Extracting prog: 10m44.906300057s Minimizing prog: 46m26.250606642s Simplifying prog options: 3m26.241108268s Extracting C: 1m43.533572818s Simplifying C: 0s extracting reproducer from 42 programs testing a last program of every proc single: executing 10 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-getsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg$unix-syz_clone-close_range-ptrace-getdents-waitid-pwrite64-socket-ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-fchdir-openat$dir-getdents64-ioctl$ifreq_SIOCGIFINDEX_vcan-ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL-mount-chdir detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x111, 0x23, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40854) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace(0x4206, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/72, 0x48) waitid(0x2, r1, 0x0, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x1}}) r3 = fsopen(&(0x7f0000000280)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000001c0)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) fchdir(r4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f0000000f80)=""/4092, 0xffc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='ext3\x00', 0xa18404, 0x0) chdir(0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-bind$netlink-write-connect$netlink-setsockopt$sock_int-ioctl$int_in-write-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_CHANNELS_SET-socketpair$tipc-getpgrp-ioprio_set$pid-socket$inet6_icmp_raw-setsockopt$inet6_IPV6_HOPOPTS-connect$inet6-setsockopt$SO_BINDTODEVICE-openat$cgroup_ro-write$cgroup_subtree-mmap-mount$binderfs-write-socket$inet_udplite-getsockopt$inet_int-sched_setscheduler-openat$rnullb-ioctl$BLKRRPART-setsockopt-syz_open_procfs-read$FUSE detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) (async) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x4) write(r0, &(0x7f0000000980)="a9", 0x1) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000eae8c454388587650fd00", @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf251200000008000700010000000800060007000000180001801400020076657468315f746f5f62726964676500117fdddc8ff466af8e27f6c8c652004a002bfa6b2c5cf81c7fa43ba1555aa3ab11d02888395116c49cc3a15a0974ae007c8c2de3083f86e66ed1021bdfd140e3b51d8eafa93562cdd01a802ee9a9af9193f805e7051f5ae8b2fe8b72f43b9b3014fdba1d967773c3797a97d3843aa715074d2e8edc2f98444487c1a543c6201a84357c8a306d7e4db4af1d6e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x80) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) getpgrp(0x0) (async, rerun: 32) ioprio_set$pid(0x1, 0x0, 0x0) (async, rerun: 32) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3, @mcast2, 0x5}, 0x1c) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f00000000c0)='./binderfs\x00', 0x0, 0x1002000, 0x0) (async, rerun: 64) write(r3, &(0x7f0000000280)="822a0a80a7f98e91987ae497df88237d000000000096dc6ff8", 0x19) (rerun: 64) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r5, 0x0, 0x18, 0x0, &(0x7f0000000900)) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r6, 0x125f, 0x0) setsockopt(r3, 0x5, 0xfffffffc, &(0x7f0000000000), 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='environ\x00') read$FUSE(r7, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioprio_set$pid-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_BMAP-write$FUSE_DIRENT-timerfd_gettime-sched_setscheduler-syz_open_dev$ttys-syz_usb_connect-write-openat$rnullb-ioctl$BLKRRPART detailed listing: executing program 0: ioprio_set$pid(0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) timerfd_gettime(r1, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110014a696d40030410604101010203010902240001000000020904098402a1d760010905060000005003050905", @ANYRESDEC], 0x0) write(r2, &(0x7f00000000c0)="96935c87dbf529b2157e74f863f9599bfdf7247ac1cf647b9faaa1e8c3f8f6d97d6b10d5c9bc786a1a27e37901373f48835d8f873136bdb1e6c4ef75c3d1d4b8d63450706a401b8aef1b4fb5cd8fd61e29267b1fca8db642e404e75bc80f11cfb354a27b16e3a10909156e2d6b6b3224a9542fcd4b0e1ddd845917a0e41b2e9598982956b763784d5f9d3815d2cebdf783192f121990b9f62a25a2f17a8241bfa5855791a50c56937d9688298d37f270206bced50f66dfad08b3017f8beb9f75c20e1d7ce4f995", 0xc7) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-socket$igmp-sendto$inet-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-dup-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_REGS-sendmsg$can_bcm-close_range detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r3, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x14, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-socket$igmp-sendto$inet-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-dup-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_REGS-sendmsg$can_bcm-close_range detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r3, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x14, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_freezer_state-write$cgroup_freezer_state-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$snapshot-pipe2$9p-dup-ioctl$VHOST_SET_MEM_TABLE-ioctl$KVM_SET_FPU-ioctl$KVM_GET_VCPU_MMAP_SIZE-mmap$KVM_VCPU-dup2-syz_clone-ioctl$KVM_UNREGISTER_COALESCED_MMIO-listen-bind$vsock_stream-ptrace$ARCH_GET_FS-ioctl$TIOCVHANGUP-mount$9p_fd-ioctl$BINDER_THREAD_EXIT-vmsplice-write$P9_RSYMLINK-bind$vsock_stream-openat$selinux_load-signalfd4-openat$cgroup_freezer_state-ioctl$KVM_CREATE_VM-syz_kvm_add_vcpu$x86-ioctl$KVM_SET_MSRS detailed listing: executing program 0: r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000040)='FREEZING\x00', 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x34a00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x6a0082, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = dup(r1) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)={0x5, 0x0, [{0xf000, 0x1000, &(0x7f0000000140)=""/4096}, {0xf000, 0xb5, &(0x7f0000001140)=""/181}, {0xffff1000, 0xb0, &(0x7f0000001200)=""/176}, {0xffff1000, 0x8a, &(0x7f00000012c0)=""/138}, {0xf000, 0x80, &(0x7f0000001380)=""/128}]}) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f00000014c0)={'\x00', 0x0, 0x2, 0x82, 0x0, 0x5, 0x3, 0xeeee0000, '\x00', 0x5}) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, r6, 0x2000004, 0x4000010, r5, 0x0) r7 = dup2(r3, r2) r8 = syz_clone(0x2000000, &(0x7f0000001680)="b13ba619990a4c6885868501f944fb7bd5d2485d", 0x14, &(0x7f00000016c0), &(0x7f0000001700), &(0x7f0000001740)="7d07ac42ea700d3cca76e3d1a1646ca9b69c07d1da26f88fc7b20d02ed9ba2b6bfada22a5eb4d0f48c7518eb53171b5bd529212589d31e1172b9728822872bbff762bdb458d100363759e4516b921b15edb767af04adf771051afa4c02e5282e33bab54ee38cfd9499108406c36a4e1e0080fd0d7a653447cc44ca67675e873c8e55fcdbb50641feee7ee86b6f6ab2e0ec5e2c1ac3a4398e348dd2a900f54b7549a6951406760e9e56e8") ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000001800)={0x2000, 0xb000}) listen(r5, 0x1) bind$vsock_stream(r7, &(0x7f0000001840)={0x28, 0x0, 0x0, @host}, 0x10) ptrace$ARCH_GET_FS(0x1e, r8, &(0x7f0000001880), 0x1003) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000001900), 0x8000, &(0x7f0000001940)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}, {@cache_none}, {@posixacl}, {@noextend}, {@access_client}, {@cache_fscache}, {@posixacl}, {@uname={'uname', 0x3d, '$'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/snapshot\x00'}}]}}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) vmsplice(r5, &(0x7f0000001a40)=[{&(0x7f0000001a00)}], 0x1, 0xc) write$P9_RSYMLINK(r5, &(0x7f0000001a80)={0x14, 0x11, 0x1, {0x0, 0x3, 0x8}}, 0x14) bind$vsock_stream(r5, &(0x7f0000001ac0)={0x28, 0x0, 0x0, @local}, 0x10) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) r10 = signalfd4(r9, &(0x7f0000001b40)={[0x8]}, 0x8, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000001b80), 0x2, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001dc0)={0x0, &(0x7f0000001bc0)=[@code={0x1, 0x4e, {"440fd927660f6641800f019c0500900000c4a2650a66f066b843000f00d066b823010f00d0400fc72cbbc46151da51b866baa00066edf33e418365faa9"}}, @code={0x1, 0x78, {"66baf80cb801040e8fef66bafc0cb089ee48b8bc690000000000000f23d00f21f8352000000f0f23f8430f015ecf8fe978dbdeb9800000c00f3235000800000f30b986020000b801000000ba000000000f3066baa000ed470fa422b40f01f842029c8800000100"}}, @uexit={0x0, 0x18, 0x68ad}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x2, 0x18, {0x9ef5, 0x5f}}, @code={0x1, 0x74, {"450f015cec0066660f3881360f08c74424003dea3910c744240200380000c7442406000000000f011424490fc7a81cba0000c4017829e4b805000000b9b3550ded0f01c166410f3acffb21c744240091000000c744240224df8169ff1c24c462a59ff3"}}, @cpuid={0x2, 0x18, {0x100, 0x2}}, @cpuid={0x2, 0x18, {0x80, 0x7}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x30}], 0x1e2}) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000001e00)={0x3, 0x0, [{0x801, 0x0, 0x6}, {0x1345, 0x0, 0x8}, {0x9ea, 0x0, 0xf76a}]}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_freezer_state-write$cgroup_freezer_state-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$snapshot-pipe2$9p-dup-ioctl$VHOST_SET_MEM_TABLE-ioctl$KVM_SET_FPU-ioctl$KVM_GET_VCPU_MMAP_SIZE-mmap$KVM_VCPU-dup2-syz_clone-ioctl$KVM_UNREGISTER_COALESCED_MMIO-listen-bind$vsock_stream-ptrace$ARCH_GET_FS-ioctl$TIOCVHANGUP-mount$9p_fd-ioctl$BINDER_THREAD_EXIT-vmsplice-write$P9_RSYMLINK-bind$vsock_stream-openat$selinux_load-signalfd4-openat$cgroup_freezer_state-ioctl$KVM_CREATE_VM-syz_kvm_add_vcpu$x86-ioctl$KVM_SET_MSRS detailed listing: executing program 0: r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000040)='FREEZING\x00', 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x34a00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x6a0082, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = dup(r1) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)={0x5, 0x0, [{0xf000, 0x1000, &(0x7f0000000140)=""/4096}, {0xf000, 0xb5, &(0x7f0000001140)=""/181}, {0xffff1000, 0xb0, &(0x7f0000001200)=""/176}, {0xffff1000, 0x8a, &(0x7f00000012c0)=""/138}, {0xf000, 0x80, &(0x7f0000001380)=""/128}]}) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f00000014c0)={'\x00', 0x0, 0x2, 0x82, 0x0, 0x5, 0x3, 0xeeee0000, '\x00', 0x5}) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, r6, 0x2000004, 0x4000010, r5, 0x0) r7 = dup2(r3, r2) r8 = syz_clone(0x2000000, &(0x7f0000001680)="b13ba619990a4c6885868501f944fb7bd5d2485d", 0x14, &(0x7f00000016c0), &(0x7f0000001700), &(0x7f0000001740)="7d07ac42ea700d3cca76e3d1a1646ca9b69c07d1da26f88fc7b20d02ed9ba2b6bfada22a5eb4d0f48c7518eb53171b5bd529212589d31e1172b9728822872bbff762bdb458d100363759e4516b921b15edb767af04adf771051afa4c02e5282e33bab54ee38cfd9499108406c36a4e1e0080fd0d7a653447cc44ca67675e873c8e55fcdbb50641feee7ee86b6f6ab2e0ec5e2c1ac3a4398e348dd2a900f54b7549a6951406760e9e56e8") ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000001800)={0x2000, 0xb000}) listen(r5, 0x1) bind$vsock_stream(r7, &(0x7f0000001840)={0x28, 0x0, 0x0, @host}, 0x10) ptrace$ARCH_GET_FS(0x1e, r8, &(0x7f0000001880), 0x1003) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000001900), 0x8000, &(0x7f0000001940)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}, {@cache_none}, {@posixacl}, {@noextend}, {@access_client}, {@cache_fscache}, {@posixacl}, {@uname={'uname', 0x3d, '$'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/snapshot\x00'}}]}}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) vmsplice(r5, &(0x7f0000001a40)=[{&(0x7f0000001a00)}], 0x1, 0xc) write$P9_RSYMLINK(r5, &(0x7f0000001a80)={0x14, 0x11, 0x1, {0x0, 0x3, 0x8}}, 0x14) bind$vsock_stream(r5, &(0x7f0000001ac0)={0x28, 0x0, 0x0, @local}, 0x10) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) r10 = signalfd4(r9, &(0x7f0000001b40)={[0x8]}, 0x8, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000001b80), 0x2, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001dc0)={0x0, &(0x7f0000001bc0)=[@code={0x1, 0x4e, {"440fd927660f6641800f019c0500900000c4a2650a66f066b843000f00d066b823010f00d0400fc72cbbc46151da51b866baa00066edf33e418365faa9"}}, @code={0x1, 0x78, {"66baf80cb801040e8fef66bafc0cb089ee48b8bc690000000000000f23d00f21f8352000000f0f23f8430f015ecf8fe978dbdeb9800000c00f3235000800000f30b986020000b801000000ba000000000f3066baa000ed470fa422b40f01f842029c8800000100"}}, @uexit={0x0, 0x18, 0x68ad}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x2, 0x18, {0x9ef5, 0x5f}}, @code={0x1, 0x74, {"450f015cec0066660f3881360f08c74424003dea3910c744240200380000c7442406000000000f011424490fc7a81cba0000c4017829e4b805000000b9b3550ded0f01c166410f3acffb21c744240091000000c744240224df8169ff1c24c462a59ff3"}}, @cpuid={0x2, 0x18, {0x100, 0x2}}, @cpuid={0x2, 0x18, {0x80, 0x7}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x30}], 0x1e2}) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000001e00)={0x3, 0x0, [{0x801, 0x0, 0x6}, {0x1345, 0x0, 0x8}, {0x9ea, 0x0, 0xf76a}]}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioprio_set$uid-openat$sysfs-openat$binderfs-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-mmap-ioctl$KVM_SET_USER_MEMORY_REGION-openat$cgroup_ro-mmap-modify_ldt$write-syz_clone-syz_open_procfs-fchdir-faccessat2-mount-syz_open_procfs-pread64-write$uinput_user_dev-openat$hwrng-syz_kvm_setup_cpu$x86-ioctl$BINDER_WRITE_READ detailed listing: executing program 0: ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000001, 0x4010, r0, 0x7e76c000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000001c0)={0x10004, 0x0, 0x6000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) modify_ldt$write(0x1, 0x0, 0x0) r3 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) faccessat2(r2, &(0x7f0000000200)='./file0\x00', 0x42, 0x200) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000040)='stat\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) write$uinput_user_dev(r2, &(0x7f0000000680)={'syz1\x00', {0xffff, 0x3, 0x9, 0x1}, 0x1b, [0x5, 0x6, 0x101, 0x1, 0x2, 0x9, 0x1000, 0x8, 0x0, 0x200, 0xc70, 0x1, 0x8, 0xb, 0xfff, 0x0, 0x7c10, 0x7fff, 0x6, 0x6, 0x8001, 0xe0000, 0x400, 0x6, 0x899, 0x101, 0x10000, 0x0, 0x73, 0xd9f, 0xfffffff0, 0x1, 0x7ff, 0x9b7, 0x2, 0x7ff, 0x5, 0x4, 0x8, 0xfffffff0, 0xe247, 0x1, 0x9, 0x7, 0x0, 0x0, 0x1, 0x1, 0x3, 0x401, 0xcebe, 0x7fff, 0x0, 0x9, 0x4, 0x1, 0x3, 0x6, 0x400, 0x3fd7, 0x5, 0x6, 0xfffffffd, 0x80000000], [0x8, 0x7, 0x7, 0x1, 0xffffeb12, 0x2eeb, 0x1, 0x6, 0x2, 0xeb, 0x7e1, 0x9, 0x3, 0x78000000, 0x0, 0x3, 0x9, 0x4f2, 0x3, 0x8, 0x8, 0xfff, 0x401, 0x1ff, 0x3, 0x2, 0xfffffff7, 0x10001, 0x3, 0x5, 0x7, 0x1b8, 0x8, 0x1, 0x2, 0x2224bbc6, 0x92, 0x8, 0x6, 0xc4, 0x7, 0x1, 0x0, 0x4eb, 0x8, 0x5000000, 0xfffffffa, 0x80000001, 0x9, 0x4, 0x0, 0x10001, 0xc345, 0xe, 0x8001, 0x1, 0x8, 0x2, 0x8, 0xf, 0x6, 0x90, 0xf, 0x4], [0x2c, 0x81, 0x80000001, 0x2b, 0x659, 0x2da, 0xffffffff, 0x4, 0x2, 0x80, 0x8c, 0x4, 0x9df, 0x1000, 0x900000, 0xabb, 0x8, 0x4, 0x6, 0x8944, 0xb, 0x5, 0x0, 0xb, 0x8, 0xffffff33, 0xc1, 0x0, 0x7, 0x66e4, 0x3, 0x4, 0x8, 0x3ff, 0x3, 0x3, 0x9, 0x5, 0x1, 0x5b5, 0x5, 0x93, 0xb, 0x7, 0x0, 0x2, 0x4, 0x100, 0x1, 0x9e, 0x88, 0xfffffff1, 0x6, 0x8, 0x401, 0x8, 0x5, 0x6, 0x101, 0x8, 0x80000000, 0xf, 0x0, 0x80000000], [0x3, 0x5, 0x2, 0x9c, 0x101, 0x7, 0xba86, 0x1, 0x3, 0xc, 0x40, 0x4, 0x4, 0x7, 0x7fffffff, 0x3, 0x0, 0x401, 0x9, 0x8, 0xeb0, 0xa08, 0x5, 0x10000, 0x7, 0x8, 0x1000, 0xfffffff9, 0x400, 0x6, 0x0, 0x9316, 0x2, 0x8, 0x8, 0xa, 0xf87, 0x401, 0x9, 0x0, 0x9, 0x7fff, 0xd1b, 0x0, 0x2, 0xb, 0xef4b, 0x6, 0x5, 0x67d521c9, 0x9, 0x9, 0x1000, 0x80000000, 0x4, 0x1, 0xa8, 0x7, 0x3ff, 0x100, 0xfffffff0, 0x2, 0x6, 0xc]}, 0x45c) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x301140, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="66b9800000c00f326635002000000f3036c1ca0066b8f0bc4ee10f23d00f21f866353000000d0f23f8660f320f2356baf80c66b8f748a18666efbafc0cb02fee66b8000001000f23c00f21f86635020004000f23f8f3ab660fb9bd34c70f01c4", 0x60}], 0x1, 0xc, &(0x7f0000000100)=[@flags, @cstype0={0x4, 0x1}], 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioprio_set$uid-openat$sysfs-openat$binderfs-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-mmap-ioctl$KVM_SET_USER_MEMORY_REGION-openat$cgroup_ro-mmap-modify_ldt$write-syz_clone-syz_open_procfs-fchdir-faccessat2-mount-syz_open_procfs-pread64-write$uinput_user_dev-openat$hwrng-syz_kvm_setup_cpu$x86-ioctl$BINDER_WRITE_READ detailed listing: executing program 0: ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000001, 0x4010, r0, 0x7e76c000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000001c0)={0x10004, 0x0, 0x6000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) modify_ldt$write(0x1, 0x0, 0x0) r3 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) faccessat2(r2, &(0x7f0000000200)='./file0\x00', 0x42, 0x200) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000040)='stat\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) write$uinput_user_dev(r2, &(0x7f0000000680)={'syz1\x00', {0xffff, 0x3, 0x9, 0x1}, 0x1b, [0x5, 0x6, 0x101, 0x1, 0x2, 0x9, 0x1000, 0x8, 0x0, 0x200, 0xc70, 0x1, 0x8, 0xb, 0xfff, 0x0, 0x7c10, 0x7fff, 0x6, 0x6, 0x8001, 0xe0000, 0x400, 0x6, 0x899, 0x101, 0x10000, 0x0, 0x73, 0xd9f, 0xfffffff0, 0x1, 0x7ff, 0x9b7, 0x2, 0x7ff, 0x5, 0x4, 0x8, 0xfffffff0, 0xe247, 0x1, 0x9, 0x7, 0x0, 0x0, 0x1, 0x1, 0x3, 0x401, 0xcebe, 0x7fff, 0x0, 0x9, 0x4, 0x1, 0x3, 0x6, 0x400, 0x3fd7, 0x5, 0x6, 0xfffffffd, 0x80000000], [0x8, 0x7, 0x7, 0x1, 0xffffeb12, 0x2eeb, 0x1, 0x6, 0x2, 0xeb, 0x7e1, 0x9, 0x3, 0x78000000, 0x0, 0x3, 0x9, 0x4f2, 0x3, 0x8, 0x8, 0xfff, 0x401, 0x1ff, 0x3, 0x2, 0xfffffff7, 0x10001, 0x3, 0x5, 0x7, 0x1b8, 0x8, 0x1, 0x2, 0x2224bbc6, 0x92, 0x8, 0x6, 0xc4, 0x7, 0x1, 0x0, 0x4eb, 0x8, 0x5000000, 0xfffffffa, 0x80000001, 0x9, 0x4, 0x0, 0x10001, 0xc345, 0xe, 0x8001, 0x1, 0x8, 0x2, 0x8, 0xf, 0x6, 0x90, 0xf, 0x4], [0x2c, 0x81, 0x80000001, 0x2b, 0x659, 0x2da, 0xffffffff, 0x4, 0x2, 0x80, 0x8c, 0x4, 0x9df, 0x1000, 0x900000, 0xabb, 0x8, 0x4, 0x6, 0x8944, 0xb, 0x5, 0x0, 0xb, 0x8, 0xffffff33, 0xc1, 0x0, 0x7, 0x66e4, 0x3, 0x4, 0x8, 0x3ff, 0x3, 0x3, 0x9, 0x5, 0x1, 0x5b5, 0x5, 0x93, 0xb, 0x7, 0x0, 0x2, 0x4, 0x100, 0x1, 0x9e, 0x88, 0xfffffff1, 0x6, 0x8, 0x401, 0x8, 0x5, 0x6, 0x101, 0x8, 0x80000000, 0xf, 0x0, 0x80000000], [0x3, 0x5, 0x2, 0x9c, 0x101, 0x7, 0xba86, 0x1, 0x3, 0xc, 0x40, 0x4, 0x4, 0x7, 0x7fffffff, 0x3, 0x0, 0x401, 0x9, 0x8, 0xeb0, 0xa08, 0x5, 0x10000, 0x7, 0x8, 0x1000, 0xfffffff9, 0x400, 0x6, 0x0, 0x9316, 0x2, 0x8, 0x8, 0xa, 0xf87, 0x401, 0x9, 0x0, 0x9, 0x7fff, 0xd1b, 0x0, 0x2, 0xb, 0xef4b, 0x6, 0x5, 0x67d521c9, 0x9, 0x9, 0x1000, 0x80000000, 0x4, 0x1, 0xa8, 0x7, 0x3ff, 0x100, 0xfffffff0, 0x2, 0x6, 0xc]}, 0x45c) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x301140, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="66b9800000c00f326635002000000f3036c1ca0066b8f0bc4ee10f23d00f21f866353000000d0f23f8660f320f2356baf80c66b8f748a18666efbafc0cb02fee66b8000001000f23c00f21f86635020004000f23f8f3ab660fb9bd34c70f01c4", 0x60}], 0x1, 0xc, &(0x7f0000000100)=[@flags, @cstype0={0x4, 0x1}], 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) program did not crash single: failed to extract reproducer bisect: bisecting 42 programs with base timeout 30s testing program (duration=40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 10, 4, 20, 7, 21, 21, 12, 29, 14, 8, 28, 30, 30, 6, 2, 30, 6, 30, 4, 21, 30, 30, 6, 13, 12, 12, 11, 27, 18, 13, 8, 30, 18, 8, 15, 6, 8, 24, 12, 21, 25] detailed listing: executing program 1: openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x460c0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000580)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0xeeef0000, 0x2, '\x00', 0xc94}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000080)=@get={0x1, 0x0, 0x1000}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000080), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2c00c0c4) close_range(r7, 0xffffffffffffffff, 0x0) executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0) read(r3, &(0x7f00000003c0)=""/18, 0x12) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x12, r3, 0x4d75d000) executing program 1: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x7, 0x1000000, 0x0}) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000ecdc0100"]) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087707, &(0x7f0000001000)='\x00\x00\xff\x0f\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00n\xd5_\xeb\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9\xf8\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x17\x98\x93\x0e\x03\xd6\xf6\xa3\xe5\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,\xa8TM\xa5\xc8\xc6\xf1\xba\xe0\x95~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99\x00.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81Il\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff\x00)\xec\xbe\xf4h1\x1a\xf2\xc9>\x06\x91r4Z\x94\xa3uV\xb9\x1e(\x87.\xacDu\x99\xd4\xc4\x8e\xdb\x1a\xa7\b\xc3\x10T\xda\xff\xfd\xc2\xb2\x99\xb4\x05\xd1\x8c\b\xbf\x9ap\xb3(\xfa\xff\f\xd0\xd4\xb3\xa6\x01\xdbc\xa1\xc0\xab\xb9\xf3\x0fw\xf9\x8e\xd6\x8dR\xd7\x92\xe7\x04\xa4\x89\xc1\x9b\t=\xf9yI7P8\xf5\x16#\xc2\xe2l\xcc\x99\xa3\x17aj\xa9\xb4\xb6\xf4\x8d\x80\x99\x98\xd6W^\xa0\xddy;!8\xdc\x85W\xfe@\xbf|j\x01\x9c?u.G\xce\x00> \xad\xe3\xd2\xd0IL`\x87\xcb\xd2\xef^N\xf0\x98\xaf\x98\xe6t') executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) executing program 1: ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000001, 0x4010, r0, 0x7e76c000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000001c0)={0x10004, 0x0, 0x6000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) modify_ldt$write(0x1, 0x0, 0x0) r3 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) faccessat2(r2, &(0x7f0000000200)='./file0\x00', 0x42, 0x200) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000040)='stat\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) write$uinput_user_dev(r2, &(0x7f0000000680)={'syz1\x00', {0xffff, 0x3, 0x9, 0x1}, 0x1b, [0x5, 0x6, 0x101, 0x1, 0x2, 0x9, 0x1000, 0x8, 0x0, 0x200, 0xc70, 0x1, 0x8, 0xb, 0xfff, 0x0, 0x7c10, 0x7fff, 0x6, 0x6, 0x8001, 0xe0000, 0x400, 0x6, 0x899, 0x101, 0x10000, 0x0, 0x73, 0xd9f, 0xfffffff0, 0x1, 0x7ff, 0x9b7, 0x2, 0x7ff, 0x5, 0x4, 0x8, 0xfffffff0, 0xe247, 0x1, 0x9, 0x7, 0x0, 0x0, 0x1, 0x1, 0x3, 0x401, 0xcebe, 0x7fff, 0x0, 0x9, 0x4, 0x1, 0x3, 0x6, 0x400, 0x3fd7, 0x5, 0x6, 0xfffffffd, 0x80000000], [0x8, 0x7, 0x7, 0x1, 0xffffeb12, 0x2eeb, 0x1, 0x6, 0x2, 0xeb, 0x7e1, 0x9, 0x3, 0x78000000, 0x0, 0x3, 0x9, 0x4f2, 0x3, 0x8, 0x8, 0xfff, 0x401, 0x1ff, 0x3, 0x2, 0xfffffff7, 0x10001, 0x3, 0x5, 0x7, 0x1b8, 0x8, 0x1, 0x2, 0x2224bbc6, 0x92, 0x8, 0x6, 0xc4, 0x7, 0x1, 0x0, 0x4eb, 0x8, 0x5000000, 0xfffffffa, 0x80000001, 0x9, 0x4, 0x0, 0x10001, 0xc345, 0xe, 0x8001, 0x1, 0x8, 0x2, 0x8, 0xf, 0x6, 0x90, 0xf, 0x4], [0x2c, 0x81, 0x80000001, 0x2b, 0x659, 0x2da, 0xffffffff, 0x4, 0x2, 0x80, 0x8c, 0x4, 0x9df, 0x1000, 0x900000, 0xabb, 0x8, 0x4, 0x6, 0x8944, 0xb, 0x5, 0x0, 0xb, 0x8, 0xffffff33, 0xc1, 0x0, 0x7, 0x66e4, 0x3, 0x4, 0x8, 0x3ff, 0x3, 0x3, 0x9, 0x5, 0x1, 0x5b5, 0x5, 0x93, 0xb, 0x7, 0x0, 0x2, 0x4, 0x100, 0x1, 0x9e, 0x88, 0xfffffff1, 0x6, 0x8, 0x401, 0x8, 0x5, 0x6, 0x101, 0x8, 0x80000000, 0xf, 0x0, 0x80000000], [0x3, 0x5, 0x2, 0x9c, 0x101, 0x7, 0xba86, 0x1, 0x3, 0xc, 0x40, 0x4, 0x4, 0x7, 0x7fffffff, 0x3, 0x0, 0x401, 0x9, 0x8, 0xeb0, 0xa08, 0x5, 0x10000, 0x7, 0x8, 0x1000, 0xfffffff9, 0x400, 0x6, 0x0, 0x9316, 0x2, 0x8, 0x8, 0xa, 0xf87, 0x401, 0x9, 0x0, 0x9, 0x7fff, 0xd1b, 0x0, 0x2, 0xb, 0xef4b, 0x6, 0x5, 0x67d521c9, 0x9, 0x9, 0x1000, 0x80000000, 0x4, 0x1, 0xa8, 0x7, 0x3ff, 0x100, 0xfffffff0, 0x2, 0x6, 0xc]}, 0x45c) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x301140, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="66b9800000c00f326635002000000f3036c1ca0066b8f0bc4ee10f23d00f21f866353000000d0f23f8660f320f2356baf80c66b8f748a18666efbafc0cb02fee66b8000001000f23c00f21f86635020004000f23f8f3ab660fb9bd34c70f01c4", 0x60}], 0x1, 0xc, &(0x7f0000000100)=[@flags, @cstype0={0x4, 0x1}], 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) executing program 32: ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000001, 0x4010, r0, 0x7e76c000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000001c0)={0x10004, 0x0, 0x6000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) modify_ldt$write(0x1, 0x0, 0x0) r3 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) faccessat2(r2, &(0x7f0000000200)='./file0\x00', 0x42, 0x200) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000040)='stat\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) write$uinput_user_dev(r2, &(0x7f0000000680)={'syz1\x00', {0xffff, 0x3, 0x9, 0x1}, 0x1b, [0x5, 0x6, 0x101, 0x1, 0x2, 0x9, 0x1000, 0x8, 0x0, 0x200, 0xc70, 0x1, 0x8, 0xb, 0xfff, 0x0, 0x7c10, 0x7fff, 0x6, 0x6, 0x8001, 0xe0000, 0x400, 0x6, 0x899, 0x101, 0x10000, 0x0, 0x73, 0xd9f, 0xfffffff0, 0x1, 0x7ff, 0x9b7, 0x2, 0x7ff, 0x5, 0x4, 0x8, 0xfffffff0, 0xe247, 0x1, 0x9, 0x7, 0x0, 0x0, 0x1, 0x1, 0x3, 0x401, 0xcebe, 0x7fff, 0x0, 0x9, 0x4, 0x1, 0x3, 0x6, 0x400, 0x3fd7, 0x5, 0x6, 0xfffffffd, 0x80000000], [0x8, 0x7, 0x7, 0x1, 0xffffeb12, 0x2eeb, 0x1, 0x6, 0x2, 0xeb, 0x7e1, 0x9, 0x3, 0x78000000, 0x0, 0x3, 0x9, 0x4f2, 0x3, 0x8, 0x8, 0xfff, 0x401, 0x1ff, 0x3, 0x2, 0xfffffff7, 0x10001, 0x3, 0x5, 0x7, 0x1b8, 0x8, 0x1, 0x2, 0x2224bbc6, 0x92, 0x8, 0x6, 0xc4, 0x7, 0x1, 0x0, 0x4eb, 0x8, 0x5000000, 0xfffffffa, 0x80000001, 0x9, 0x4, 0x0, 0x10001, 0xc345, 0xe, 0x8001, 0x1, 0x8, 0x2, 0x8, 0xf, 0x6, 0x90, 0xf, 0x4], [0x2c, 0x81, 0x80000001, 0x2b, 0x659, 0x2da, 0xffffffff, 0x4, 0x2, 0x80, 0x8c, 0x4, 0x9df, 0x1000, 0x900000, 0xabb, 0x8, 0x4, 0x6, 0x8944, 0xb, 0x5, 0x0, 0xb, 0x8, 0xffffff33, 0xc1, 0x0, 0x7, 0x66e4, 0x3, 0x4, 0x8, 0x3ff, 0x3, 0x3, 0x9, 0x5, 0x1, 0x5b5, 0x5, 0x93, 0xb, 0x7, 0x0, 0x2, 0x4, 0x100, 0x1, 0x9e, 0x88, 0xfffffff1, 0x6, 0x8, 0x401, 0x8, 0x5, 0x6, 0x101, 0x8, 0x80000000, 0xf, 0x0, 0x80000000], [0x3, 0x5, 0x2, 0x9c, 0x101, 0x7, 0xba86, 0x1, 0x3, 0xc, 0x40, 0x4, 0x4, 0x7, 0x7fffffff, 0x3, 0x0, 0x401, 0x9, 0x8, 0xeb0, 0xa08, 0x5, 0x10000, 0x7, 0x8, 0x1000, 0xfffffff9, 0x400, 0x6, 0x0, 0x9316, 0x2, 0x8, 0x8, 0xa, 0xf87, 0x401, 0x9, 0x0, 0x9, 0x7fff, 0xd1b, 0x0, 0x2, 0xb, 0xef4b, 0x6, 0x5, 0x67d521c9, 0x9, 0x9, 0x1000, 0x80000000, 0x4, 0x1, 0xa8, 0x7, 0x3ff, 0x100, 0xfffffff0, 0x2, 0x6, 0xc]}, 0x45c) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x301140, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="66b9800000c00f326635002000000f3036c1ca0066b8f0bc4ee10f23d00f21f866353000000d0f23f8660f320f2356baf80c66b8f748a18666efbafc0cb02fee66b8000001000f23c00f21f86635020004000f23f8f3ab660fb9bd34c70f01c4", 0x60}], 0x1, 0xc, &(0x7f0000000100)=[@flags, @cstype0={0x4, 0x1}], 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x24}) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) (async) write$uinput_user_dev(r1, &(0x7f00000002c0)={'syz0\x00', {0x0, 0x2, 0x9, 0x3ff}, 0x1e, [0x1, 0x1, 0x9, 0x6, 0x4000, 0xa, 0xfffffffb, 0x6, 0x7, 0x4, 0x5, 0x8, 0xfffff945, 0x9, 0x10001, 0x7fff, 0xd1d, 0x6247, 0x7, 0x8, 0x4, 0x5bd0, 0x6, 0x2, 0x100, 0x1, 0x8000, 0x5, 0x8001, 0xfffffffb, 0x3, 0x2, 0x7f, 0x2, 0x7fff, 0x0, 0x9, 0x81, 0x10000, 0x6, 0x2, 0x8, 0x101, 0x9, 0xdb, 0x7, 0x9, 0xffff, 0x784a, 0x1d1e, 0x8, 0x9e, 0x0, 0x4, 0x1, 0x4, 0x9, 0x405, 0x2000000, 0x4593, 0x80000000, 0x54b, 0x2, 0x5], [0x3, 0xeb, 0xffff, 0x80, 0x0, 0x2, 0x0, 0x4, 0xf3, 0xdad, 0xffffbe7b, 0x6, 0x3, 0x5, 0x5, 0x1, 0x8f3, 0x1, 0x5e, 0x6, 0x5, 0x0, 0x30, 0x2, 0x7, 0x1, 0xc6d9, 0xfffff2d4, 0x1, 0x2, 0xf, 0xff, 0x7fffffff, 0xd, 0x5, 0x8, 0x2, 0x8, 0x0, 0x7f, 0x7, 0x4, 0x96, 0x7, 0x10001, 0x1000000, 0xa04, 0x8, 0x6, 0x3, 0x10, 0xa, 0x0, 0xfff, 0x3, 0x9, 0x8, 0x9, 0x101, 0x3, 0xfe000000, 0x7245, 0x9, 0x9], [0x2, 0x401, 0xd5, 0x1, 0x3, 0x9, 0x8, 0x5, 0x7ff, 0x2, 0x2, 0xf53, 0x2, 0x1a00000, 0x9ce5, 0x5, 0x1400, 0x5, 0x7fffffff, 0xfffffe00, 0xfffffff8, 0xb2, 0xf, 0x80000000, 0xb, 0x3, 0x2, 0x5, 0xfffffffa, 0x846, 0x7fff, 0xd04, 0x0, 0xffffffff, 0x3, 0x0, 0x8, 0x5, 0xc0000000, 0x2, 0x9, 0x7, 0xec1e, 0x81, 0xfff, 0x10001, 0xfffffff7, 0x6, 0x5, 0x101, 0x7, 0x9, 0x3ff, 0x9, 0x8, 0xbb, 0x5, 0x800, 0x6, 0x0, 0x6, 0x7fffffff, 0x8, 0x4], [0x800, 0x8, 0x8001, 0x3, 0xf, 0x0, 0x9, 0x2, 0x1ff, 0x5, 0x7, 0x0, 0x31d, 0x2, 0xbc4a, 0x2, 0x10000, 0x800, 0x8, 0x51591682, 0x5, 0x7fff, 0x0, 0x9, 0x9, 0x5, 0x75f1, 0x1, 0xfffffffd, 0x6, 0x1f3b, 0xa2a, 0x8, 0x10001, 0xfffff436, 0x0, 0x80, 0xfff, 0x10000, 0x1, 0x4, 0x0, 0x3, 0x8, 0x6, 0x218, 0x1ff, 0x992, 0x6, 0x1, 0x4, 0x1, 0x37, 0x8, 0x0, 0x7, 0x101, 0x28069d59, 0xfffffffd, 0x2, 0xb, 0x200, 0x401, 0xffffff4d]}, 0x45c) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x28402, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x2) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) executing program 2: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60e41, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000240)="26b2a8dd3bb50b8ceb62f430e5885746b5fd58b5a47a2bf28b373c8660a05cf8181b4b7a61b8ce127e9a2c0e92dea9379d5ca6b58c15037915bb4319621bdbead01cade5fc0535760d2286578af05881b83e2c2007508ed17ff1e44b5f91fd57e1077aaaf77b6741f58c4e426bb9b1ac269ddb81ba7c1d6ee457f1bb8ceb4e8a69db85ebb1df95fec7f3b5bd95dd726c920792e9a54f1641d5578f4347df0d583f76f962383980e8c6a1c123a70212d089e9b35900b052f0ee59eed7cf1e133398f5f5bd78d5c9820ee007f32894a57377a97af57c6d6dd108231b10a94c67f18552a65b870b7a9afcdfb72b57b81b1e424f739df21dfeebfaca906901b2626cfa482aabcc62b510255ee5010b4c1b260471011275c7f242659df63a8de398c2b0dfa67422e519853a439752898451f9f02defd4ae71ecc8aadd28d21a339d35cb425e109a5452d01d1ca2fc9cd2572a1252582d4b179876cc489b1b3fe4767d0356c29e6e0b891991f1dd5acc3c3e35f9d0048ed0e28b9771295729aeb5a1e262ec2fcbb545c3e24799bc424924294928312b42be902842083b4d7383ed289b307b66c8568277b3c17fea747ee49b750d83dd7ea1f18a5eae198451bd2968f823e03a4656cbbb154145465ddc7bcdd0c7b1d07366c0a4090e4023fd98d0f77d3949d7788bf0b31c52c7704bbfd681c4691d16ef610708ad2ae5af88301c5b0451ae9f292f16aa44230e53874a432be156fc74c9690983928aff88c8d817c86913fdc8425cf2cc43297e89321dfbbba3f4f1b8bcb602a17f1f5918c0657a9e0230f2722f2aca5f2f931c8c91dca589c02a711db5b7ca36f3a49282c4ec3b447ddcbb2f94e257a384d8c17980a3962b2c7b5c0b661899fd1451ce783dfb29355650454b65479ef40a319e37e90757ec3e3e08a2bbe0b9bed99d8bb31e5d240ffa66d5162748f30635658f92d864dc6ee1d95d9b6e19e554f6a4a5cb4a067b3c7d7d882ed4f908337febfd5cf00a6fd68e95fe62f5c374399f6d3201d3482a0637ac4d9d8253fbbf6bfdc3feb9db0a3d8a85cb337dc7a1328973e20bb82bcc2ec03a637f4f29e1efcf4fec09568a42ece4ee0508a0da8206989d12e522a65e76c4d64bbaec9f328b927391f2b15c7e8b3f138ef345afcac4d566448f327f84ed41f69b4d40c8309d9d5ed6846f788198e151a48f654d29b659f923858d443e118409541cea176cda5c518a938d10086148efdecda55cd4990922cffc06633c59db0c21d12e4b311e3858e82001c24c2225844019f9d633679ee75a70521da58cb8809c193c0f3389dcf540884ff0b44f224cbe03623ee16ad37e00abd1bdda5972379bfb097aa2ffe5e881ff988644b1364d8117feb6859fa4a942260aa6ac51387bc4c9173b8656813929744af772742e69d78f5b127b3ec8a64a3781a603a56e05eb948a003e54f3095e56899dc6413c4317e12141b3409ee8d33dc77ff33b10c5294c5e6b969848dee370c19e732f3e75a6bf21ad433c99d3978f8a8254fcc589eb067e3663e6179cd7904e080048565f0d8aae47d0dec7830d5eb48cd386ea8ff0cebf7bf86eda674cabd0d06f2068817d1d85f39bff655bda536ca5d9727545b8202a982818c388ab0219021fdf4dcdc5de8731edb03e9170a8867b614e5317f76f44c33563fabb73eb4cf8a766b6299e52d00646262e6e7704748a35322cdd7c52e6bae2654295f7804f68e807d5ce420213a278b751b360bffbc1bb9a027b98e65e9dab8fd143e02c2e6192eb8f411d80aad0fa5ff40ced48d26e076cda037ffed74f19b1a35839239b5d14e57fcba05aad705435f998d5a85c05d944bfc472ecda2974332b9b44c448365682d00e271f0fd2a436057adfb7b8eca4abdb8c1329121d6dae395dd1506a95c0de8191bd69cd1f68ec5af9a88fbb1a37c082b9df5cb390379f2db48c63e9f779b875ef9891a84181900bec4d6f512e4633f6b43b6abcb87e2e72f74d8cb0ea3019860339fdcff45dfe7e0817de819eef61d6e91b05a6b8ce8b0e1416e0210813429ff7a75cbd6e7a8f5c1e41012f8b092c6f0b45896a3de1a278b80104157dec7e210aab22aebb54ec881291fee48bc1c413f6a0704e45c1b00f39d4618147e4e11f429592bc92044a772bb33349d3ee4b6c2c5a5a8fdd5ad65434943c3987be2ab99807e23db8b9ec30a3030be076b7871c1bc7a9d4506f3a1e7b986d2ea1b60f9240db71a360c919dc6dc24f6af5878efd95d83f5a9529266f2fef29af2b60d214b21b6e3b8e5b3555849453f66e3b2fe46c2547690b745cf6b850312d825c73049a9a009d66d0d58801f254e2dc32897d9f3bf6fc3fd9ca6fef5d0f0dc55e85a99d735d1800f418010986d80f04e7f5a37109b73432db749b569966e781e646c0e373c94d7797960e1b73cb6cf58ffed290c567d7b5dc54f7a9c911d19fab72aded28cb7c063c46fd530b6ea9efef61c4da2bd5bad7d317743314ab01046b0f92d9d428a13bf5ff427fe25bdce29637f916b2da55f2f5ff05ea17002bf139a5740b7f2b60d6048844cc3909c76eb9ea0735ebed9c201efb8228245373c97d8c565e1ddb4c4d07c1ee7e3a942eea3cb88b2b263a0e4eef9b5cbc99f0b1fde017d01b15820f55f51d325c77c298b6973ad694b1f3bd5440fe8e8ea72fb10b53bbfb84c7d2b7be416df5cb60ad3607c71b387687752a119afb71cdc53b8a395e0398a5be4ac9a175df444ea715fbb2703911bcc6867a85ae2d76d25af06ed0e3688660dad6d69c1f356d43e655811e4169ff9f3f275a8417c44a9b7f5cc3e6ae05ed6a226da85946e84144191b4018d2a226e957e583fb34af3d4bdfbb59da087565fdd7faca17d652208c129549f16541f8addf7be170c6041459600364f025362ea0726f48cf82521d47eb478c341da8b0ba94e96942787d4046d04e86b3ecdbf4b3579aa8f00ca70e132609df358d9183f6cf6b200dfd16fac3e0bcdb13cc5bfb20bde3cc139967c70fefe3c39f484c442b75a5606a2b4952c799b04957e151d3dd76eeac764170a1929a88a668926fd6c22e9c2327f85fe88d388f4eed175a5c13e82bd6f42a7669341d2f3012c75c9871e419e0f3c7e50e347856415b8584eb2d2a0214d5bb03b10a26505ea9ffc7d5aca844e24af916eebe7513d8dd9145049aa0dd8e2a5a9fc53cef6239f56f2ba429601ead8223b5d89e5326e09f9d7c409a466fe5781435b9c324efc040cface76eb40b2da68b71a8baf2f916303726256c772cf27806d5208724cdf9f4eef7c7f3084a25242479fbe759bde637a7cb96d98510f0a68876d04cb47a3e7614b0b51f8812727b0881da22bf270d4a44206a581e71a7150c4096dc1fbd9e724ac572adfa13d6c2129e51df101bd5fd45bc57c356d67b65f270168bd0601e0241e887becb130fcb72c398c6e50d5123f5e8cef49d7ae92ae8e7de2221677a8aa6a285824ef679c68f87330224ce2c11299878adf4f46ed510fa4286f6110dd9965c189c21e85654d44992593ad75bb264fa4c9c7f600224b8eee14e6bac1aa0f9c9bc8c10caee2826cc6d8a787a9b98f908d062732ac0226268047fb44fd950d8ae380620c1f594a68a0813b492bfa3a8560dc1458ba84ddbf9b58f0f7317589a36c66493d1b1093c50719fe4e7b3a7f9dc61e961b0a36b0d65bd14029ad5b9dacdb4edbf090c2455c6c1af080e5447ec7aad8d1a532a48ce280decb70918738b3dcd49d3ffe16e1a2099f7e083aec3a97866e51d43e2581530e53d269c4ff2a6f576ecadc018f4e233b6e7da57130bdd369bdf5973031b7280d7bfcfc443dfb578de9d60be87e741e3aabedffd7b46e6a1c342661b0a122d579623e6e86e745e6ec3ee53545e9a1f63c1db363f68ee2a693a8f8bcd5f97c575db2ce1e03fee213bbd7a38a288fb83a07b1adeb99932fa55dda4b7e6be199f8f008abaa88c63f59179b47c541d8707709c7cd5f5aa5ed5c4dc63093596b09858952e64133cbe6b7d02b60528d6a263c9b72aa3e751a99e9fd1664121fc0ba9018d61011edd23d29d05c2080e33c721e503113be23973351a68fb5da582205a0e89e69fc84e24f3d4e8629847f9b6ba77e2ffe6ce394f99b1a94576c677e7433aa8bdc4d9779cbb706c6e2f426806d111173ffb0cd4f7be3ccffcfc9e66a16ab2806b6118ce28bc935624f1cbef0c9c4da396e6dc0e87ff20d0fd0e07d49327d8c0c97c7d70c50b584fbe563cde1cb17f36a73ebbe6b331b6321ac5ceba510a35ee913c5542a9d7b12805a29a99d25a5d3bc13a330435d6f0305bf522cc71e261c39d82584440d47fd82b9b31ad4ea0d2922558e6bab6fb6d3f6da9eb2a2e824af6928ee2ce41baee61fd4b5f896bf92bb1cf06c0c5a1b9b81a8216084c8e90451823d6be884a735a2be130304a22d8168c06db9cb6d62ba30079ecc831952f2564b760153311226d2188bc523928aa63223e785e6cf67a01962eed4195d5b06f06f272fe27d38660153c1727cfb438b5d98da5778070791c5ace1fd3ae756c8f261ad9d1c6aec5722a8e0609c3bb672c628879b65fbba3692070781c13bd34a93a5b9fff4f9ac4cd6aa3fdf076eeb4c0cfa14d2a41193e723d6d013995f34c97bd5d438eae8ca9a8a2dfdadec39c84c11cc9e9506020e072908178a6b60c53321c0b857d12b9adb58d90197c090e558d20a29bfd9f2ae297c23f47a544daa537f5780ec75b1824be5c92c20785499143252dd2f6d1f8aaf47deccbabf74ee0d55793b046aee7dc763353249f03cf2f0c60f6dd6ff082a051ffe2c8ef4ae9b1d8a046af67ffab68a4587ccd0a503906cca13aac0b7309d5fed12abd5303d2803f928651b51dd8747db79c56c3e3f89e6799a9dac3a7c57257c6575e133379b6c616dbab839b530e7ede62dc529acf5a6fa061fd1244fbc82d6e883388291ecaf1130151c8da538f8bccb9b871d2ce3417a9212ad94fe94c6e13e06975d8ba285d7e937ac4c6fd89aae06db06940670463d6b86a18856cc978a49f7e407f2e4f042d7ee1b7791cb33697824c68b2535af6c803e7940512da7db39c98ed1030e615569c200bc3ab833156187c25c1f659dcde3434f47a8cce56d821617c58907f80d5628214a0a8aad3fa2087647d52ac1c9692c6b57b85d70cd12875f110e631f3a9e34f21afc401797d9a13753deabb43fef92d691efb19a7120167f838d283fc5f2f1d7b4c2ef736fb1c8a47befcfd320f98461756d6908f00cea4a252733db78b6f67620e1a209e39f788a8360b8f42ccf1776259c6f70ef7ca2b0ee8caf4bf27017730236669eab62ada6db1d381ec2f8c60bebf555425bab9fa4d46823d3b0a1b1f51add64961aa2a073929116f02ea230bfb354019e47800415edeacf72a7daf8930c64adff306aba841fbe75bb18da73441721c86d3a70f9e6025e7fc95516703372fcae04421b08d0edbc5f1b6b6a3c66225011dc19f575111180e8d173922c2e28123347036b3ff2418dd529c49beb2e335801a3a5473c73d71d084c8271c10d86f283a659deaa57fff6673519645e0ee4c915cc3b8c440584fe222b1bc0cc0888142b9753ad409ed41ca16a92a3126ee73f7237523c6c781959fd255c5c0dff4ff324dc3e2246da77281809ead68df57e4ae6c1f8001e6d292e8e42f897b59770ec26b508ac5d57b47ee9696f9d40ceb39f9653a14737ede3f3213147381417d9633d30cc1107dde46e5ead6e4e4dec617202e10b9093e3bb2dfd785dd96a6a64f44bef7465552dc2e391c978c7ac1ce2b8f774d7b3934d15fc6d96eb3de6f0e9402a8538c6081712e5affa5b67b4153217b38f3248b2565c804226f4a31688d5fafacfe2e4fc191791c7164cfa33a474f4a9cd90fb5f37f5268e1801a2a762b00e8b7b2bda1db7a90ccc74ccc0fb015eb49a6ed0236d8b6b0e67bcaeeb750a499cfc3b2dc34e9024ea9bf00e5f0013a15509992979b50617dc14aeb0bac46c6961eca1e96ab2b45d342bc68e88b765a79d73f1eec58167e8ea4752981fd898f1ce528e9ba947723bd4d2ce228b6e5787227697d52f2bd0d4ecbebf5c6164f5819313060579ebb3ddb3c6423adb999975427c2d3da65b3cf52849c75464b46ede138be670742b175474222a47755f8006d4752b6c271643aa622f8439903abe53595792e7856a6e5a5e1b309fa139c2e64e927620c87aec8f36b9509c1d5cdee296bdde21d2cc54e7738070d93552d9ecd799325fe6fae9f3d7046ef1459d401922e3da284b7f6ef67ae196f274f6ce94887bb5ec25c0101618d6118b4cf47e0dfcb8dc89e8f44b47ba19c326db51a75a5b790620a2e460110dbc0f923a7d3825e4ac1d04597c0693fd05d93aabe907b47b1581f915de89c16580ae484f864e583b43ddc0991d716e401f60b6f62ebd52178a9e0adfbecc706dfffe8eee93f67ba2c9da4515bdfffd764741527ec04c3503da653271f2051ddad922ae38cae98c9a2eba5f8470d2551d2224add25a32b9c4d573f69ed15445d2b72ab20d1cd07c2d897dd7c97edab293db9f217a5eee5de9ad08da2f734e617b9f5268a3b91336237f5e9738a65f4adde4279eea09ce40e577b97eb5c67772e4ebee5a33afc7de28c70d97a514cdcd95908d26ad62800900a7cb9dcb88955b5401ccd4d965d00ebf0da48bf43cd2f5b61331894f523685b17beb253c3f50db89e11e664d6427a2551b5bfb2cbbfbf1e8240909d5eef23ccfa23d185391713d1205078be21e99063ff6316c06cd77969dda4d7f3350d4f2f29a23f12e14788fd60cbe4c3c00685a5e42b861597fd3b70c5e0e4d9f02355b754bf353fa2bd5dc0225080c26eb39be11a5b3cfe5264f39399167ab55ae7286f09c1d7fd0fc69bc9c7fca34867b5bf11c43612d3e010d2918a0d9b620549402f2c56e9cf3aa53b7614337f0867fe08170ffb272c5d340f237cdca3e023d2e65b250acf4f265ab8794a5388c5358d7e1cccbf82d99dd1aeba50f3363b9c3b6ac43542334bde8cf2ffd29da1d516bb5d950938f410829e2e37684916e1eac5c2ea1352e7cf6d0bc19bf16bf4ee61e44cd339fadcdf18126c46c0aba43c927510f3b876b32f606bfd2f657254e9715f8151099da8897c287ec1eb9077c72a0a31171f5e2672c16d3907caf659a73a15ec1bbdf240cf5796c22a99933999dd36ab3c354736b45b990e1631be048cad72829f782504ccff0cfc2e1eb5fb3e52e9fa4c3a39ec9ae7ef7b4b9e7e9a721a3f6addace5ca68d525ab9dc0d26b05333dd638bba4e40ec0a716b29172fc84a26c046dcdd0a744af3a7da0eb295a6b0d2a4e45bd6222464cae11bdb5a6c02f8ebb9c8846ca03175d4cab8b9c9531ae686029cc740c296feee12fda2cfb130808a3fd435c13bfca388ab530b8c4b546c4fc9af86596daec4569b5e82c8fd452731e27f9dffdc5713562b99fde6b59948a46f2a44ed0e539469040bb04a54fdf390f589c6491f1057b3d44573838dd2a1271ef8ccec3796012d2debeddb9dd0e252bf622f2671d6940f1c89b3ae38b4fcaa37103d96f4504c5654e603b80f710dc575bfdf2f4fa01741ab79057c15b627cd03e7dc24aab3ee312dd1d7e96731c28e24df9b051fa5972615858f07572d07f6a6f947fecf8acb05d220b68a4962b0bb9e2bb6341b97b0bfb18dc92764ceca8f723592c02104a020dfb9ff06bebc81ea80c68a1fa6175ab4042abd3305c1a17b72ba5491dc812def91672873fdd98632871ed0387e00a80c173b9e8c75e185149d32a9945e2f9707301c96337cd1c44cc13a9f38dc23720558c31c4cf6ff72559794c04af4deccbeddb04f267308e220963bf64d0aa830af54a91ae3ae0eb1aa3d48dde97ddd0916e3c16f4d90ef3e66f06f8c4c3d4fcfe41094708f49ac8d4e7150a74d9378a75018dba062fd1ec331776aafdb64e5e1732ab0f0ce0bd8985ec4b1374a6245b6d714a1c02ababcdc1fe22481a6ad3276662d4c9adf65e9d275afa6d57d6c3bcc6ab68234f4a1dade56c852c86c0bb4f427387bc9ea23e7361b7f518039af614141a12499b9602f95e2a969c7f31cf1056fe3b1954ecaa3db219f546a28e954964268be0296ea2765a8194d88b14869d388996d645f34511d63a602d92e795a0b29773052ce44b008556b6a0fb418a9233ed13edf3bda3db479211d00c16d40ee6321241d884fffeb3c1e2c01707c7aa387778779a241699ef4bd5d7cb8e40986539d0778cc242e98f17e630a09d62155b469ef5dba920d2ef80686c8f9eaf1965b42935d6dc470de7fbe0f5083a4b6ced2fa06b255fc35c3325bcc57ae3ef95ef58edb0b45bbff699de88afa565ab9f98b1c98255dfd6bd3eb18af00b94cbe5f94421b2828b0583c91e7cecd4754003ad8f46a206da99e75056705f9cccc481b591d4c33d96b21acbbdb4e70dfd9b6a2fccaa6a0af7f97fca9da759e62a6fb222341cbab0c808d320ff13a5989ce707aabd7f7c569b3e22e0c91613c483c136fb5b94ff7bdc1f51cbb9f5c46e4b62a19cca73057b78d1f3f8a9b0e2a20b8b8d9f2e8d0459df86c18353fbb3cb6e8b804e28dee571349e16b5df662cdedf1aa5a44eea00b778bc79c16138d85fab98c15ad9f2b83eebdb9432634280768397d2895c10012da8c6659e02295cfa52d6d06ef1e6ed0546d46c676048e5a455261659c83492d355eee56596e520962467fa8b3ae99cea9547d99a6d6b674682363c0dd5c8bd5c63d3bc2d45a94fb4e090ca27028b29a61c53d96ade29f1c60cffb5053b494dd2d7c7ccffc7006e16eb2bdcb360a1e0a3fa1f380616d0298e315808db7ae9ad16b6c4bb7dece5c2c4ba52d514f7fdc9b00e66302d1b6c6a7b5b58adb313e0cec67448238f66f69dd480d304a9831833a1b94f8109c0d2f85e646077bbaf140f9c7e72301d8e452f13711be18bdb48e2f0031c38da789a9e4161b7f0a6da09075414aaf9984ab7f141647c532e3b2530f3fd8a93b4218ecbbff44c4a58cdde1f9d89eb60ebe8033dc10116cbc09d4903bfd0830ef8b0d33572ce61bc028133be720544872e4a205fed6b005e8ed240ceb6e9efdd313b6eb0aed6bdcd335cb1765f2d7ed7f1819e0c04a8989183abcaa3677c35c33d95b139ed63f9f67e51386206ee2a3ad54bd4312b1178ece5a5a76eac9534faf2bb8c7b5105811a34a110553c63f1b9168ec5758e39d1f1baa4fd3e8dec73026c08ddf1568fa04b1a36a98055b6912f4faa0741e0bb5f063dfab6e6a8605b997affc69369980188967e4655c954d31b3ebea8dff5face904366191f0695fd3ccdc5e82c5982243e16a895f8aaf9d63d37ee1d323b296862ad265760a392378bc2ae5d7b75039b77aec33aa00c134f554ca9e5fd162296e915ccd359976e7ce4099bcaa5494c8eb6fa4da2a2e245920762f3639fa4fd4eb0e5e167a5f2111bfa669576ff3e0711a4ad78d2f8477363b03e6a13cd5b479817a62614ef613ac2b03a340114909c7b21ee93adf74c2ee2d4c666f1ab8bc43368e7643f3ea8da5a919b1e3078875228d2b519387ac49b7b9990d7dc229fb9ff0d551d3dfbeb843c8b2782f50cf8c575dec6836259a160a9a047165791d1e759c74ea65f4f9da990fc0e789bcd4ddf716442864788be6f2c5b607b6ddc7f9575b4e8375eea50e98cd9320fe736114e03aa0a2c1430d5cb507b29b388ace6ab58393513724607102a0458a458998e94d71b758df51ed4ecb6c6f2b94c31fb480745fbc6f6dc595c9558161fa14462779952982adb70d70a9f9a734fcbde17652e1a91422f93a6ff7d6c80fc92a5005bedf58aefe9bbba9d0ab3441e86b863bb5a3fdfd2a9c6f6d10717d2cd35d3c2a892f0e58545b1794d9aae993d72c215a6673bbe38976cc7d03cda84999c637aec8036ea1a23b143ed6288dcbc7d1ee487b1b6a4f6e8ef63b378acd4ff888bf95d86336907939c29695b2e0cc58efab49056f88a9027cad6d724e635f94f45f4cbddd8188608663ec7e46547e2aac7dec6cc5609e9f5f41ef26a1f16ecf6bfe200b0a955f98d9a4d41a2a268f8857670e33fbd4f076aa11c49cebd8306a4de3c86f7726fde93c7fc984079ae60e63854ee9a14162c749d7e308530c6b84cb5cafdd09ec3411cc0302c77d316beff973e3108ddb9b249e206d5476d605b7b24603ca344c2263bda8d7d3db55b9e2fcdce69be9b1ce24f8c4df129cd62a299fcbbff3309031973b5da452654c0b8ca4cf65891a8bdb8dedd20f631a34964e3bb0fa45c618861da79b259d79ecde8394061c99c661851c016c35ee8c91d52bbbc25f52b5e2f77ef2f63c764b717e8cce4d291742d5a7ef7f5d7ec1a96620eda1f962fb2448c388873f8b8abea4d27a5da092833c43c57c4b14099597f83785a31190798826f4264ba8f998cfbf7f20f9678e10e05c793f5781f8accca245d047d3be6c10541b2610c02c6e916d3db9776c6964e4519cf2e30708c954ef2492d3418c552dd9b5db4320dab8be6ac3394cb4b3fb1b9d5222c6ca9bd06aae2fef510e541db1209cde21fae56507020e80862d0b875d958346c42ebb781955ab337be61a68534281100247904b81b86aed49544c2452ecffaf6cc116f9d3c7362fc2cc390ab2ad29928b6e8bf90a4f21442fb213dbeeea4b8f481792fc6579b608e3a9c4fbe2755010d7ab3cd122de7a40a1f7780350a31d83ee5006ade36854cbc8e8c648259b29f2f7042719ab4d4d4d1f0c5fe6b717d23a5504335922f84ea8b20c78a5f1ddf6009089ea221353c01963fb8cabd3d795831c86d084660fa7f7d08f3ff15780c5b301ee27ab8d98fb358b90e92de4c96687c37e327ac1f0f23208c41a36e67cc22356df854f2dc309c110cfae51c5cc69051d22477caa1d2a2f276ccfbe907b263bd79ad4c5f6ea2687466f325ff2b1a736fff687c14d477c4c744e9c82be5b8ebfb69db2b312ff540ec8cadfcba9b609cae7e54ff347ed3d2649f9214600870ecba27f98943b4fb72f93b5ecb6d64dc1c7b2e8c2f2cf1006e39a237c5818014df9281feb6e522f6cb2d5ca35aeada09a58d5a6bdc9a75cf81a1c51faa8a3824a58d192a27be9fee5098b2e71d0d3f12917d50667415e418b790e0942260f4d2589c57aa1bd36017bd2bece963f0776f9f76cc66876c3f88f8bdbc35e329ecb56887948fd2c05d49c664509a682c6ff60350070bfd111be86ad2eee8c0d76b851fdb75f08e11fa47b5fd29b57568abbf91d3760652d475558bce2a1393688c9e2b4ae06cb072c294e1396b58db00b09ba8dbdc047a1684cca6e5b04cb52a40dd7b7f72c55292e7af0f3b8dda380d45b4e71c6cf57179247923750551ffd955f815cfbc29dfe5e0b2689eafdf44ce362b9c5864e4003326b2f183df7d39de7632bf3b2a85dca04cda08d10a5bad9ed9b481227e39804c3fd52d8a8f03288e13eb09c9075e23f82123a416e58864d95a321a719f88c8633201eb7d5c429348dfd83b476510f71808f95ab3b11d521004acc6d9168771736ec0a5f7c73ca78a46787c19299a79b453e49317353d6bee5b", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @multicast1}, 0xc) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000440)="a79ecba8", 0x4}, {0x0, 0xff95}], 0x2) r3 = socket$inet(0x2, 0x6, 0xe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", '\x00\t\x00', "066580001e00"}, 0x38) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = add_key$keyring(&(0x7f0000006500), &(0x7f0000006540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000004940), &(0x7f0000006000)={'syz', 0x1}, 0x0, 0x0, r7) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r8}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000032c0)={'syztnl1\x00', &(0x7f0000003240)={'ip6tnl0\x00', 0x0, 0x29, 0x1c, 0x9, 0x96, 0x5e, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x10, 0x7, 0x5}}) getsockname$packet(r1, &(0x7f0000004840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004880)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000006240)={'gretap0\x00', &(0x7f00000061c0)={'gretap0\x00', 0x0, 0x7800, 0x8, 0x4, 0x7ff, {{0x13, 0x4, 0x2, 0x11, 0x4c, 0x68, 0x0, 0x7, 0x29, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x1d, 0x3, 0xb, [{@private=0xa010101, 0xd}, {@multicast1, 0x7}, {@loopback, 0xb60473c9}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x15}, 0xe32}]}, @generic={0x86, 0xa, "2a252be36c8d2348"}]}}}}}) sendmmsg$inet(r3, &(0x7f0000006380)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="40b41d34e7482b3b9a76c992eea50cfaba91d74939795a569bc368746aefa0feaabdb452e61ab9c59321906f273929d69854dce1e0f95fc6fea056667ffdd277e666e5db59872b60a337fe7b070be09aaac757055488c41e4b3b48562d5fadecd378b446d82766fb5046985a2ae6323aef00f649290614f03d79bca686ba2e2b2245d6100101902a1740819386a4d10d428e55c3c1226851f79851f8307f0505b5cbbb09f8ce80c24113abe4cb009f437f80a93f7c20cbe9ec1dbbd3abf44adf8c75ef7700ee569a1a31c95b8c33d5d736d26dadd6f57eba561d", 0xda}, {&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000000040)="dec607636e3402c276d48acba3d51376b12220b499c64d8c782f2d801f623e6628d4af6fba926fb7317b82590fefff4f05d2d1407da84cc4361171c8c9444d474b49b088", 0x44}], 0x3, &(0x7f0000003300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @rand_addr=0x64010101}}}], 0x40}}, {{&(0x7f0000003340)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000003580)=[{&(0x7f0000003380)="00bbe701b243f7db3303fde76f71b42b9b584fb3d9e330cb542079e65921029a196b0ec739c281479e1f22e84f93986d091ff0d66c9c89eb7068195b898292fc4fb977ac0b7232eca54f360626ab8e39475a9d97c0bcf944cd92fbc97b52e59d77dcb07d0c0b57c6dccc0512feab4e6016cce0257e63fca767839f8d75f14ca988068c6cb7d52a6fea9c08f8dd5a76fe97dcad33d8abc4089201be9027b43e5f248c1e7a85e4643c2a144658c8438929ba7f53ad335a5d5169f623b151f7c8b4fe3aa4a215aa8e6cf4be7494eab7931441505d6364759596643eaf7d1ee248990b14944a7f1b4b8c35", 0xe9}, {&(0x7f0000003480)="8821ec9a0eb99b9a6e5b4e7ec484acff024ac178523588f5cff027da3436c3f5a5f6c7960fd55b8e2b96cb3d187a494d3c24a1039e034547a092dc6968174ea48b7c7a9d584a232dde13c5557aa2ab04428759e83b4dc095d71617acf9b58b1aa3320a92023a8973c8cbd502b1f662bebda2fd60c1eab4bc42c4e3d3a69c3a1e02ef527372f8bd6670c40f654a43b4c738a0e1aed68367647353d07c1115c134501bae653842bf37baac213d064f95efa2bfe9f20cae25a946802ca64094ec96c0d9c17e233c9e367e3002bb524799dcb61f801661acd163f326a24ee49248841ea870e8f88d2917", 0xe8}], 0x2}}, {{&(0x7f00000035c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f0000004700)=[{&(0x7f0000003600)="bfac3966806dabb6ade8c7d88fa9d884ef2bca31d27a430937c508eb2a1aaaedb43be60ec86f30287ad4e58398606f6fe96a58f50ada87cffe9de1c1b21a34a7702a4dd8228c2a47086109cf69ada1d30bfa9194d0716158dfa2454d5e3bed9772e02fbe3017a81c97288718d6624d1c0b4de93c3bb7c0a70806afddd22f71ce98b8109d8e9f739037f32083", 0x8c}, {&(0x7f00000036c0)="896bdf81", 0x4}, {&(0x7f0000003700)="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", 0x1000}], 0x3, &(0x7f0000004740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1001}}], 0x18}}, {{&(0x7f0000004780)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004800)=[{&(0x7f00000047c0)="d4e98c5765f4a0dbdfda131d1648e2e0840312580db5565d9eafb15a850826571e69373ced2c81f5541fcfece09a5ff99fd3e4", 0x33}], 0x1, &(0x7f00000048c0)=[@ip_tos_int={{0x14}}], 0x18}}, {{&(0x7f0000004900)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004d40)=[{&(0x7f0000004940)}, {&(0x7f0000004980)="023d6db8ededea715890c2a80276839eec79", 0x12}, {&(0x7f00000049c0)="0d235dfa761a51eb12512121ec3d46183cd13471b7be25e340e1155ebfc18b09073780875b538523ccb0eaedfa7c7248bb234f6a26c7450b29045500082e71681858b1ba0e44a6eef0b5a1937a93c7e7ed456e7d87ae074de27504d7da80585a28330e7572028f1ccca96b6e71dd0786e0aa2857960e22012f5dc250c665d814de1c96dc41ffd38f5d191df863a63f7668a9739b8f67cc2b55b15f7726d2b1e7c369fb10d609055e1f913b837bd801129ce5e601ff18d850eb6ab8272c92fc429e7c737ff47a2f51b1b3acafcdcd90ab6fe7a46d7e0e7939a11b76713effa518a71c8d1c965708f8d95a99ac5696335a0360409e3993050613", 0xf9}, {&(0x7f0000004ac0)="95ce58a97e23fa24f885135b8edd4b7115a652904ca4ee155fed3c072655db41134574216c3839fa82d4", 0x2a}, {&(0x7f0000004b00)="38f743744ba642b9ef0e7791e6af859de28eba6f03da9eceebe6f2965133be7f42dbc1429f2f90d1c844fe73a2dac084cd5159418cb4e8b3a3c8f231a0559630a783f064d2f16e7a846a911c9644bc64bea1f300ad2c4a6235329f2fba7e4e2a2eaa66", 0x63}, {&(0x7f0000004b80)="cd", 0x1}, {&(0x7f0000004bc0)="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", 0xff}, {&(0x7f0000004cc0)="74c5a852802eb3954ef31a261bc00eb3cf2cd576b0459f898cff3856e24388da4413855d49fffca5121b193800a4cd6504c6f2cc187301c302be1ee7110f6c9941eaf0278dbb48137cce494b2b7d419b743b172aa0fe422aea0ed9e553df6099900f59cb74f8", 0x66}], 0x8}}, {{&(0x7f0000004dc0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000006100)=[{&(0x7f0000004e00)="2208ef3b409723c990b378aaf2b38f012113b70733179deb58c26ce5b4a5fceca5f0a337985af134cfa1db91e099087ad9bf8eab69fff01df2a9a0d257d878fc922e661ee277c1352cd80b8f602fda7a9a7fd26fea82643cfcc89ae2878d8f44fbaa44e6e1a34522a855ccb443ede603830ba91129f3e1965448a3e6ce708a7a8e583196e9b4", 0x86}, {&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f0000005ec0)="952df54220000e", 0x7}, {0x0}, {&(0x7f0000005f00)="2a1cc73d967efc64ccdb922ff8067adbe2e365044b76e886c7e91dda3f42e0b4c8d00b84ec8625637135710d6f3ee5842afb8e253d29562458573f116f80b73a3dda61be8ade873f3b8249994705e2d700fcddc048f72325ac549109b149a11d72cbb1c29e1c5e5063f3a34880c5706f996035f13359f65a7e591e99633ed9bfb907cb2431a768cf2816a5eadfc8950360d86ac80c94324bcd7dfd6b7334dbca6a3bb5edb1bec35d9c45ab032f56e3eacdd701dc37278d07ce37c8d09fe78efc931c8683fdbdf4c03fb982ab109d062d38", 0xd1}, {&(0x7f0000006000)}, {&(0x7f0000006040)="9a36778ccd3d6d82a0974abdd6533e2756d4fbf723eff6c237ba0c7f6ddbd3f960de9bbf04a8874c3556e7729929ba8e8d4ba68f", 0x34}, {&(0x7f0000006080)="91b9723238afcdca48bdea9e3fad90f77d4db45a65ce3cfbe35929e3e238d0a682eb80", 0x23}, {&(0x7f00000060c0)="ef54c0bb4f5a8d57985dbccd94d4a95f8dca5040f84a17d628b15274ec548eef4f750f75af86be66dfdc3d86b27ea124", 0x30}], 0x9, &(0x7f0000006700)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414bbac1414aa00000000140000000000000000000000010000000a000000000000001100000000000000000000000100000002000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000"], 0x148}}], 0x6, 0x4004040) executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x16) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x1, 0xeeee0000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_pidfd_open(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001d40)=""/4096, &(0x7f00000000c0)=0x1000) (async) write(r1, &(0x7f0000000200)="2400000001ac", 0x6) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"}) executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00003b2000/0x1000)=nil, 0x1000, 0x0, 0x800, 0x8000) read$FUSE(r0, &(0x7f0000000ac0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000000100)={0x18, 0xffffffffffffffda, r1, {0x7}}, 0x18) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x890d, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f00000000c0)={@private=0xa010103, @loopback}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x28, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8000) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x400c620e, 0xfffffffffffffffe) executing program 2: r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000040)='FREEZING\x00', 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x34a00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x6a0082, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = dup(r1) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)={0x5, 0x0, [{0xf000, 0x1000, &(0x7f0000000140)=""/4096}, {0xf000, 0xb5, &(0x7f0000001140)=""/181}, {0xffff1000, 0xb0, &(0x7f0000001200)=""/176}, {0xffff1000, 0x8a, &(0x7f00000012c0)=""/138}, {0xf000, 0x80, &(0x7f0000001380)=""/128}]}) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f00000014c0)={'\x00', 0x0, 0x2, 0x82, 0x0, 0x5, 0x3, 0xeeee0000, '\x00', 0x5}) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, r6, 0x2000004, 0x4000010, r5, 0x0) r7 = dup2(r3, r2) r8 = syz_clone(0x2000000, &(0x7f0000001680)="b13ba619990a4c6885868501f944fb7bd5d2485d", 0x14, &(0x7f00000016c0), &(0x7f0000001700), &(0x7f0000001740)="7d07ac42ea700d3cca76e3d1a1646ca9b69c07d1da26f88fc7b20d02ed9ba2b6bfada22a5eb4d0f48c7518eb53171b5bd529212589d31e1172b9728822872bbff762bdb458d100363759e4516b921b15edb767af04adf771051afa4c02e5282e33bab54ee38cfd9499108406c36a4e1e0080fd0d7a653447cc44ca67675e873c8e55fcdbb50641feee7ee86b6f6ab2e0ec5e2c1ac3a4398e348dd2a900f54b7549a6951406760e9e56e8") ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000001800)={0x2000, 0xb000}) listen(r5, 0x1) bind$vsock_stream(r7, &(0x7f0000001840)={0x28, 0x0, 0x0, @host}, 0x10) ptrace$ARCH_GET_FS(0x1e, r8, &(0x7f0000001880), 0x1003) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000001900), 0x8000, &(0x7f0000001940)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}, {@cache_none}, {@posixacl}, {@noextend}, {@access_client}, {@cache_fscache}, {@posixacl}, {@uname={'uname', 0x3d, '$'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/snapshot\x00'}}]}}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) vmsplice(r5, &(0x7f0000001a40)=[{&(0x7f0000001a00)}], 0x1, 0xc) write$P9_RSYMLINK(r5, &(0x7f0000001a80)={0x14, 0x11, 0x1, {0x0, 0x3, 0x8}}, 0x14) bind$vsock_stream(r5, &(0x7f0000001ac0)={0x28, 0x0, 0x0, @local}, 0x10) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) r10 = signalfd4(r9, &(0x7f0000001b40)={[0x8]}, 0x8, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000001b80), 0x2, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001dc0)={0x0, &(0x7f0000001bc0)=[@code={0x1, 0x4e, {"440fd927660f6641800f019c0500900000c4a2650a66f066b843000f00d066b823010f00d0400fc72cbbc46151da51b866baa00066edf33e418365faa9"}}, @code={0x1, 0x78, {"66baf80cb801040e8fef66bafc0cb089ee48b8bc690000000000000f23d00f21f8352000000f0f23f8430f015ecf8fe978dbdeb9800000c00f3235000800000f30b986020000b801000000ba000000000f3066baa000ed470fa422b40f01f842029c8800000100"}}, @uexit={0x0, 0x18, 0x68ad}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x2, 0x18, {0x9ef5, 0x5f}}, @code={0x1, 0x74, {"450f015cec0066660f3881360f08c74424003dea3910c744240200380000c7442406000000000f011424490fc7a81cba0000c4017829e4b805000000b9b3550ded0f01c166410f3acffb21c744240091000000c744240224df8169ff1c24c462a59ff3"}}, @cpuid={0x2, 0x18, {0x100, 0x2}}, @cpuid={0x2, 0x18, {0x80, 0x7}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x30}], 0x1e2}) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000001e00)={0x3, 0x0, [{0x801, 0x0, 0x6}, {0x1345, 0x0, 0x8}, {0x9ea, 0x0, 0xf76a}]}) executing program 33: r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000040)='FREEZING\x00', 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x34a00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x6a0082, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = dup(r1) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)={0x5, 0x0, [{0xf000, 0x1000, &(0x7f0000000140)=""/4096}, {0xf000, 0xb5, &(0x7f0000001140)=""/181}, {0xffff1000, 0xb0, &(0x7f0000001200)=""/176}, {0xffff1000, 0x8a, &(0x7f00000012c0)=""/138}, {0xf000, 0x80, &(0x7f0000001380)=""/128}]}) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f00000014c0)={'\x00', 0x0, 0x2, 0x82, 0x0, 0x5, 0x3, 0xeeee0000, '\x00', 0x5}) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, r6, 0x2000004, 0x4000010, r5, 0x0) r7 = dup2(r3, r2) r8 = syz_clone(0x2000000, &(0x7f0000001680)="b13ba619990a4c6885868501f944fb7bd5d2485d", 0x14, &(0x7f00000016c0), &(0x7f0000001700), &(0x7f0000001740)="7d07ac42ea700d3cca76e3d1a1646ca9b69c07d1da26f88fc7b20d02ed9ba2b6bfada22a5eb4d0f48c7518eb53171b5bd529212589d31e1172b9728822872bbff762bdb458d100363759e4516b921b15edb767af04adf771051afa4c02e5282e33bab54ee38cfd9499108406c36a4e1e0080fd0d7a653447cc44ca67675e873c8e55fcdbb50641feee7ee86b6f6ab2e0ec5e2c1ac3a4398e348dd2a900f54b7549a6951406760e9e56e8") ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000001800)={0x2000, 0xb000}) listen(r5, 0x1) bind$vsock_stream(r7, &(0x7f0000001840)={0x28, 0x0, 0x0, @host}, 0x10) ptrace$ARCH_GET_FS(0x1e, r8, &(0x7f0000001880), 0x1003) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000001900), 0x8000, &(0x7f0000001940)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}, {@cache_none}, {@posixacl}, {@noextend}, {@access_client}, {@cache_fscache}, {@posixacl}, {@uname={'uname', 0x3d, '$'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/snapshot\x00'}}]}}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) vmsplice(r5, &(0x7f0000001a40)=[{&(0x7f0000001a00)}], 0x1, 0xc) write$P9_RSYMLINK(r5, &(0x7f0000001a80)={0x14, 0x11, 0x1, {0x0, 0x3, 0x8}}, 0x14) bind$vsock_stream(r5, &(0x7f0000001ac0)={0x28, 0x0, 0x0, @local}, 0x10) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) r10 = signalfd4(r9, &(0x7f0000001b40)={[0x8]}, 0x8, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000001b80), 0x2, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001dc0)={0x0, &(0x7f0000001bc0)=[@code={0x1, 0x4e, {"440fd927660f6641800f019c0500900000c4a2650a66f066b843000f00d066b823010f00d0400fc72cbbc46151da51b866baa00066edf33e418365faa9"}}, @code={0x1, 0x78, {"66baf80cb801040e8fef66bafc0cb089ee48b8bc690000000000000f23d00f21f8352000000f0f23f8430f015ecf8fe978dbdeb9800000c00f3235000800000f30b986020000b801000000ba000000000f3066baa000ed470fa422b40f01f842029c8800000100"}}, @uexit={0x0, 0x18, 0x68ad}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x2, 0x18, {0x9ef5, 0x5f}}, @code={0x1, 0x74, {"450f015cec0066660f3881360f08c74424003dea3910c744240200380000c7442406000000000f011424490fc7a81cba0000c4017829e4b805000000b9b3550ded0f01c166410f3acffb21c744240091000000c744240224df8169ff1c24c462a59ff3"}}, @cpuid={0x2, 0x18, {0x100, 0x2}}, @cpuid={0x2, 0x18, {0x80, 0x7}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x30}], 0x1e2}) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000001e00)={0x3, 0x0, [{0x801, 0x0, 0x6}, {0x1345, 0x0, 0x8}, {0x9ea, 0x0, 0xf76a}]}) executing program 3: openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000200)=ANY=[@ANYBLOB="6673636f09000000743d756e636f6e6600000000000000a450d6d000ad0b4ba35e7e333abc19e103fb7f79afb583ae886c275f321bd4d66470ef4a449d2f2ab48a1b0b9921a70405fd375430375453e7815a4cb8b7176df9e30f2261c3f573282f145aeb1a27d8eb14384c125664076739d9c6a0ff49148bb6667bcee8d4c1d19216c6936f1ee73e4135d214b1d6afa79a5b897dc3092f80d0a2cf32a9c94628062eca3d32e6125a9cbc8e0835f2000000000000000000000000000000000d3fdea487ca9e0b833677cce414996124ff7de242f03ae1bcc317153b0e4f44d8ae173aa71d1a"]) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) (async) lseek(r0, 0x5, 0x3) (async) getsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) executing program 3: clock_adjtime(0x3, &(0x7f0000000200)={0x1000020000d3, 0x8000000000000001, 0x80000001, 0xd6, 0xfffffffffffffffc, 0xff, 0x100, 0xd5e3, 0x7, 0xf, 0x3, 0x6, 0xf2e8, 0x8000000000000001, 0x6, 0x8, 0x9, 0x9, 0x81, 0x6, 0x2, 0x4d8, 0x8, 0x200, 0x8001, 0x4}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) executing program 3: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f000000afc0)=0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r5, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) ptrace(0x19, r3) (async) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c07c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0a00000000000000006a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f90180c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="80020000000000000800000000000000000000000000000002000000000000007a0300000000000006000000000000009b000000b0c4000000000000000000000400000000000000fb08000000000000c30e0000200000000d0000000000000008000000000000007f000000e3f5ffff0100000000a00000ff010000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="040000004a00000100000000000800000002000000726f6f746d6f646500"], 0x0, 0x0, 0x0}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$cont(0x7, r9, 0x0, 0x7) (async) statx(0xffffffffffffffff, &(0x7f000000b000)='./file0\x00', 0x4000, 0x7ff, &(0x7f000000b040)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getresgid(&(0x7f000000b140)=0x0, &(0x7f000000b180), &(0x7f000000b1c0)) (async) r12 = gettid() (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f000000b200)=0x0) (async) r14 = getegid() sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b3c0)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000001c0)="0fecd9de1554bf891668ab8a5b5c1cfc31417a10c482b0d59c819696ab79fa5379061b471a64de71a3030107fdc5170104d0cdcda6a09b8c04c7aa591a734878e86dc9be59e077d05441f7dcf324f21dc797274c0b2a3c6df122eb51c052d306882cd6b4da4c7b2d06c995404f", 0x6d}, {&(0x7f0000000240)="b933b9a80d7e65db43dc6b28d2b0be2f51fb157e665bb62a7c8f9a8745ab27a02176e02e8cdd858c6307e3e8672e3f7acb7bb915ac7258d0ba3004eeebb0f4d7eea003356d46c1b274113059b6f0a27cbcd8d6f0311ce5c7982494b9565b47286c29144ce9034bd62d9822b9b6703ddc0c19776e77ab67600bccb1", 0x7b}, {&(0x7f0000000080)="871365c62fa4ba200a1d800f", 0xc}, {&(0x7f00000002c0)="719abf6966fc94be08acfa29999e3a4a0726ae58ccb7dbf3ebfb234447aa7b41f10b45c0c5acbeb709aed7a201978c7600dcac3274b82600a9d4eb909e6cf3c103830fc6c83d7892a67529171f6ea9607c3d04b73a94f7fe49f3a76d", 0x5c}], 0x5, 0x0, 0x0, 0x10}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000440)="7241e17f805fd0ace7c0f77177432c573b98b2edfe76f0012fbca5014b80fb7620475aef115c18b92937d428acdcc95de81b9316464ddb6915613dd2b207fbf88a88409d0c5745a3de57d33962275f85c77094d3e0a145a957784bceb63be4c7f4fa", 0x62}, {&(0x7f00000004c0)="18f4acf15b09be0949c133ec07056f7d809229e6b31b10a63c4cbbf1b4330dcded0825e85101e56eb29d1a92a324a3be6af39535", 0x34}, {&(0x7f0000000500)="9e9656daf7587fddd03fd982f9bac2e7c2f94a1d0d62b348d18c10bfaf2eb264a1d8457eefe7bac361b04b6b616a58fb7e42365f201930bbf785b5058781ea4df19018a94cbed30910188031193cb49fb9620fa14b2aa2d796d37b8216972ea9b988", 0x62}, {&(0x7f0000000580)="60f54e12bd4aea17de33909ec41e68030dcde5472ab8eb1f3038dfdf41018537b369072ff552e42621da6d9973cc07a05cb54c12fcaed90cfc3d5c548291a3a9634899dfdb8e2adb18ddf7066baf0877ef64837a777f18549c87253478a5c6e07d9a11627b288a557f186d45966a70a57a864cc418015cda31d6d53ac25e6da544d8c0a0816e7ddadb8a09b1aa71ba01b367a71efe46be158bcebebe45a2cf36776abcc8522349f07d4bdb8cb3e340dd432eac76f2f88ff23696ce003967c1c974c2bf1582cb39cb3641172bd07dff9ef9053ad22ec5a7ddfc29c2617ad7f567cc135a5596bf000cae2f4319", 0xec}], 0x4, 0x0, 0x0, 0x4}}, {{&(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000740)="60f182f343601d72ae5cdec04b85ed7fb00bed9bedfa59dc3cb00f7837e505b5d319685d35ef1a733900cf2a5bd6", 0x2e}, {&(0x7f0000000780)="729d9499c26c763c46d3db71f231e9994bb43bb0aa716f0a1328547205dccc2d545d68e6d448c8ce214a596fe4e24b2367d84c0efe6860cfe15f936b9987537c5747fa8063ed400c8ab8006a97a8ddd22a93af5982b1041f4789395b1e0d7cea83df18ad3c11aca2fc43415173fe64a12415e9c431e61dca6a3fcb4b4b5e0dfc7bc13c4c0117707ad83ac50063c56a9feaebfcf5a018c26d54c9cee4403fa7acb2ece747e753788b6fb4d207d327da53adf9", 0xb2}], 0x2, &(0x7f0000005f40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r1, r0, r0, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0x140, 0x20000054}}, {{&(0x7f0000006080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000006200)=[{&(0x7f0000006100)="ccfaf989558597c56a816658c762ee2695c1fbb32eee95e22a5cb28dfb557f81679e43c76dd1afca14b522522bab4e1f09d7d33e21dca3c86b31bd8816bd37970b78e9afa4542f12c6bb6cebf89624cf1c9b7b951e06a2ddcfcf347f899cbcadbb06fa845a7d2da1f18607b4496c75ad122e9cb7b1ed57576a11e5f9a9c84fce5e8d09c96c8a098bf6698988d9f57f7569a28ad45871ccd0c9c241d1a474b3a029c27dcd5c52def14e8d323c82f667bcf12aaf052140e069710b4862087d30e29745bb6c65febfa1fce9f525a5f4782f970dd9515141006e3b12f8c30147ef8b6b7f481813dd72f70bbf", 0xea}], 0x1, &(0x7f0000006580)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x1}}, {{0x0, 0x0, &(0x7f0000008880)=[{&(0x7f0000006600)="4b98c1a1a5bd0dc96c2857d4c980f5f3d499f31d97274ccc726167fdcf1865e1", 0x20}, {&(0x7f0000006640)="76623ca0b15228c9c1438ab6fe967aef9f3eb2", 0x13}, {&(0x7f0000006680)="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", 0xfe}, {&(0x7f0000006780)="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", 0x1000}, {&(0x7f0000007780)="9b24438c43613ce8688fd304529735464c63ac4e84da481d65a0d8f0013727952229c1733fbd61b0d802cb8432db493e06c9b916858e886ab94efe0d94180110ce4deac0ed491d680011119f00c836b7e3eb40b832d6cf8e42f9c938eb964671a0dab2c8351466f03fe29cb988eba9c12a688054e103e70e8fc805710a3d20b6419a32010588bd853d26a77229087aff571b4d4ddd8bd0a0aeb529e9700901c82ad06a", 0xa3}, {&(0x7f0000007840)="508a2243994270b7afddfe733581f7d94fc92bd8c9dfada159ba8ba70bd594170b5f0ef9fc95927d7dde37b8d6315e84ab9c6bef4e751d8946ec3e3debed59a500d6b3c052ba48e74d106342f41ac933e5cf7dc0278e4a0b65294612167885dcddae4aecb66e1f807eb9deb664c2803c8d6b9ad7a62ce5c90321298fdc66f1acd30f759fad85cd5f22ee495b2bbbf69e9e4d963a2932a127b3831c52bd099c28fb30e3e498a39b66f772b20b8082781c04faca9a997444ee1a2da4caada1e947c6a6e7ef73d60a07a3134428f71fd7b75177d2262a9fc85f858e5a40cb948612d2b2c65f96d585684cca6d4c2cd4ae24c540f5e031323df7c58fd9dc74c1c73207d7593facb41ccf47745684d6ba0b0c0d45934bb31baa04d27a52829df10e32569db2f4792d318c4617a717435d9e9c0f2422311a4a082857061e730f4749d27ff907f08513c50092c3d3c79b891a2f7f246cf755c62fc648a87887fa0b63ae6129eaa137767072ac3ba8a65af1a6a76e95abd0ec140873900338a725c6efd8f335682d9f362612efdd593630f970453b6d26e62d4e5e71c6459a76dfaac6f425283b2c9747b6c939c9cea518c0ca8aef6e1e2d536698e0099396f598c3e4b4046c899e9eec0c7a3566915019327c31652c46bfe0740e329dc53d069c37dc396829799daa5c7a129e8b57135650230e7c8b01c56c2aee87781b17570d191ecc8cc552068031fa74aea87b1a94a69896c14ad12378974a6340e74f084d0bce71fc4d272f053c0754c6fde3d3d67ef4f540e666b766836a524288b1da1849e65c224c4bcaa443538327af216bc1edd319722daf31daf61cc6c9bc933da936296abaa2680639c67edea4471bad08f2e5b3788c02b481e418c92c38e2b37cef08b2077d8ea7657e918651c7bb0fd9844a9b745e25b7a3bdbf6dfe2e1b4523899f701bee2d79a07635ac822a888e90a9ddacc4a2e862bbe1521bf380dbe41d9e9ca838395bd59b73e61699e849fab71900721f9f442fcb84b60f9c5ff56eb70ade4f41daccf444add33020e62168c192d57a86ff64a3d04c842e95bbde151df3791f3e606f99690791e5f92b2798da853622c6575feb7bc52015a1527328bb7eee5f3da83944fa829fee768410462725c31fe9ce7451cfce9b8ce2203dae685d91c6a80646fc8decebb71cafd4deaec76dab9c182c7cfce13b1812018b962d881fdaf1cc6c5be5f7c5643a1f4169f7b44237af4eed1c22e4cb5059f7c9b99f17243c502b807be1b2705fe1d44f26111b8c17d72aaea9f26ea6e88c703bcb562256c9957b4fabca68be5130d2f5b6ce3eb91e9587e5833fcf3d7e54fab1829af4573ed6ae4420d92b53ff569c2636d5c4460b3de40947e9a4e6761ad28f6ec0a7f1f3a888cde465f196a5edf5952667275019bc67c0f943a31f9976ba5d01138887fba2c22cfbea8616bdf76360f6d5e87d688d5d8dc20001e89b788f20bf5cbf3a3b8f4ff6fed8883f557b33a38d5b38b0538c846719b808b43db4b48aac7e035f2b49636c1fae49e039183a3494ff8b6b0d51aaccb3277b7364d23407e1f8cc94fa70ef1fadadf755eac18d1b203cc61fe125c2f0e4f3305a064c89278f75c6263f85d67df3582938914e3dcaa038930c6422b6e3e7fe4c04b3e793ae686ff777ae6422f552ec45f1cd97aedbfcb8293cc9f644ad2aa1e72e870ec40f9eedf8a874c1fd8e1f4abdade1c570a8b97480a7d0cbd862c604f2f580383950a325dd764e88cc8c6ec57a2a383ed5e168f30b426552cd4070a2255e95d3093ab9b006986b07eae161707850a2c4fe49edaaf1344b9e8b25e7dd3da2093ed3477d957290b6a1e8322836e6188283c28ad8d85c315adad47fc1828e97dbb471a15a973988f12e5879acc78c39d423d51d4c3f547ee62aad063d6c327876f5f64f518878aaaa6dc04335bbb8616c8ffacce2672eef5a52cfdb9b72cd0cf73c35b6d69e2b265c8a5e07ea67921ed18a5dd04fb438e50f0ef9284dc1f3b51bb28cec33fec95ab56b68b370d3ea032163bc715d2fdda314c7909ef234285d04cf23440985d8042d9663a09321674c69a74f2d07532f2f57c2af19b003150e07d88f2947d199bcf8fc4c5444787552d755875f62beb1f54d7837757edd6b63b6a879a0388b49d4d7e1a1790bd861768f67c9c009f769252df2ed6e2130aef7a59c7581e3e102300afae3acfe13303df9a564091d42db7ecd9bab2f1bcc1c5d325413314a7fc950d9e2a7b8e5b3193485d14a970981e7534559ef52bc50e725af8f80d630d4c74f21a856a9f1c382f070d955ed253906e13808fa834336a353d9fcb0b929a2a2697eaa49ceb323b123882ae0c2110f4e7eb2e1f278bff21bcfd38515094e5313632f737a18d697a22dcd55e621ebbe69d6ab5f371cdaec464fd6556a9e692ac3d81303e63d4ce989121f92ea4380cfa4ba29f0864894c37c6d99f3cfdfa2ce796eb52e40a272d93ca65d44a33061dbdefddfafdf3352907d283a6a03f0cf5a356059706e8a62c3cf39fb6484765962c713cb1c8ecb1af307e985537768ad01a0dee62a810cb8dfde8fbc15452ef66489d2fbe35ca9b0f109b17532f5082efab82a069a2719f496f6559c07367b2456c22fa2a723185b0a11ae088f0c04471019535b2f3a50c334a089e9aed86e80210812edadcd3e862f658b2e4321d38297cabd83203a23ba2a4e25d79c86899185d3fc44522a0a5142bb8dd8f9cb3a5a4b973fad0b5a9f404b2bf0f3a8a26149a2d2f98edc7ab784090f1822c3a538a9646914446ca36dd7934db3ded0214d0698191e2be3de81af1af6804f5449c1e1abf5014488f770af27e24df8f6c31e93dbb4897cae568d64658e5759e930d62e2a35936848624f063d949e8bf7dc611fadfd4a27ea0e60be8b21d3081ea88dfb3267f4a92ebd22ed823f7190d4817fbbdd31f7a09644310fceede5684c3f8d008f2081ce4737a0222544e106fd9257c6dff006a23e10a5f760f9adfd15a86f076e2b9a1044202ef1bc81a116d14f15fcb1354746489e5b80712b46265f30bc508251130cd059cc52b66c5f31934c3f155e1598582e5056f0d688807aeacdd1095bd6addfec0b0fbe6a77415e2291d5bc429fdc999c5e16ef2771db80747fd33610f2f3a1e5856b7b07fa7ff278b1ca72b045a11c3ff0e7a47ae727b08f8a4befa80298c974b192a4613d7fab2f165bd0302aa8e23600b763caf7b5d30e001272a73ee3fcf7c72d2406935cad400a1c959801e1f3a0643d3c4d8c6af4f695468be386104d0d285a4a489d4065f362295c9fec91e52f7651e569efd8645fb4244d344be626e038b60a4c754b2a0b7ca168de8dff30ae7b8931a04d7e4b09ed62b1fc404a7610c97369c69af511818b01d1ce81f6b79f103b21f8a506f48d3afd179c8f1c72c755573a5f01e85c6c8e2620da554cf6697a0abd5c67e291269b7b39ce881c327f4845ece62c2488b166f128cb8a78540204661ad01980d06b26d9e5d695fa0cd3ec224b90b15b8a58e300f43e23dfa16f230b9be19328c2144b33623c6dc8c25762aa12f2a0bec337191cd0c3a546ebf37f03d560ef1579776a70a66770d7b43cd540028ebbeb5e766f49b544a1cdbf76af4c36331eb6205378b380feac454d960d3bd08a016b3b16439cdea502b2f42c8fd87541c9ec94afb444d552a03019dca02678c8b7e8cf287e48ff01bdc8957d6e9c1c99a4ce345ae2aacc9e71f54793fd82c6c53fd976286b0d10ae466734857188fe8a99a313ba0f873339c32b2574c1fdbd606a35db750df5da489430b2b6f86525284469359bf98eb6415b24942d0a9c2f023d6ddf247e625b2ad42b5b43253fa6e694293a31206d5f53669bbd7430f5229b712f521f80238b1b1ddb43aa2f6d9376d6d7baba153483465230b0fb3b76c20840c4bc0f53609278d4c5f612ad52819a731ba991092277a6708433f7023d6d4ca14e380a4c26b2454409731252c568746a3b5fde49a55aa83843b245e22a5331b3102ed11eeb63c6a0c9843e7db1b5b8b1b1fac5613245e13ecb27a6be3439b2c0741caa0a8474fffb83671a9303f06f7e8bf6cf3bf0ef3ee4b9c05caa92a2b0f5520e3e767743ce7f6496abd03acf533033cf0b6ef6f097bf94745ce0bbd09bcaff9776e36b2620caa85a9cc6a767ad39ce958f9a5a2a252fba11eb6d03b19a736e75b13d626c43408cd210b73c3c7d818977cc87305e9b744b3c24b68e0541dba5abc632f23ce14a1d3acdb051eec8a165bd8c1c97bf1b388fa2980169cc955f324449e1360ed893489a2a05f9d22aead2eb588a8d2e1a9507453f589a39adbffccc0f8231ee021fc487375d1c0e86cd71b95fe431fc474050dc60359d5519d0f49443de3ee47e87d9b2d5507d0be659762579058027d18f6320e7e88fa4567775e813e132f5ea2729bea6a9939429c739eb861ab0ece4d7afbf3c5b9692ac5adc016619f134910ba4306fa9e1c6c16616a587f2f776ef13cdfaa4e6a1c4d1be6c4912a84d9cf349b3c0043455fc99885eaf4bbab8bec750e485fac23e6f1f9509f713d7995ce7eec4387f878a9d5669a7c9575c0a01dd39881fd0937e017c56f7b1e2d998dea402a8d0adacb5199fe4ef5fba4d662bff0c6f91fccb6db259fe7cdbca81f7e0534beb469bfe279211ff94ce3dd7977769fd2876a4c735fb0f97c9f669bae5b70346f04a6a7efe80cdd6fa2ded7ce284549ddc39b82d80b87fb61f9139826f4c1a2284fb0bcec8142cf18baea977618436ae38d5ee4c13854cab168578da97f8fc968576cd39692a18712006f13659d9666f5a20c1e416e03577004438adcdf630ed4bc21202c40bfce7baba4b0b74996cd5bde9129afc127ad294e7c37356bd17b8980b78559c5a7682b931ab45ed2edabe705a7f386e07bc0ea509b9d02fb8b94ab7ff18fdb3aeedaa8bd83204c7d740a1af21e3122a3a93a877e640cf9fd88042cf34f00b63d132af26031fd9ca2f9e397705b0687d50e39f7c6543267486f6a8660c57a3331aec27930c7525ab1c100e5cd6b49fafc2067f75460ba043dab8f6d0382ee104b27c980f957e9918802c4e821500f9843f5c7382c060dfb9c3cf71d8aaea091c495ae573abaed1418a84aac51dfd759a5e745e35d490e0863a187f4963dbe71e3d701e966e0f0508b28e03dbc4ce677217e9143e2f8923245bf82bf6927edef29dada7305f2969aa143780caabf7b057dddbf17bfe998af0f2214688933a90a6e36cf0f70eec449b274c7ad97ff407faf2d1ec6acd13dd3bd756037d170312cc97cff6f92b246abc148f690af45baf8f5f09caabf1f2233859e2e5d11ecac4d9eca0a94effd837458fec4e3d731a92cf34909ef938ab6d75bd7852f97b39056417d9424ec720fbe43bd7da2e61ce961352b0f51fa7e30f81930bd446dc5e3e3c052bae49cca215a121134115a0cbade28009734af26f1678bd83d51e2fc2b51223244bd33c0ec70bb8d03e03d47557bc7547d7c03e2ca5b294d66ff0601b2408ab5d082d73ab2758f03740f6ee2a10e22ed43914ff28f5bd0bf87e4d4643cce840eee3422cac6ca778f9d565aec0fe967253cc386ae198b6c437bb7bd67ac0c583cf67a02576fa0f27a1591c76df4d15f28e83756fe8833d97bdd2f0a6b85e311364f1f35c036db6a247b0243efc1af3020ecf3b31d9f161ed02da2b1df61fba8c46c485f7fd66bda52e9fcee4b9c7d754be359011722ef55c48845ab5c9b7ec45b649d0a47e999b4f7be9ac78", 0x1000}, {&(0x7f0000008840)="21257e4b07974fb39e868fda", 0xc}], 0x7, &(0x7f0000008a80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x58, 0x4041}}, {{&(0x7f0000008b00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000008e80)=[{&(0x7f0000008b80)="e4cf92994176e95a7a934e3fc70b45b370a4a20c652f76ead17f4fb8dd47f057c778e73b22233b6efdd8794c141e39e2043b3005fc3427a7eabdf75dfd8a861025f18575f136cb9a9997bf0e2b751b27a3207c7f27c9afcd3d43a21defb7a1a93f2e649b8305986ecc8622cd4efd967dc2c21e81ee58deecb73308745fab4444b5437c560d5542d721034ebdc4aabd322116e381ba71f153f801b08b803fdc181faa707254634307918435f6efe24ecba82dc075e504c9a707d9c1eec9751978fca26dc1e1d2da", 0xc7}, {&(0x7f0000008c80)="8f997b620fb3296822d641f7be69ef7614d4fd56e0381167d11247be25dc8f981af28afa229ebc83c745e56bce97e90fa4e33cd111bc74a0f14eb6101552fca845d1b1afccd311d73ea811fef9be78aa560452eb3091", 0x56}, {&(0x7f0000008d00)="69171e00b5eea5f5a675538fc81806a58ceeb7f9ab5f5ef49d54c07c420f78e7575eec6b679dd8e707402c5fbf24251a7b32fd2e49e8dfdb8bf76b63ff69cfcce827a0c28432ec04a1b4610b6ee2a910fc52473d54eaa300e393d2ccfd1ee739199015f938082d12568a513ac8ba252c0093a51315c7c8bcadeed70eaf257e1a50385cb8a27737feca7f824eab53518361d341661e32ae7a54b17b2813509f2a27328a336975eb9388c61d334f090e159bb7", 0xb2}, {&(0x7f0000008dc0)="cb56204785c1195883cde7bb729173a815682abce11f7c5f8419ff21c6e544b5b6d6f89c378bf75e6d0e2f722ca7a0898d12ff2d5c0c7fb451fe3c343cd873f9c702547450c6dffb4a7ba378ee28f4f4994743950b48afd0429d0f35b719", 0x5e}, {&(0x7f0000008e40)='I', 0x1}], 0x5, &(0x7f0000009140)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c}}], 0x148}}, {{0x0, 0x0, &(0x7f00000097c0)=[{&(0x7f00000092c0)="562a158618d20bc09a6ee98214a9720c3ef58d435cfe68c70a6b22cc3f0b2c6648057801760502e26e87d716ad0ac7f0c64fdb80160c4f8110918c5eb4aeefc06ab30f79bbb530306cebe9b151edeaf210900353a3c2e25704b47a04daa7ddeeb9a551dd", 0x64}, {&(0x7f0000009340)="012e8a01324aaf6346ee7ec792c86b34fec332947872b29acb2a3b36739dcac51d3f73525bb67617e02d47bbe0fe7845a524f4be830b529bc2c791045bedd9c2a7f6f4e33ca63d1d992a9b177d5495e6cf2a7fa5801c8b39c97ba898fc8c38b19669b4371b53c95148e2878cbf863c7f4628d12244db9871fa973aad13a95927c3cb1995d367ce6cd4dc336e2066a195017de9a8607f32bc26940b7599a83c1c42d8e85b185e45a149c524", 0xab}, {&(0x7f0000009400)="9b6463315b727f8e2900b458f052378cff000693d83678a78e3cad138dae96e6ca49f4e43d27286c0bc6ae6f11353b4514b766179ca537e84072ab333992f91066bf1538db80e1c6507a0195", 0x4c}, {&(0x7f0000009480)="fb7783dfbe5b218369a4ace0b5d4b5bd867337b5217e93e9efdb4402b60d3fa2a73be8ec80af93ef53e9a97d30f94e8be3291c3b5753cf65fbf28472626a12b6721c2817039c4bf8c8bf5fae2373193f49066b312c7be0974813909ef076116a10ce937ed027abbc3188f9285cf735e2000fdc6579d6354255b435e696abdfc9250ca8f7387b3585", 0x88}, {&(0x7f0000009540)="ddc6b3df8bc759e233a28496c1420739809dcc884509115f0adff35f1a6cb7a2b458abf12ca0b476e0e76b2f5662d6e46fcd57463f33df346e", 0x39}, {&(0x7f0000009580)="f4ac1353b2d05a1373736acd39ff9651dff4fa691e245b8dc7114443f8b64b615b41e6a7fc64284ad52323c03d5fc46354bb81a5c9d549c0aacb1c265a83215d958a385db8f722fa4287633e8e4be127608f950af4e62ed62cc28956a63df8", 0x5f}, {&(0x7f0000009600)="b7cc0a52928e55aef6bcf97e0d0d479e43a914313f730a40145a882640042052e6e5950365bdb57955732dcb7da0259fa6ad185375504f51f4089abc2dae2b46ab597e1cb709d9d545cc56b065a01d6ecc542364926ad2acc62c1cd9cb31ecb96c95622e528cdd426ab2cdecf7fe41d744e0016ecb0fcd658900d92886c13cfe60a1631cb549dcdaefe0898984737ba5a5801e5df1a77d65514be0941f87821fb31fc7f75917cc7cb3255d3f09ca3b8d1d0eeaec7d6dbdcc9b2d9853956ab8ae61cf4551937bf469a646c1e25eace18dfd0d3b08dac1f3113f659825bbddc19a5ccb6bedf2a40c46307f58b5f6a0ecbf8aedb5a9", 0xf4}, {&(0x7f0000009700)="42886ad2668259cfefcb431e8294c5bcf70c7d3ae36420014cbb653b1c87cdd369665dd3952345f58811eedd4dc4388370002a9264a722ca71cde77a4ce9eeb92cfd343288ec0009ca4c8763ed0933d7c389aa291850179e068aae0f8b5c5ab014be314d054355f407174a841db21e4efcc801836fa8312cde3edff7cd4008fff96a82b56a38f0", 0x87}], 0x8, 0x0, 0x0, 0x80}}, {{&(0x7f0000009840)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000009a40)=[{&(0x7f00000098c0)="b13540a5049ecedd1692d3a88c42b7c4b6c961dc36549ab672d6233dd925ab5ed8748f7459c7fad59ecb093416afcfd01de957adc0e7e26c12d9d88405c8b025b44179199830b165e7f90662a7881f4d04541140987fcc98c23431d8eb7a9e66df15eb4d00123cbd0fbcbdcdf10fc16a69b7624eca59ea6779105cd6013a04338644c062e8f3b7c963665df0f72aa3bc98f87800762ddac3260d6e049f965aadb4c13dac03ce86de9c462c751d6a8b8013", 0xb1}, {&(0x7f0000009980)="9fd5406d92c335f660192fe722ad910c55d29500a21ab208a7d0b7af5b138bf337b02b7bc490bd5e63565128c473c98312c3d3e35d8bf681546d974e330a5e8f6dae4f4779c5d75c4ddc6b775a033464b4a80d1b4ae406f49f76c31d165152af7158c2336f80657f6eb95e908fe8b51b49cbb7c808ffb365a78bf29756d7b667b93ac869a1ae996ebe1789f857de2656", 0x90}], 0x2, &(0x7f000000ad00)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f000000ad40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000af00)=[{&(0x7f000000adc0)="d0c5e1e9b86cabec620ad2f8fc5a1be5954972bc5fe519454c12e73461c70ad209753e2d0d81e2dba0ac10e2266b59e10d38b326c3aa6fab46f17852355908d4b13efe7412c3fee2e6c0a81f431362bb4ab04b6331684bcd", 0x58}, {&(0x7f000000ae40)="009487b8481f72401c405ebb9474f6083fe43ca1dd0bfcf0f38f54fdee40109bd133c33cacdca9870a39f997a200ae8f498f9f76c3806e45ed62b4cb454cd438574776002b2abe6b95bec3dc17840a5ab650c5c94a979f0714df45138611fbf0a62ff0b6a800af504c044633a89fdb8b64690bd873579baf228894420869e59964741e785ae49a9cb58d785c1e6e63ef34cda0d8808e0f0b", 0x98}], 0x2, &(0x7f000000b240)=[@rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, 0xffffffffffffffff, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}], 0x150, 0x4020000}}], 0x9, 0x80c8) (async) r15 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_CLEAR_HALT(r15, 0x80045515, &(0x7f0000000180)={0x2}) (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SIOCGSKNS(r16, 0x894c, 0x0) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1f, 0x202812, r0, 0x7dfff000) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x8008770b, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fda={0x66646185, 0x8, 0x2, 0x19}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) executing program 5: mkdir(0x0, 0x9) sigaltstack(&(0x7f0000000000)={0x0, 0x2}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) chdir(0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000150014aa008000000000000000000000640101020000000000000000000000004e2400014e2500000a0030a011000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="bc6b6e00020000000c0015005a07350001110000"], 0x5c}, 0x1, 0x0, 0x0, 0x2843ca8725c9de81}, 0x4000) io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r1, 0x7, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB="a05bceda6e6f3d41b6b122ba2706fa58dfad8e16fe93e4e516f1e4741ac2bc8d228ae90142a5fec3f12384d1eab828b79b8bb52123e67c0472e20403e88b34ad3b1b88fedbde8ecdea53d30e3535ef", @ANYRESHEX=r3, @ANYBLOB=',nodevmap,uname=wfdno,\x00']) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x200800c, &(0x7f00000002c0)=ANY=[@ANYBLOB="66483dcb0710192579de5b4711b3691edc8841", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000001000,\x00']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r6, &(0x7f00000024c0)={0x2020}, 0xfffffffffffffe2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdb0900010000080001060300000200000180"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000f40)) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) timerfd_create(0x1, 0x80800) r1 = syz_usb_connect(0x4, 0x246, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0xa0, 0xcc, 0x7f, 0xff, 0x19d2, 0xffbe, 0xddd4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x234, 0x2, 0x2, 0x5f, 0x0, 0x6, [{{0x9, 0x4, 0x41, 0x1, 0x1, 0xff, 0xff, 0xff, 0xfc, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "19a60d51"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x97db, 0xf1}, {0x6, 0x24, 0x1a, 0xe, 0xe}, [@mdlm_detail={0x31, 0x24, 0x13, 0x8, "725d6d4d3d7b8d864f853877042098691c77d3b63120277197255c73ace8ba8e6ec780c048dac977c7394d670d"}, @obex={0x5}, @mdlm_detail={0xda, 0x24, 0x13, 0x10, "ba7b39012486ffc7619415031e8472a34f7ae50b32b7c66830d509c7434b86ca329bb7ab118aaa34c57f3d33072ab5d41dd6d72617569223885995dc62173021a76b6a8054eb4602aab76ff2dd0fcb158654891f7d13782f882f8bf49fc85447688b3e89e292cc45e3b7c7dbdaca8d2c59f826126810c8d2233a380f857c843f6b00f0cfa9edd04230f87837243f830958add64c5dc05139cdd38cb029cc9164803dc0205f8b8d7efadbca65424940d3fcfaa545eac2983ae65c36f6903fb7da571969feb10774e282395ff19f3ca94f5b805e117979"}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x7, 0x32, 0x8, 0xfff, 0x3d}, @mdlm={0x15, 0x24, 0x12, 0xe}]}, @generic={0x22, 0x4, "da107b6b41e3dc6ce103d6b5974bade93504daaca1b8f866dc4767318b26ead0"}], [{{0x9, 0x5, 0x3, 0x10, 0x40, 0x8, 0x2, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xb5, 0x101}]}}]}}, {{0x9, 0x4, 0xfa, 0xb, 0x3, 0x5a, 0x9a, 0xe3, 0x0, [@hid_hid={0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x611}}], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0x6, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xc}]}}, {{0x9, 0x5, 0x6, 0x2bf7eb3bd29a6cdf, 0x10, 0x7, 0xc7, 0x8, [@generic={0x63, 0x22, "49a1fdae5053c01d1f13f5fc401084f76bb65f31495f2a20879ae0f8f6168d3f42736778115ab4b9dfd7db9b547892f79fdf5233c969b457b14ecd67a83568b024c2bed08f7e21f3962888fd5c272d7eb3e6449a27f5b8fa26b19160fc27f06f6b"}]}}, {{0x9, 0x5, 0xf44940e05ab4d055, 0x0, 0x3ff, 0xa, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x9}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0x2, 0xeb, 0xff, 0x1}, 0x1d, &(0x7f0000000100)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x81, 0x3, 0x1, 0xf0f, 0x81, [0xc000, 0x3f00, 0xff0030]}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x300a}}, {0xbe, &(0x7f0000000700)=@string={0xbe, 0x3, "556e6ca820e31fa4c3b1279870e54137dab3a60096c2d3ca9cdaf878b32b4c9298aa035e3974208b7cdc28cf408596d51961e7effb63d7cd0f67a2aca16f0113dda3675cbe798cbb9f22d8dee501f5d03a2374c7db96adfd56d3e2452c48a8034068516a7145692e249dbc2fb838b3ceef7b700ea4ded13785a8478d50945a4de4bb3da48063da770124378d98f50f8dec7dcdc821870ba804b5dbaeb2d81bde8fdf914d755232a34465d3b19d2d8ddc8b972bc2bb67b6423bc49497"}}]}) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f00000007c0)={0x30, 0x1, 0xcb, {0xcb, 0x9, "92aa0c42ede4fc8155b81584fe1ce594a11fe92e7891bf42b6a0f663dbd19603deee83e0c5080bbd289ffbc90cd2769b3fe0d8c05d13f631a1bfeb03fdb96dd3a9f1231f287d1b64e7f1c7f89ed78abdc1892a2c7b905ea5a9cb15a1f873f2ce8d2d41b002d7c2f79cf4d69a7deafdbc0022173332939ee1ccacd578ed59d2368d508a9c4cf983faf7d0a71186d3226a2cecf42c3a51abcfdb56ecd7973c2292b77b20d03c464aba0bde44b86595f0ced657d2723a8839f76d441ef2f46d74e69135f467234242fe4e"}}, &(0x7f00000008c0)={0x0, 0x3, 0xca, @string={0xca, 0x3, "3864143bc6eed58a5ba19d0bb55e9db2ee16aaf27d683fbc472e33fe8ab8b82687c513472f8a426515e8b3c689e14061c1771c981c3d8e75e62e5724212dac78305d4eb528d5cee2c06d4937ccab967c2b18b7af199f0fefeb87ee934f9098583add3c086562da670a9fe2027095c5755113bceb5a76b2245ac160b80ed82d1eff6f3d783fbdcd694a56c0bc8906cab6d61a726277a826bd21bff4b5394906497cf392f163bf5822531c4c0b607fba610aa280b14aafa418d5d6bb7f52d60eaf2c9dd36848034f77"}}, &(0x7f0000000300)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x1, [@generic={0x1e, 0x10, 0x1, "c36cc0e781e93d3edbd3fb13f0a21e1ecc72ac485e98af46a176de"}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1e, 0x60, 0xfa, 0x7, "ea463eb6", "f5096688"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf9, 0x8, 0xff, 0x4, 0x2a, 0x2, 0x9}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000a40)={0x40, 0xa, 0x79, "ef6791c5be36b66fa2ffaad3a1b388d973fb709df9e0638e66fd326e547c43b19e33144e261f4f78e8c479d5a51826f779977a04a9826e6480991f8f9516800ce4a851d1987517dd0d074792194abb2ca1c9eaa00fd5418723b04b773a5c91f039e5ffd85fea18141b9c4c5ae115d128c763df7bbc48d46d51"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000b40)={0x20, 0x0, 0x8, {0x60, 0x2, [0x110ff]}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0xe}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "a63f"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @random="de314753dd1a"}, &(0x7f0000000d00)={0x40, 0x19, 0x2, '\x00&'}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x100}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x80}}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f00000000c0)='./file0\x00', r3, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, r3, &(0x7f0000000f00)='./file0\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) executing program 4: r0 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x102102, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x99b33000) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x18, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48040}, 0x4000) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r8, 0x29, 0x1d, 0x0, &(0x7f0000000080)=0xffffffffffffffef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r6, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) ioctl$FS_IOC_GETFSUUID(r9, 0x80111500, &(0x7f00000001c0)) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="385343ced8a47af7d176ad55869eb42a80fc7c3c11d79f3329f6e2e8df340ea59bfffb03f823f327febcfd2ac99ca2562537557cda7802b8a8fa88847be2e18e8b705653cfa331538c87a9656910c4b63bd7fe0f5366704b4ed9f898c047df984984d9fee54d4a9baea8992eb14492f424e393da60d8740c1baadd36c8493fad626d9ac5a63cf624baa936386f9e3b22d51fd8f7b595bd39067b62e567091f2852c55d34fecffd87937267a11102f564e911a60330ce9ab2a87317198216dcc029db4b7d8b2aa4594f2d2204054d7095dd35a4a29f2d3406917a359db94cfaf3eca1", 0xe2}, {&(0x7f00000039c0)="e29f82d2f1041703046cf82ff8f74934309afdd91ac8494181c911112e7b22eaef7d9689d5f347dd6ec359938dcd706f1cb7e5a1c403e6acd29abac2e79db5dd3bfbde1f3c195309118506a902482ebc22a20548b846934962fb4b522b986532b35f987bc38e559b92278cbc60ef2a73369c5d7e7b16422f84e0e31e67131031c1b9791ecbee5547dbbcc220e83df4cd7bc84f3c5a2d398fe982efc0795206b3539ab93704f8b65b6a112728f44be7791f5963e7a91002fed31e4c17081b9efccdb5bd0f2a33cc69c6928186bf6e8faa921d38621c788a4d0e415d2950382e327bfb5e7948480aab2f8d41528da2a8de0249906b8e24a300a4630e9ca2ed90a89b14f4860015b8cb2ba349c4d77a22170e2f88a0f86cfa288cb14c5a12402339770983e893874ef40bc8caffd0469d1afab82fc218ea397c380ad307e6e950c3b879420ab4046e488c466a72b77d03a1f5d1fec41fbea2697792d5e6a00712fe60d21213a77c0c9d8220125264d5fb494fa196cdc2ea617b6a206359f83461dfa111152cbbacd7046b3313294c79a97ab14f4665e11dae0ed5e41a1f75391ff62ae19619a38085c779a057115300ab0d55d46a0e67c4289c4604a0f3df0d6d5798bb3873ec875a14c15cb47eac05c614f2f37315fbb37cca8c6ea12ba1540fbec9def377417a6b2dde71df85d1c5f91dd128b268d5dd2a4e76b45e27f40f326b46f88890314e033bad4205cd8b8d41e34c77121b4ddfd462a028a5c2ef85f11af3261f4264a2b47b86cfdc6f6ccd3af932ed5d8715d341044f6206f3ffad1a209f83b495c4d9633fa2d7e9ba9ad146b875921190cc634d7b7c969049aa9591e64178a3efc936c2a6d570c1cedee93c42985dab2ddcf1bd8d67943241ce87c0eac7e52a6bc00ac7cf3ec3b3f02768a37d9787b2da2fa258a99f25f6fbc60256e476906f837e3426c093dc8e1d67a3f54298302a4e6037c9e8c3c5f283aab9335f6dee4f2e9dbd60bac4d3c001e30a81a3f4f639b48a2eb7dff4a57a1b91bd3788cd6c113f0450fb58864f8f8a6996228b87181b4da47b0a55b0cd3258d7d7794cb88b60b7608c38955f9edd5373dc8852c4aadf32a1334cd75af9590de82a890e9809873d4f1a499af521ae64307e3083382c883bbbeff0c2bce4f82da79bffb6f49166a6cf1f7f719291b59395a78b1d692fef42b968d907a2b0738ca82b7ae2cc691911a5842f781ec55b67c3cdaca015ca189c5bc35e4f5821cbd40e0123b34b1c453fb52ae5c856319302886ba1baa3f6a84355fa8600da12ca99da772b5bf6da9167de9eebe4ef0998ae78caa44cb574558e42209d9d5368c32f2479a25514ab43d1cb6cd44c08d6175759a503820003bb1219fe38cada272cb83544e923b40a23f5606133221308cec7953b37e9d814d1f25cb35ed03da06f04c3898c4d6d1d31bfcd294284f508df865983e5ce20239ac87b88287f990092bc61e033210dfd1eccb9fc470e330e770513af3e7c020c1f82f0cbe4d609964d50b9403df9622ba3cab6261cce349c69caf2a1b9d1dfa7f93c83fa6df626f0b8a9a2c813d115f2bf2090bda3864aa87dff19e90ec75ade8566f17ae7cfa1c3874aedb4e7a0c6350d7d3f103fe51e359137a249fb56a1a9a35a13f72f352b5c2593afa38c403d578c6c1cb93928d8c3cc656b212fa1ee086a5dcb2b19677b7f5243430ab0e5c459631ec505c7730e1537a11860bc3bb2c0d920c388fa3be03b17e5df1990ca672b6e7c1de0ce778d8e185420d9c281aa67e45398b90bd248090494c9eb1fad7a47984f278274f2adcbbdd7a8b8cb257d976c91f697120649e88b89408ce353bd70523885db43ed52590275c7e284281847b1a8fb71db3cb3ae2a09c24b370ce8134c23d3eb246a259820b7e6dcccc4127e784845c17bcc9c67f541a26bed715d3f5e59c8bb8fcd9403442c862b1ad77cf5246154dd94fd80a3b66629a3f7a7d1e11cd4803a15dcf15028b8c91d381fcd4f71c86c30d2fbc9176239d3a2ffefe70750727a9368c1c6e0efbb3b3ac0f6702c9946d4f5c1dcd94b4f7590e604fc0b071a10e2faa4382cd6e71510f0abc6b0ddf6bee223542095d9ea45a33c140857f8008e4aa851506d743d9f5180d333c1106fc476a3e1a8895727f3cb4c34b85b3bcec2f2839dfbdce0b87d5f6d38d521cfd6da70c420c75b70fbe2504a0edfd0c16937fecae31adc6040e42f430ee45678836b36bea51d157f1238bab10538323b3d11092e94ee458175bf44fa340f21ba06a8d732bc610b959de440732939e2443d4672884571d47ced4ec4873a0d95f708dae2f13a29cd27c0a50cb94d28d59ac1de5d9cebc80cf8a9c9156820f9b4f0630ca064101e733ea0e2f906179a4b701927ef88ff079732e155da8c73df96e144d36de7898fb27f8a92834e0cd6e8304d2a03787c0b84564b695e9fad5edb906e0c8ac9c946fcb421d5caf79072fbbe5a36ce2108735526118c8f9e92b5b1fa53148579dd7cad9207ed42ddc1118a4d7d8b7db0ccb96b56bd9315fbed23c1c59999ee0cea197b2e23fb871053fc2f85ee9cdf37382edd921114420d85c1a0a9e12cc0f805c355f4451ffebf0e760fc5f4a04b043533ab2dd333117c32b0a0168fd5ca1501dcf849163fab64a7af57b9092e2b4b24692dc86c459d0b98a6d04ed633dd848e8f5a60052ddba8daf77ee72f8eb526de8d83d09d878890e1656f8643bd5038d99f7637016b144d74090d001437f8c4cf36b794f687bec5ca2a18c3b95ee96b559b6e8c7383c1c7fed11ef53b0c8ffdb41e92f6ab10be9e2689cc0d91a1079776fcae3abd740c56477e3ff765ee469fa6ba96246ceaf302175dc16c86c666a11dd18ab75fe42f8f8d7abd016dcda7ee3ba45c9d4d422803d3313d249351813e8ca505bbcb4e7919f7f82bdcd57b94934417f0624433ec33d603d92543d1bf3457cd08c7d8b4505615dcbaa0382cd511497337939397a0d1f2d0867e896b442dacbf8bd3219e7f46358deb6fd981596810ddbcb0c676ace339c97f2e9379f34c127fda28aabd90abeb69683a86d4fdc09e6aef9a453571ea8c31700152664c5b43f30c950957388ec914a1ac984cebe4271e21ecf64666495d95c314a9eb69b525dacc547836fae7fead6e560a2be62edd2a175cdb380bfcd593c927cf1dfdca268245529bb8c90bc7fb248eecee3df35f83f45704d2dc2d4ffc6fa304055357be1af9360665f00b9d62cedb94764f65a9b5046b0d3a71a36e245b01d5dab5307ded23e630d19134dabc618a4e97cafd4911fc50242aed2677d38999e860455dd940cb11380e2b7ca5d1c1345c12f2c8a7adf319546753e30cc7d70db4bda6b28df7053f80d67462e27c1e040a071b10e618164866379a6d69f7528408c78d43828b0bdfac4e86ffdf684e6dca73b12b7aef12eb3cedca166c8b13496646cd0384f45e35ba43f480609cf665a19e6b828fef21dfc81ad46a3e692a30826361edc02068382ba2ab0df8b44fcc42d4368e1f53a3389a1642938ecffc4589e7af75bd378a1d89b6e1e6f3537af8b58543dc57aa53e2da2448ab703681674b3c271792d6baf6c3192051365dfc84dafdca238e76afefbdc52bbb35b626873a7de2a501174178efce016f748d1a960e65d7694e0fe3cef6ee70b7bea6c9f32c552e40faf84bb9c4308035a5b7cbee872e00ec186f6537fc2b1142da673e48fbc2b4109a326453fd83f6e05dcac944db5cabe157e9955381a8da479320a1b1568b45a7b6ebd3e196df51926695d328009d5ad25b72ee501398815d02b98e923f8aa709f882b7eaa08d44e0f3262c4b763b581776bb88f2cc5b15e650e71b7fd0e5cb18421ac3437e486109f72ad903b2dbcc72ca7cd12faed885e4d678e3e2463521490ef97b4df52ac12efcf609821a87a84ee0add2d052fba06e176455cd5f01e187cf63405c3912b212c012e31ab437204f35b4c3b03d29637de7f972a66f44b2f0fd5aca2826b8ac2a68a40c30b320acbfcf19731db1facad7023db4e9b40c2ffeec93627f87c0f937b3e235b5e26a488ec4ee50508ca15dcf31145acff4db86bf0612a66c9dec36aea5a943d2bf4b285dc59f9d718d6e266405b9cc9e1e918c28ce7ad0c52413ddb404f5abef4820898fb8b23bf70b8406c865f02ebb8845fa34122684265f3e15272ec4edeaa532524fb6ec9c0b52f37050a7ca34e1081ceee50e7cfa08c941bdf7636eeb2687ecf6b1305863297a18b6cb014aafe1cb3f1f4efdd65c7d7d35d7654d25e5ad56f8619c3920e5b83bc0402eba0f4070c9e78a2c433fe38d13477c010a0ecaf66bca847077f04308770e7df07cea42657d1524e06f9eecef52e8375c3136c6b47aa6d3d243a092653e684b3bf964e9951862966af75a37fdd492e0be2a7d36696ff8e887a83f763ca3cf6c6a6e344980f10981db657ee51369acf3942d2e9835ccbefe1435b5016431c9a86c64cb317d50a1f0297506178d408fde9af21f50da03f6fadb38b149c6b394ca9b5bcde8d84577618388046c00288bb9ac8030dfb6ea893113a4785e80517081f08f6d0ce8ad5942ed811b3f998f48d4ce1b700e103db4fd45cfa3cf7cb1a4895118052041b1cd94ac9c0439f909cbaa1d60d473af7e26117ac0eb267016ff92da1edcb72438fd01591ff00b86457fa03454e65bb6ab22fe01e8cb31b0e8282ecde9268d9bdc36e2c68b3a34c151d818751a55eef4414987ee5d40cd9bc7d8cd0ed414190dea9cf0e1ccbeee888fff97483203e7031cc1b17618ca2a8af97401f823804a956b507fb8ebe99baf4f55e22c7c514ffdb71259b790292f233dcc29da8d9fd408797faefc6f00dd271cdef3101071fce49efc61c043e924c9870b67e0d8a60904e733f5e66f9a31d087adcc7d7d9083ca428e062572d855f8a2865beac1da00d391704838254ae4fc6d881e269ad240cc34d5b7078c1f8dcd08b5adda87e70e2da1c9ddccc09f68f38f8f598d46c4f469623a5c4c5ed8fb457e1094100d8e8ffcf5795a24a1441185ae2c27c19f0cc75c568a4cb846bbfc5d7ab5d047fe89c764d39a070d7de2d3fbf1a520923cd54c1587d2e8131eee64aed907a419c0c937b934609785c4babe4bd09f3d1b33b9c26f054c382902b2772949d02d51587373b1eba7edf4b5fb573dd175760b06ed76b560efc0f7a92ef212becd465f17bfb7cc13dbf2c9557c18820b74285b1054544faf4d52f29d02651b906819ed75fa0614473466581a7ae7f85c68c9925e0e0f78fdcfbb9e25e5d7d4a0f4173ab2c71175d4c4696ba357ecbea5951a8918590fcd9290857dee26af16c515f483f2cc50906d24ff2d0ea3accd5de6509ffad8c112249ca5157e0a661c885a2ab45a2f9c39e0c3bde551cbd924d137bc1441ec447a85278dfe9cffc563f5301db62eabf575b69978cdd386558ba64f83ebb80d9a0418d1e0d7b04c5f859f7af639975c16fee21b7e851858e86e7a842505ed3379b6df45db5870eb2ad54a627a5bf7ebdefa6d07a657190d38bca9e9048237b32a1fd3eaa8d5bfe7ab3f6600425f32948853ec43b64b32ddef43ebd64260b406b3f8159bca50092318e05ad982fd702a613feb9f2e1eb18b8af41b27b04cf05cfe23d6f9ab7e224404e06d5d60ec12a8a47ac87d88a787c195262a8320948b01c5c8872e7bf995d27b298bce6fa828ec62894d418cf47dcc4eccf5b82604f4eeb1ee8ccee44216326d33d8c4c7284603dca846198215b0afdaeeca54d8a845de", 0x1000}, {&(0x7f0000000400)="e7e930bda7c47baa2d227dee41c0d6ebcd5fb24981fb32eb1457b8896e77294a6ea004ec60545d41542a0bd2c73b3ccef69da0771940ee14f8073dfd8bc679383e68dd5d149e667e0e9432937d2f6e303a697c9d8271d90172241967bf473585bac0ec12156bb3717931030cff17fdbadaf726b893e39ce587927e347fa90f25d457d53a968bc94b90ef022aecbfe759ad208e0bc86ee98097f4b6b7329a678b23c831d028b5d4c5497808bf640ee9cac3ed607a7982d656e36966da885e046a897431d579d453", 0xc7}, {&(0x7f0000000040)="6e317af83f09e4", 0x7}, {&(0x7f00000029c0)="8ee4ae2308b69e0e46462053651a8fe59980da529993c33a33638d5c738d69b590358dda2f66a505f204d0a81c5626bf7784a5f9711a456a90afbe4b9da0c384b4752034f1f8d00609509bbcd1583758d68b8d810641d8cd77c7ff33a5336ee2892bf04ad2214bbc1095d752eb7b72628dbf1d7da46031b835f9e5ede843e92d3fd62344ea034d189b74c3cf69bc5a969393ee8962a44fc37776548f7871bbe164368a63fe26c02ed7bc010d159a091babfd467fb258825151bc47e77efe31e026fbf210c21dc1d25fffeda21d209baef6e3aa7313fbcc71deb551d36b55200e4ccd8d0582dc315c3c8ed8230e6d4da83790fd596679bbad94518bf218d5ea91a49f35b64ee315e442b780c4dcd2359e5e181b3af2fb2aa502186c85f48da4d76eb25605b2c4cd1b0e1215d82ddaf2299b6bdf7bd41d39f76dfcf5055b9978ff353a8cbfafe75851b63e078a42cf36d715b2efa17e09b799e3553f01c12782649d7dcae038fa23c344ecbec280d594170c6563def838a2b783dd53b4982bde6d55c5a3e5f2d8ede801db6f5db273eb205ab5d9064130514f6db53f841d951b71461b7c11c4b60f3cee0833a227b0ac950c7e278facf5716a5f371595dde4ebf47441cf8eb60433a36c67f93aecbe02b9fa260eee7ee3600f0daa2cdbac1f49fc5c3c0fda6d3f227fc379b41d97c0c9cbfdb9c73520626ee64bcd359944225109530ff1dea7dd4a29a444c7a1646b43cb086e55b222306bddd7ec001ca5469a683441df8bde7b5613e20692ec7ec2c90d8ed3abe81d6296cd7d4688fe76222636813c2320ed82e4ee83b619f11fa4780ec1af3fcb583369c409f720b02d8edec5bbc4d6f8571d17fddf04a8a51c500c1ce577cf6373fb355727d148314fe98b254c9a3f93459e3d94bb53866f0abeeb55f1fabe14ff38427e97bf270cfe75f7a0957beacafe11375a9f097211dc54eef2fdd39c82529c838703ed3cd9d5969236c1fdc9f9b1f7b1810036890111504779b391be74efe7bd689c5154e17ed5eb41901d6bf8f1ccfcfb83d079969806b5dd904bc6717fbc039af617092d8f52a12d02881cc65be19045a24cdb4a344d3dfd079a8fa437292e9ce6ec2c459f964b69c7fa7e18d0e403cbdcc58f1d3c40f5904cdfb5f286abed35c934d9fd419ed015db1bd82dc54fbfd25c5569966cc3ca5ec67f968a9aa82f78400fa932c609361caef6658dae6d18ac7c89bbfc82632d3cddd6fec8f382c219164b8a9d32c0287bcf3b7d8228401643693daa760b421327912c1514b07e95ab91b159e20982be20907dba6dfb5889f9bc9f4969db354d0c52851c68d3b5aa1bb0df0a33385fb98b70c7b3d57c7660c773c1afbcaf6aad9f9c24dbc13153af355f53eb222cefbd9c3f5676b14cdccfbe440cae075469f646f76923ac29431b6ab1c354962cb378fbf80c5d8a278ff8f1a22aba31dd3ce8aeac2917c9bbcd4cef7db8e2b82f2041b13ed62845a96bcd9b04df261803a1504690d5e9fdfc30f3117509a03b3c863d52cd5cba2231a92bb1ae7e5170be0b6acecea251f99034350aa091efadb9bdcc1e6db75d3e68e5d1d4bd07b10d9e09d53e8a04a888be1a4bef997ca560431dcc617ebd62dd444a96a420a837085ffbceb64e7a249be5be0e9489f13b219831789563b54c0396946d1961aaa2788781917fcfcf4912a0651c93f0dc5077f8b9fa09d0287d7485ebb38a1f59842783457b9e033f2b27d0b1cd8799bcf2ffa63a8ffa39dbb720606fe86b88e6c3f6e11845af97fd6b76e98f5a677e6b19ad7c4c098cc1e23422be609ebb7323d531eb1aa675cf958eb027aa17fbdedf0390c77073a9ab7523c9c16c4f4d2607b9f4097799f543fd4a172c66d369ec59c1a4eeefe3e063fbcedbcaf82c77e2efa03942f264cd9d93cd39df344422c9b8abe1c35f396c56eb68adda207ad8577bdc23fbf6bad3b8fc5b95689681b7c0e94c50a4e9739c39091c796cc2e528b5289ae2a138ae194133afe988327f5fd8f9a679a73011a9d127a7eaeaa4916aeaf388a7e4638f3e14fa40e7abc60dad290add6881bd9d3f76355df780b811991dacd9d3da25f6d8e0cff171f64705c9d6a9f6b6e8acc04ada80c25468e7f536c44433fe41b96121264ff0689ff51a791ce1c8cc789f38d52d526b67ce73881707c8d5f4e2ca585c12de4a08d8697b4f9a7d560d90a5a5163d836a0b2787728abc8e9bb2fb75100fce8737551c71a1afa11229e6e3c614d84cbaae97f4fc2518769b60160ee435db4a87a8f71ee663dd3a3785ccecbbed5cdafb1ef5c9d726e74c83e9891eab0de5966eb5237a2610f7913a340b433da8f9aae141050035328697e60250f2f42f0372230718a960d35a325664d769de8a7c75fb56e193b3e32edd2a6a648511fee04c2320371e20af31fcd9a14164b181fdf67238a8cc7c9acab5da187b7256fc28431ebd1c12cba8aa16c30d1df1a687749542ac35bc8dec25720eb255b2b6620ec5fe1ba712767b7f280065cb2fba4ec5d6735286fd0d0f7c23be5a4f4d091f07a576640bcceb0779f4573fcdaedcd329849052cff48bf39ba81ea5da530c43a85669aa3bbdf40f0c47af8d41ed8b7049ea86a797c504dd2a9564080afe2976abd6b73198274f64a3848f49dd621871f7bd7fa96658bda1d601106871e79330bdf268ab459fe0d304c65014b1fa9155b95bb9377790ca7337fe4a2e3d83dd32ecf6f4f96e6bd49f1fe0598bf13fd6d593ff40fed111d5d7b54ad28fa7c9cdac281042353516d7d6ace7890c2ec4be7e55ccb4d0fa5898f906add8fd9c381f843af95207a03f4e345ab3022bbc64e5f3353160972adef7f45ed3b0a6ae559fbfc8a8452c35673becc51f18885986c36034356ce9064ca4e16572b0a74a2fbff962bf165afd4c0abb39860127db0ceb49953c036de5c4de842525ce2b1af2a5b4b3f975024917fa55c9459ed58d8613561e2918bd1223b22bd4517aadcffa4fac9799daee478ddf7df90b5d3080aa36fea3fe411eff0caf666b6c5a842ba7bb7483d5078781cfd30c3c54581ef9168da96e405d74d2cd126b8f9361020f260aa02340920f53e9327914492831120497b67ea6a58ced6a91ec15bb406f9ad675b11f1ba7371db874b312ecd09f7c62b72a86232e38fe0c3cbe2230d0122adad2a315c382d74b2169908a41e1e441dae1192f1b3a5707d571d4cc41b6531eb194e965593979418ab25226b437880f8de01c35c3ff26bfe94a6acaef8a7d0d6b85a4ac5756a40726fbd6dd3f13f10cfbb0bcefd5f8be277ae6d470139e7c9a3208138cb4fa2080b06d899ae832eb1cc079194af6a6abbed60420c7d8f7f48844e9211b1c45c0d0899f3153d4b646dd894914830aec61ec549c5ba1b866ad7e8aca3ea419624debeb13295bc3ab2732087ae5f91427d77c0dc36fb45bf93271055a36ffd7eb9832c7dd1eb23f20a3f09a97548ba9e829d458c65c0e795133303b7a428c36d73eb33dce3571a4041ed2b3476c6f9ec50e8fda5a4bb4225541860f93751cefcf74d7dee041857244810dbc2f8bffcffaf9681595a18fd56f1e671f0ccd102314a9c3db7590b425cda792f48628e8a5570b8a1762679cf844df51dd39082c78f8343d97bff75153fcb841cbeada70602851fda0200283b63cb02a2c80ebb641dc98fe75af4188723f5be07f263e45ed4c25ff77a5cb5c4b8fe041bc8041c28f22db13fac3c93fe060517a4ca51d5788064b0d746a04a4047c00759d82acd49a65eaaef70fd6e2a2e041b969d45f7ba7874711c970384e29eec51ad8bd2ede6f1671ef76638db4523087b9845c785f1894febce4f3b16f2decf09e3f472eed66982fb7b4d6c0686ba9d2de673a1d40ce54d74a63a43aa1cb292fc58e27cb41772646dd63e6969f0d404e5813b901b67a64a242ea4970d4e77554a8175d53cb91de4ee39a8eaaeab7078122fed58b74b5af021354c88a4bf595677d08a6a6438fdd74c3ffca74546c98c0410907c02c5bb0f6417a56e12722662792146fff9df23873726730ab43649a7e8a0b45af06f199e46e6f4a7c823fc55d0d75688b977e668db0b1c9cb8094d49f6e21d8b605c1b6e1c45e648eb9ca5e6dbcfff05175ad2d0d72084b4844b7f688fc265a7281cc588c6595cb80e9811f7a74c27d611376c807f87f530b2181140b8694f10724841ad448f3962b65ab47b8cca3a67895a4d964875b1646862674ca7ae754ca38d9c8858454107879ce18285da8a5de36a31b40c35e8cfffd4cf35c38407321df694ea254a1d39af19840b254b349b9d8a113966a1f09fcaff58a66ef406be8fcb3bbb2a6a9f69d233ceb37bd9d4162c24bf46240e28a392f5013681ac5751544089d6d4f1d4b7f97aaae1ed0d57e24affbd088d521bbdb546ca473e3c29f6ece98eca1890808bf80b282029d97d955d31b9a5dc0e300ffa250e75851949d5131ef89f1a4121966c3c473267ca729042efef6f3788355b6e2b583a039a6d960b29dff2bae930acefe816820b57c1210b45e65570114d654f328ddfffa9a00c24e609bc77e9e4aaf57b06255c707d6b49746602ecf0cbdd60bc6fdc10471c0fe019bf0e6d9f260bb4b0227ea67fc9329649ec3767c932af21a5910d29131072186beeb2d0a3396da28ec120d34f56e5291f5db3e18b72e87ed2220f936b02ca9d26da0cf7b5dd179299ce528a5366e594f95e372677d695f08cd0fc99ef7ba823016233ec5e41c2b055880d9f64290b78d6b4f7bd035b3ea8cd8f9063289d6359f139e12721e9190c2cac14d8a40156a00ade7cf3b17b2f3778734a50073234d0b821eadb1886e4cf438b7", 0xd6a}], 0x5}, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000340)=""/154, 0x9a}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0xc0f85403, &(0x7f0000000040)) preadv2(r0, &(0x7f0000002f00), 0x0, 0x2, 0x9, 0x9) executing program 5: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getuid() r4 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002140)={0x0, 0x0}, &(0x7f0000002180)=0xc) fstat(r0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002300)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000002400)=0xe8) getresuid(&(0x7f0000002440), &(0x7f0000002480)=0x0, &(0x7f00000024c0)) lstat(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000025c0)={{}, {}, [{0x2, 0x1, r1}, {0x2, 0x0, r3}, {0x2, 0x3, r4}, {0x2, 0x0, r5}, {0x2, 0x4, r6}, {0x2, 0x0, r7}, {0x2, 0x1, r9}, {0x2, 0x2, r10}, {0x2, 0x2, r11}, {0x2, 0x6, 0xee01}], {}, [{0x8, 0x2, r12}], {0x10, 0x6}, {0x20, 0x2}}, 0x7c, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000002640)=[@mss={0x2, 0x6}, @window={0x3, 0x9, 0x2}, @sack_perm, @timestamp], 0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x0) read$FUSE(r0, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000046c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x4e20, 0x4, 0x4e24, 0x0, 0xa, 0x80, 0x0, 0x16, r8, r13}, {0x7fffffff, 0x401, 0x4, 0x2, 0x80000000, 0x7ff, 0x0, 0x2}, {0x0, 0x362, 0x1, 0x101}, 0x9, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d2, 0x3c}, 0x2, @in=@local, 0x3501, 0x3, 0x3, 0x6, 0x400000, 0x1}}, 0xe8) setfsgid(r2) gettid() lstat(&(0x7f00000047c0)='./file0\x00', &(0x7f0000004800)) r14 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r14, 0x11b, 0x6, &(0x7f0000004880)=0x2, 0x4) r15 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r15, &(0x7f0000007a00)=[{{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f00000048c0)=""/145, 0x91}, {&(0x7f0000004980)=""/155, 0x9b}], 0x2}, 0x626e}, {{&(0x7f0000004a80)=@alg, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004b00)=""/222, 0xde}], 0x1, &(0x7f0000004c40)=""/110, 0x6e}, 0x2}, {{&(0x7f0000004cc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004d40), 0x0, &(0x7f0000004d80)=""/50, 0x32}, 0x97e}, {{0x0, 0x0, &(0x7f0000005f80)=[{&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/242, 0xf2}, {&(0x7f0000005ec0)=""/174, 0xae}], 0x3, &(0x7f0000005fc0)=""/43, 0x2b}, 0x2}, {{&(0x7f0000006000)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000006080), 0x0, &(0x7f00000060c0)=""/242, 0xf2}, 0x5}, {{&(0x7f00000061c0)=@in6, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006240)=""/206, 0xce}, {&(0x7f0000006340)=""/42, 0x2a}, {&(0x7f0000006380)=""/38, 0x26}, {&(0x7f00000063c0)=""/198, 0xc6}, {&(0x7f00000064c0)=""/108, 0x6c}, {&(0x7f0000006540)=""/71, 0x47}], 0x6, &(0x7f0000006640)=""/21, 0x15}, 0x3}, {{&(0x7f0000006680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000007980)=[{&(0x7f0000006700)=""/21, 0x15}, {&(0x7f0000006740)=""/250, 0xfa}, {&(0x7f0000006840)=""/4096, 0x1000}, {&(0x7f0000007840)=""/37, 0x25}, {&(0x7f0000007880)=""/198, 0xc6}], 0x5}, 0x80000000}], 0x7, 0x12003, 0x0) r17 = openat$procfs(0xffffffffffffff9c, &(0x7f0000007bc0)='/proc/mdstat\x00', 0x0, 0x0) write$binfmt_register(r17, &(0x7f0000007c00)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x4, 0x3a, 'system.posix_acl_access\x00', 0x3a, '+\'\'', 0x3a, './file0', 0x3a, [0x4f, 0x43, 0x4f, 0x43, 0x46]}, 0x47) recvmmsg$unix(r16, &(0x7f0000008180)=[{{&(0x7f0000007c80)=@abs, 0x6e, &(0x7f0000007fc0)=[{&(0x7f0000007d00)=""/48, 0x30}, {&(0x7f0000007d40)=""/170, 0xaa}, {&(0x7f0000007e00)=""/68, 0x44}, {&(0x7f0000007e80)=""/54, 0x36}, {&(0x7f0000007ec0)=""/230, 0xe6}], 0x5, &(0x7f0000008040)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}], 0x1, 0x100, &(0x7f00000081c0)) ioctl$SIOCGETMIFCNT_IN6(r19, 0x89e0, &(0x7f0000008200)={0x1}) cachestat(r18, &(0x7f0000008240)={0x6, 0x4}, &(0x7f0000008280), 0x0) stat(&(0x7f00000082c0)='./file0\x00', &(0x7f0000008300)) executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)=ANY=[@ANYBLOB="6d61783d300100bcdced3228f4c2e4857cae51db28df"]) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2104008, &(0x7f0000000100)={[{@xino_off}, {@redirect_dir_off}], [{@subj_role={'subj_role', 0x3d, 'max'}}]}) executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r3, 0xff, 0x5, &(0x7f00000000c0)="0134c218", 0x68) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@ignoreqv}]}}) getresuid(&(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440)) utimensat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r3, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x14, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) executing program 34: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r3, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x14, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xbe}, 0x200, 0x2, 0xff}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) preadv2(r3, &(0x7f0000000500)=[{&(0x7f0000000000)=""/220, 0xdc}], 0x1, 0xfffffffe, 0x6, 0x15) executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000180)="66bad00466b8000066ef66bad004f866ba4200ecc4816cc29900280000c366baf80cb868bd7e8bef66bafc0ced66baf80cb8e0644b82ef66bafc0c3e0f0766ef0f785000450f01c9650f22a5410f0199fa24b11b", 0x54}], 0x1, 0xe, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xa2) ioctl$KVM_RUN(r2, 0xae80, 0x0) unshare(0x62040200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) write$binfmt_script(r5, &(0x7f0000020240), 0x10010) splice(r4, 0x0, r7, 0x0, 0x100000004, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) process_vm_readv(r9, &(0x7f0000000140)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/122, 0x7a}], 0x1, 0x0) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYBLOB='\n'], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) r11 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @free_buffer={0x40086303, r11}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/221, 0xdd, 0x1, 0x1c}, @fda={0x66646185, 0xa, 0x1, 0x8}, @fda={0x66646185, 0x7, 0x2, 0x39}}, 0x0}}], 0x0, 0x0, 0x0}) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000100)=0x9, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) fcntl$addseals(r2, 0x409, 0x5) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="1c0000001a005f0014f9f40700090400810000000001400000000000", 0x1c) pwrite64(r2, &(0x7f0000000000)="48ed", 0x2, 0x3) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x149) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x54, 0x0, &(0x7f0000000080)=[@decrefs={0x40046307, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1400}], 0x0, 0x0, 0x0}) executing program 4: ioprio_set$pid(0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) timerfd_gettime(r1, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110014a696d40030410604101010203010902240001000000020904098402a1d760010905060000005003050905", @ANYRESDEC], 0x0) write(r2, &(0x7f00000000c0)="96935c87dbf529b2157e74f863f9599bfdf7247ac1cf647b9faaa1e8c3f8f6d97d6b10d5c9bc786a1a27e37901373f48835d8f873136bdb1e6c4ef75c3d1d4b8d63450706a401b8aef1b4fb5cd8fd61e29267b1fca8db642e404e75bc80f11cfb354a27b16e3a10909156e2d6b6b3224a9542fcd4b0e1ddd845917a0e41b2e9598982956b763784d5f9d3815d2cebdf783192f121990b9f62a25a2f17a8241bfa5855791a50c56937d9688298d37f270206bced50f66dfad08b3017f8beb9f75c20e1d7ce4f995", 0xc7) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f00000000c0), 0x1000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000000)) executing program 3: r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) (async) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x4) write(r0, &(0x7f0000000980)="a9", 0x1) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000eae8c454388587650fd00", @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf251200000008000700010000000800060007000000180001801400020076657468315f746f5f62726964676500117fdddc8ff466af8e27f6c8c652004a002bfa6b2c5cf81c7fa43ba1555aa3ab11d02888395116c49cc3a15a0974ae007c8c2de3083f86e66ed1021bdfd140e3b51d8eafa93562cdd01a802ee9a9af9193f805e7051f5ae8b2fe8b72f43b9b3014fdba1d967773c3797a97d3843aa715074d2e8edc2f98444487c1a543c6201a84357c8a306d7e4db4af1d6e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x80) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) getpgrp(0x0) (async, rerun: 32) ioprio_set$pid(0x1, 0x0, 0x0) (async, rerun: 32) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3, @mcast2, 0x5}, 0x1c) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f00000000c0)='./binderfs\x00', 0x0, 0x1002000, 0x0) (async, rerun: 64) write(r3, &(0x7f0000000280)="822a0a80a7f98e91987ae497df88237d000000000096dc6ff8", 0x19) (rerun: 64) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r5, 0x0, 0x18, 0x0, &(0x7f0000000900)) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r6, 0x125f, 0x0) setsockopt(r3, 0x5, 0xfffffffc, &(0x7f0000000000), 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='environ\x00') read$FUSE(r7, 0x0, 0x0) executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='task\x00') getdents64(r2, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000100)) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x20000000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) (async) syz_open_procfs(r1, &(0x7f00000000c0)='task\x00') (async) getdents64(r2, 0x0, 0x0) (async) inotify_init1(0x0) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000100)) (async) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x20000000) (async) executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2d, 0x0, &(0x7f0000000080)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20000, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x11, r1, 0x3ee50000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) executing program 0: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x24, r3, 0x926fdb2c68a18847, 0x70bd29, 0x2, {0x6}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100040097f3c60108a343a67000fedbdf2509000000080014000d0000000500130003000000c606a473ab9ebe55938befe56745153e9b57131c2621fee743c084ba19ec79b7464eaadb5bf86f9a4b607bf69faa36c41c52d21d96c400cb1fb9df9909862967b004acc25fc230a4f15cac0f5741caa7b877af5c34ce5cca16bcd93c1f646ee420a1841b1369e3ad8b5394896a44ec2ad62377a204bac2820169581837a7e8f9df5316d38f43278e6b41b35677948138e7cf11e399aa1146c8d79daec1bb298b2d6987996c3e1fa1a5744ed41a1afcdcd7c0a251815d4059ede32d081122de5610026c3a637cb0d15bae79ef5f7e029e2b3e24b87ff7c7e3ad777ceb78aa6006e08a6bb9269f24731e"], 0x24}}, 0x8080) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x7, 0x1000000, 0x0}) executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x491, 0x0, 0x2}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer], 0x0, 0x0, 0x0}) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fda={0x66646185, 0x8, 0x2, 0x19}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) (async) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000d901000005000000ff"]) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) (async) io_setup(0x8, &(0x7f0000004200)=0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) mount$9p_unix(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x200000, &(0x7f0000000540)) (async) io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) io_pgetevents(r5, 0x7, 0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000000c0)={&(0x7f0000000080)={[0x3]}, 0x8}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000340)="240000001a005f20f109dfc64d2609e00214f9df0700dd00007f000001fe000258dbef0f", 0x24) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8001) r9 = getpgid(0x0) fcntl$setownex(r8, 0xf, &(0x7f0000000140)={0x2, r9}) fcntl$setsig(r8, 0xa, 0x1c) sendmmsg$unix(r7, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x111, 0x23, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40854) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace(0x4206, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/72, 0x48) waitid(0x2, r1, 0x0, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x1}}) r3 = fsopen(&(0x7f0000000280)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000001c0)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) fchdir(r4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f0000000f80)=""/4092, 0xffc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='ext3\x00', 0xa18404, 0x0) chdir(0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 10 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-getsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg$unix-syz_clone-close_range-ptrace-getdents-waitid-pwrite64-socket-ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-fchdir-openat$dir-getdents64-ioctl$ifreq_SIOCGIFINDEX_vcan-ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL-mount-chdir detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x111, 0x23, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40854) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace(0x4206, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/72, 0x48) waitid(0x2, r1, 0x0, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x1}}) r3 = fsopen(&(0x7f0000000280)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000001c0)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) fchdir(r4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f0000000f80)=""/4092, 0xffc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='ext3\x00', 0xa18404, 0x0) chdir(0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) program crashed: KASAN: slab-use-after-free Read in read_report_descriptor single: successfully extracted reproducer found reproducer with 12 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-openat$ppp-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-openat$ppp-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program crashed: KASAN: slab-use-after-free Read in read_report_descriptor testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program crashed: KASAN: slab-use-after-free Read in read_report_descriptor testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO program did not crash simplifying guilty program options testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash validation run: crashed=false testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program crashed: KASAN: slab-use-after-free Read in read_report_descriptor validation run: crashed=true testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash validation run: crashed=false testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program crashed: KASAN: slab-use-after-free Read in read_report_descriptor validation run: crashed=true testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash validation run: crashed=false testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash validation run: crashed=false testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program did not crash validation run: crashed=false testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ppp-ioctl$PPPIOCNEWUNIT-openat$ppp-ioctl$TUNSETOFFLOAD-ioctl$TUNSETOFFLOAD-openat$binderfs-openat$binderfs-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$BINDER_GET_NODE_DEBUG_INFO detailed listing: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe0925495204afa56655575069c5efb4543b48d6bae8c882ca46c417c5c02de9fc3297fad2d5183c252b08ee390d0da5160e8580c9b4d581cbe79bf67a13db8d3f9c4dcb31397b01e229d3de4bbe6d7cccd0e62cd1e0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) program crashed: KASAN: slab-use-after-free Read in read_report_descriptor validation run: crashed=true reproducing took 1h15m46.646445408s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in read_report_descriptor+0xbf/0x100 drivers/hid/hid-core.c:2186 Read of size 8 at addr ffff88810d26dc60 by task fido_id/906 CPU: 1 UID: 0 PID: 906 Comm: fido_id Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x10c/0x190 lib/dump_stack.c:120 print_address_description+0x71/0x220 mm/kasan/report.c:377 print_report+0x4a/0x70 mm/kasan/report.c:488 kasan_report+0x163/0x1a0 mm/kasan/report.c:601 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x299/0x2a0 mm/kasan/generic.c:189 __asan_memcpy+0x31/0x80 mm/kasan/shadow.c:105 read_report_descriptor+0xbf/0x100 drivers/hid/hid-core.c:2186 sysfs_kf_bin_read+0x1c6/0x200 fs/sysfs/file.c:97 kernfs_file_read_iter fs/kernfs/file.c:251 [inline] kernfs_fop_read_iter+0x2c7/0x520 fs/kernfs/file.c:280 new_sync_read fs/read_write.c:489 [inline] vfs_read+0x53d/0xb60 fs/read_write.c:570 ksys_read+0x141/0x250 fs/read_write.c:713 __do_sys_read fs/read_write.c:723 [inline] __se_sys_read fs/read_write.c:721 [inline] __x64_sys_read+0x7f/0x90 fs/read_write.c:721 x64_sys_call+0x2638/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:1 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fe533ea7407 Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff RSP: 002b:00007ffe9de9d0f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 00007fe534589880 RCX: 00007fe533ea7407 RDX: 0000000000001000 RSI: 00007ffe9de9d140 RDI: 0000000000000004 RBP: 000055712e28e2c0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 000055712e28d4c0 R13: 00007ffe9de9d140 R14: 0000000000000004 R15: 00005571235da4d8 Allocated by task 64: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 kasan_save_alloc_info+0x40/0x50 mm/kasan/generic.c:565 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0x96/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4347 [inline] __kmalloc_node_track_caller_noprof+0x1ad/0x440 mm/slub.c:4366 kmemdup_noprof+0x31/0x80 mm/util.c:139 kmemdup_noprof include/linux/fortify-string.h:753 [inline] hid_open_report+0x1f2/0x1110 drivers/hid/hid-core.c:1241 hid_parse include/linux/hid.h:1137 [inline] lg_probe+0x28d/0x920 drivers/hid/hid-lg.c:783 __hid_device_probe drivers/hid/hid-core.c:2702 [inline] hid_device_probe+0x2c1/0x5d0 drivers/hid/hid-core.c:2739 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x2d3/0x890 drivers/base/dd.c:657 __driver_probe_device+0x198/0x280 drivers/base/dd.c:799 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957 bus_for_each_drv+0x260/0x2f0 drivers/base/bus.c:459 __device_attach+0x2bd/0x3a0 drivers/base/dd.c:1029 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534 device_add+0x80c/0xc00 drivers/base/core.c:3692 hid_add_device+0x39b/0x560 drivers/hid/hid-core.c:2885 usbhid_probe+0xde3/0x12b0 drivers/hid/usbhid/hid-core.c:1432 usb_probe_interface+0x696/0xc00 drivers/usb/core/driver.c:399 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x2d3/0x890 drivers/base/dd.c:657 __driver_probe_device+0x198/0x280 drivers/base/dd.c:799 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957 bus_for_each_drv+0x260/0x2f0 drivers/base/bus.c:459 __device_attach+0x2bd/0x3a0 drivers/base/dd.c:1029 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534 device_add+0x80c/0xc00 drivers/base/core.c:3692 usb_set_configuration+0x1ad4/0x20b0 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x95/0x160 drivers/usb/core/generic.c:254 usb_probe_device+0x1d4/0x380 drivers/usb/core/driver.c:294 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x2d3/0x890 drivers/base/dd.c:657 __driver_probe_device+0x198/0x280 drivers/base/dd.c:799 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957 bus_for_each_drv+0x260/0x2f0 drivers/base/bus.c:459 __device_attach+0x2bd/0x3a0 drivers/base/dd.c:1029 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534 device_add+0x80c/0xc00 drivers/base/core.c:3692 usb_new_device+0x9ed/0x1590 drivers/usb/core/hub.c:2662 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x265b/0x41a0 drivers/usb/core/hub.c:5915 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x7d2/0x1020 kernel/workqueue.c:3319 worker_thread+0xc58/0x1250 kernel/workqueue.c:3400 kthread+0x2ca/0x370 kernel/kthread.c:389 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Freed by task 64: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x4a/0x60 mm/kasan/generic.c:579 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2413 [inline] slab_free mm/slub.c:4662 [inline] kfree+0x156/0x400 mm/slub.c:4813 hid_close_report+0x628/0x6f0 drivers/hid/hid-core.c:688 __hid_device_probe drivers/hid/hid-core.c:2719 [inline] hid_device_probe+0x523/0x5d0 drivers/hid/hid-core.c:2739 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x2d3/0x890 drivers/base/dd.c:657 __driver_probe_device+0x198/0x280 drivers/base/dd.c:799 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957 bus_for_each_drv+0x260/0x2f0 drivers/base/bus.c:459 __device_attach+0x2bd/0x3a0 drivers/base/dd.c:1029 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534 device_add+0x80c/0xc00 drivers/base/core.c:3692 hid_add_device+0x39b/0x560 drivers/hid/hid-core.c:2885 usbhid_probe+0xde3/0x12b0 drivers/hid/usbhid/hid-core.c:1432 usb_probe_interface+0x696/0xc00 drivers/usb/core/driver.c:399 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x2d3/0x890 drivers/base/dd.c:657 __driver_probe_device+0x198/0x280 drivers/base/dd.c:799 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957 bus_for_each_drv+0x260/0x2f0 drivers/base/bus.c:459 __device_attach+0x2bd/0x3a0 drivers/base/dd.c:1029 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534 device_add+0x80c/0xc00 drivers/base/core.c:3692 usb_set_configuration+0x1ad4/0x20b0 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x95/0x160 drivers/usb/core/generic.c:254 usb_probe_device+0x1d4/0x380 drivers/usb/core/driver.c:294 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x2d3/0x890 drivers/base/dd.c:657 __driver_probe_device+0x198/0x280 drivers/base/dd.c:799 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957 bus_for_each_drv+0x260/0x2f0 drivers/base/bus.c:459 __device_attach+0x2bd/0x3a0 drivers/base/dd.c:1029 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534 device_add+0x80c/0xc00 drivers/base/core.c:3692 usb_new_device+0x9ed/0x1590 drivers/usb/core/hub.c:2662 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x265b/0x41a0 drivers/usb/core/hub.c:5915 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x7d2/0x1020 kernel/workqueue.c:3319 worker_thread+0xc58/0x1250 kernel/workqueue.c:3400 kthread+0x2ca/0x370 kernel/kthread.c:389 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 The buggy address belongs to the object at ffff88810d26dc60 which belongs to the cache kmalloc-8 of size 8 The buggy address is located 0 bytes inside of freed 8-byte region [ffff88810d26dc60, ffff88810d26dc68) The buggy address belongs to the physical page: page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d26d flags: 0x4000000000000000(zone=1) page_type: f5(slab) raw: 4000000000000000 ffff888100041500 ffffea0004279780 dead000000000002 raw: 0000000000000000 0000000000800080 00000001f5000000 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2275503103, free_ts 0 set_page_owner include/linux/page_owner.h:35 [inline] post_alloc_hook+0x3b9/0x3f0 mm/page_alloc.c:1795 prep_new_page+0x1c/0x120 mm/page_alloc.c:1803 get_page_from_freelist+0x46bb/0x4750 mm/page_alloc.c:3854 __alloc_pages_noprof+0x30d/0x6c0 mm/page_alloc.c:5186 alloc_slab_page+0x6b/0x1f0 mm/slub.c:-1 allocate_slab+0x69/0x440 mm/slub.c:2655 new_slab mm/slub.c:2709 [inline] ___slab_alloc+0x59a/0x8b0 mm/slub.c:3897 __slab_alloc mm/slub.c:3987 [inline] __slab_alloc_node mm/slub.c:4040 [inline] slab_alloc_node mm/slub.c:4201 [inline] __do_kmalloc_node mm/slub.c:4346 [inline] __kmalloc_noprof+0x243/0x450 mm/slub.c:4359 kmalloc_noprof include/linux/slab.h:885 [inline] kzalloc_noprof include/linux/slab.h:1017 [inline] acpi_ns_internalize_name+0x2cf/0x470 drivers/acpi/acpica/nsutils.c:331 acpi_ns_get_node_unlocked drivers/acpi/acpica/nsutils.c:666 [inline] acpi_ns_get_node+0x1a4/0x350 drivers/acpi/acpica/nsutils.c:726 acpi_ns_evaluate+0x36b/0xa50 drivers/acpi/acpica/nseval.c:62 acpi_ut_evaluate_object+0x153/0x5a0 drivers/acpi/acpica/uteval.c:60 acpi_rs_get_method_data+0x90/0x110 drivers/acpi/acpica/rsutils.c:650 acpi_walk_resources+0x14c/0x4f0 drivers/acpi/acpica/rsxface.c:616 __acpi_dev_get_resources drivers/acpi/resource.c:943 [inline] acpi_dev_get_resources+0x16f/0x210 drivers/acpi/resource.c:981 acpi_device_enumeration_by_parent drivers/acpi/scan.c:1806 [inline] acpi_init_device_object+0xade/0x15b0 drivers/acpi/scan.c:1835 page_owner free stack trace missing Memory state around the buggy address: ffff88810d26db00: 06 fc fc fc fa fc fc fc fa fc fc fc 00 fc fc fc ffff88810d26db80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc >ffff88810d26dc00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc ^ ffff88810d26dc80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc ffff88810d26dd00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in read_report_descriptor+0xbf/0x100 drivers/hid/hid-core.c:2186 Read of size 8 at addr ffff88810d26dc60 by task fido_id/906 CPU: 1 UID: 0 PID: 906 Comm: fido_id Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x10c/0x190 lib/dump_stack.c:120 print_address_description+0x71/0x220 mm/kasan/report.c:377 print_report+0x4a/0x70 mm/kasan/report.c:488 kasan_report+0x163/0x1a0 mm/kasan/report.c:601 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x299/0x2a0 mm/kasan/generic.c:189 __asan_memcpy+0x31/0x80 mm/kasan/shadow.c:105 read_report_descriptor+0xbf/0x100 drivers/hid/hid-core.c:2186 sysfs_kf_bin_read+0x1c6/0x200 fs/sysfs/file.c:97 kernfs_file_read_iter fs/kernfs/file.c:251 [inline] kernfs_fop_read_iter+0x2c7/0x520 fs/kernfs/file.c:280 new_sync_read fs/read_write.c:489 [inline] vfs_read+0x53d/0xb60 fs/read_write.c:570 ksys_read+0x141/0x250 fs/read_write.c:713 __do_sys_read fs/read_write.c:723 [inline] __se_sys_read fs/read_write.c:721 [inline] __x64_sys_read+0x7f/0x90 fs/read_write.c:721 x64_sys_call+0x2638/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:1 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fe533ea7407 Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff RSP: 002b:00007ffe9de9d0f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 00007fe534589880 RCX: 00007fe533ea7407 RDX: 0000000000001000 RSI: 00007ffe9de9d140 RDI: 0000000000000004 RBP: 000055712e28e2c0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 000055712e28d4c0 R13: 00007ffe9de9d140 R14: 0000000000000004 R15: 00005571235da4d8 Allocated by task 64: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 kasan_save_alloc_info+0x40/0x50 mm/kasan/generic.c:565 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0x96/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4347 [inline] __kmalloc_node_track_caller_noprof+0x1ad/0x440 mm/slub.c:4366 kmemdup_noprof+0x31/0x80 mm/util.c:139 kmemdup_noprof include/linux/fortify-string.h:753 [inline] hid_open_report+0x1f2/0x1110 drivers/hid/hid-core.c:1241 hid_parse include/linux/hid.h:1137 [inline] lg_probe+0x28d/0x920 drivers/hid/hid-lg.c:783 __hid_device_probe drivers/hid/hid-core.c:2702 [inline] hid_device_probe+0x2c1/0x5d0 drivers/hid/hid-core.c:2739 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x2d3/0x890 drivers/base/dd.c:657 __driver_probe_device+0x198/0x280 drivers/base/dd.c:799 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957 bus_for_each_drv+0x260/0x2f0 drivers/base/bus.c:459 __device_attach+0x2bd/0x3a0 drivers/base/dd.c:1029 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534 device_add+0x80c/0xc00 drivers/base/core.c:3692 hid_add_device+0x39b/0x560 drivers/hid/hid-core.c:2885 usbhid_probe+0xde3/0x12b0 drivers/hid/usbhid/hid-core.c:1432 usb_probe_interface+0x696/0xc00 drivers/usb/core/driver.c:399 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x2d3/0x890 drivers/base/dd.c:657 __driver_probe_device+0x198/0x280 drivers/base/dd.c:799 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957 bus_for_each_drv+0x260/0x2f0 drivers/base/bus.c:459 __device_attach+0x2bd/0x3a0 drivers/base/dd.c:1029 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534 device_add+0x80c/0xc00 drivers/base/core.c:3692 usb_set_configuration+0x1ad4/0x20b0 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x95/0x160 drivers/usb/core/generic.c:254 usb_probe_device+0x1d4/0x380 drivers/usb/core/driver.c:294 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x2d3/0x890 drivers/base/dd.c:657 __driver_probe_device+0x198/0x280 drivers/base/dd.c:799 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957 bus_for_each_drv+0x260/0x2f0 drivers/base/bus.c:459 __device_attach+0x2bd/0x3a0 drivers/base/dd.c:1029 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534 device_add+0x80c/0xc00 drivers/base/core.c:3692 usb_new_device+0x9ed/0x1590 drivers/usb/core/hub.c:2662 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x265b/0x41a0 drivers/usb/core/hub.c:5915 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x7d2/0x1020 kernel/workqueue.c:3319 worker_thread+0xc58/0x1250 kernel/workqueue.c:3400 kthread+0x2ca/0x370 kernel/kthread.c:389 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Freed by task 64: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x4a/0x60 mm/kasan/generic.c:579 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2413 [inline] slab_free mm/slub.c:4662 [inline] kfree+0x156/0x400 mm/slub.c:4813 hid_close_report+0x628/0x6f0 drivers/hid/hid-core.c:688 __hid_device_probe drivers/hid/hid-core.c:2719 [inline] hid_device_probe+0x523/0x5d0 drivers/hid/hid-core.c:2739 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x2d3/0x890 drivers/base/dd.c:657 __driver_probe_device+0x198/0x280 drivers/base/dd.c:799 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957 bus_for_each_drv+0x260/0x2f0 drivers/base/bus.c:459 __device_attach+0x2bd/0x3a0 drivers/base/dd.c:1029 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534 device_add+0x80c/0xc00 drivers/base/core.c:3692 hid_add_device+0x39b/0x560 drivers/hid/hid-core.c:2885 usbhid_probe+0xde3/0x12b0 drivers/hid/usbhid/hid-core.c:1432 usb_probe_interface+0x696/0xc00 drivers/usb/core/driver.c:399 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x2d3/0x890 drivers/base/dd.c:657 __driver_probe_device+0x198/0x280 drivers/base/dd.c:799 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957 bus_for_each_drv+0x260/0x2f0 drivers/base/bus.c:459 __device_attach+0x2bd/0x3a0 drivers/base/dd.c:1029 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534 device_add+0x80c/0xc00 drivers/base/core.c:3692 usb_set_configuration+0x1ad4/0x20b0 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x95/0x160 drivers/usb/core/generic.c:254 usb_probe_device+0x1d4/0x380 drivers/usb/core/driver.c:294 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x2d3/0x890 drivers/base/dd.c:657 __driver_probe_device+0x198/0x280 drivers/base/dd.c:799 driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829 __device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957 bus_for_each_drv+0x260/0x2f0 drivers/base/bus.c:459 __device_attach+0x2bd/0x3a0 drivers/base/dd.c:1029 device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078 bus_probe_device+0x18b/0x270 drivers/base/bus.c:534 device_add+0x80c/0xc00 drivers/base/core.c:3692 usb_new_device+0x9ed/0x1590 drivers/usb/core/hub.c:2662 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x265b/0x41a0 drivers/usb/core/hub.c:5915 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x7d2/0x1020 kernel/workqueue.c:3319 worker_thread+0xc58/0x1250 kernel/workqueue.c:3400 kthread+0x2ca/0x370 kernel/kthread.c:389 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 The buggy address belongs to the object at ffff88810d26dc60 which belongs to the cache kmalloc-8 of size 8 The buggy address is located 0 bytes inside of freed 8-byte region [ffff88810d26dc60, ffff88810d26dc68) The buggy address belongs to the physical page: page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d26d flags: 0x4000000000000000(zone=1) page_type: f5(slab) raw: 4000000000000000 ffff888100041500 ffffea0004279780 dead000000000002 raw: 0000000000000000 0000000000800080 00000001f5000000 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2275503103, free_ts 0 set_page_owner include/linux/page_owner.h:35 [inline] post_alloc_hook+0x3b9/0x3f0 mm/page_alloc.c:1795 prep_new_page+0x1c/0x120 mm/page_alloc.c:1803 get_page_from_freelist+0x46bb/0x4750 mm/page_alloc.c:3854 __alloc_pages_noprof+0x30d/0x6c0 mm/page_alloc.c:5186 alloc_slab_page+0x6b/0x1f0 mm/slub.c:-1 allocate_slab+0x69/0x440 mm/slub.c:2655 new_slab mm/slub.c:2709 [inline] ___slab_alloc+0x59a/0x8b0 mm/slub.c:3897 __slab_alloc mm/slub.c:3987 [inline] __slab_alloc_node mm/slub.c:4040 [inline] slab_alloc_node mm/slub.c:4201 [inline] __do_kmalloc_node mm/slub.c:4346 [inline] __kmalloc_noprof+0x243/0x450 mm/slub.c:4359 kmalloc_noprof include/linux/slab.h:885 [inline] kzalloc_noprof include/linux/slab.h:1017 [inline] acpi_ns_internalize_name+0x2cf/0x470 drivers/acpi/acpica/nsutils.c:331 acpi_ns_get_node_unlocked drivers/acpi/acpica/nsutils.c:666 [inline] acpi_ns_get_node+0x1a4/0x350 drivers/acpi/acpica/nsutils.c:726 acpi_ns_evaluate+0x36b/0xa50 drivers/acpi/acpica/nseval.c:62 acpi_ut_evaluate_object+0x153/0x5a0 drivers/acpi/acpica/uteval.c:60 acpi_rs_get_method_data+0x90/0x110 drivers/acpi/acpica/rsutils.c:650 acpi_walk_resources+0x14c/0x4f0 drivers/acpi/acpica/rsxface.c:616 __acpi_dev_get_resources drivers/acpi/resource.c:943 [inline] acpi_dev_get_resources+0x16f/0x210 drivers/acpi/resource.c:981 acpi_device_enumeration_by_parent drivers/acpi/scan.c:1806 [inline] acpi_init_device_object+0xade/0x15b0 drivers/acpi/scan.c:1835 page_owner free stack trace missing Memory state around the buggy address: ffff88810d26db00: 06 fc fc fc fa fc fc fc fa fc fc fc 00 fc fc fc ffff88810d26db80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc >ffff88810d26dc00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc ^ ffff88810d26dc80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc ffff88810d26dd00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc ==================================================================