) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000001140), &(0x7f00000011c0)=0x6e, 0x80000) r4 = getpgrp(0xffffffffffffffff) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000017c0), 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000001880)=[{{&(0x7f0000001200)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001280)="ab5d13d7f8167df42a0c5a1bb9a64e55cc89e10faa69e03676ef907a09f4d0efe2b8526580da9aef541e4dc553a8a4dc30fad1579795ab8945de000b611b355f484fa006ab94a1d8c725d2c1316fd416769434f8e5cb8ef154ade626b8fc8d2ebdba6df4ec229a35d1bee093137e78fe9e17649add0af41e69f47415381124e9667a669b", 0x84}, {&(0x7f0000001340)="aef2e6f4e92336eb3ad6829c97fde11a078ce7fd94d2bd9bcbbf83a0498da4a655ee11fafe103cd27b98e70fbf6f", 0x2e}, {&(0x7f0000001380)="c1b69af8cb387f54b20f1e47809a96b6500bb70b80951daa31c866da9b9fd0d6e4bcb312244bfe5d8dc074abedaaa13655c94769490d9e43c236b5843d1ef1dea8e56af1feb375a891f4b86f8386232e3c73382d06e30dcb50a812fd730e501a5b667cb6c328ef9890984a3359b324765c641179ac5ec1b170f52b43dad058c229b6a1f7055ec8b0cf96020f70a612ae7099e1528158d043578be666b7e798948f2deb1e82d8c3a368e185464d83c4fb6b58addc62404e3a6cfc6559783c4b8bed1087010d105d37efa7c226b34b4607", 0xd0}, {&(0x7f0000001480)="2ba917089a570ddedd2763b00e6e57fdfdf823c5d291ffd97f6ce84335af64d66ae493becf9561befd0be764ef5cdf6133c4fabe44d7b374ad04178ba3feb8e5cfe69793d83a2a932d4036d392a044c70bc1ed75b6173d1e3c9eb36922faecaaa66348557f5ebbdbf0cda42a2545f95e7adefb803f46c7b456a038b254b95f60e8b82797d6df728c9819b0fcee68f985ec2c6c16cf8200a2e1d2b30efc2f0fe4896348366290c523f3da4a88278d5c8c7524097c893f68371a9516312efbbe3d74fdb911cc886f3ee441821b5f8d2772908320dc7ca16b63de7d34dbc2a1e949a5", 0xe1}, {&(0x7f0000001580)="8f2c49f130af2eb93aebfcd3b7d1323030f3be62e533132c9fa93bd6dbaab1ec8e31c0fe5abb5ed48ce6e9a64347", 0x2e}, {&(0x7f00000015c0)="eaf8138972c83b773341182f6dcd393c67c5f8bf4afad998e2968a8e6772c27c890356ab20a61c36ae3d7375b23df95d5c3c4d52b7f936f49873cd1ee00b80f952a1c676a06fe5c579942deb41ad274c", 0x50}, {&(0x7f0000001640)}, {&(0x7f0000001680)="bbf60af7807c63ff141403ff05699474f919363ff86fb7b1761927568723c8b808730b54572c21387c49e6fdb90d32b0674df92004058249174897e8da3e80a389f2b8e22108d561a5c3230471119e7b80def1d5c6d583c24c3ebff5ed743887f5da1366b03b287262a3c040dec16b64b158d3c555797490ec2c24b468d6eccd4e37281d9f0ccdb569bf28767d4ae3d4a5169efc75801693e4a0251f023db68cd555564a33dc397262bc2434d06f00ce0c4525c83c289b1822", 0xb9}], 0x8, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r1, r1, r5]}}], 0x48, 0x4004050}}], 0x1, 0x20000894) write$selinux_access(r1, &(0x7f00000018c0)={'system_u:object_r:mouse_device_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x7}, 0x49) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000001940)=0x800) r6 = pidfd_getfd(r0, r0, 0x0) ioctl$EVIOCGID(r6, 0x80084502, &(0x7f0000001980)=""/198) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000001a80)={0x1000}) ioctl$int_out(r1, 0x0, &(0x7f0000001ac0)) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000001b00)=""/21) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) ioctl$SNAPSHOT_S2RAM(r6, 0x330b) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x4010, r3, 0xac98000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b80), r6) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x3c, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) timer_create(0x1, &(0x7f0000001c80)={0x0, 0x23, 0x4, @tid=r4}, &(0x7f0000001cc0)=0x0) clock_gettime(0x0, &(0x7f0000001d00)={0x0, 0x0}) timer_settime(r8, 0x1, &(0x7f0000001d40)={{r9, r10+10000000}, {0x77359400}}, &(0x7f0000001d80)) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r11, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80, 0xb}}}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x1, 0x2}, {0x1, 0x3}, {0x3, 0x7}, {0x9, 0x5}, {0x3}, {0x2, 0x7}, {}, {0x7}, {0x97, 0x4}, {0xc, 0x6}, {0x10, 0x3}, {0x9}, {0x17, 0x4}], "904b179dd6a42219"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x9}, {0x2, 0x7}, {0x9}, {0x6, 0x2}, {0x9, 0x3}, {0x5, 0x4}, {0x10, 0x4}, {0x4}, {0x43, 0x1}], "800ddda09674cdca"}}]}, 0x68}, 0x1, 0x0, 0x0, 0x5810}, 0x8000) write$selinux_validatetrans(r6, &(0x7f0000001f00)={'system_u:object_r:usb_device_t:s0', 0x20, 'system_u:object_r:boot_t:s0', 0x20, 0x5, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x6a) timer_getoverrun(r8) mkdirat(0xffffffffffffffff, &(0x7f0000002000)='./file0\x00', 0x8) 3m18.292041155s ago: executing program 9 (id=2943): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x6, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x3e, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x4f47, 0x8, 0xd38, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0x3, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xfffdffff, 0x80000000, 0x5, 0x18, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0xb, 0x30b1d693, 0x80000001, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x7, 0x6, 0x6, 0xfffffffffffffffc, 0xffff, 0x29]}) (async, rerun: 64) write$tun(0xffffffffffffffff, &(0x7f0000003300)=ANY=[@ANYBLOB="000000f702d8000000003d0000006239d39c00442f00fe80000000000000000000000000004300000000000800000000ffffac1414bb0421880b00000002050008000c0086dd080088be80000003151ed309010000000000f88a080022eb00000004270729e30200000000000100000319070800655800000001"], 0x7a) (async, rerun: 64) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x28000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="3800000002010101000000000000000002000007240002801400018008000100ffffffff08000200e00000020c00028004000100210800001091160a89c41899e5cdcc0647ffa27d5bec5ad55515c7cb87eb32a26522d0671ae9feefa6f7f46c7d036d0c032ce56a136faa4193452f6510203d3934adf63a4e531d5ee170289ec71c6e409115e0eea137cc3d82c67b1c469c7121b7f37499662599a18d3596c6ff73c477a79a7617898e2e"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x4008040) (async) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) write$cgroup_devices(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000003584"], 0xffdd) ioctl$BLKCRYPTOGENERATEKEY(r6, 0xc030128a, 0x0) (async, rerun: 32) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (rerun: 32) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async, rerun: 64) r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r12, 0x40345410, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc2}) (async) ioctl$KVM_GET_STATS_FD_cpu(r11, 0xaece) 3m18.04841783s ago: executing program 9 (id=2944): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4}}}}}]}}]}}, 0x0) r1 = socket$inet(0x2, 0x6, 0x2) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000380)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, r2, &(0x7f0000000500)) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000707000000072027580000f4000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r6, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r7) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 3m16.021699298s ago: executing program 9 (id=2962): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) (async) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) syz_fuse_handle_req(r2, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0x20001, 0x6ff88441084cf12b, 0xdcf, 0x7, 0xb, 0x802, 0x0, 0x0, 0x10, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x7, {0xb, 0x0, 0x0, {0x9, 0x100, 0x7, 0x90000005, 0x3, 0x2, 0x9ec, 0x35741061, 0x10000, 0x1000, 0xfffffff9, 0x0, 0x0, 0x3c, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) execveat$binfmt(0xffffffffffffffff, r1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) (async) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) (async) socket$xdp(0x2c, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) (rerun: 32) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f00000009c0)={"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"}) (async) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x6000, 0x4, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xfb}, {0x3, 0x9, 0x82, '\x00', 0x3}, {0xfc, 0x2, 0x4, '\x00', 0xb9}, {0xd, 0xb, 0x6, '\x00', 0x7d}, {0xfe, 0x9, 0x4}, {0x0, 0x0, 0x2, '\x00', 0x2}, {0xfd, 0x0, 0x3, '\x00', 0x7f}, {0x0, 0xfa}, {0x1, 0x8f, 0x40, '\x00', 0x4}, {0x39, 0x2, 0x1, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x0, '\x00', 0xff}, {0x3, 0x0, 0x2, '\x00', 0x4}, {0x2, 0x2, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x4, 0x21, 0x80, '\x00', 0x5}, {0x2, 0x1}, {0x0, 0x2, 0x5, '\x00', 0x10}, {0x48, 0x0, 0x9, '\x00', 0xd9}, {0x0, 0x80, 0x4}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfe, 0x8, 0x0, '\x00', 0x5}, {0x0, 0x4, 0x9}, {0x7f, 0xff, 0x6, '\x00', 0x7}]}}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x714f, 0x0) (async) setreuid(0xee01, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) 3m15.456446699s ago: executing program 9 (id=2973): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) getsockname(r2, &(0x7f0000000140)=@l2tp6, &(0x7f0000000300)=0x80) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid}, {@nodevmap}, {@access_uid}]}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r6, &(0x7f0000007100)={0x2020}, 0x941f) 3m15.37929424s ago: executing program 38 (id=2973): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) getsockname(r2, &(0x7f0000000140)=@l2tp6, &(0x7f0000000300)=0x80) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid}, {@nodevmap}, {@access_uid}]}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r6, &(0x7f0000007100)={0x2020}, 0x941f) 3m6.572957067s ago: executing program 2 (id=3151): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) (async) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) clock_gettime(0x4, &(0x7f00000004c0)) 3m6.364896741s ago: executing program 2 (id=3154): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000100)=[{0x48, 0x40, 0x0, 0xffffffff}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044888) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='exfat\x00', 0xb03001, 0x0) 3m6.244718643s ago: executing program 2 (id=3157): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18, 0x81}, 0x4c800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f0000000040)=""/48, &(0x7f0000000200)=0x30) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000100)=0xfffffffc, 0x4) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/139, 0x8b}, 0x10020) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r7}, @flat=@binder={0x73622a85, 0x110b, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) 3m5.34332015s ago: executing program 2 (id=3172): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x4000) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x4000) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0xe91, 0x6, 0x10, 0x2}, 0x14) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0xe91, 0x6, 0x10, 0x2}, 0x14) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = creat(&(0x7f0000000080)='./file0\x00', 0x47) cachestat(r3, &(0x7f0000000040)={0x1, 0x8}, 0x0, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/27, 0x1b}, {&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000001400)=""/224, 0xffffffffffffffd6}, {&(0x7f0000000240)=""/63, 0x3f}], 0x4) r6 = epoll_create1(0x0) fgetxattr(r6, &(0x7f0000002600)=@known='com.apple.FinderInfo\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x2, 0x4) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x2, 0x4) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000455000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000300)="66ba410066b80f0066ef36f3440f09c4e2a5abedc4427d2d94500000000066420f38801bb805000000b9020000000f01d9c4415c5477f8410fc7787666baa100edf2360f32", 0x45}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x7, 0x0, 0x0, 0x80, 0xfffffff8, 0x0, 0xff, 0xff, 0x4, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3m5.221819333s ago: executing program 2 (id=3175): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f00000036c0)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x8014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) clock_gettime(0x4, &(0x7f00000004c0)) 3m5.188155014s ago: executing program 2 (id=3177): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00"], 0x1c}], 0x1}, 0x4000080) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r2, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000000640)) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x1a0, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20044881}, 0x4c004) sendto$packet(r1, &(0x7f0000000040), 0x0, 0x5, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0x9, 0x6, @remote}, 0x14) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m5.120150355s ago: executing program 39 (id=3177): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00"], 0x1c}], 0x1}, 0x4000080) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r2, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000000640)) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x1a0, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20044881}, 0x4c004) sendto$packet(r1, &(0x7f0000000040), 0x0, 0x5, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0x9, 0x6, @remote}, 0x14) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m58.9927248s ago: executing program 0 (id=3273): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x3fc, 0xffffffffffffffff}) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000140)="d999e4ec7d9d4f98d62e6a92979c3ce43a56cf151c2e18c3b5de01b603b87e87ad34adb32919f9aab9c31d9c9bdccf801d221d6fc81cb6393266d67f17584b9e602c5fc45948b10df9ca7bdfb0d750f9546eed0d866d3e3df1281a462b415315c76b208e454de590e34d1e140998a44b9971dccb9d77343f677918", 0x7b}, {&(0x7f00000001c0)="0b270263bf853e91a87b970ee027ec5d3a9001921c629af6081f0c9b939bd9902960fc44e640b3967ab7aac19bdbe680a65f903757c0c6c5f4672097afb1f35706982ee2105db468c3de61f7c67f0e56b0faa6eda6c9e7a1d0f85c0855c98b2b9abfbc5cb1dbaf0c2be290749d50fc7d02d9db667313ec47a4dbe28f7dabf6ee1065633e9ba72a7d23fd5dd665be6c88f624e5bec78ae7f354a6cb69a32b0e3b0123e55efb7920bb79a618944986ac2db50a2d2bebdae11af7c10e8f0ee2b660b73a75363b8de658bad753f1dc311d4dfb66115c09", 0xd5}, {&(0x7f00000003c0)="df6f1e123b54f000fd71b78e325593f0e50ede312c137c71f97ac2d7eb8a94c0f7940183b90a79f177a51654fc328b98aa75801d4d80735107d39f77ed3cd7d555a39dda97e4b625de345f42a83e9319e88907a8a83e696b2a481ce46022cb0dffb83ea5ccd687a78b4ab2ed7be2018fe328ca7e4f765a43d9c43a45284dc08d008f2c16ce2a8decfedd4ae6e6022f4840fd93d7b8b137766a42d9ee2c55f8bef89bf851ccd1afc824f18c64a0edd659a5ce5dedff195ea1c3d058c9c42dca3d438fa435c705fd274169ccebbec1bbf2fb57b295a04631e3f4f254fa32", 0xdd}], 0x4, 0x4, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000)=0xa000000, 0x4) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) timerfd_create(0x7, 0x0) r6 = socket(0x2, 0x3, 0x7) setsockopt(r6, 0xff, 0x1, 0x0, 0x9) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x46321000) 2m58.794123244s ago: executing program 0 (id=3277): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) (async) r1 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)=0x1, 0x4) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x51) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000002ac0)={0xec1, 0xe3b, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) gettid() (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 2m58.432906082s ago: executing program 0 (id=3285): open(&(0x7f0000000240)='./file0\x00', 0x141bc2, 0x3a) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/udp6\x00') preadv(r2, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000340)=""/182, 0xb6}], 0x2, 0x8, 0x3) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 2m58.364844132s ago: executing program 0 (id=3287): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee46000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x6, 0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000a00)={[0x8001]}, 0x8, 0x80800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x22) read$FUSE(r2, &(0x7f0000000a40)={0x2020}, 0x2020) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1700000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000600)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') arch_prctl$ARCH_GET_CPUID(0x1011) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0xc8142) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000080)=""/34) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 2m57.308756822s ago: executing program 0 (id=3302): ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x4d4b, 0x2, 0x4, 0x7, 0x3, 0x0, [{0x7ff, 0x10, 0x7, '\x00', 0x80}, {0x380000, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x6d4, 0x1, '\x00', 0x6}]}) (async) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x1b8) (async, rerun: 64) r2 = open$dir(&(0x7f0000000200)='./file0\x00', 0x1003, 0x5) (rerun: 64) linkat(r1, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) (async) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0xb3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x7800, 0x80, 0xfffff6df, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r3, 0x1, 0x6, @remote}, 0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r4 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_of_msg(r4, &(0x7f00000013c0)={@icreq={{0x0, 0x8, 0x80, 0x75}, 0x0, 0x0, 0x0, 0xb}, @val=&(0x7f00000003c0)="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"}, 0x88, 0x0, 0x0, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000001480)=[@timestamp, @sack_perm, @mss={0x2, 0x6}], 0x3) (async, rerun: 32) unlinkat(r1, &(0x7f00000014c0)='./file0\x00', 0x200) (async, rerun: 32) eventfd2(0x1, 0x1) linkat(r1, &(0x7f0000001500)='./file0\x00', r2, &(0x7f0000001540)='\x00', 0x2400) preadv(r1, &(0x7f0000001940)=[{&(0x7f0000001580)=""/105, 0x69}, {&(0x7f0000001600)=""/216, 0xd8}, {&(0x7f0000001700)=""/198, 0xc6}, {&(0x7f0000001800)=""/199, 0xc7}, {&(0x7f0000001900)=""/37, 0x25}], 0x5, 0x8, 0x5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000019c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = socket$netlink(0x10, 0x3, 0x13) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000001c40)={{0x0, 0x8, 0x4d4, 0x44, 0x9cd, 0xb6, 0xc, 0x5, 0x3, 0xa86, 0xffff7a55, 0x3, 0x894, 0x3, 0x3b6141e3}, 0x10, [0x0, 0x0]}) (rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000001cc0)={{r8, 0xfffffffffffffff7, 0x52, 0x4, 0x7a, 0xff, 0xc527, 0x7, 0x8, 0x6, 0xd902, 0x9, 0x1, 0x7, 0x2}, 0x8, [0x0]}) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000001d40)={0x7, 0x3ff, 0x3, 0x80000000, 0x4, 0x0, [{0x100, 0x6, 0x6, '\x00', 0x4}, {0x5, 0x76, 0x9, '\x00', 0x280b}, {0x800, 0x6, 0x0, '\x00', 0x100c}, {0x8, 0x3f6d, 0x9, '\x00', 0x2e00}]}) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r9, 0x4018aee2, &(0x7f0000001e80)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000001e40)={0x2, 0x5}}) (async, rerun: 32) pipe(&(0x7f0000001ec0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) read$FUSE(r10, &(0x7f0000001f00)={0x2020}, 0x2020) (async) sendmsg$IPVS_CMD_GET_CONFIG(r11, &(0x7f00000040c0)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004080)={&(0x7f0000003fc0)={0x8c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x148affe6}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4008004) 2m57.265482514s ago: executing program 0 (id=3305): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = getuid() setreuid(0x0, r2) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000080)=0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000140)) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='unlock '], 0xb) setreuid(r2, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r8, 0x4068aea3, &(0x7f0000000040)={0xd4, 0x0, 0x1}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000070001c0"]) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[]) splice(r5, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r6, 0x0, 0x25a5, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 2m57.146480686s ago: executing program 40 (id=3305): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = getuid() setreuid(0x0, r2) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000080)=0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000140)) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='unlock '], 0xb) setreuid(r2, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r8, 0x4068aea3, &(0x7f0000000040)={0xd4, 0x0, 0x1}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000070001c0"]) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[]) splice(r5, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r6, 0x0, 0x25a5, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 1m40.736839323s ago: executing program 7 (id=4575): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) read$FUSE(r3, 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc0046209, &(0x7f0000001340)) 1m40.730783133s ago: executing program 7 (id=4576): open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) (async) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f00005a9000/0x3000)=nil, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0xd, 0x59}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80982, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 1m39.82897712s ago: executing program 7 (id=4591): setresuid(0xee01, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r3 = fsmount(0xffffffffffffffff, 0x0, 0x6) read(r3, &(0x7f0000000000)=""/110, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 1m36.726865989s ago: executing program 7 (id=4623): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socket$key(0xf, 0x3, 0x2) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="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", 0x148}], 0x1) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080)) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) unshare(0x22020600) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0) (async) wait4(0x0, 0x0, 0x2, 0x0) (async) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0) (async) io_setup(0x82, &(0x7f0000000340)=0x0) (async) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x2, 0x138) io_submit(r3, 0x2f, &(0x7f0000000700)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x5, r1, &(0x7f00000002c0)='N-', 0x2, 0x6, 0x0, 0x2, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x713, r4, &(0x7f0000000500)="eea2c98be1f2b59034059bbd2fbb801df9d59b3f559fb8b01c3aa772a9d61151a70ce8edc61be23eb4b3454963cfe04c4cff51c67d31cdee10bc4c14b3ba9a79fa1998d339b1cb757ae496c9362efcf69076ef1bbc4ae28a72631e2b5369", 0x5e, 0x3, 0x0, 0x2, r2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r4, &(0x7f0000000600)="7cb34927ca203729065c981b52f3658c5f35635f69e1584ef34417136c3e66aa05fef30d5e6029a947c0f2c43dcb21dc1cb83e510aa6ddad0e833ab506d0e6a20ca4cece9c74fc1c3f67d7db384c75ae6336d4feb9cb5dc5c1d1f30dcf75919f6cd9ceba1de7ce57309ffb2ffec107ad6c4db381defb0fdf955a510d198ef8059a8bc7089c1fc88bb2977e620839e2f13c6c2238", 0x94, 0x100000001, 0x0, 0x3, r4}]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) shutdown(r5, 0x1) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') 1m36.64186108s ago: executing program 7 (id=4624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5ee1) setrlimit(0xd, &(0x7f0000000000)={0x66e, 0x96ed}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415603, 0x3}) r2 = getpgid(0x0) ptrace(0x4207, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_link_settings={0x4d, 0x5, 0x8b, 0xc, 0x5, 0xc6, 0x4, 0x81, 0x5, 0x40, [0xfffffffc, 0x8, 0xffffff5b, 0x7fffffff, 0x60c, 0xf, 0x8b68, 0x38], [0x74a]}}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) 1m36.547020472s ago: executing program 7 (id=4627): syz_open_dev$usbmon(&(0x7f0000000000), 0x7777, 0x44840) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000000)=0x41, 0x4) mknod(&(0x7f0000000100)='./file1\x00', 0x8000, 0x9) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lsetxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_var_run_t:s0\x00', 0x24, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r5) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40080) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r9 = syz_pidfd_open(r0, 0x0) setns(r9, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m36.422309505s ago: executing program 41 (id=4627): syz_open_dev$usbmon(&(0x7f0000000000), 0x7777, 0x44840) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000000)=0x41, 0x4) mknod(&(0x7f0000000100)='./file1\x00', 0x8000, 0x9) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lsetxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_var_run_t:s0\x00', 0x24, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r5) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40080) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r9 = syz_pidfd_open(r0, 0x0) setns(r9, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m17.399497705s ago: executing program 5 (id=4884): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x1) syz_usb_connect(0x0, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000018a2bae000824020100020000092402020000000000090585dadb"], 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x7}) syz_usb_connect(0x3, 0x36, &(0x7f0000000800)=ANY=[], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xcc, &(0x7f0000000000)=@string={0xcc, 0x3, "b6139515b2a3dae1a2a829a1df9ce11443f24d3e1adbf09a83b822271a56b4bf3b83ff41d3734df78ba299cf194dc4cceb598d0c6c0078a676cf0912c283a3def3dc1f07a7307ec9db1418cbc28ca10b1289ecd7ca39598c23e6b7681e8099a0b095757e8e4916871adf27ff17f4b3318dcec60535fce7e5d01e308cedc2409ddc3cd540c8b1744cf230186e4c5058ac5e51a704a37996dc99d81cf7e2be9a4db96a6bbc5fdd58f33cb95898959470b13a810e8dd6f384e625254d00ceb624e41ee0ee9a2fd88cefee5c"}}]}) socket(0xa, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x150) mknodat$loop(r2, &(0x7f0000000040)='./file1\x00', 0x1000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x32c0, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m16.126943959s ago: executing program 5 (id=4891): syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x20c040) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) socket$packet(0x11, 0x2, 0x300) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) write(r0, &(0x7f0000000400)="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", 0x1f000) 1m15.983812561s ago: executing program 5 (id=4893): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040c3201030001000921798a6cfd0101000122050009058103ff030c0000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast1, @empty, 0x2}}}, {{@arp={@empty, @loopback, 0xff000000, 0x0, 0x5, 0x6, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x80, 0xff, 0xff]}}, 0xfffd, 0x9, 0x0, 0xfffe, 0x0, 0x7fff, 'veth1_to_batadv\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x1c0}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @empty, @empty, 0x4}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x13}, @broadcast, 0xff000000, 0xff, 0xe, 0x2, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0x3, 0x0, 0xd82, 0x7, 0x3, 'veth0_to_team\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0x41}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setreuid(0x0, 0xee01) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x5000, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008000, &(0x7f00000000c0)={0xa, 0x4e24, 0x401, @local, 0x8fb}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001e00090002000000ffdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) setrlimit(0x7, &(0x7f0000000080)={0x6, 0xfff}) r9 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000bc0)={0x10, 0x0, &(0x7f0000000ac0)=[@free_buffer={0x40086303, r9}, @enter_looper], 0x54, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f43e1"}) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x40000, &(0x7f0000000280)={[{@gid={'gid', 0x3d, r6}}, {@mode={'mode', 0x3d, 0xffffffff00000000}}, {@mode={'mode', 0x3d, 0x8}}, {@gid={'gid', 0x3d, r6}}, {@mode={'mode', 0x3d, 0xe8}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x9}}, {@uid={'uid', 0x3d, r5}}, {@uid={'uid', 0x3d, r5}}], [{@obj_type={'obj_type', 0x3d, '/dev/hidraw#\x00'}}]}) r10 = socket(0x10, 0x803, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r10}, @fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r2, &(0x7f0000000000)={0x60000001}) syz_usb_control_io(r1, &(0x7f0000000000)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="571807"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x400) close_range(r0, 0xffffffffffffffff, 0x0) 1m12.952678199s ago: executing program 5 (id=4918): r0 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x3) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{}]}, 0xc) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000), 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="cd303083"]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000240)="900000001d001f4d154a817393278bff0a800500000000000000840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed4959a6215be0000766436d0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) rename(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup/file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000000)=0x8, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r7) ptrace$pokeuser(0x6, r7, 0x388, 0x800000045) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x21) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m12.757085763s ago: executing program 5 (id=4919): syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x20c040) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x16d302, 0x0) socket$packet(0x11, 0x3, 0x300) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r1, &(0x7f0000000400)="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", 0x1f000) 1m12.611192506s ago: executing program 5 (id=4920): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') setns(r0, 0x40000000) (async) inotify_init1(0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000009e040000fc0f000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="01efff4001"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)) (async) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001000), 0x0, 0x34000090) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9f91f84c4564eb858abedf2282f67", 0x14) (async) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000000), 0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) setgid(0xee00) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000002180)=0x10, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000002100)='veth0_to_bridge\x00', 0x10) write(r5, &(0x7f00000021c0)="b0c748d17593a1b759d90062a5b81337fb30187160d02770548ddffb612e260b1ed4bebf47b1a7e1b449573e4425f723721c7a64b181e8b067e756929f56fdc645a0b34d1a24d25ec7e86be0e175f1fcba3709", 0x53) sendto$inet(r5, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) read$FUSE(r6, &(0x7f00000000c0)={0x2020}, 0x2020) 1m12.521107067s ago: executing program 42 (id=4920): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') setns(r0, 0x40000000) (async) inotify_init1(0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000009e040000fc0f000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="01efff4001"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)) (async) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001000), 0x0, 0x34000090) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9f91f84c4564eb858abedf2282f67", 0x14) (async) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000000), 0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) setgid(0xee00) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000002180)=0x10, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000002100)='veth0_to_bridge\x00', 0x10) write(r5, &(0x7f00000021c0)="b0c748d17593a1b759d90062a5b81337fb30187160d02770548ddffb612e260b1ed4bebf47b1a7e1b449573e4425f723721c7a64b181e8b067e756929f56fdc645a0b34d1a24d25ec7e86be0e175f1fcba3709", 0x53) sendto$inet(r5, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) read$FUSE(r6, &(0x7f00000000c0)={0x2020}, 0x2020) 43.007999456s ago: executing program 1 (id=5270): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0xffffffff80408040}}, 0x50) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x0, 0x0, [0xfffffff8, 0x3, 0x5, 0x5]}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3ffff, {0x5, 0x0, 0x0, 0x4000000008, 0x460e, 0x5, {0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 42.83284756s ago: executing program 1 (id=5272): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1c, 0x0, &(0x7f0000000140)=[@increfs_done, @release={0x40046306, 0x2}], 0x127, 0x0, &(0x7f0000000180)="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"}) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x8080) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_STATX(r4, &(0x7f0000008100)={0x130, 0xfffffffffffffffe, 0x0, {0x100000000, 0x0, 0x0, '\x00', {0x400, 0x1, 0x8, 0x9, 0x0, 0x0, 0xa000, '\x00', 0x3, 0x57, 0x7, 0x6, {0x7fff, 0x5}, {0x3, 0x6}, {0x5, 0xcd4}, {0x32, 0x7}, 0x3, 0xfff, 0x10000, 0x8}}}, 0x130) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) readlinkat(r4, &(0x7f0000000440)='./file0\x00', &(0x7f0000000580)=""/4096, 0x1000) recvfrom$unix(r3, &(0x7f0000000300)=""/278, 0x116, 0x22, 0x0, 0x0) r5 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000480)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x1, 0x5e}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1c, 0x0, &(0x7f0000000140)=[@increfs_done, @release={0x40046306, 0x2}], 0x127, 0x0, &(0x7f0000000180)="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"}) (async) socket(0x28, 0x5, 0x0) (async) socket(0x28, 0x5, 0x0) (async) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r2, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x8080) (async) accept4$unix(r2, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$FUSE_STATX(r4, &(0x7f0000008100)={0x130, 0xfffffffffffffffe, 0x0, {0x100000000, 0x0, 0x0, '\x00', {0x400, 0x1, 0x8, 0x9, 0x0, 0x0, 0xa000, '\x00', 0x3, 0x57, 0x7, 0x6, {0x7fff, 0x5}, {0x3, 0x6}, {0x5, 0xcd4}, {0x32, 0x7}, 0x3, 0xfff, 0x10000, 0x8}}}, 0x130) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) readlinkat(r4, &(0x7f0000000440)='./file0\x00', &(0x7f0000000580)=""/4096, 0x1000) (async) recvfrom$unix(r3, &(0x7f0000000300)=""/278, 0x116, 0x22, 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000480)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x1, 0x5e}) (async) 42.684815892s ago: executing program 1 (id=5273): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 40.310924967s ago: executing program 1 (id=5294): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc2241, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000540)="381b0b28cd3f5b150245525385296417a8e3ada7554d3381ae5f44727b637520a74aa3f28c8976ed95f54b308851de225fe21760ed78a654291a0a078611497e0feeb3bd06ba74ef0f3def486f2af4906b99cb253b8be0c521ea2cb4c70e10060bab0f06fd887b8adffd651fda6a5b6422ffdc15a000a25bf26dbdb1e2d029d166e8cc392f0e5e442af6d611ef5f0ad8141a", 0x92}], 0x1, 0x1) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) (async) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) (async, rerun: 32) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) (async) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r5 = syz_open_pts(r0, 0x20800) dup3(r5, r0, 0x0) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x8, 0x7fff, 0x1, 0x1ff, 0x6, "29cf29c2b287426ddb33f844374acd18bfcf4f", 0x4, 0x1000000}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) 40.197878379s ago: executing program 1 (id=5296): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) ioctl$TUNSETLINK(r0, 0x400454ce, 0x321) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x18, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7e, 0x4) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r5 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') write$binfmt_misc(r5, &(0x7f00000004c0)="8b", 0x1) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) close_range(r4, r1, 0x0) 40.000861613s ago: executing program 1 (id=5298): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)="741fdd569e907934f4cba6a30b40d239b088cd8a89dd6fd58192dc959ad6855e8264e7e775efff5d99a66c8c18ad58548a20bff61c3b786e0cf2cca2bc1baf3d177ca28c157e25c16ea3f91f06544d87ae908f15e4e53817f3a10fbfe64b0e495acb4818ff15600156d54c08458757582f57c4a5e01b5944671f0cf94520d13c68e48e600b4bde49bde4b6283ac404a2dbdcf2b4f9fef6431e3588f00d37f5df39902b01ee9c0d779a83fe9799fcd4e72db86b146469fed6e9ab1256716b183adfdca465735d74cd1744e4ceeb04dcbd98501cf841de03cb6a", 0xd9) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x3) (rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x8, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007cf000/0x2000)=nil}) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 24.875390529s ago: executing program 43 (id=5298): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)="741fdd569e907934f4cba6a30b40d239b088cd8a89dd6fd58192dc959ad6855e8264e7e775efff5d99a66c8c18ad58548a20bff61c3b786e0cf2cca2bc1baf3d177ca28c157e25c16ea3f91f06544d87ae908f15e4e53817f3a10fbfe64b0e495acb4818ff15600156d54c08458757582f57c4a5e01b5944671f0cf94520d13c68e48e600b4bde49bde4b6283ac404a2dbdcf2b4f9fef6431e3588f00d37f5df39902b01ee9c0d779a83fe9799fcd4e72db86b146469fed6e9ab1256716b183adfdca465735d74cd1744e4ceeb04dcbd98501cf841de03cb6a", 0xd9) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x3) (rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x8, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007cf000/0x2000)=nil}) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 4.368944278s ago: executing program 6 (id=5587): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) futex(&(0x7f0000000080)=0x2, 0x0, 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x401, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r2, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xa0}, {0x0, 0x30}], 0x2) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r3}, 0x3, &(0x7f00000000c0)=[0x8000000000000000, 0x8000000000000003, 0x1ae6], 0x1, 0x3, 0x1}) getsockopt$nfc_llcp(r0, 0x118, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, '\x00', "fe4f47bafbb67ae68dc462427bd5a94a", "a4dd10c8", "96499e2301e9d879"}, 0x28) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000380)="eb", 0x1}], 0x1) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000440)=0x4000000, 0x4) ppoll(&(0x7f0000000240)=[{r4, 0xc4}], 0x1, 0x0, 0x0, 0x0) 4.2420879s ago: executing program 4 (id=5589): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100409e1775119acc1e7206de010203010902120001000000000904000000020600001b9e7fa3f37aaa37847127083c2b86fc1f99166471fbee0d0000000000000ae248984c2c1c5518666863336070590ca9981e1381d5b309cc74e7eeafc7e8d054f30277d4cbfca0b309957f2583ba1c1fe8005c7eaeaca2ffac012094524003e4ea74f919a76a9ab16d2db9b50069964f93f3e389b4c28a387b52ca09fc8bd4caa3252925dafbf457830e9c645036da2034a9f1ec6dfcef9dc621d2f7ffdc816f7677867b0663aeb0783f5c"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="3a0004000000a721227730"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r5, 0x5453, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) read$FUSE(r8, 0x0, 0x0) r9 = signalfd4(r6, &(0x7f0000000280)={[0x4]}, 0x8, 0x80800) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r11 = accept4$inet(r7, &(0x7f0000000340)={0x2, 0x0, @initdev}, &(0x7f00000002c0)=0x10, 0x80800) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer], 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x3, 0xc92, [0x0, 0x200000000740, 0x200000000770, 0x2000000012d4], 0x0, &(0x7f0000000180), &(0x7f0000001400)=ANY=[@ANYBLOB="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"]}, 0xd79) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.512125004s ago: executing program 6 (id=5591): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x2, 0x101}, {0x0, 0x109003ff}, 0x7, 0x3}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 3.474961895s ago: executing program 6 (id=5592): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty, 0x40000002}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905b5af6604"], 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) close_range(r1, r2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x22, 0x0, &(0x7f0000000680)) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000003200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x202, 0x2, r7}) fcntl$lock(r5, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r5, 0x26, &(0x7f0000000080)) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) r8 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x7ff8ea1324232239}, 0xc, &(0x7f0000000800)={&(0x7f0000000380)={0x444, 0x38, 0x200, 0x70bd29, 0x25dfdbff, {0x8}, [@nested={0x46, 0x13f, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0x1c}, @typed={0x5, 0xbe, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x107}, @typed={0x4, 0xd5}, @nested={0x4, 0x6d}, @nested={0x4, 0x80}, @generic="71d4be271cf18b3e7f7a10b3de9cad1de27b3f248c51919b207870bfebab"]}, @nested={0x355, 0xbf, 0x0, 0x1, [@generic="8bd567618910e3e893b40d6f588d6b9ce7dba797ce", @typed={0x14, 0x14d, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x10f, 0x0, 0x0, @uid=r6}, @generic="998adf71b4fecfe6ecec550602726148e4b0d404883c818e690407b7a39de04f6ff9679b40c5a086de8eb234d1e18adb242700c95495b3c885aab17408cd4abf3591e1e7439dcedaa6cd83a6c3fd142eee296b1c8ca481309519d3376cd38167244acf930151b17d364ec030dd12cc331b5f1b6c4b55dbf4462a5c6a8ab9a165057c63de0d514c08846fc1544645c2b11aefe63553b3ce77a3980c9f2af8077aab25dfc9b20a76198f72cd7dfab1263c6e1b71b22884434943d39c4071a730a28c066b35e8e5", @generic="4fbfe98835ea1cb3a61087152e72229966dcfa990cb412e78282f1ffeeba9c6f7fb398f91b628df66ed37259cfb8f8165df668c76210ad790083512e0d65373e58f5c1e7ba626d7b4ff7fc489441759c106fb74d6f7049a854b7e9c2a6dacaa4b9dcac9492901725a0e5aa2a1e916b3fc81399c1749d009e4fc3d2be35bd55b438dabeedf6ec6856b281360ef90be543", @generic="270afa64da973ca2b49f12e0525dff2052bd5da67caf38477e1b5d9bf3ee45d6f790811c72fcc9337ade7f6db6b43d15ae1f34f9ae66bf0ed3e71e2bf3a82e778531ef528cf4dfdebca37e3e4f44b6577aa840464df6a0fec08278d1116a704237ead6de1ff13d04f1d7dbbb0163028e0cc2693461490150a08548b9016e02df48be96e30e5ba3a5ab9e8cf9fb380e0623297dd383bc40aa0ef07af81cea8f677795c87f7072adf8feaa6153188eceb5547361902d39e02b4661b9c4a182ae73a2fd4637d5dcd808df3127f5820b69fc22e9574cf13f22a72da6af845ac3bffe6318d6de66c1fb9d81b24d56e272297e76b9cfd4a21d", @generic="aef1e4c9b6e85f2a73bc85f336233635dedff8d1980fe3698853df14ae9bc5de362d7be55a14a2be330ccc9fe34b780c1fa23c2aa62217b7816ba54472c61dc92ea70517682845e2f9df698a8f4d02aca2c1c4f8764ff1749a60dd", @generic="6b833ed31357227c232afc1065901c89a2", @typed={0xf, 0x77, 0x0, 0x0, @str='+:%-:!%-/&\x00'}, @generic="7916309207d738fe2ba428f96285f2b4850a096bea6889189dd1369be224d67c42f4a526b4cf3f5d8415ee96986fc81016694a13616b37a98c19f9dde564ee365154c05c5e060209d7fc3fce74312195e8431f030e5cb819"]}, @generic="546d3aaa64b4d8daf1e1876749d4256f280fc0e52f3cbe77d01a8ce138d4eb326cca76537b08404f5d53d9d2fb33cc985d6bb9", @typed={0x8, 0x86, 0x0, 0x0, @pid=r7}, @generic="8209f40745845287835c3df126163ccf62351c0cc65cfbb78804ceda6d76fc6efe3a74b89ac50a961f26715742cee187a28d14c86308bead0cf39d65a892ddd62090ee076ed867d93982d722727cac7ca7d6d570d3"]}, 0x444}, 0x1, 0x0, 0x0, 0x4}, 0x4010815) fcntl$lock(r8, 0x25, &(0x7f0000000100)={0x2, 0x3, 0x0, 0xfffffffffffffffe}) ioctl$KVM_HAS_DEVICE_ATTR_vm(r5, 0x4018aee3, &(0x7f0000000880)=@attr_other={0x0, 0x6, 0x9c0, &(0x7f0000000900)=0x5}) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x126020, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000001a26eae7b4fbdbfad2b64911a7555b00020000bc50c4ff00"/42, @ANYRESOCT, @ANYRESOCT]) 3.255880429s ago: executing program 8 (id=5595): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fchdir(r0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0xffffd000) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000000)={0x9, {{0x2, 0x4e22, @empty}}}, 0x88) 3.21565467s ago: executing program 8 (id=5596): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000440)="5800000014001d2340834b80040d8d560a067ee500ff000000000000000058000b4824ca945f64009400140425010ebc000000000000008000f0fffeffe809005300fff5dd80000010000100080c10000a00000000000100", 0x58}], 0x1) lsetxattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0, 0x3) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) io_setup(0x1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) close(0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x38, 0x0, &(0x7f0000000200)=[@release={0x40046306, 0x2}, @request_death, @enter_looper, @exit_looper, @register_looper, @decrefs={0x40046307, 0x2}, @dead_binder_done], 0x3a, 0x0, &(0x7f0000000240)="fb4471d25598a030d4e30cdfdf6d4d9a6c85bfe6ffe134293473a6712e464ad27cc5f08aeeefd8067d7858a5cbb8004a4173e04113be03c47e18"}) listen(0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRESHEX], 0x27) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000001400)=[@acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.100916492s ago: executing program 8 (id=5597): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f00000de000/0x3000)=nil, 0x3000, 0x19) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00') unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00') 3.100491801s ago: executing program 8 (id=5598): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x189c00, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETLINK(r1, 0x400454ce, 0x321) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x189c00, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETLINK(r1, 0x400454ce, 0x321) (async) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)) (async) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 3.068489272s ago: executing program 8 (id=5600): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES16], 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unshare(0x2040400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r5 = syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000580)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/124, 0x7c, 0x1, 0x35}, @flat=@weak_binder, @ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/211, 0xd3, 0x2, 0x23}}, &(0x7f0000000040)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r7, 0x11a, 0x3, &(0x7f0000000700)=0x4, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xac, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x2}, @free_buffer={0x40086303, r6}, @enter_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x2, 0x0, 0x2a}, @fda={0x66646185, 0x9, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x20, 0x40}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000380)={0x30, 0x30, 0x30}}}, @register_looper], 0x0, 0x0, 0x0}) 2.66630394s ago: executing program 4 (id=5610): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x208040, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x2ee]}, 0xfffffffffffffffc, 0x0, 0x8) tkill(r2, 0x4) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.224837248s ago: executing program 4 (id=5613): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0xf, 0x6, 0x1, {0x22, 0x2c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xe, 0x8}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x19, &(0x7f00000001c0)=ANY=[@ANYBLOB="040f190001140000ff00"]}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8803, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x6) r2 = socket$inet6(0xa, 0x0, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, &(0x7f0000000780)) setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000000)=0x2, 0x4) 1.172634588s ago: executing program 3 (id=5624): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c40)={"e54c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774ca3d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa10aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4887906737c78821371dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7692a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34cc79c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240bb700b9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883cff7f000000000000aea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc00794d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea979a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbe8a970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad583779b97034f9400"}) close_range(r0, 0xffffffffffffffff, 0x0) 1.137313289s ago: executing program 3 (id=5625): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x30, 0x1, &(0x7f0000000d40)={0xa, 0x4e24, 0x1, @mcast2, 0x9}, 0x1c) syz_usb_connect$cdc_ncm(0x3, 0x98, &(0x7f0000000100)={{0x12, 0x1, 0x10, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x6, 0x90, 0x79, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "4349e370"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x54, 0x2, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0xf8, 0x25}, [@dmm={0x7, 0x24, 0x14, 0x3, 0x4}, @acm={0x4, 0x24, 0x2, 0xc}, @acm={0x4, 0x24, 0x2, 0xe}, @acm={0x4, 0x24, 0x2, 0x18}, @country_functional={0xe, 0x24, 0x7, 0x8, 0x80, [0x401, 0xff, 0x9900, 0x5]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0xfc, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xe, 0xd2, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x9, 0x9}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x9, 0xd, 0x2, 0x20, 0xf3}, 0x2f, &(0x7f0000000080)={0x5, 0xf, 0x2f, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x6, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x6, 0xd}, @generic={0x1c, 0x10, 0x3, "7e0cb564612fc76f5be89aeeb546dfcc33a20662e2df10bf84"}]}, 0x1, [{0x84, &(0x7f00000001c0)=@string={0x84, 0x3, "5d08f7c6dd770a74cb3b9cd7ffa0b69be59ffa81e2f8c7b031bc2131fed9e2821c150857cf42536479e518731286c2618b2e79e064dc5da8df5792c846b524cd4c1ca86d195fc23d542876508e0f67a3297b169f34c345553c7e1a44d7459b9bc1d0d4f7e406f62326f58381424b12015066150f8b8d5c2ca54ae8dba8438394bca1"}}]}) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000000)) 1.052421401s ago: executing program 4 (id=5626): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000040)={0x3000, 0x16000}) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) fadvise64(r6, 0xfffffffffffff800, 0x3, 0x2) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3dbd58d40e68f8d692e2f08ac8b2a5e618f9fcb22a3d72df1051b3a11e605a0898feaee83ef281980414483323684296246d4f9f70605a1ad8db526c30751c21", @ANYRESHEX=r5, @ANYBLOB=',afid=0x0000000000000000,nodevmap,access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x35, &(0x7f0000000000)=0x7ffc, 0x47) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xbe7}], 0x1, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000000002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r9, &(0x7f0000007100)={0x2020}, 0x941f) 832.882714ms ago: executing program 4 (id=5627): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19e}, 0x0, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4002}, {}], 0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) r2 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x200, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x48, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e4"], 0x66) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc058671e, &(0x7f00000000c0)) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) 605.851229ms ago: executing program 3 (id=5628): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x5147f000) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0x0) ioperm(0x9, 0x7ff, 0x100000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x40d00, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 574.49028ms ago: executing program 3 (id=5629): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa8041, 0x0) connect$unix(r0, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async, rerun: 32) recvfrom$inet(r0, &(0x7f0000004580)=""/184, 0xb8, 0x60, &(0x7f0000004640)={0x2, 0x4e23, @multicast1}, 0x10) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r1, &(0x7f0000009900)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f0000004a40)=[{&(0x7f0000000100)=""/13, 0xd}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000009c80)=""/4095, 0xfff}, {&(0x7f0000000180)=""/107, 0x6b}, {&(0x7f00000048c0)=""/147, 0x93}, {&(0x7f00000002c0)=""/127, 0x7f}], 0x6, &(0x7f0000002400)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003400)=@alg, 0x80, &(0x7f00000003c0)=[{&(0x7f0000003480)=""/119, 0x77}], 0x1, &(0x7f0000003500)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000004500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000049c0), 0x0, &(0x7f0000009c00)=""/78, 0x4e}, 0x7}, {{&(0x7f0000004ac0)=@isdn, 0x80, &(0x7f0000007d00)=[{&(0x7f0000004b40)=""/43, 0x2b}, {&(0x7f0000004b80)=""/47, 0x2f}, {&(0x7f0000004bc0)=""/88, 0x58}, {&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000005c40)=""/9, 0x9}, {&(0x7f0000005c80)=""/4096, 0x1000}, {&(0x7f0000006c80)=""/4086, 0xff6}, {&(0x7f0000000200)=""/119, 0x77}], 0x8, &(0x7f0000004680)=""/243, 0xf8}, 0x6}, {{&(0x7f0000007e80)=@l2tp, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/138, 0x8a}], 0x1, &(0x7f0000008000)=""/147, 0x93}, 0x4}, {{&(0x7f00000080c0)=@un=@abs, 0x80, &(0x7f0000008200)=[{&(0x7f0000008140)=""/171, 0xab}], 0x1, &(0x7f0000008240)=""/111, 0x6f}, 0x6}, {{&(0x7f0000000340)=@phonet, 0x80, &(0x7f0000008380)=[{&(0x7f0000007c80)=""/45, 0x90}], 0x1}, 0x10001}, {{&(0x7f00000083c0)=@pppol2tpv3, 0x80, &(0x7f00000094c0)=[{&(0x7f0000008440)=""/86, 0x56}, {&(0x7f00000084c0)=""/4096, 0x1000}], 0x2, &(0x7f0000009500)=""/251, 0xfb}, 0x7ff}, {{&(0x7f00000082c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000097c0)=[{&(0x7f0000009680)=""/93, 0x5d}, {&(0x7f0000009700)=""/190, 0xbe}], 0x2, &(0x7f0000009800)=""/249, 0xf9}}], 0x9, 0x0, &(0x7f0000009b40)) (async) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r3, 0x1, 0x1) (async) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c82, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') (async, rerun: 64) exit(0x1ff) (rerun: 64) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async, rerun: 32) getdents(r3, 0x0, 0x0) (rerun: 32) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01a274bd2e23674b37d44000283d00fddbdf250c00000018000580080002800800040003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000841}, 0x24004084) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f0000009b80), &(0x7f0000009bc0)=0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000004840)={'#! ', '', [{0x20, '*^!'}, {0x20, '\xfe\xc8T\x1eZR\xa0 \xde\xb3\xf2\xff\x96\xd99\x82[\xcdZ%,T\xb5\xd39\xbbG\x06J\xd8_?\x8d\xf9\xce\v\x82\xd6\x8b$\x7f\x01?\x80\xd6\xe1Q5\x97\x10\x95 ]y\xdfI\xbat\x0fb\xeb>u\xa1\xb8\x04\xee\xf2\x8b\x05\x99\xad5b\xbd\xe1\xb8\xe2A\xc8!WZ\xa6v\x89\x00\x00\x00\x00'}]}, 0x63) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r8, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 64) cachestat(r3, &(0x7f00000047c0)={0x82}, &(0x7f000009de80), 0x0) (rerun: 64) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000080015"], 0x3e0}}, 0x20010000) (async, rerun: 64) write(r7, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) (rerun: 64) 432.711592ms ago: executing program 3 (id=5630): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x24a, 0xfff, 0x4) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040), 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x20048860) close(r3) (async) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x3}) (async) r5 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) (async) r6 = eventfd2(0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000002bc0)='bridge0\x00') (async) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r6}) (async) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000100)={r6, 0xfffffff9, 0x1, r6}) r8 = socket$inet6(0xa, 0x80802, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r8, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="5bb489d49b45621c67155f3dd69be6f1bc4b7e734dd0858fcbfeca1efc391ef6e3ae2b702865", 0x26}], 0x1}}], 0x3, 0x1c000) (async) ppoll(&(0x7f0000000140)=[{r8, 0x5}], 0x1, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 432.180752ms ago: executing program 3 (id=5631): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000040)=0x40, 0x4) recvmmsg(r1, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0xe70}], 0x1, 0x45833af92e4b39ff, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "08b1db4c", {0x1, 0x751, 0x2, 0x1}}) 428.663333ms ago: executing program 6 (id=5632): inotify_init1(0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000100)="9ea1d0081f", 0x5) (async) recvmmsg(r2, &(0x7f00000008c0), 0x10, 0x0, 0x0) (async) close(r1) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) (async) timer_settime(r3, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000865000/0x1000)=nil) (async) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000180)={@mcast1}, 0x14) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 382.175893ms ago: executing program 6 (id=5633): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) clock_getres(0xfffffffffffffffd, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x401, &(0x7f00000000c0)={[{}, {@subsystem='pids'}]}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0x22) preadv(r8, &(0x7f0000000180)=[{&(0x7f0000000300)=""/180, 0xb4}], 0x1, 0x1, 0x50354fe8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000001ac0)=ANY=[@ANYBLOB="1a0088a8bbbbbbbbbbbbaaaaaaaaaabb08004517003400680000fc5e90787f00000164010102"], 0x26) 244.862116ms ago: executing program 6 (id=5634): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000015c0)={'veth0_to_hsr\x00', &(0x7f0000001500)=@ethtool_rx_ntuple={0x35, {0x8, @tcp_ip4_spec={@local, @private=0xa010102, 0x4e24, 0x4e21, 0x3}, @esp_ip4_spec={@empty, @remote, 0x4, 0x3}, 0x3266, 0x81, 0x3, 0x7, 0xffffffffffffffff}}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05"], 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'macvlan0\x00', 0x400}) close_range(r1, 0xffffffffffffffff, 0x0) 15.4482ms ago: executing program 8 (id=5635): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bind$netlink(r1, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) epoll_create1(0x0) setresuid(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xfffffffffffffff7, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0x1, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @dead_binder_done], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=5636): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') (async) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000a0000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x2b, 0xfffffffd, 0xffffffff80408040}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3ffff, {0x5, 0x0, 0x0, 0x4000000008, 0x460e, 0x5, {0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r4, 0x5147f000) (async) ioperm(0x9, 0xcb, 0x100000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x711f00, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x80002, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2000, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000180), 0x12) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) kernel console output (not intermixed with test programs): 6] audit: type=1400 audit(16777860.528:83244): avc: denied { create } for pid=14927 comm="syz.4.4644" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 414.670925][ T36] audit: type=1400 audit(16777860.528:83245): avc: denied { ioctl } for pid=14927 comm="syz.4.4644" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=79886 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 414.726183][ T36] audit: type=1400 audit(16777860.548:83246): avc: denied { ioctl } for pid=14901 comm="syz.8.4638" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.751945][ T36] audit: type=1400 audit(16777860.548:83247): avc: denied { ioctl } for pid=14901 comm="syz.8.4638" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.777779][ T36] audit: type=1400 audit(16777860.548:83248): avc: denied { ioctl } for pid=14901 comm="syz.8.4638" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.803582][ T36] audit: type=1400 audit(16777860.548:83249): avc: denied { read write } for pid=14872 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.828973][ T36] audit: type=1400 audit(16777860.548:83250): avc: denied { read write open } for pid=14872 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.831376][T14939] veth1_macvtap: left promiscuous mode [ 415.236674][ T330] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 415.396706][ T330] usb 2-1: Invalid ep0 maxpacket: 64 [ 415.526643][ T330] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 415.587044][T14902] overlayfs: statfs failed on './file0' [ 415.686682][ T330] usb 2-1: Invalid ep0 maxpacket: 64 [ 415.692645][ T330] usb usb2-port1: attempt power cycle [ 415.716653][ T8483] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 415.804864][ T3279] usb 9-1: Cannot set autoneg [ 415.821174][ T3279] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 415.847573][ T3279] usb 9-1: USB disconnect, device number 15 [ 415.870058][ T8483] usb 6-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 415.883375][ T8483] usb 6-1: config 1 interface 0 has no altsetting 0 [ 415.897533][ T8483] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.906712][ T8483] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.914746][ T8483] usb 6-1: Product: 㠾譊긙峣畹ځᠦ瑱仴孕䲸낰凭굜ࣻᚄ鎢㍋뚣⫃릠㪷燎렳ᗘ㉪쳔韛䎑赶䵭⿲䎀泚萜沐趵盦ɘ窟⃿ꋏ㈈줥윯寃活Ộ曐磧饀ﴮ엛疦䢛梕䊄摁鑎ﺻ瞌܃㸟᝴ꗋྍ좎橗䵁䨀똳쵔䶱ʫ둵뵍苣㹔ܥ잆ᵋ茱ᙞ腆䠶휖ᢇۏ묡䠣풢넩늞ূ爗ﲀ楺搟ⶊ䴟쫍朴࡫估눨 [ 415.948363][ T8483] usb 6-1: Manufacturer: Ќ [ 415.952906][ T8483] usb 6-1: SerialNumber: 纘䪅깑ꚹ숇ࣹ඿ꦭꬻꋩ㿇숤⧺砩︃冂檙蘳ꍈ榄ᕚ쥛泿汷Ⲷ﵀梫඀Ệ䟪ᔘ牤㘂뜏㖕㞫댾秋꽕餐⪋邀飌鈂﷩裻垙먠鶢즺袘귗 [ 416.036669][ T330] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 416.057713][ T330] usb 2-1: Invalid ep0 maxpacket: 64 [ 416.186689][ T330] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 416.207624][ T330] usb 2-1: Invalid ep0 maxpacket: 64 [ 416.213454][ T330] usb usb2-port1: unable to enumerate USB device [ 416.355104][T14961] rtc_cmos 00:00: Alarms can be up to one day in the future [ 416.390227][ T8483] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 416.419198][ T8483] usb 6-1: USB disconnect, device number 35 [ 416.662867][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 416.840191][T14976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14976 comm=syz.4.4661 [ 417.057634][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 417.077137][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 417.084826][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 417.104274][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 417.120144][ T45] rtc rtc0: __rtc_set_alarm: err=-22 [ 417.132504][T14998] random: crng reseeded on system resumption [ 417.361201][T15004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 417.409700][T15012] netlink: 37 bytes leftover after parsing attributes in process `syz.4.4673'. [ 417.552204][T15018] overlayfs: failed to clone upperpath [ 417.686694][ T45] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 417.836678][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 417.844062][ T45] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 417.852293][ T45] usb 6-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 417.863007][ T45] usb 6-1: config 0 has no interface number 0 [ 417.869200][ T45] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 417.879110][ T45] usb 6-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.892179][ T45] usb 6-1: config 0 interface 41 has no altsetting 0 [ 417.902465][ T45] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 417.911601][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.919652][ T45] usb 6-1: Product: syz [ 417.922838][ T8483] rust_binder: 14941: removing orphan mapping 0:4232 [ 417.923835][ T45] usb 6-1: Manufacturer: syz [ 417.935167][ T45] usb 6-1: SerialNumber: syz [ 417.943545][ T45] usb 6-1: config 0 descriptor?? [ 417.950493][T15013] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 417.977763][ T45] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -22 [ 418.048753][T15029] netlink: 'syz.1.4679': attribute type 12 has an invalid length. [ 418.606689][ T45] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 418.736674][ T485] Bluetooth: hci0: command 0x1003 tx timeout [ 418.736669][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 418.766649][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 418.788242][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.813558][ T45] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 418.836638][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 418.865608][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 418.893313][ T45] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.898974][T15080] tipc: Started in network mode [ 418.924840][T15080] tipc: Node identity 3e0bf2c56f84, cluster identity 4711 [ 418.925902][ T45] usb 2-1: config 1 interface 1 has no altsetting 0 [ 418.938731][T15080] tipc: Enabled bearer , priority 0 [ 418.960480][ T12] bridge_slave_1: left allmulticast mode [ 418.973155][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.976984][ T12] bridge_slave_1: left promiscuous mode [ 418.991548][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.995168][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.009934][ T45] usb 2-1: Product: syz [ 419.014285][ T45] usb 2-1: Manufacturer: syz [ 419.017011][ T12] bridge_slave_0: left allmulticast mode [ 419.024582][ T12] bridge_slave_0: left promiscuous mode [ 419.028180][ T45] usb 2-1: SerialNumber: syz [ 419.030954][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.066759][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 419.095666][ T12] bridge0 (unregistering): left allmulticast mode [ 419.159751][ T12] tipc: Disabling bearer [ 419.226648][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 419.238228][ T12] tipc: Left network mode [ 419.244409][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 419.254281][ T12] veth1_macvtap: left promiscuous mode [ 419.268571][ T45] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 419.273248][ T12] veth0_vlan: left promiscuous mode [ 419.276440][ T45] usb 2-1: 2:1 : format type 9 is not supported yet [ 419.297698][ T10] usb 9-1: config 4 has an invalid interface number: 147 but max is 0 [ 419.306010][ T10] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 419.326779][ T45] usb 2-1: USB disconnect, device number 79 [ 419.371823][ T10] usb 9-1: config 4 has no interface number 0 [ 419.388169][T15084] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 419.423620][ T10] usb 9-1: string descriptor 0 read error: -22 [ 419.430142][ T10] usb 9-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 419.441084][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.472613][ T36] kauditd_printk_skb: 627 callbacks suppressed [ 419.472634][ T36] audit: type=1400 audit(16777865.508:83878): avc: denied { ioctl } for pid=15071 comm="syz.8.4689" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.508335][ T36] audit: type=1400 audit(16777865.518:83879): avc: denied { read write } for pid=15097 comm="syz.1.4697" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 419.547977][ T36] audit: type=1400 audit(16777865.518:83880): avc: denied { read write open } for pid=15097 comm="syz.1.4697" path="/dev/binderfs/binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 419.575770][ T36] audit: type=1400 audit(16777865.538:83881): avc: denied { ioctl } for pid=15071 comm="syz.8.4689" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.642456][T15084] syzkaller0: entered promiscuous mode [ 419.653365][T15084] syzkaller0: entered allmulticast mode [ 419.660552][T15084] tipc: Resetting bearer [ 419.666386][ T36] audit: type=1400 audit(16777865.538:83882): avc: denied { ioctl } for pid=15071 comm="syz.8.4689" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.696443][ T36] audit: type=1400 audit(16777865.548:83883): avc: denied { read write } for pid=15097 comm="syz.1.4697" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 419.727998][ T36] audit: type=1400 audit(16777865.548:83884): avc: denied { read write open } for pid=15097 comm="syz.1.4697" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 419.803056][T15072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.809933][ T36] audit: type=1400 audit(16777865.568:83885): avc: denied { ioctl } for pid=15097 comm="syz.1.4697" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 419.840269][T12905] udevd[12905]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 419.860021][T15072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.896282][ T36] audit: type=1400 audit(16777865.578:83886): avc: denied { read } for pid=15097 comm="syz.1.4697" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 419.966657][ T45] tipc: Node number set to 1368388293 [ 420.010635][ T36] audit: type=1400 audit(16777865.578:83887): avc: denied { read open } for pid=15097 comm="syz.1.4697" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 420.229390][ T3279] usb 9-1: USB disconnect, device number 16 [ 420.840083][ T45] usb 6-1: USB disconnect, device number 36 [ 420.858708][T15010] tipc: Resetting bearer [ 420.904902][T15010] tipc: Disabling bearer [ 421.186672][ T3279] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 421.356648][ T3279] usb 9-1: Using ep0 maxpacket: 16 [ 421.385808][ T3279] usb 9-1: unable to get BOS descriptor or descriptor too short [ 421.436632][ T3279] usb 9-1: config 9 has an invalid interface number: 63 but max is 1 [ 421.444815][ T3279] usb 9-1: config 9 has an invalid interface number: 159 but max is 1 [ 421.466635][ T3279] usb 9-1: config 9 has no interface number 0 [ 421.472798][ T3279] usb 9-1: config 9 has no interface number 1 [ 421.502825][ T3279] usb 9-1: config 9 interface 63 has no altsetting 0 [ 421.522739][ T3279] usb 9-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=5c.87 [ 421.532763][ T3279] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.556635][ T3279] usb 9-1: Product: syz [ 421.560873][ T3279] usb 9-1: Manufacturer: syz [ 421.565509][ T3279] usb 9-1: SerialNumber: syz [ 421.725285][T15170] bridge0: entered allmulticast mode [ 421.808608][T15174] netlink: 'syz.4.4722': attribute type 1 has an invalid length. [ 421.816571][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4722'. [ 421.897265][ T3279] usb 9-1: USB disconnect, device number 17 [ 422.099052][T15178] syzkaller0: entered promiscuous mode [ 422.104600][T15178] syzkaller0: entered allmulticast mode [ 422.226568][T12905] udevd[12905]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:9.63/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 422.427429][T15188] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4726'. [ 422.706661][ T3279] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 422.859604][ T3279] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.874499][ T3279] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.883523][ T8483] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 422.915263][ T3279] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.935040][ T3279] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.955258][ T3279] usb 9-1: Product: syz [ 422.959593][ T3279] usb 9-1: Manufacturer: syz [ 422.974819][ T3279] usb 9-1: SerialNumber: syz [ 422.999863][T15205] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 423.056642][ T8483] usb 6-1: Using ep0 maxpacket: 32 [ 423.074511][ T8483] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 423.141119][ T8483] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 423.160401][ T8483] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.176627][ T8483] usb 6-1: Product: syz [ 423.187159][ T8483] usb 6-1: Manufacturer: syz [ 423.199518][ T8483] usb 6-1: SerialNumber: syz [ 423.229174][ T8483] usb 6-1: config 0 descriptor?? [ 423.246631][T15193] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 423.510642][T15193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.529321][T15193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.941856][T15237] __vm_enough_memory: pid: 15237, comm: syz.1.4743, bytes: 18014402804453376 not enough memory for the allocation [ 424.211785][T15245] veth1: entered allmulticast mode [ 424.223186][T15245] veth1: left allmulticast mode [ 424.484714][ T36] kauditd_printk_skb: 543 callbacks suppressed [ 424.484735][ T36] audit: type=1400 audit(16777870.518:84431): avc: denied { read write } for pid=14872 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.567767][ T36] audit: type=1400 audit(16777870.518:84432): avc: denied { read write open } for pid=14872 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.642855][ T36] audit: type=1400 audit(16777870.518:84433): avc: denied { ioctl } for pid=14872 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.677795][ T36] audit: type=1400 audit(16777870.608:84434): avc: denied { create } for pid=15260 comm="syz.1.4752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 424.725339][ T36] audit: type=1400 audit(16777870.608:84435): avc: denied { write } for pid=15260 comm="syz.1.4752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 424.769519][ T36] audit: type=1400 audit(16777870.608:84436): avc: denied { read } for pid=15260 comm="syz.1.4752" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 424.780773][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4754'. [ 424.831028][T15273] rust_binder: Error while translating object. [ 424.831080][T15273] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 424.834248][ T36] audit: type=1400 audit(16777870.608:84437): avc: denied { read open } for pid=15260 comm="syz.1.4752" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 424.846709][T15273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:97 [ 424.871017][ T36] audit: type=1400 audit(16777870.608:84438): avc: denied { ioctl } for pid=15260 comm="syz.1.4752" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 424.939248][ T36] audit: type=1400 audit(16777870.658:84439): avc: denied { mount } for pid=15262 comm="syz.4.4753" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 424.975244][ T36] audit: type=1400 audit(16777870.658:84440): avc: denied { read write } for pid=15260 comm="syz.1.4752" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 425.035075][T15278] netlink: 'syz.1.4757': attribute type 4 has an invalid length. [ 425.049319][T15278] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4757'. [ 425.291329][T15290] overlayfs: failed to clone upperpath [ 425.430453][ T3279] usb 9-1: 0:2 : does not exist [ 425.451745][ T3279] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 425.487890][ T3279] usb 9-1: USB disconnect, device number 18 [ 425.514768][ T8483] usb 6-1: USB disconnect, device number 37 [ 425.870300][T12905] udevd[12905]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 426.080628][T12827] udevd[12827]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 426.393619][T15346] rust_binder: 200: no such ref 3 [ 426.723860][T15368] batadv_slave_1: entered promiscuous mode [ 426.976781][ T8483] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 426.986249][T15377] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4787'. [ 427.156617][ T8483] usb 2-1: Using ep0 maxpacket: 8 [ 427.167996][ T8483] usb 2-1: config 16 has an invalid interface number: 65 but max is 0 [ 427.184005][ T8483] usb 2-1: config 16 has no interface number 0 [ 427.207125][ T8483] usb 2-1: config 16 interface 65 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 427.234020][ T8483] usb 2-1: config 16 interface 65 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 427.248952][ T8483] usb 2-1: config 16 interface 65 altsetting 1 endpoint 0x5 has an invalid bInterval 153, changing to 11 [ 427.267036][ T8483] usb 2-1: config 16 interface 65 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 427.287497][ T8483] usb 2-1: config 16 interface 65 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 427.299800][ T8483] usb 2-1: config 16 interface 65 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 427.321531][ T8483] usb 2-1: config 16 interface 65 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 427.343595][ T8483] usb 2-1: config 16 interface 65 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 427.365969][ T8483] usb 2-1: config 16 interface 65 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 427.380906][ T8483] usb 2-1: config 16 interface 65 has no altsetting 0 [ 427.392577][ T8483] usb 2-1: New USB device found, idVendor=093c, idProduct=0701, bcdDevice=b5.43 [ 427.403024][ T8483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.415476][ T8483] usb 2-1: Product: syz [ 427.424098][ T8483] usb 2-1: Manufacturer: ↴蘳鄗Ḧ縋噰隵㷚ᴐ벯ꋳ褔蚝핮浜엇ꭐ癖友ݥ㻼働鎽몮ᶗ電㕆Ꮁឥ垹쿥뽄 [ 427.448729][ T8483] usb 2-1: SerialNumber: syz [ 427.464353][T15368] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 427.467998][T15391] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 427.491918][T15391] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 427.535001][T15391] rust_binder: 206: no such ref 1 [ 427.623027][T15403] 9pnet: Could not find request transport: Kd [ 427.666447][T15404] block device autoloading is deprecated and will be removed. [ 427.689687][T15367] batadv_slave_1: left promiscuous mode [ 427.703090][ T8483] ftdi_sio 2-1:16.65: FTDI USB Serial Device converter detected [ 427.721115][ T8483] ftdi_sio ttyUSB0: unknown device type: 0xb543 [ 427.734775][ T8483] usb 2-1: USB disconnect, device number 80 [ 427.743110][ T8483] ftdi_sio 2-1:16.65: device disconnected [ 428.118045][T15431] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 428.118080][T15431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 428.126635][T15431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:219 [ 428.460971][T15455] sit0: entered promiscuous mode [ 428.498557][T15459] kvm: kvm [15458]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200000ff9000 [ 428.512377][T15455] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4815'. [ 428.518468][T15464] overlayfs: failed to clone upperpath [ 428.530265][T15460] __vm_enough_memory: pid: 15460, comm: syz.1.4816, bytes: 18014402804453376 not enough memory for the allocation [ 428.700676][T15471] rust_binder: Error while translating object. [ 428.700719][T15471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 428.717485][T15471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:232 [ 428.888808][T15485] tipc: Started in network mode [ 428.923146][T15485] tipc: Node identity 5a0a45f21454, cluster identity 4711 [ 428.943448][T15485] tipc: Enabled bearer , priority 0 [ 428.964290][T15491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 428.964329][T15491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 428.975552][T15487] tipc: Disabling bearer [ 429.006415][T15491] rust_binder: 238: no such ref 2 [ 429.015679][T15491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:238 [ 429.096635][ T330] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 429.306637][ T330] usb 9-1: Using ep0 maxpacket: 32 [ 429.322727][ T330] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 429.333536][ T330] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 429.359283][T15522] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 429.360197][ T330] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 429.415901][ T330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 429.454473][ T330] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 429.493597][ T330] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 429.506409][ T36] kauditd_printk_skb: 851 callbacks suppressed [ 429.506434][ T36] audit: type=1400 audit(16777875.518:85292): avc: denied { unmount } for pid=14355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 429.510404][ T330] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 429.523874][ T36] audit: type=1400 audit(16777875.548:85293): avc: denied { read write } for pid=14872 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.575362][ T330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.617201][T15530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 429.626462][ T36] audit: type=1400 audit(16777875.568:85294): avc: denied { create } for pid=15525 comm="syz.4.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 429.637994][ T330] usb 9-1: config 0 descriptor?? [ 429.651355][T15530] rust_binder: Error in use_page_slow: ESRCH [ 429.651377][T15530] rust_binder: use_range failure ESRCH [ 429.668326][T15530] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 429.673861][T15530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 429.686631][ T36] audit: type=1400 audit(16777875.598:85295): avc: denied { read write open } for pid=14872 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.746757][T15530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:246 [ 429.816624][ T36] audit: type=1400 audit(16777875.608:85296): avc: denied { ioctl } for pid=14872 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.906349][ T330] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 429.936209][ T36] audit: type=1400 audit(16777875.618:85297): avc: denied { setopt } for pid=15525 comm="syz.4.4839" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 429.949801][ T330] usb 9-1: USB disconnect, device number 19 [ 429.968504][T15541] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4845'. [ 429.977869][ T330] usblp0: removed [ 430.010363][ T36] audit: type=1400 audit(16777875.628:85298): avc: denied { create } for pid=15525 comm="syz.4.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 430.030481][ T36] audit: type=1400 audit(16777875.628:85299): avc: denied { create } for pid=15525 comm="syz.4.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 430.050157][ T36] audit: type=1400 audit(16777875.628:85300): avc: denied { write } for pid=15525 comm="syz.4.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 430.085554][T14355] audit: audit_backlog=65 > audit_backlog_limit=64 [ 430.096939][T15540] IPv6: Can't replace route, no match found [ 430.117320][T15540] IPv6: Can't replace route, no match found [ 430.456913][ T330] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 430.502925][T15561] fuseblk: Unknown parameter 'ser_id' [ 430.512554][T15563] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4853'. [ 430.601469][ T330] usb 9-1: device descriptor read/64, error -71 [ 430.743420][T15573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 430.743460][T15573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260 [ 430.768477][T15573] rust_binder: Error while translating object. [ 430.777762][T15573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 430.783968][T15573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260 [ 430.886640][ T330] usb 9-1: device descriptor read/64, error -71 [ 431.071979][T15590] overlayfs: failed to clone upperpath [ 431.107767][T15592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 431.107815][T15592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:264 [ 431.156638][ T330] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 431.376641][ T330] usb 9-1: device descriptor read/64, error -71 [ 431.646627][ T330] usb 9-1: device descriptor read/64, error -71 [ 431.757574][ T330] usb usb9-port1: attempt power cycle [ 432.156720][ T45] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 432.296771][ T3279] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 432.306744][ T330] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 432.336319][ T330] usb 9-1: unable to get BOS descriptor or descriptor too short [ 432.348492][ T330] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 432.357668][ T330] usb 9-1: config 1 has no interface number 1 [ 432.369752][ T330] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.379487][ T330] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.380760][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 432.388946][ T330] usb 9-1: Product: syz [ 432.400183][ T330] usb 9-1: Manufacturer: syz [ 432.404872][ T330] usb 9-1: SerialNumber: syz [ 432.407183][ T45] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 432.428510][ T45] usb 2-1: can't read configurations, error -71 [ 432.446629][ T3279] usb 6-1: Using ep0 maxpacket: 32 [ 432.454035][ T3279] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 432.467406][ T3279] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 432.476557][ T3279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.484681][ T3279] usb 6-1: Product: syz [ 432.488954][ T3279] usb 6-1: Manufacturer: syz [ 432.493592][ T3279] usb 6-1: SerialNumber: syz [ 432.502262][ T3279] usb 6-1: config 0 descriptor?? [ 432.509035][T15652] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 432.724766][T15652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.733450][T15652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.745381][T15652] overlay: ./file0 is not a directory [ 432.769484][ T330] usb 9-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 432.778764][ T3279] usb 6-1: USB disconnect, device number 38 [ 432.784836][ T330] usb 9-1: found format II with max.bitrate = 0, frame size=5 [ 432.792862][ T330] usb 9-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 432.801461][ T330] usb 9-1: found format II with max.bitrate = 0, frame size=5 [ 432.810453][ T330] usb 9-1: failed to enable PITCH for EP 0x82 [ 432.816924][ T330] usb 9-1: 2:1: cannot set freq 12216350 to ep 0x82 [ 432.840218][ T330] usb 9-1: USB disconnect, device number 22 [ 432.878645][T15335] udevd[15335]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 432.994247][T15334] udevd[15334]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 433.459104][T15680] netlink: 'syz.1.4895': attribute type 4 has an invalid length. [ 433.471943][T15680] netlink: 'syz.1.4895': attribute type 4 has an invalid length. [ 433.666633][ T550] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 433.746675][ T3279] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 433.860038][ T550] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 433.884070][ T550] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 433.903675][ T550] usb 6-1: config 0 has no interface number 0 [ 433.916705][ T550] usb 6-1: config 0 interface 12 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.932595][ T550] usb 6-1: config 0 interface 12 has no altsetting 0 [ 433.936670][ T3279] usb 2-1: Using ep0 maxpacket: 8 [ 433.940629][ T550] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 433.954278][ T550] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.965003][ T550] usb 6-1: config 0 descriptor?? [ 433.972943][ T550] usbhid 6-1:0.12: couldn't find an input interrupt endpoint [ 433.975678][ T3279] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 434.000783][ T3279] usb 2-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=eb.e0 [ 434.010027][ T3279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.037682][ T3279] ftdi_sio 2-1:254.0: Ignoring interface reserved for JTAG [ 434.244026][ T3279] usb 2-1: USB disconnect, device number 83 [ 434.527183][ T36] kauditd_printk_skb: 691 callbacks suppressed [ 434.527202][ T36] audit: type=1400 audit(16777880.568:85990): avc: denied { read write } for pid=15673 comm="syz.5.4893" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 434.531259][T15711] x_tables: duplicate underflow at hook 1 [ 434.539329][ T36] audit: type=1400 audit(16777880.568:85991): avc: denied { read write open } for pid=15673 comm="syz.5.4893" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 434.586819][ T36] audit: type=1400 audit(16777880.568:85992): avc: denied { mounton } for pid=15673 comm="syz.5.4893" path="/85/file0" dev="tmpfs" ino=484 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 434.609332][ T36] audit: type=1400 audit(16777880.568:85993): avc: denied { mount } for pid=15673 comm="syz.5.4893" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 434.631393][ T36] audit: type=1400 audit(16777880.598:85994): avc: denied { create } for pid=15673 comm="syz.5.4893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.651853][ T36] audit: type=1400 audit(16777880.598:85995): avc: denied { write } for pid=15673 comm="syz.5.4893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.672248][ T36] audit: type=1400 audit(16777880.598:85996): avc: denied { ioctl } for pid=15673 comm="syz.5.4893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.772931][ T36] audit: type=1400 audit(16777880.808:85997): avc: denied { read write } for pid=14872 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 434.797197][ T36] audit: type=1400 audit(16777880.808:85998): avc: denied { read write open } for pid=14872 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 434.829861][ T36] audit: type=1400 audit(16777880.808:85999): avc: denied { ioctl } for pid=14872 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 434.896742][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 435.705511][T15723] can0: slcan on ttyS3. [ 435.807587][T15723] can0 (unregistered): slcan off ttyS3. [ 435.886865][T15727] binder: Unknown parameter 'ma' [ 436.236289][T15749] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4914'. [ 436.389563][ T31] usb 6-1: USB disconnect, device number 39 [ 436.525801][T15771] tmpfs: Unknown parameter '00[5cmdRTȅHX% e' [ 436.840677][T10543] bridge_slave_1: left allmulticast mode [ 436.848465][T10543] bridge_slave_1: left promiscuous mode [ 436.854238][T10543] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.864148][T10543] bridge_slave_0: left allmulticast mode [ 436.876614][T10543] bridge_slave_0: left promiscuous mode [ 436.890764][T10543] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.925277][T10543] bridge0 (unregistering): left allmulticast mode [ 437.061521][T10543] tipc: Left network mode [ 437.076219][T10543] veth1_macvtap: left promiscuous mode [ 437.083641][T10543] veth0_vlan: left promiscuous mode [ 437.299879][T15787] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.327282][T15787] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.351705][T15787] bridge_slave_0: entered allmulticast mode [ 437.363653][T15787] bridge_slave_0: entered promiscuous mode [ 437.374124][T15787] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.381288][T15787] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.389281][T15787] bridge_slave_1: entered allmulticast mode [ 437.396257][T15787] bridge_slave_1: entered promiscuous mode [ 437.405294][T15811] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 437.405317][T15811] rust_binder: Error while translating object. [ 437.415735][T15811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 437.436644][T15811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:257 [ 437.566552][T15813] rust_binder: Write failure EFAULT in pid:261 [ 437.752297][T15823] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4930'. [ 437.770871][T15823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.933557][T10543] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.940688][T10543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.967181][T10543] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.974274][T10543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.047150][T15834] rust_binder: Error while translating object. [ 438.047200][T15834] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 438.068026][T15834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 438.098328][T15835] rust_binder: Read failure Err(EAGAIN) in pid:208 [ 438.207687][T15787] veth0_vlan: entered promiscuous mode [ 438.272441][T15841] rust_binder: Error while translating object. [ 438.272479][T15841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 438.284642][T15841] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 438.297087][T15787] veth1_macvtap: entered promiscuous mode [ 438.320311][T15841] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:211 [ 438.342373][ T31] rust_binder: 15839: removing orphan mapping 0:24 [ 438.582000][T15855] syz.1.4940: attempt to access beyond end of device [ 438.582000][T15855] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 438.595625][T15855] FAT-fs (loop1): unable to read boot sector [ 438.651344][ T3279] rust_binder: 15845: removing orphan mapping 0:96 [ 438.665153][ T3279] rust_binder: 0: removing orphan mapping 96:24 [ 438.698293][ T31] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 438.770595][T15859] Invalid ELF header type: 2 != 1 [ 438.867133][ T31] usb 9-1: device descriptor read/64, error -71 [ 439.116675][ T31] usb 9-1: device descriptor read/64, error -71 [ 439.156687][ T45] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 439.297485][ T45] usb 2-1: device descriptor read/64, error -71 [ 439.356804][ T31] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 439.486762][ T31] usb 9-1: device descriptor read/64, error -71 [ 439.546645][ T45] usb 2-1: device descriptor read/64, error -71 [ 439.585315][ T36] kauditd_printk_skb: 1133 callbacks suppressed [ 439.585336][ T36] audit: type=1400 audit(16777885.618:87133): avc: denied { execmem } for pid=15880 comm="syz.4.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 439.612462][ T36] audit: type=1400 audit(16777885.618:87134): avc: denied { execute } for pid=15880 comm="syz.4.4952" path="/dev/rnullb0" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 439.635703][ T36] audit: type=1400 audit(16777885.638:87135): avc: denied { ioctl } for pid=15846 comm="syz.8.4939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 439.663437][ T36] audit: type=1400 audit(16777885.638:87136): avc: denied { ioctl } for pid=15846 comm="syz.8.4939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 439.688738][ T36] audit: type=1400 audit(16777885.638:87137): avc: denied { ioctl } for pid=15846 comm="syz.8.4939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 439.713727][ T36] audit: type=1400 audit(16777885.638:87138): avc: denied { ioctl } for pid=15846 comm="syz.8.4939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 439.726832][ T31] usb 9-1: device descriptor read/64, error -71 [ 439.739386][ T36] audit: type=1400 audit(16777885.638:87139): avc: denied { ioctl } for pid=15846 comm="syz.8.4939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 439.748716][T15887] overlayfs: failed to clone lowerpath [ 439.772719][ T36] audit: type=1400 audit(16777885.648:87140): avc: denied { ioctl } for pid=15846 comm="syz.8.4939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 439.786723][ T45] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 439.800474][ T36] audit: type=1400 audit(16777885.648:87141): avc: denied { ioctl } for pid=15846 comm="syz.8.4939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 439.833163][ T36] audit: type=1400 audit(16777885.698:87142): avc: denied { ioctl } for pid=15864 comm="syz.1.4945" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 439.877135][ T31] usb usb9-port1: attempt power cycle [ 439.946658][ T45] usb 2-1: device descriptor read/64, error -71 [ 440.186738][ T45] usb 2-1: device descriptor read/64, error -71 [ 440.216803][ T31] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 440.238891][ T31] usb 9-1: device descriptor read/8, error -71 [ 440.296886][ T45] usb usb2-port1: attempt power cycle [ 440.369239][ T31] usb 9-1: device descriptor read/8, error -71 [ 440.606653][ T31] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 440.630133][ T31] usb 9-1: device descriptor read/8, error -71 [ 440.646644][ T45] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 440.670472][ T45] usb 2-1: device descriptor read/8, error -71 [ 440.768932][ T31] usb 9-1: device descriptor read/8, error -71 [ 440.810115][ T45] usb 2-1: device descriptor read/8, error -71 [ 440.877219][ T31] usb usb9-port1: unable to enumerate USB device [ 441.056892][ T45] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 441.079815][ T45] usb 2-1: device descriptor read/8, error -71 [ 441.209048][ T45] usb 2-1: device descriptor read/8, error -71 [ 441.316869][ T45] usb usb2-port1: unable to enumerate USB device [ 441.879872][T15956] netlink: 25 bytes leftover after parsing attributes in process `syz.8.4977'. [ 442.139174][T15974] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4982'. [ 442.167311][T15972] rust_binder: Error while translating object. [ 442.167361][T15972] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 442.180732][T15974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15974 comm=syz.1.4982 [ 442.204914][T15972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:287 [ 442.804866][T16020] netlink: 'syz.8.4996': attribute type 4 has an invalid length. [ 443.771365][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5009'. [ 444.028469][T16067] rust_binder: Failed to allocate buffer. len:18446744073709551288, is_oneway:false [ 444.034226][T16068] random: crng reseeded on system resumption [ 444.325091][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 444.489122][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.500559][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.510934][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 444.523905][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 444.533012][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.551605][ T9] usb 2-1: config 0 descriptor?? [ 444.609337][ T36] kauditd_printk_skb: 565 callbacks suppressed [ 444.609357][ T36] audit: type=1400 audit(16777890.652:87708): avc: denied { read write } for pid=14134 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 444.682152][ T36] audit: type=1400 audit(16777890.652:87709): avc: denied { read write open } for pid=14134 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 444.709499][ T36] audit: type=1400 audit(16777890.652:87710): avc: denied { ioctl } for pid=14134 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 444.752443][ T36] audit: type=1400 audit(16777890.713:87711): avc: denied { read write } for pid=16091 comm="syz.8.5019" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 444.779476][ T36] audit: type=1400 audit(16777890.713:87712): avc: denied { read write open } for pid=16091 comm="syz.8.5019" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 444.804302][ T36] audit: type=1400 audit(16777890.723:87713): avc: denied { mounton } for pid=16091 comm="syz.8.5019" path="/102/file0" dev="tmpfs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 444.827632][ T36] audit: type=1400 audit(16777890.723:87714): avc: denied { mount } for pid=16091 comm="syz.8.5019" name="/" dev="incremental-fs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 444.851523][ T36] audit: type=1400 audit(16777890.753:87715): avc: denied { unmount } for pid=14134 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 444.871961][ T36] audit: type=1400 audit(16777890.783:87716): avc: denied { read write } for pid=14134 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 444.897478][ T36] audit: type=1400 audit(16777890.783:87717): avc: denied { read write open } for pid=14134 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.004653][ T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.019498][ T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.026974][ T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.049295][ T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.066908][ T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.075693][ T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.088205][ T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.102708][ T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.110963][ T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.118627][ T9] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 445.133214][ T9] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 445.237768][T16068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.253921][T16068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.291250][T16068] rust_binder: Error in use_page_slow: ESRCH [ 445.291277][T16068] rust_binder: use_range failure ESRCH [ 445.306676][T16068] rust_binder: Failed to allocate buffer. len:1072, is_oneway:false [ 445.307214][ T31] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 445.327068][T16068] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 445.327816][T16068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:249 [ 445.410652][ T9] usb 2-1: USB disconnect, device number 88 [ 445.442791][T16109] fuse: Bad value for 'user_id' [ 445.447962][T16109] fuse: Bad value for 'user_id' [ 445.506788][ T31] usb 9-1: no configurations [ 445.511690][ T31] usb 9-1: can't read configurations, error -22 [ 445.644634][ T31] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 445.796746][ T31] usb 9-1: no configurations [ 445.801404][ T31] usb 9-1: can't read configurations, error -22 [ 445.807883][ T31] usb usb9-port1: attempt power cycle [ 446.150605][ T31] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 446.157225][T16120] rust_binder: Error in use_page_slow: ESRCH [ 446.158240][T16120] rust_binder: use_range failure ESRCH [ 446.178717][T16120] rust_binder: Failed to allocate buffer. len:1072, is_oneway:false [ 446.185095][T16120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 446.193991][T16120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:257 [ 446.210177][ T31] usb 9-1: no configurations [ 446.229896][ T31] usb 9-1: can't read configurations, error -22 [ 446.368737][ T31] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 446.400584][ T31] usb 9-1: no configurations [ 446.405258][ T31] usb 9-1: can't read configurations, error -22 [ 446.421751][ T31] usb usb9-port1: unable to enumerate USB device [ 446.426471][T16134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=16134 comm=syz.4.5034 [ 446.499454][T16136] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.5035'. [ 447.076243][T16159] veth0: entered promiscuous mode [ 447.096673][T16157] veth0: left promiscuous mode [ 447.373742][T16175] rust_binder: Write failure EFAULT in pid:277 [ 447.419572][T16178] fuse: Unknown parameter 'rootmode' [ 447.637404][T16182] rust_binder: 279: no such ref 3 [ 447.652859][T16182] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 448.544591][T16208] rust_binder: 16208 RLIMIT_NICE not set [ 448.591315][ T8483] rust_binder: 16207: removing orphan mapping 0:1176 [ 448.997792][T16238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5061'. [ 449.027116][T16238] netlink: 'syz.6.5061': attribute type 3 has an invalid length. [ 449.310535][T16258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296 [ 449.345122][ T9] kernel read not supported for file inotify (pid: 9 comm: kworker/0:0) [ 449.377157][T16259] sit0: entered promiscuous mode [ 449.409783][T16259] netlink: 'syz.8.5069': attribute type 1 has an invalid length. [ 449.446474][T16255] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 449.468157][T16259] netlink: 9 bytes leftover after parsing attributes in process `syz.8.5069'. [ 449.603658][ T36] kauditd_printk_skb: 460 callbacks suppressed [ 449.603679][ T36] audit: type=1400 audit(16777895.681:88178): avc: denied { read } for pid=16268 comm="syz.1.5073" name="binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 449.677237][T16271] random: crng reseeded on system resumption [ 449.683301][ T36] audit: type=1400 audit(16777895.691:88179): avc: denied { read open } for pid=16268 comm="syz.1.5073" path="/dev/binderfs/binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 449.683339][ T36] audit: type=1400 audit(16777895.701:88180): avc: denied { create } for pid=16268 comm="syz.1.5073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 449.754498][ T36] audit: type=1400 audit(16777895.701:88181): avc: denied { create } for pid=16268 comm="syz.1.5073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 449.775600][ T36] audit: type=1400 audit(16777895.701:88182): avc: denied { getopt } for pid=16268 comm="syz.1.5073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 449.796089][ T36] audit: type=1400 audit(16777895.711:88183): avc: denied { ioctl } for pid=16268 comm="syz.1.5073" path="/dev/binderfs/binder0" dev="binder" ino=34 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 449.823188][ T36] audit: type=1400 audit(16777895.721:88184): avc: denied { create } for pid=16254 comm="syz.4.5070" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 449.925873][ T36] audit: type=1400 audit(16777895.721:88185): avc: denied { ioctl } for pid=16254 comm="syz.4.5070" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=87263 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 449.962553][ T36] audit: type=1400 audit(16777895.721:88186): avc: denied { mounton } for pid=16254 comm="syz.4.5070" path="/394/file0" dev="tmpfs" ino=2146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 449.985498][ T36] audit: type=1400 audit(16777895.721:88187): avc: denied { ioctl } for pid=16254 comm="syz.4.5070" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=87263 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.186997][T16283] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 450.187030][T16283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 450.195843][T16283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:355 [ 450.413109][T16290] netlink: 'syz.6.5082': attribute type 4 has an invalid length. [ 450.451545][T16290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30730 sclass=netlink_route_socket pid=16290 comm=syz.6.5082 [ 450.963709][ T8483] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 451.131558][ T8483] usb 9-1: device descriptor read/64, error -71 [ 451.172197][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 451.334187][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 451.351326][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 451.367926][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.376209][ T8483] usb 9-1: device descriptor read/64, error -71 [ 451.383684][ T9] usb 2-1: Product: syz [ 451.396892][ T9] usb 2-1: Manufacturer: syz [ 451.405423][ T9] usb 2-1: SerialNumber: syz [ 451.414775][ T9] usb 2-1: config 0 descriptor?? [ 451.603186][T16344] dummy0: entered allmulticast mode [ 451.618990][ T8483] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 451.777835][ T8483] usb 9-1: device descriptor read/64, error -71 [ 451.851657][ T9] usb 2-1: USB disconnect, device number 89 [ 452.035976][ T8483] usb 9-1: device descriptor read/64, error -71 [ 452.174143][ T8483] usb usb9-port1: attempt power cycle [ 452.310551][T16370] binder: Unknown parameter 'fscontext?}' [ 452.399249][T16374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 452.461850][T16376] rust_binder: 314: no such ref 3 [ 452.488043][T16376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:314 [ 452.491384][T16378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 452.528161][T16380] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 241) [ 452.542259][ T8483] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 452.560624][T16380] rust_binder: Error while translating object. [ 452.560664][T16380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 452.573499][T16380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 452.594790][ T8483] usb 9-1: device descriptor read/8, error -71 [ 452.745150][ T8483] usb 9-1: device descriptor read/8, error -71 [ 452.909555][T16412] netlink: 'syz.4.5122': attribute type 1 has an invalid length. [ 453.008993][ T8483] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 453.016517][T16418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100 [ 453.041696][ T8483] usb 9-1: device descriptor read/8, error -71 [ 453.209927][ T8483] usb 9-1: device descriptor read/8, error -71 [ 453.317309][ T8483] usb usb9-port1: unable to enumerate USB device [ 453.401129][ T45] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 453.403404][T16430] __vm_enough_memory: pid: 16430, comm: syz.6.5127, bytes: 18014402804453376 not enough memory for the allocation [ 453.426597][T16431] __vm_enough_memory: pid: 16431, comm: syz.6.5127, bytes: 18014402804453376 not enough memory for the allocation [ 453.526908][ T9] rust_binder: 16295: removing orphan mapping 0:24 [ 453.584821][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 453.615010][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.635601][ T45] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.651432][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 453.661187][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.665989][T16443] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 453.677473][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 453.706824][T16443] overlayfs: missing 'lowerdir' [ 453.715799][ T45] usb 2-1: SerialNumber: syz [ 453.949572][T16461] netlink: 8568 bytes leftover after parsing attributes in process `syz.4.5137'. [ 454.016781][T16426] veth0_virt_wifi: entered allmulticast mode [ 454.047179][T16463] netlink: 328 bytes leftover after parsing attributes in process `syz.6.5138'. [ 454.164133][T16465] veth0_virt_wifi: left allmulticast mode [ 454.171041][T16469] rust_binder: Error while translating object. [ 454.171091][T16469] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 454.177437][T16469] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:371 [ 454.191941][ T45] cdc_acm 2-1:1.0: invalid descriptor buffer length [ 454.207806][ T45] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 454.215765][ T45] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 454.222659][ T45] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 454.234039][ T45] usb 2-1: USB disconnect, device number 90 [ 454.633558][ T36] kauditd_printk_skb: 842 callbacks suppressed [ 454.633578][ T36] audit: type=1400 audit(16777900.757:89030): avc: denied { read write } for pid=16479 comm="syz.8.5143" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 454.665039][ T36] audit: type=1400 audit(16777900.757:89031): avc: denied { read write open } for pid=16479 comm="syz.8.5143" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 454.689152][ T36] audit: type=1400 audit(16777900.757:89032): avc: denied { ioctl } for pid=16479 comm="syz.8.5143" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 454.756106][ T36] audit: type=1400 audit(16777900.878:89033): avc: denied { read write } for pid=14134 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.787174][ T36] audit: type=1400 audit(16777900.888:89034): avc: denied { read write open } for pid=14134 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.821744][ T36] audit: type=1400 audit(16777900.888:89035): avc: denied { ioctl } for pid=14134 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.893545][ T36] audit: type=1400 audit(16777900.949:89036): avc: denied { read write } for pid=16483 comm="syz.8.5144" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.906916][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5146'. [ 454.929511][T16487] /dev/loop0: Can't lookup blockdev [ 454.958933][ T36] audit: type=1400 audit(16777900.949:89037): avc: denied { read write open } for pid=16483 comm="syz.8.5144" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.011483][ T36] audit: type=1400 audit(16777900.949:89038): avc: denied { ioctl } for pid=16483 comm="syz.8.5144" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.034099][T16498] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5148'. [ 455.055169][ T36] audit: type=1400 audit(16777900.949:89039): avc: denied { ioctl } for pid=16483 comm="syz.8.5144" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.104198][ T9] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 455.243295][ T31] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 455.253172][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 455.266016][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.283069][ T9] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 455.297341][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.336151][ T9] usb 9-1: config 0 descriptor?? [ 455.392261][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 455.413081][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.436206][ T31] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 455.447296][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.456185][ T31] usb 2-1: Product: syz [ 455.460395][ T31] usb 2-1: Manufacturer: syz [ 455.466331][ T31] usb 2-1: SerialNumber: syz [ 455.474251][ T31] usb 2-1: config 0 descriptor?? [ 455.482533][ T31] plusb 2-1:0.0: probe with driver plusb failed with error -22 [ 455.685334][T16496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.693915][T16496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.703822][ T31] usb 2-1: USB disconnect, device number 91 [ 455.770438][ T9] hid-steam 0003:28DE:1102.001E: unknown main item tag 0x0 [ 455.790626][ T9] hid-steam 0003:28DE:1102.001E: unknown main item tag 0x0 [ 455.798237][ T9] hid-steam 0003:28DE:1102.001E: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 455.868993][ T9] hid-steam 0003:28DE:1102.001E: Steam Controller 'XXXXXXXXXX' connected [ 455.878275][ T9] input: Steam Controller as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28DE:1102.001E/input/input32 [ 455.899252][ T9] hid-steam 0003:28DE:1102.001F: unknown main item tag 0x0 [ 455.920552][ T9] hid-steam 0003:28DE:1102.001F: unknown main item tag 0x0 [ 455.946640][ T9] hid-steam 0003:28DE:1102.001F: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 456.047248][ T31] usb 9-1: USB disconnect, device number 35 [ 456.082083][T16522] fido_id[16522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 456.100433][ T31] hid-steam 0003:28DE:1102.001E: Steam Controller 'XXXXXXXXXX' disconnected [ 456.188329][T16527] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16527 comm=syz.4.5156 [ 456.207999][T16527] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=16527 comm=syz.4.5156 [ 456.483118][T16537] sit0: entered promiscuous mode [ 456.489866][T16537] netlink: 'syz.1.5159': attribute type 1 has an invalid length. [ 456.498269][T16537] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5159'. [ 456.510983][T16537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 456.516073][T16537] rust_binder: Error while translating object. [ 456.522692][T16537] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 456.528976][T16537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:348 [ 456.552116][ T31] rust_binder: 16483: removing orphan mapping 0:4232 [ 456.842363][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 456.901986][ T8483] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 456.991332][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 456.998774][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 457.007989][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 457.016650][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 457.025660][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 457.035420][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 457.051895][ T8483] usb 9-1: device descriptor read/64, error -71 [ 457.060901][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 457.090700][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 457.111032][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.122572][ T9] usb 2-1: config 0 descriptor?? [ 457.299249][ T8483] usb 9-1: device descriptor read/64, error -71 [ 457.345274][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 92 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 457.371507][ T9] usb 2-1: USB disconnect, device number 92 [ 457.383667][ T9] usblp0: removed [ 457.387851][T16552] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 457.387882][T16552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 457.401005][T16552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:123 [ 457.493298][T16558] syzkaller0: entered promiscuous mode [ 457.508070][T16558] syzkaller0: entered allmulticast mode [ 457.537770][ T8483] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 457.655930][T16560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:127 [ 457.676816][ T8483] usb 9-1: device descriptor read/64, error -71 [ 457.875492][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 457.935157][ T8483] usb 9-1: device descriptor read/64, error -71 [ 458.015199][T16566] 9pnet_fd: Insufficient options for proto=fd [ 458.024920][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 458.034383][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 458.043328][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 458.053263][ T8483] usb usb9-port1: attempt power cycle [ 458.058786][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 458.069265][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 458.079947][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 458.090513][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 458.104440][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 458.114710][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.125285][ T9] usb 2-1: config 0 descriptor?? [ 458.389635][T16582] veth1: entered allmulticast mode [ 458.402950][T16581] veth1: left allmulticast mode [ 458.411886][ T8483] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 458.434391][ T8483] usb 9-1: device descriptor read/8, error -71 [ 458.538608][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 93 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 458.545788][T16596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16596 comm=syz.4.5179 [ 458.569337][ T9] usb 2-1: USB disconnect, device number 93 [ 458.573745][T16596] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 458.587368][ T9] usblp0: removed [ 458.591168][ T8483] usb 9-1: device descriptor read/8, error -71 [ 458.829279][ T8483] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 458.851436][ T8483] usb 9-1: device descriptor read/8, error -71 [ 458.980810][ T8483] usb 9-1: device descriptor read/8, error -71 [ 459.090776][ T8483] usb usb9-port1: unable to enumerate USB device [ 459.273503][T16617] input: syz1 as /devices/virtual/input/input33 [ 459.306386][T16617] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 459.316855][T16617] rust_binder: Error in use_page_slow: ESRCH [ 459.325985][T16617] rust_binder: use_range failure ESRCH [ 459.351707][T16617] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 459.362806][T16617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 459.377413][T16617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:139 [ 459.614084][ T36] kauditd_printk_skb: 501 callbacks suppressed [ 459.614110][ T36] audit: type=1400 audit(16777905.761:89541): avc: denied { read write open } for pid=16623 comm="syz.6.5188" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.667775][T16627] rtc_cmos 00:00: Alarms can be up to one day in the future [ 459.736428][ T36] audit: type=1400 audit(16777905.761:89542): avc: denied { ioctl } for pid=16623 comm="syz.6.5188" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.793787][ T36] audit: type=1400 audit(16777905.761:89543): avc: denied { ioctl } for pid=16623 comm="syz.6.5188" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.847783][T16633] netlink: 'syz.1.5192': attribute type 4 has an invalid length. [ 459.850591][ T36] audit: type=1400 audit(16777905.761:89544): avc: denied { ioctl } for pid=16623 comm="syz.6.5188" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.881810][T16633] netlink: 'syz.1.5192': attribute type 4 has an invalid length. [ 459.906413][T16633] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5192'. [ 459.922120][ T36] audit: type=1400 audit(16777905.761:89545): avc: denied { ioctl } for pid=16623 comm="syz.6.5188" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.952310][T16634] netlink: 'syz.1.5192': attribute type 4 has an invalid length. [ 459.981816][ T36] audit: type=1400 audit(16777905.771:89546): avc: denied { read write } for pid=14134 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.989751][T16635] netlink: 'syz.1.5192': attribute type 4 has an invalid length. [ 460.030878][T16638] rust_binder: 396: no such ref 3 [ 460.036240][ T36] audit: type=1400 audit(16777905.771:89547): avc: denied { read write open } for pid=14134 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 460.050917][T16638] netlink: 168 bytes leftover after parsing attributes in process `syz.8.5193'. [ 460.071142][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 460.078809][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 460.122451][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 460.130224][ T36] audit: type=1400 audit(16777905.771:89548): avc: denied { ioctl } for pid=14134 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 460.161445][T16639] rust_binder: Write failure EFAULT in pid:396 [ 460.163423][T16639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 460.166945][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 460.182310][T16642] audit: audit_backlog=65 > audit_backlog_limit=64 [ 460.227244][ T45] rtc rtc0: __rtc_set_alarm: err=-22 [ 461.117379][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5207'. [ 461.334707][T16707] overlayfs: failed to clone upperpath [ 461.509663][T16721] overlayfs: failed to clone upperpath [ 461.590242][T16724] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 461.600420][T16724] rust_binder: Error while translating object. [ 461.617649][T16724] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 461.624706][T16724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:392 [ 461.990814][T16749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 462.249251][T16757] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 462.305032][T16757] 9pnet_fd: Insufficient options for proto=fd [ 462.850002][T16780] random: crng reseeded on system resumption [ 463.126330][T16792] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.139013][T16792] rust_binder: Failed to allocate buffer. len:4232, is_oneway:true [ 463.152857][T16792] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 463.187112][T16792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:150 [ 463.420099][ T31] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 463.620154][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 463.650097][ T31] usb 2-1: config 6 has an invalid interface number: 39 but max is 3 [ 463.658252][ T31] usb 2-1: config 6 has an invalid interface number: 25 but max is 3 [ 463.688497][ T31] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 463.720364][ T31] usb 2-1: config 6 has 2 interfaces, different from the descriptor's value: 4 [ 463.736764][ T31] usb 2-1: config 6 has no interface number 0 [ 463.743025][ T31] usb 2-1: config 6 has no interface number 1 [ 463.750447][ T31] usb 2-1: config 6 interface 39 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 64 [ 463.767993][ T31] usb 2-1: config 6 interface 39 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 463.794857][T16810] rust_binder: inc_ref_done called when no active inc_refs [ 463.794886][T16810] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 463.819428][ T31] usb 2-1: config 6 interface 39 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 463.840966][ T31] usb 2-1: config 6 interface 39 altsetting 7 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 463.852694][T16814] rust_binder: inc_ref_done called when no active inc_refs [ 463.852831][T16814] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 463.887338][ T31] usb 2-1: config 6 interface 39 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 463.917218][ T31] usb 2-1: config 6 interface 39 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 463.961275][ T31] usb 2-1: config 6 interface 39 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 463.992840][ T31] usb 2-1: config 6 interface 39 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 464.004517][ T31] usb 2-1: config 6 interface 25 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 464.020107][T16816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:453 [ 464.044601][ T31] usb 2-1: config 6 interface 39 has no altsetting 0 [ 464.085146][ T31] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=48.bd [ 464.094901][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.104934][ T31] usb 2-1: Product: 㐁 [ 464.124685][ T31] usb 2-1: Manufacturer: ю [ 464.134778][ T31] usb 2-1: SerialNumber: syz [ 464.152980][T16796] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 464.181097][T16796] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 464.468668][T16832] rust_binder: 16832 RLIMIT_NICE not set [ 464.469434][T16833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:459 [ 464.474925][ T31] usb 2-1: USB disconnect, device number 94 [ 464.500254][ T8483] rust_binder: 16831: removing orphan mapping 0:1168 [ 464.593445][ T36] kauditd_printk_skb: 866 callbacks suppressed [ 464.593465][ T36] audit: type=1400 audit(16777910.782:90405): avc: denied { create } for pid=16827 comm="syz.6.5247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 464.620746][T16835] netlink: 277 bytes leftover after parsing attributes in process `syz.8.5249'. [ 464.645052][ T36] audit: type=1400 audit(16777910.782:90406): avc: denied { create } for pid=16834 comm="syz.8.5249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 464.701793][T16829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 464.709197][T16837] audit: audit_backlog=65 > audit_backlog_limit=64 [ 464.716932][T16838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 464.718573][T16829] audit: audit_lost=127 audit_rate_limit=0 audit_backlog_limit=64 [ 464.737815][ T36] audit: type=1400 audit(16777910.782:90407): avc: denied { write } for pid=16834 comm="syz.8.5249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 464.752142][T16838] audit: audit_lost=128 audit_rate_limit=0 audit_backlog_limit=64 [ 464.764890][T16837] audit: audit_lost=129 audit_rate_limit=0 audit_backlog_limit=64 [ 464.773742][T16829] audit: backlog limit exceeded [ 465.636806][ T45] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 465.645202][T16869] netlink: 'syz.4.5259': attribute type 6 has an invalid length. [ 465.663159][T16869] IPv6: NLM_F_CREATE should be specified when creating new route [ 465.685255][T16869] netlink: 'syz.4.5259': attribute type 4 has an invalid length. [ 465.721799][T16869] netlink: 'syz.4.5259': attribute type 4 has an invalid length. [ 465.767338][T16868] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 465.795856][ T45] usb 9-1: device descriptor read/64, error -71 [ 465.808200][T16868] kvm: pic: non byte read [ 466.046305][T16880] rust_binder: Error while translating object. [ 466.046340][T16880] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 466.054295][ T45] usb 9-1: device descriptor read/64, error -71 [ 466.062853][T16880] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 466.084117][T16880] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:432 [ 466.118600][ T31] rust_binder: 16879: removing orphan mapping 0:8 [ 466.323227][ T45] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 466.471894][ T45] usb 9-1: device descriptor read/64, error -71 [ 466.609124][T16903] rust_binder: inc_ref_done called when no active inc_refs [ 466.609151][T16903] rust_binder: 445: no such ref 2 [ 466.668323][T16904] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 466.669322][T16905] rust_binder: Write failure EFAULT in pid:445 [ 466.710502][ T45] usb 9-1: device descriptor read/64, error -71 [ 466.830706][ T45] usb usb9-port1: attempt power cycle [ 466.951125][ T330] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 467.102204][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 467.109520][ T330] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 467.117953][ T330] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 467.126611][ T330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 467.135611][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 467.145292][ T330] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 467.154967][ T330] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 467.167982][ T330] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 467.177091][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.182856][ T45] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 467.190390][ T330] usb 2-1: config 0 descriptor?? [ 467.215849][ T45] usb 9-1: device descriptor read/8, error -71 [ 467.346484][ T45] usb 9-1: device descriptor read/8, error -71 [ 467.424136][ T330] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 95 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 467.456177][ T330] usb 2-1: USB disconnect, device number 95 [ 467.467150][ T330] usblp0: removed [ 467.585791][ T45] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 467.618470][ T45] usb 9-1: device descriptor read/8, error -71 [ 467.763356][ T45] usb 9-1: device descriptor read/8, error -71 [ 467.867877][ T330] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 467.878448][ T45] usb usb9-port1: unable to enumerate USB device [ 468.019197][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 468.026701][ T330] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 468.035210][ T330] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 468.043879][ T330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 468.054323][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 468.064011][ T330] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 468.073707][ T330] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 468.086738][ T330] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 468.095836][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.107376][ T330] usb 2-1: config 0 descriptor?? [ 468.441819][T16936] binder: Bad value for 'stats' [ 468.523905][T16908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.532513][T16908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.569983][ T330] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 96 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 468.596056][ T330] usb 2-1: USB disconnect, device number 96 [ 468.610044][ T330] usblp0: removed [ 469.438504][T16981] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.439240][ T64] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 469.610536][ T36] kauditd_printk_skb: 928 callbacks suppressed [ 469.610556][ T36] audit: type=1400 audit(16777915.795:91289): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.641119][ T36] audit: type=1400 audit(16777915.795:91290): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.665095][ T36] audit: type=1400 audit(16777915.795:91291): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.683355][T14872] audit: audit_backlog=65 > audit_backlog_limit=64 [ 469.689556][ T36] audit: type=1400 audit(16777915.795:91292): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.695530][T14872] audit: audit_lost=145 audit_rate_limit=0 audit_backlog_limit=64 [ 469.719015][ T64] usb 9-1: config 4 has an invalid interface number: 134 but max is 0 [ 469.726418][T16970] audit: audit_backlog=65 > audit_backlog_limit=64 [ 469.733988][ T64] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 469.740612][T16970] audit: audit_lost=146 audit_rate_limit=0 audit_backlog_limit=64 [ 469.752274][ T64] usb 9-1: config 4 has no interface number 0 [ 469.758778][T14872] audit: backlog limit exceeded [ 469.765524][ T36] audit: type=1400 audit(16777915.795:91293): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.793783][ T64] usb 9-1: config 4 interface 134 altsetting 121 has an invalid descriptor for endpoint zero, skipping [ 469.805571][ T64] usb 9-1: config 4 interface 134 altsetting 121 has an invalid descriptor for endpoint zero, skipping [ 469.817772][ T64] usb 9-1: config 4 interface 134 altsetting 121 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 469.829620][ T64] usb 9-1: config 4 interface 134 altsetting 121 has a duplicate endpoint with address 0x5, skipping [ 469.841262][ T64] usb 9-1: config 4 interface 134 altsetting 121 has 7 endpoint descriptors, different from the interface descriptor's value: 16 [ 469.882421][ T64] usb 9-1: config 4 interface 134 has no altsetting 0 [ 469.893944][ T64] usb 9-1: New USB device found, idVendor=045e, idProduct=0444, bcdDevice=7c.34 [ 469.914196][ T64] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.922412][ T64] usb 9-1: Product: 矊◗桐篥薠靚꙽裐ꓵ裿ゎ차ꋏ꟡녞ៜ쳖ퟲ뒳庑ꊳ⭝㬵꿰뤅桦މ乺⥻쫨ꏰ◶뱔䫤ꆶ蕁5쑒頢䜆쳞룮虙槴ݭ塗뵩䇣㪎崴ꨯ쬩ﲪ晣历縪大ᆯ흭ꁐ澀鎦庪趶僌ﮛ闭横ꚋ滋죐̪ݥ㔖븋趛椞꾀ẑ䛋⥊켰푐⠱ꑘ猟㮞饓즒筓漠讙ā肾龯陯䥇礅י狘 [ 469.965085][ T64] usb 9-1: Manufacturer: ᐄ [ 469.969757][ T64] usb 9-1: SerialNumber: ж [ 469.988439][T16970] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 470.127396][T17000] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5303'. [ 470.237728][ T64] usb 9-1: USB disconnect, device number 44 [ 470.853364][T17028] rust_binder: Write failure EFAULT in pid:495 [ 471.171395][ T330] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 471.335036][ T330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.346018][ T330] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 471.355609][ T330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.367144][ T330] usb 9-1: config 0 descriptor?? [ 472.020774][ T330] usbhid 9-1:0.0: can't add hid device: -71 [ 472.026819][ T330] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 472.058459][ T330] usb 9-1: USB disconnect, device number 45 [ 472.561730][T17048] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5318'. [ 473.299272][T17068] netlink: 'syz.4.5324': attribute type 4 has an invalid length. [ 473.334257][T17072] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 473.577776][ T31] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 473.744708][ T31] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 473.764217][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.799490][ T31] usb 9-1: config 0 descriptor?? [ 474.655092][ T36] kauditd_printk_skb: 4704 callbacks suppressed [ 474.655110][ T36] audit: type=1400 audit(16777920.810:95862): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 474.684833][ T36] audit: type=1400 audit(16777920.810:95863): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 474.708166][ T36] audit: type=1400 audit(16777920.810:95864): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 474.731477][ T36] audit: type=1400 audit(16777920.810:95865): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 474.736241][T14872] audit: audit_backlog=65 > audit_backlog_limit=64 [ 474.754847][ T36] audit: type=1400 audit(16777920.810:95866): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 474.762597][T14872] audit: audit_lost=192 audit_rate_limit=0 audit_backlog_limit=64 [ 474.784508][ T36] audit: type=1400 audit(16777920.810:95867): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 474.793908][T14872] audit: backlog limit exceeded [ 474.815388][ T36] audit: type=1400 audit(16777920.810:95868): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.076883][T17071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.102153][T17071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.130239][ T31] usb 9-1: Cannot set autoneg [ 475.160669][ T31] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 475.186244][ T31] usb 9-1: USB disconnect, device number 46 [ 475.296136][T17097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5333'. [ 475.697074][T17101] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 475.697418][T17101] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 475.712128][T17101] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 475.728826][T17101] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 476.567799][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5339'. [ 476.707714][T17119] rust_binder: 530: no such ref 3 [ 476.725055][T17119] rust_binder: Write failure EFAULT in pid:530 [ 476.878002][T17125] @: renamed from vlan0 (while UP) [ 476.919969][T17127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 476.921485][T17127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 476.940343][T17125] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 476.943506][T17127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 476.946824][T17125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 477.010039][T17125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:534 [ 477.502409][T17150] overlayfs: missing 'lowerdir' [ 477.554114][T17150] netlink: 388 bytes leftover after parsing attributes in process `syz.6.5350'. [ 477.583589][ T9] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 477.735019][T17154] netlink: 188 bytes leftover after parsing attributes in process `syz.6.5352'. [ 477.764790][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 477.776440][ T9] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 477.787464][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.796271][ T9] usb 9-1: Product: syz [ 477.800517][ T9] usb 9-1: Manufacturer: syz [ 477.806460][ T9] usb 9-1: SerialNumber: syz [ 477.825056][ T9] r8152-cfgselector 9-1: Unknown version 0x0000 [ 477.838520][ T9] r8152-cfgselector 9-1: config 0 descriptor?? [ 477.857267][ T9] hub 9-1:0.0: bad descriptor, ignoring hub [ 477.863239][ T9] hub 9-1:0.0: probe with driver hub failed with error -5 [ 477.939767][T17156] netlink: 'syz.6.5353': attribute type 4 has an invalid length. [ 478.024950][T17157] netlink: 'syz.6.5353': attribute type 4 has an invalid length. [ 478.632230][ T9] r8152-cfgselector 9-1: Unknown version 0x0000 [ 478.638613][ T9] r8152-cfgselector 9-1: bad CDC descriptors [ 478.680702][ T9] r8152-cfgselector 9-1: USB disconnect, device number 47 [ 478.920898][T17184] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.5362'. [ 479.119772][T17191] kvm: apic: phys broadcast and lowest prio [ 479.697055][ T36] kauditd_printk_skb: 3756 callbacks suppressed [ 479.697074][ T36] audit: type=1400 audit(16777925.818:99565): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 479.741133][ T36] audit: type=1400 audit(16777925.818:99566): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 479.765285][ T36] audit: type=1400 audit(16777925.818:99567): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 479.789416][ T36] audit: type=1400 audit(16777925.818:99568): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 479.819083][T14872] audit: audit_backlog=65 > audit_backlog_limit=64 [ 479.821081][T17204] audit: audit_backlog=65 > audit_backlog_limit=64 [ 479.825643][T14872] audit: audit_lost=213 audit_rate_limit=0 audit_backlog_limit=64 [ 479.825663][T14872] audit: backlog limit exceeded [ 479.826821][T14872] audit: audit_backlog=65 > audit_backlog_limit=64 [ 479.834512][ T36] audit: type=1400 audit(16777925.818:99569): avc: denied { setattr } for pid=14872 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 479.886125][T17204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 479.889811][T17204] rust_binder: Error in use_page_slow: ESRCH [ 479.907799][T17204] rust_binder: use_range failure ESRCH [ 479.916738][T17204] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 479.923509][T17204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 479.932236][T17204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:236 [ 480.360465][ T64] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 480.382145][T17211] tmpfs: Unknown parameter 'siz0' [ 480.531477][ T64] usb 9-1: Using ep0 maxpacket: 32 [ 480.539802][ T64] usb 9-1: config 0 has an invalid interface number: 169 but max is 0 [ 480.550519][ T64] usb 9-1: config 0 has no interface number 0 [ 480.557567][ T64] usb 9-1: config 0 interface 169 has no altsetting 0 [ 480.570038][ T64] usb 9-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 480.580581][ T64] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.589955][ T64] usb 9-1: Product: syz [ 480.595128][ T64] usb 9-1: Manufacturer: syz [ 480.599897][ T64] usb 9-1: SerialNumber: syz [ 480.612239][ T64] usb 9-1: config 0 descriptor?? [ 480.826585][ T64] usb 9-1: USB disconnect, device number 48 [ 481.627943][ T9] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 481.768777][ T9] usb 9-1: device descriptor read/64, error -71 [ 482.020204][ T9] usb 9-1: device descriptor read/64, error -71 [ 482.067334][T17230] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 482.124382][T17231] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 482.130933][T17231] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 482.139082][T17231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:254 [ 482.261609][ T9] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 482.402433][ T9] usb 9-1: device descriptor read/64, error -71 [ 482.663922][ T9] usb 9-1: device descriptor read/64, error -71 [ 482.775757][ T9] usb usb9-port1: attempt power cycle [ 483.136613][ T9] usb 9-1: new full-speed USB device number 51 using dummy_hcd [ 483.159540][ T9] usb 9-1: device descriptor read/8, error -71 [ 483.290326][ T9] usb 9-1: device descriptor read/8, error -71 [ 483.538879][ T9] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 483.561820][ T9] usb 9-1: device descriptor read/8, error -71 [ 483.692616][ T9] usb 9-1: device descriptor read/8, error -71 [ 483.801463][ T9] usb usb9-port1: unable to enumerate USB device [ 483.906914][T17261] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 483.959967][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5389'. [ 484.010076][T17265] veth1: entered allmulticast mode [ 484.015591][T17267] veth1: left allmulticast mode [ 484.315726][T17283] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5396'. [ 484.324920][T17283] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5396'. [ 484.334985][T17283] netlink: 'syz.4.5396': attribute type 6 has an invalid length. [ 484.342916][T17283] netlink: 'syz.4.5396': attribute type 5 has an invalid length. [ 484.351682][T17283] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5396'. [ 484.456151][T17286] overlayfs: failed to resolve './file1': -2 [ 484.740895][ T36] kauditd_printk_skb: 5061 callbacks suppressed [ 484.740914][ T36] audit: type=1400 audit(16777930.829:104603): avc: denied { mount } for pid=17293 comm="syz.8.5401" name="/" dev="overlay" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 484.797387][ T36] audit: type=1400 audit(16777930.829:104604): avc: denied { read } for pid=17298 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 484.835697][ T36] audit: type=1400 audit(16777930.829:104605): avc: denied { read open } for pid=17298 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 484.862383][ T36] audit: type=1400 audit(16777930.829:104606): avc: denied { mounton } for pid=17298 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 484.905281][ T36] audit: type=1400 audit(16777930.839:104607): avc: denied { sys_module } for pid=17298 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 484.932211][ T36] audit: type=1400 audit(16777930.839:104608): avc: denied { sys_module } for pid=17298 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 484.954234][ T36] audit: type=1400 audit(16777930.839:104609): avc: denied { sys_module } for pid=17298 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 484.977967][ T36] audit: type=1400 audit(16777930.839:104610): avc: denied { sys_module } for pid=17298 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 485.008957][T17298] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.016331][ T36] audit: type=1400 audit(16777930.889:104611): avc: denied { unmount } for pid=14134 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 485.022052][T17298] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.043274][ T36] audit: type=1400 audit(16777930.919:104612): avc: denied { read write } for pid=14134 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 485.077285][T17298] bridge_slave_0: entered allmulticast mode [ 485.089717][T17298] bridge_slave_0: entered promiscuous mode [ 485.117254][T17298] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.124480][T17298] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.134248][T17298] bridge_slave_1: entered allmulticast mode [ 485.140788][T17298] bridge_slave_1: entered promiscuous mode [ 485.399582][T17328] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 485.415112][T17328] overlayfs: missing 'lowerdir' [ 485.426771][T17298] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.433891][T17298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.441235][T17298] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.448333][T17298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.617484][T10543] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.628491][T10543] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.661325][T10543] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.668442][T10543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.696946][T10543] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.704155][T10543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.815197][T17298] veth0_vlan: entered promiscuous mode [ 485.865354][T17298] veth1_macvtap: entered promiscuous mode [ 486.048913][T17371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 486.150648][T17376] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 486.157277][T17376] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 486.165417][T17376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:259 [ 487.369646][T17440] overlayfs: failed to resolve './file0/file0': -20 [ 487.385334][T17436] rust_binder: 17436 RLIMIT_NICE not set [ 487.451134][ T10] rust_binder: 0: removing orphan mapping 0:1168 [ 488.023293][ T64] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 488.177385][ T64] usb 9-1: not running at top speed; connect to a high speed hub [ 488.186716][ T64] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 488.196331][ T64] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.206487][ T64] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 488.218782][ T64] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 488.228233][ T64] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.236327][ T64] usb 9-1: Product: ꄭ︣䤸떐⨀ꂂ䵴蟛ᩏ⎞঱ᑏ릲䆱㈗믑鸒ꝭ湔⣺鸒쩩閽寙䤮絛縊墠沂䇠ᙇ鵓⳴ᄸ竑ҷ⋔橯⪙䊤郙룹⥠ꘜ׫넋ᐉ튶ಮ늃沫䮈醈폻ﺅ撤焆兟擓麪䬗贷ඬ롧鍨輠샊叟᪦⎬㜗㙲팃虭᢬⬩쌆鬘䡷⚌ޛ꨾磸짓藶ꇀ䀄馘选빅厩혈鰑동㧱긇ŧ醎㴙灙㟄෻鎄镄 [ 488.269573][ T64] usb 9-1: Manufacturer: 蔺⸍纴尲뼍퓧湢⤤䊩﫷ᓵꟺ੄叚C솵ဴ溻곸瀷ꔷ펷횁赹譬✆䐟燢䳆縉䡀钆죯ꞯ堃ⱥ봄櫼侮ꮛ祐嬠髽ⲥᴍ쀕ᬙ駉⭎ [ 488.287895][ T64] usb 9-1: SerialNumber: Ы [ 488.515575][ T64] usb 9-1: 0:2 : does not exist [ 488.524827][ T64] usb 9-1: USB disconnect, device number 53 [ 488.533319][T17475] input input35: cannot allocate more than FF_MAX_EFFECTS effects [ 488.609170][T12905] udevd[12905]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 488.732370][T17477] rust_binder: Failed to allocate buffer. len:192, is_oneway:false [ 488.732400][T17477] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 488.741175][T17477] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 488.758612][T17477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 488.770345][T17477] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 488.776884][T17477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 488.785022][T17477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:275 [ 488.795694][ T64] rust_binder: 17476: removing orphan mapping 0:24 [ 488.899000][T17482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32793 sclass=netlink_route_socket pid=17482 comm=syz.6.5452 [ 489.251563][T17500] /dev/loop0: Can't lookup blockdev [ 489.380265][ T9] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 489.533710][ T9] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 489.545132][ T9] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 489.555045][ T9] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 489.564177][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.779389][ T9] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 489.787963][ T9] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input36 [ 489.800212][ T9] usb 9-1: USB disconnect, device number 54 [ 489.806857][ T36] kauditd_printk_skb: 612 callbacks suppressed [ 489.806875][ T36] audit: type=1400 audit(16777935.863:105225): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=1000 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 489.836062][ T36] audit: type=1400 audit(16777935.863:105226): avc: denied { read open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1000 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 489.860343][ T36] audit: type=1400 audit(16777935.902:105227): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=1000 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 489.882835][ T36] audit: type=1400 audit(16777935.902:105228): avc: denied { read open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1000 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.174963][ T36] audit: type=1400 audit(16777936.231:105229): avc: denied { execmem } for pid=17512 comm="syz.4.5464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 490.194803][ T36] audit: type=1400 audit(16777936.231:105230): avc: denied { execute } for pid=17512 comm="syz.4.5464" path="/dev/rnullb0" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 490.260256][ T36] audit: type=1400 audit(16777936.320:105231): avc: denied { wake_alarm } for pid=17517 comm="syz.4.5466" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 490.282122][ T36] audit: type=1400 audit(16777936.320:105232): avc: denied { wake_alarm } for pid=17517 comm="syz.4.5466" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 490.331671][ T36] audit: type=1400 audit(16777936.320:105233): avc: denied { wake_alarm } for pid=17517 comm="syz.4.5466" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 490.367576][ T36] audit: type=1400 audit(16777936.320:105234): avc: denied { mount } for pid=17517 comm="syz.4.5466" name="/" dev="ramfs" ino=94062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 499.240146][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 499.240171][ T36] audit: type=1400 audit(16777945.258:105309): avc: denied { create } for pid=17527 comm="syz.6.5469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 499.301368][ T36] audit: type=1400 audit(16777945.258:105310): avc: denied { create } for pid=17528 comm="syz.3.5470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 499.347297][ T36] audit: type=1400 audit(16777945.258:105311): avc: denied { write } for pid=17528 comm="syz.3.5470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 499.376315][T17545] audit: audit_backlog=65 > audit_backlog_limit=64 [ 499.383872][ T36] audit: type=1400 audit(16777945.288:105312): avc: denied { create } for pid=17527 comm="syz.6.5469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 499.404554][T17545] audit: audit_lost=224 audit_rate_limit=0 audit_backlog_limit=64 [ 499.419167][ T36] audit: type=1400 audit(16777945.288:105313): avc: denied { write } for pid=17527 comm="syz.6.5469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 499.419936][T17545] audit: backlog limit exceeded [ 499.439907][ T36] audit: type=1400 audit(16777945.288:105314): avc: denied { read } for pid=17527 comm="syz.6.5469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 499.445438][T17547] netlink: 'syz.4.5475': attribute type 6 has an invalid length. [ 499.465072][ T36] audit: type=1400 audit(16777945.288:105315): avc: denied { read } for pid=17527 comm="syz.6.5469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 499.750158][T17568] tipc: Started in network mode [ 499.755081][T17568] tipc: Node identity , cluster identity 4711 [ 499.767863][T17568] tipc: Failed to obtain node identity [ 499.774712][T17568] tipc: Enabling of bearer rejected, failed to enable media [ 499.878467][T17584] 9pnet_fd: Insufficient options for proto=fd [ 499.886712][T17584] 2Nfffffffffff: renamed from vcan0 (while UP) [ 499.964798][T17592] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5490'. [ 500.111842][T17607] netlink: 'syz.8.5494': attribute type 4 has an invalid length. [ 500.129597][T17607] netlink: 3581 bytes leftover after parsing attributes in process `syz.8.5494'. [ 500.196464][T17610] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 500.243139][T17610] SELinux: failed to load policy [ 500.327857][T17620] overlayfs: failed to clone upperpath [ 500.391863][T17627] netlink: 'syz.8.5502': attribute type 1 has an invalid length. [ 500.399743][T17627] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5502'. [ 500.414166][T17629] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 500.569378][T17650] overlayfs: failed to resolve './file1': -2 [ 500.685619][T17662] netlink: 'syz.8.5513': attribute type 46 has an invalid length. [ 500.711136][T17662] netlink: 'syz.8.5513': attribute type 12 has an invalid length. [ 500.735043][T17662] overlayfs: failed to clone upperpath [ 501.001871][T17686] /dev/loop0: Can't lookup blockdev [ 501.178683][T17699] /dev/loop0: Can't lookup blockdev [ 501.181272][T17700] /dev/loop0: Can't lookup blockdev [ 501.519063][T17721] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5532'. [ 501.529738][T17720] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5532'. [ 501.685208][T17735] tipc: Enabling of bearer rejected, failed to enable media [ 502.010135][T17758] netlink: 'syz.4.5543': attribute type 13 has an invalid length. [ 502.897083][T17809] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5559'. [ 502.906770][T17811] fuse: Bad value for 'fd' [ 503.291756][T17830] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.298933][T17830] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.307541][T17830] bridge_slave_0: entered allmulticast mode [ 503.314948][T17830] bridge_slave_0: entered promiscuous mode [ 503.322901][T17830] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.331359][T17830] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.339363][T17830] bridge_slave_1: entered allmulticast mode [ 503.346088][T17830] bridge_slave_1: entered promiscuous mode [ 503.353520][T16690] bridge0: port 3(syz_tun) entered disabled state [ 503.361160][T16690] syz_tun (unregistering): left allmulticast mode [ 503.367693][T16690] syz_tun (unregistering): left promiscuous mode [ 503.374234][T16690] bridge0: port 3(syz_tun) entered disabled state [ 503.424271][T10543] bridge_slave_1: left allmulticast mode [ 503.430106][T10543] bridge_slave_1: left promiscuous mode [ 503.435881][T10543] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.443474][T10543] bridge_slave_0: left allmulticast mode [ 503.449256][T10543] bridge_slave_0: left promiscuous mode [ 503.455115][T10543] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.640027][T10543] tipc: Disabling bearer [ 503.647498][T10543] tipc: Left network mode [ 503.653877][T10543] veth0_vlan: left promiscuous mode [ 503.734038][T17830] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.741212][T17830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.748571][T17830] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.755749][T17830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.786081][T17853] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 503.834181][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.842445][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.858776][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.865932][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.877228][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.884368][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.981480][T17830] veth0_vlan: entered promiscuous mode [ 504.027835][T17830] veth1_macvtap: entered promiscuous mode [ 504.306033][ T36] kauditd_printk_skb: 566 callbacks suppressed [ 504.306055][ T36] audit: type=1400 audit(16777950.297:105882): avc: denied { name_bind } for pid=17870 comm="syz.8.5575" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 504.381103][ T36] audit: type=1400 audit(16777950.377:105883): avc: denied { create } for pid=17876 comm="syz.6.5577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 504.383524][T17877] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5577'. [ 504.401917][ T36] audit: type=1400 audit(16777950.377:105884): avc: denied { write } for pid=17876 comm="syz.6.5577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 504.431318][ T36] audit: type=1400 audit(16777950.377:105885): avc: denied { nlmsg_write } for pid=17876 comm="syz.6.5577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 504.454038][ T36] audit: type=1400 audit(16777950.407:105886): avc: denied { watch } for pid=17872 comm="syz.8.5576" path="/226/control" dev="tmpfs" ino=1261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 504.552377][ T36] audit: type=1400 audit(16777950.546:105887): avc: denied { create } for pid=17887 comm="syz.8.5581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 504.572149][ T36] audit: type=1400 audit(16777950.546:105888): avc: denied { write } for pid=17887 comm="syz.8.5581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 504.601874][ T36] audit: type=1400 audit(16777950.596:105889): avc: denied { mounton } for pid=17892 comm="syz.8.5582" path="/231/file0" dev="tmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 504.625998][ T36] audit: type=1400 audit(16777950.596:105890): avc: denied { mount } for pid=17892 comm="syz.8.5582" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 504.651362][T17895] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5583'. [ 504.660651][T17896] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5583'. [ 504.670968][ T36] audit: type=1326 audit(16777950.666:105891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17894 comm="syz.8.5583" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bf198ebe9 code=0x0 [ 504.724831][T17896] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 504.975417][T17904] 9pnet_fd: Insufficient options for proto=fd [ 505.432052][ T45] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 505.595968][ T45] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 505.605157][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.615838][ T45] usb 5-1: config 0 descriptor?? [ 505.841561][T17916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.853116][T17916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.880140][T17916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5589'. [ 505.889545][T17916] bridge_slave_1: left allmulticast mode [ 505.896980][T17916] bridge_slave_1: left promiscuous mode [ 505.902788][T17916] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.911965][T17916] bridge_slave_0: left allmulticast mode [ 505.918276][T17916] bridge_slave_0: left promiscuous mode [ 505.925096][T17916] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.935245][T17923] rust_binder: Write failure EFAULT in pid:8 [ 505.984515][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 506.206204][ T45] usb 5-1: Cannot set MAC address [ 506.214726][ T45] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 506.234400][ T45] usb 5-1: USB disconnect, device number 50 [ 506.719626][T17978] fuseblk: Bad value for 'group_id' [ 506.724963][T17978] fuseblk: Bad value for 'group_id' [ 507.409567][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 507.560130][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 507.566888][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 507.576798][ T9] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 507.589981][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 507.599961][ T9] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 507.609096][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.617133][ T9] usb 5-1: Product: syz [ 507.621542][ T9] usb 5-1: Manufacturer: syz [ 507.626175][ T9] usb 5-1: SerialNumber: syz [ 507.846752][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 507.853344][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 507.867342][ T9] usb 5-1: USB disconnect, device number 51 [ 507.951815][T17999] No source specified [ 508.035668][T18004] erofs: dax options not supported [ 508.136553][T18013] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 508.179812][T18017] overlayfs: failed to clone upperpath [ 508.254365][T18024] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5624'. [ 508.403985][T18028] 9pnet_fd: Insufficient options for proto=fd [ 508.465660][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5626'. [ 508.474697][T18028] erspan0: entered promiscuous mode [ 509.060147][T18057] cgroup: subsys name conflicts with all [ 509.146939][T18059] 2N: renamed from vcan0 (while UP) [ 509.415031][ T36] kauditd_printk_skb: 265 callbacks suppressed [ 509.415054][ T36] audit: type=1400 audit(16777955.388:106157): avc: denied { unmount } for pid=17830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 509.441777][ T36] audit: type=1400 audit(16777955.388:106158): avc: denied { unmount } for pid=17830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 509.442374][T17830] ------------[ cut here ]------------ [ 509.463231][ T36] audit: type=1400 audit(16777955.388:106159): avc: denied { unmount } for pid=17830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 509.467750][T17830] WARNING: CPU: 1 PID: 17830 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 509.488919][ T36] audit: type=1400 audit(16777955.398:106160): avc: denied { create } for pid=18060 comm="syz.8.5635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 509.495682][T17830] Modules linked in: [ 509.517012][ T36] audit: type=1400 audit(16777955.398:106161): avc: denied { create } for pid=18060 comm="syz.8.5635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 509.519498][T17830] CPU: 1 UID: 0 PID: 17830 Comm: syz-executor Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 509.519528][T17830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.519542][T17830] RIP: 0010:drop_nlink+0xce/0x110 [ 509.540732][ T36] audit: type=1400 audit(16777955.398:106162): avc: denied { ioctl } for pid=18060 comm="syz.8.5635" path="socket:[95847]" dev="sockfs" ino=95847 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 509.552200][T17830] Code: 04 00 00 be 08 00 00 00 e8 5f 46 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 c5 a0 03 cc e8 82 0e 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 509.562468][ T36] audit: type=1400 audit(16777955.398:106163): avc: denied { bind } for pid=18060 comm="syz.8.5635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 509.567343][T17830] RSP: 0018:ffffc90004dc7a80 EFLAGS: 00010293 [ 509.593200][ T36] audit: type=1400 audit(16777955.398:106164): avc: denied { bind } for pid=18060 comm="syz.8.5635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 509.612999][T17830] [ 509.613013][T17830] RAX: ffffffff81edd58e RBX: ffff88812e0b3838 RCX: ffff88814bc34c00 [ 509.613035][T17830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 509.638531][ T36] audit: type=1400 audit(16777955.398:106165): avc: denied { setopt } for pid=18060 comm="syz.8.5635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 509.638730][T17830] RBP: ffffc90004dc7aa8 R08: 0000000000000003 R09: 0000000000000004 [ 509.659666][ T36] audit: type=1400 audit(16777955.398:106166): avc: denied { write } for pid=18060 comm="syz.8.5635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 509.660691][T17830] R10: dffffc0000000000 R11: fffff520009b8f40 R12: dffffc0000000000 [ 509.732158][T17830] R13: 1ffff11025c16710 R14: ffff88812e0b3880 R15: 0000000000000000 [ 509.740200][T17830] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 509.749207][T17830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.755835][T17830] CR2: 000000110c281644 CR3: 000000011d03e000 CR4: 00000000003526b0 [ 509.764004][T17830] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000001 [ 509.772046][T17830] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 509.780078][T17830] Call Trace: [ 509.783385][T17830] [ 509.786336][T17830] shmem_rmdir+0x5f/0x90 [ 509.790657][T17830] vfs_rmdir+0x3dd/0x560 [ 509.794933][T17830] incfs_kill_sb+0x109/0x230 [ 509.799582][T17830] deactivate_locked_super+0xd8/0x2a0 [ 509.804988][T17830] deactivate_super+0xb8/0xe0 [ 509.809734][T17830] cleanup_mnt+0x3f1/0x480 [ 509.814186][T17830] __cleanup_mnt+0x1d/0x40 [ 509.818658][T17830] task_work_run+0x1e3/0x250 [ 509.823284][T17830] ? __cfi_task_work_run+0x10/0x10 [ 509.828449][T17830] ? free_nsproxy+0x223/0x290 [ 509.833218][T17830] do_exit+0x9bc/0x2630 [ 509.837398][T17830] ? __cfi_do_exit+0x10/0x10 [ 509.842104][T17830] ? __kasan_check_write+0x18/0x20 [ 509.847274][T17830] ? _raw_spin_lock_irq+0x8d/0x120 [ 509.852489][T17830] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 509.858081][T17830] ? __cfi_ksys_write+0x10/0x10 [ 509.863026][T17830] ? zap_other_threads+0x334/0x370 [ 509.868188][T17830] do_group_exit+0x22a/0x300 [ 509.872893][T17830] __x64_sys_exit_group+0x43/0x50 [ 509.877964][T17830] x64_sys_call+0x2ed2/0x2ee0 [ 509.882742][T17830] do_syscall_64+0x58/0xf0 [ 509.887200][T17830] ? clear_bhb_loop+0x50/0xa0 [ 509.891959][T17830] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 509.897907][T17830] RIP: 0033:0x7f5a62b8ebe9 [ 509.902487][T17830] Code: Unable to access opcode bytes at 0x7f5a62b8ebbf. [ 509.909623][T17830] RSP: 002b:00007ffd591ce5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 509.918175][T17830] RAX: ffffffffffffffda RBX: 00007f5a62c11c77 RCX: 00007f5a62b8ebe9 [ 509.926240][T17830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 509.934279][T17830] RBP: 0000000000000016 R08: 00007ffd591cc366 R09: 00007ffd591cf880 [ 509.942333][T17830] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffd591cf880 [ 509.950380][T17830] R13: 00007f5a62c11c05 R14: 0000555555e6b4a8 R15: 00007ffd591d1a40 [ 509.958399][T17830] [ 509.961478][T17830] ---[ end trace 0000000000000000 ]--- [ 509.967252][T17830] ================================================================== [ 509.975354][T17830] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 509.981642][T17830] Write of size 4 at addr 0000000000000168 by task syz-executor/17830 [ 509.989823][T17830] [ 509.992186][T17830] CPU: 0 UID: 0 PID: 17830 Comm: syz-executor Tainted: G W syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 509.992243][T17830] Tainted: [W]=WARN [ 509.992252][T17830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.992266][T17830] Call Trace: [ 509.992275][T17830] [ 509.992283][T17830] __dump_stack+0x21/0x30 [ 509.992317][T17830] dump_stack_lvl+0x10c/0x190 [ 509.992347][T17830] ? __cfi_dump_stack_lvl+0x10/0x10 [ 509.992378][T17830] print_report+0x3d/0x70 [ 509.992402][T17830] kasan_report+0x163/0x1a0 [ 509.992427][T17830] ? ihold+0x24/0x70 [ 509.992450][T17830] ? _raw_spin_unlock+0x45/0x60 [ 509.992482][T17830] ? ihold+0x24/0x70 [ 509.992505][T17830] kasan_check_range+0x299/0x2a0 [ 509.992531][T17830] __kasan_check_write+0x18/0x20 [ 509.992570][T17830] ihold+0x24/0x70 [ 509.992592][T17830] vfs_rmdir+0x26a/0x560 [ 509.992620][T17830] incfs_kill_sb+0x109/0x230 [ 509.992653][T17830] deactivate_locked_super+0xd8/0x2a0 [ 509.992682][T17830] deactivate_super+0xb8/0xe0 [ 509.992710][T17830] cleanup_mnt+0x3f1/0x480 [ 509.992735][T17830] __cleanup_mnt+0x1d/0x40 [ 509.992758][T17830] task_work_run+0x1e3/0x250 [ 509.992782][T17830] ? __cfi_task_work_run+0x10/0x10 [ 509.992806][T17830] ? free_nsproxy+0x223/0x290 [ 509.992837][T17830] do_exit+0x9bc/0x2630 [ 509.992865][T17830] ? __cfi_do_exit+0x10/0x10 [ 509.992892][T17830] ? __kasan_check_write+0x18/0x20 [ 509.992923][T17830] ? _raw_spin_lock_irq+0x8d/0x120 [ 509.992954][T17830] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 509.992986][T17830] ? __cfi_ksys_write+0x10/0x10 [ 509.993006][T17830] ? zap_other_threads+0x334/0x370 [ 509.993032][T17830] do_group_exit+0x22a/0x300 [ 509.993060][T17830] __x64_sys_exit_group+0x43/0x50 [ 509.993088][T17830] x64_sys_call+0x2ed2/0x2ee0 [ 509.993121][T17830] do_syscall_64+0x58/0xf0 [ 509.993153][T17830] ? clear_bhb_loop+0x50/0xa0 [ 509.993181][T17830] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 509.993209][T17830] RIP: 0033:0x7f5a62b8ebe9 [ 509.993227][T17830] Code: Unable to access opcode bytes at 0x7f5a62b8ebbf. [ 509.993240][T17830] RSP: 002b:00007ffd591ce5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 509.993265][T17830] RAX: ffffffffffffffda RBX: 00007f5a62c11c77 RCX: 00007f5a62b8ebe9 [ 509.993282][T17830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 509.993298][T17830] RBP: 0000000000000016 R08: 00007ffd591cc366 R09: 00007ffd591cf880 [ 509.993313][T17830] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffd591cf880 [ 509.993328][T17830] R13: 00007f5a62c11c05 R14: 0000555555e6b4a8 R15: 00007ffd591d1a40 [ 509.993347][T17830] [ 509.993356][T17830] ================================================================== [ 510.255025][T17830] Disabling lock debugging due to kernel taint [ 510.261319][T17830] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 510.269152][T17830] #PF: supervisor write access in kernel mode [ 510.275254][T17830] #PF: error_code(0x0002) - not-present page [ 510.281273][T17830] PGD 0 P4D 0 [ 510.284691][T17830] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 510.290791][T17830] CPU: 0 UID: 0 PID: 17830 Comm: syz-executor Tainted: G B W syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 510.304094][T17830] Tainted: [B]=BAD_PAGE, [W]=WARN [ 510.309118][T17830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 510.319192][T17830] RIP: 0010:ihold+0x2a/0x70 [ 510.323735][T17830] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 6d 05 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 3d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 7d [ 510.343391][T17830] RSP: 0018:ffffc90004dc7ac0 EFLAGS: 00010246 [ 510.349616][T17830] RAX: ffff88814bc34c00 RBX: 0000000000000000 RCX: ffff88814bc34c00 [ 510.357643][T17830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 510.365634][T17830] RBP: ffffc90004dc7ad0 R08: ffffffff8896d947 R09: 1ffffffff112db28 [ 510.373660][T17830] R10: dffffc0000000000 R11: fffffbfff112db29 R12: ffff88812e0b3844 [ 510.381642][T17830] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 510.389631][T17830] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 510.398580][T17830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 510.405184][T17830] CR2: 0000000000000168 CR3: 000000010c6ae000 CR4: 00000000003526b0 [ 510.413180][T17830] Call Trace: [ 510.416477][T17830] [ 510.419503][T17830] vfs_rmdir+0x26a/0x560 [ 510.423798][T17830] incfs_kill_sb+0x109/0x230 [ 510.428439][T17830] deactivate_locked_super+0xd8/0x2a0 [ 510.433838][T17830] deactivate_super+0xb8/0xe0 [ 510.438538][T17830] cleanup_mnt+0x3f1/0x480 [ 510.442990][T17830] __cleanup_mnt+0x1d/0x40 [ 510.447485][T17830] task_work_run+0x1e3/0x250 [ 510.452116][T17830] ? __cfi_task_work_run+0x10/0x10 [ 510.457777][T17830] ? free_nsproxy+0x223/0x290 [ 510.462473][T17830] do_exit+0x9bc/0x2630 [ 510.466666][T17830] ? __cfi_do_exit+0x10/0x10 [ 510.471270][T17830] ? __kasan_check_write+0x18/0x20 [ 510.476486][T17830] ? _raw_spin_lock_irq+0x8d/0x120 [ 510.481626][T17830] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 510.487192][T17830] ? __cfi_ksys_write+0x10/0x10 [ 510.492055][T17830] ? zap_other_threads+0x334/0x370 [ 510.497191][T17830] do_group_exit+0x22a/0x300 [ 510.501801][T17830] __x64_sys_exit_group+0x43/0x50 [ 510.506841][T17830] x64_sys_call+0x2ed2/0x2ee0 [ 510.511540][T17830] do_syscall_64+0x58/0xf0 [ 510.515970][T17830] ? clear_bhb_loop+0x50/0xa0 [ 510.520660][T17830] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 510.526565][T17830] RIP: 0033:0x7f5a62b8ebe9 [ 510.530990][T17830] Code: Unable to access opcode bytes at 0x7f5a62b8ebbf. [ 510.538028][T17830] RSP: 002b:00007ffd591ce5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 510.546464][T17830] RAX: ffffffffffffffda RBX: 00007f5a62c11c77 RCX: 00007f5a62b8ebe9 [ 510.554519][T17830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 510.562504][T17830] RBP: 0000000000000016 R08: 00007ffd591cc366 R09: 00007ffd591cf880 [ 510.570492][T17830] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffd591cf880 [ 510.578499][T17830] R13: 00007f5a62c11c05 R14: 0000555555e6b4a8 R15: 00007ffd591d1a40 [ 510.586499][T17830] [ 510.589529][T17830] Modules linked in: [ 510.593461][T17830] CR2: 0000000000000168 [ 510.597651][T17830] ---[ end trace 0000000000000000 ]--- [ 510.603171][T17830] RIP: 0010:ihold+0x2a/0x70 [ 510.607725][T17830] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 6d 05 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 3d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 7d [ 510.627337][T17830] RSP: 0018:ffffc90004dc7ac0 EFLAGS: 00010246 [ 510.633421][T17830] RAX: ffff88814bc34c00 RBX: 0000000000000000 RCX: ffff88814bc34c00 [ 510.641403][T17830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 510.649398][T17830] RBP: ffffc90004dc7ad0 R08: ffffffff8896d947 R09: 1ffffffff112db28 [ 510.657394][T17830] R10: dffffc0000000000 R11: fffffbfff112db29 R12: ffff88812e0b3844 [ 510.665488][T17830] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 510.673468][T17830] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 510.682414][T17830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 510.689003][T17830] CR2: 0000000000000168 CR3: 000000010c6ae000 CR4: 00000000003526b0 [ 510.697075][T17830] Kernel panic - not syncing: Fatal exception [ 510.703299][T17830] Kernel Offset: disabled [ 510.707630][T17830] Rebooting in 86400 seconds..