last executing test programs: 26.496777116s ago: executing program 1 (id=99): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000100)={@local}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0}) 26.496119016s ago: executing program 1 (id=100): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc9610e10ac69ac094b0fac70100000000000040d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d490254eab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0xee00) keyctl$chown(0x4, r1, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0xffffb000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x80010, r0, 0xf8c1f000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) r4 = syz_clone(0x808711, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f00000001c0)={0x20080522, r4}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) r5 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) r6 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_NOTIFY_RETRIEVE(r6, 0x0, 0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x8402, 0x33) write$binfmt_script(r7, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000b00)={'vcan0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r9, &(0x7f0000003500)=[{{&(0x7f0000000140)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000200)="50ea6a77c2aee0af15c8a6cdae1c0955522e4bc56454240a54a4cbadff6818ef1e3a7d4c291b63362d95aa594345c8b4c353a2daa050822076c61f3b6fb63ed4b97df6ce84ee2a0a7c7cdc399567ff8b7d286adba90e8c2f13dbfa4a76389979d4fdaca341b97babeda3fc207ef10962e3762deee017b49265d935f523cfa63dc1e3bff9860a5b3f12e4ac796e9b4c79fb8e", 0x92}, {&(0x7f0000000340)="9a6cf9e0834b42c60ae1ff6fce073eaa9c84fd4ffcd02d1133c6230cbbb5f9a8239222adeadf59ce0506ff44ac03de9a76c8e36e11eb3be8603c379a0e52378d82c77858c256fed42bcf4fb9608e4bdf5a8db8ad3e93f06e7518c11f967a76d2cf72e68dc6913589b35b15ef59f9f47ce1decebe1fb945549281945b9a7d9d77", 0x80}, {&(0x7f00000003c0)="06d3f4a3847f148f214e0ba28e88b930457f6e", 0x13}, {&(0x7f0000000440)="aba4704e6c6f9522672072c8cc53367b2c7e479d2284b577241184e0d6e53ed36b8bcce1ecbf5c59559b5765849b5c6c3146dd182f08735472e64e43ab3a33151bc05e550daeaabd37700a6b608f626505e707b7d03fdbbef6de39173ac1", 0x5e}, {&(0x7f00000004c0)="fedf384defa90cdb2edd143321e4001aa8a45439ad19929aba50af7b37cc716aaec36e94c6b58c2c5e29eaf98f348227673b72deee2db249df67c9f621c5dee7cccc14b3f2b809c491c279767655a790ff5c48357ef13de74988db2f469aa18917f6e48147b0e0f5f4a26c76f712471847f2e58cb384cbf3733d5e77aff081517cc6bd411f7066c25db8fb1c7a5ddae1dfb6ce7b8227c14330fd5fb1ffa69bf8e945d269773d8399e5518dfbded35773b93b0f22d151ed47020d526045ac6e71e557", 0xc2}, {&(0x7f00000005c0)="8bc0767fe0f6de82bb6c65bc753758ae6d3c086a63fd3332b766c2837529de945d", 0x21}, {&(0x7f0000000600)="8a1af1aba34c0539fbdba137c90df36505b5c5a4d52b19c93aaa9171905ddf6da55952aa784c8a7c7bd507d1ded41657abba4dc988e38c98d00f2fe2bca5c2ad954bfaf27066eb3fac7011d57f31381902250b77803de50add6961bf05e244afb99dbe19f06b1ba9b08b0e39fd1348d6766ff2e512a2218b8ddc41b5185e36c8cdd41ef5507ca1f9e6fd222be435dd44f07299882ad96b2403a8df34d617eea15d1db845b4f6819528ca9bdb95394a316ea43704da9a117bed08060805ee3a9cf2545e862b75eb", 0xc7}, {&(0x7f0000000700)="1e49d2cb3c4623e57d6954ec19934fb586f4a1c4d3d5c99f87e9f80783613e514fb302698f349f993b33153d00c156f3d4cf21d7500f3e57a1b8b2cbf5e3d280cb6c1d16c8a447f8ffc9094ff07588674a3759312e652dd208fb1f01a961665d2e47e8b46f644d7b3e917de4d7565d6794632a336f6ebc2f55aa36b92a69b10018a2372f8c10f141862e078b264994ba1ebb93b7a1428563b56edc8524edc1ada83d7dfcc17ec6f35fcccfb369fae1fd7bb745d84226eaa990d7e52c4ac5e0c68a5b48b2188678480ceb67bb2a65677ac3d7b810", 0xd4}], 0x8}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000880)="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", 0xfd}, {&(0x7f0000000980)="a6f354dd16a37b83bcd77e59e0df8d5a5deeff05a7562ca1bf0569a64d3d275e478cd08cece568aaf9fbcfd6470380c79058a4cd0f8073f696ac05fffcc6b41188327c42bab058cae9a53631ebe8d386f96de290a72aa8bc6e741152d564ae6abf7e5439765551e3f3a7a74b7149897129af1202fd151295630779", 0x7b}], 0x3, &(0x7f0000000a40)=[@txtime={{0x18, 0x1, 0x3d, 0x3bc6}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0xd2f4}}, @mark={{0x14, 0x1, 0x24, 0xffff045c}}], 0xa8}}, {{&(0x7f0000000b40)=@can={0x1d, r8}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="59ed623b1dab420d86123590a3e4811c1b2885f1e2f1d404821d2889c0e3d2f61cef5ef84c56fb4e4d4162e4d7a42643b48e03f89e339f22a82a9acb673f5690c6c5a91f2b072e758ff98917b50ac391344436986c809da24122e6b4aab5bfb5a905c0b23a5a3db70b253548cc924b7b5f114d522e6e17cae75eecf42611e1efbc90c94df89ef144e56e6e5d3eac14b5698df5ceef59e5048df29b8aae7760619dd75176b14de316f55401118c6f", 0xae}, {&(0x7f0000000c80)="21945376c4656d21cb0a57648e0d73d5640e3b170cecc946a3c232cdc5435e2b5269a0f9814ea942c7", 0x29}, {&(0x7f0000000cc0)="536d298aef51018c8933e5b2f2722411bc91fa1df2b3cfe7ceaf", 0x1a}], 0x3, &(0x7f0000000d40)=[@txtime={{0x18, 0x1, 0x3d, 0xb464}}], 0x18}}, {{&(0x7f0000000d80)=@isdn={0x22, 0xda, 0x9, 0x6e, 0x7f}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000e00)="04300e5157f4e15c467eb93b5839f81b09bc50cc638c50a47ed62b15aa549af8452ea9fe8bae763a6e690a58f45d8288c47dec4c057069526f1c114f50d83dba8a5cc2e52bfdf5295e2e11d910f1edf58284060f2112686fc60443d977ce534391477286a2c198", 0x67}, {&(0x7f0000002180)="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", 0xffffffffffffff2a}, {&(0x7f0000000e80)="fba061376bb0430c012b5f3e632f4bd3784f190de0e92c883e89d43a9f2991620e703b0d4ca10aed896628748b4d7c12d8e81fc14a00fc74a13da45f6ee4d775cc315ec66db46a9e1c94807fe65348ff2f97d7e3d1d9375552", 0x59}, {&(0x7f0000000f00)="99364cd22cb0fdece38705a240ae8fba8cd35aff5c6ef622f5d780633517c7cb7fb17ab980c43a2a9ab203a2b3913a8641c21e2494b086bcf66c67d2b2c06306bc06f8ebb2aa5965957426defbbcba9cb2644e2ca0eb9a52d30a8c8f42884fbc84aa1c19506e7e48f0bb161704420e3145993aa314f633655ead78776abc76e77c22e4628bb0ffa30ec9ac7455f4092d03cfe47f3018ab63617ca6", 0x9b}, {&(0x7f0000000fc0)="145017a5dac6b5acdbe60a7e644d994a7ec6e61b041e9b70fabf8ae1df9d654e565299e9c2e3d3c9a614f428e3af715734c181f2ca844e507ba7cb7aee87f7faf04ae309dff1d5d038df4c68e6e47af18915828ee81fa3ddda951efbbd9a4308fcc2046b3ce7bb9555b481ecb683e54edf9c691cd82b68db4892ac71ea11a8646169d6e81df515440fd335e7cd36715962047d7d9614c8c75ba7756d379afb18d403edb8112a1a3d0028afa8a99e738ad1b58504da7768e162a8b68b8eb4d27a13dc1a66c56e7e17", 0xc8}, {&(0x7f0000003180)="38820da1fb317211de405403a68e82ee42250f6f5f6cd5aa2edce5fde1d2337a1631b4dc2e4c04ecbdccafac40dc9cce9ff50be59597041c28484f7c4a4453a1fbef084fdba08eb788ff6a55140dac8241931e50e32589aa1d937c45bd40b6a3648224d295eb80c3e8ec1284d65fa3877565a79b85980a868597f6b976533e7c5a816ae5ff82e1aa799cbb6b458c97600f5e6c61738b884f7fe7e4bf041546466208bec5a24760f2503eb436d4a3359dad74f40cb9897fc6fb7ee69ba3e89534b75e7478d0d9ecb753faf5dd34", 0xcd}], 0x6}}, {{&(0x7f0000003280)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000003480)=[{&(0x7f0000003300)="46278ec95be00c542f7b97ba5735b841c1f220d201e6fefb4005256aebd1d7072765cd462fbc2ece6362359fb0756621dc74399a904e9bb82569c6b0238c97c1193ed02935f2e4d8a0a9e5ad98c9527195839ec8a0e1e9e4744034080ae5a97f5a06a6", 0x63}, {&(0x7f0000003380)="7df0c8a03149686b55e83a169d185e2e8b32919f982538d4a150d8d45dfe68985898615f146a23e5c0a77279229e631bdcece0487d68a2a84b77c284796e6d34eaba9ca5b29cda6b04c80f64dab5ba22986633f950998784405167472b9715c45df7b6df3a72a3549d8354bac39f2825ff6e0d1cf5e149b534127edce9985e815de54c407b0a71907fcd37174bb30f223f556e691abcf59644cfc6161451c2ba15d660fd2b3c5fd174954120bcacc5187a4f5c2c3e9c25931c73d716a6a1beb869e34a20a28f86c3fd3fe270f77ab71acdd633c4cb0c87cd6a7b65eb476e825d840d12876e442eb9a0608974e546966c8ce0f074", 0xf4}], 0x2, &(0x7f00000034c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}}], 0x5, 0x40000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0fd101", @ANYRES16=r10, @ANYBLOB="000225bd7000fddbdf255200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990004000000780000000400cf00"], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x10) 26.487867556s ago: executing program 1 (id=101): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380), 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x1003, 0x4) (async) write$tun(r1, 0x0, 0x76) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x68, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0}, 0x40}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000980)=""/4096, 0x0, 0x2, 0x29}, @flat=@handle={0x73682a85, 0x1100, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x4}}, &(0x7f0000000100)}}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) 26.411853887s ago: executing program 1 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 26.340792569s ago: executing program 1 (id=103): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) 26.339605879s ago: executing program 1 (id=104): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000001400)=[@increfs_done], 0x0, 0x13, 0x0}) 26.30848806s ago: executing program 32 (id=104): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000001400)=[@increfs_done], 0x0, 0x13, 0x0}) 24.329297468s ago: executing program 0 (id=132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x802, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000040)=@arm64_sve={0x6080000000150515, &(0x7f0000000000)=0x800}) r6 = openat2(r5, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x30080, 0x4, 0xc}, 0x18) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r7) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r6) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x7, 0xcd, 0x80000001, {{0x13, 0x4, 0x3, 0x8, 0x4c, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x2c, 0x24, 0x3, 0x5, [{@rand_addr=0x64010101, 0x4}, {@local, 0xd39}, {@multicast2, 0x4}, {@multicast2, 0x7fffffff}, {@remote, 0x8}]}, @noop, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4}, @noop]}}}}}) getsockname$packet(r7, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) getpeername$packet(r7, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x88, r8, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x8000) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000780), &(0x7f00000007c0)=0x4) read$FUSE(r7, &(0x7f0000000800)={0x2020}, 0x2020) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000002b40)={&(0x7f0000002a40), 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x4c, r11, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) openat$cgroup_devices(r6, &(0x7f0000002b80)='devices.allow\x00', 0x2, 0x0) fsync(r7) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x29bdfb4895f82e9a, 0x21}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/59, 0x3b, 0x1, 0x12}}, &(0x7f0000000180)={0x0, 0x4, 0x14}}, 0x400}], 0x0, 0x0, 0x0}) 24.328778498s ago: executing program 0 (id=133): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) setrlimit(0x7, &(0x7f0000000080)={0x6, 0xfff}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000bc0)={0x4, 0x0, &(0x7f0000000ac0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f"}) r2 = socket(0x10, 0x803, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000580)=[@request_death={0x400c630e, 0x2}, @increfs, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) setrlimit(0x7, &(0x7f0000000080)={0x6, 0xfff}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000bc0)={0x4, 0x0, &(0x7f0000000ac0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f"}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000580)=[@request_death={0x400c630e, 0x2}, @increfs, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) 24.327637378s ago: executing program 0 (id=134): r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, &(0x7f0000000000)="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", 0x1000, 0x2000801, &(0x7f0000001000)={0x2, 0x4e23, @loopback}, 0x10) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={0x21c000, 0xa2, 0x8}, 0x18) faccessat(r1, &(0x7f00000010c0)='./file0\x00', 0x18) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000001100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001140), r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0), r2) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0x90, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000010) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000001340)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) stat(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000001480)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x100}, 0xe) newfstatat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500), 0x1000) mknodat$loop(r6, &(0x7f0000001580)='./file0\x00', 0x800, 0x1) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f00000015c0)=0x1, &(0x7f0000001600)=0x4) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000001640)=0x2, 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/fscaps', 0x1, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f00000016c0)='\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x10) recvmsg$unix(r1, &(0x7f00000019c0)={&(0x7f0000001700), 0x6e, &(0x7f0000001840)=[{&(0x7f0000001780)=""/121, 0x79}, {&(0x7f0000001800)=""/17, 0x11}], 0x2, &(0x7f0000001880)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x20) lsetxattr$security_ima(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40), &(0x7f0000001a80)=@md5={0x1, "3985dd82fe96a8e650dd8d0aa90dbc06"}, 0x11, 0x3) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb) epoll_create1(0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000001b00)={0x0, {0x2, 0x4e20, @private=0x400}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001ac0)='gre0\x00', 0x1e3, 0x0, 0x1}) syz_usb_connect(0x5, 0x619, &(0x7f0000001b80)={{0x12, 0x1, 0x51, 0x1f, 0xb, 0xb5, 0x40, 0x413c, 0x81b6, 0x87af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x607, 0x1, 0xb4, 0x0, 0x50, 0x1, [{{0x9, 0x4, 0xd9, 0x6, 0x10, 0xfe, 0x95, 0x6a, 0x6, [], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x9c, 0x9, 0x0, [@generic={0x9f, 0x10, "f15eae074988a17d0a2bedf43718b90d92a9c03738a4a8767e4f7517bb4b74c259513d7fc5826f1e53d22406f3cc79e598d9a119f97c3fa285107f53f79b3856687f73223f97c1c64f85584e3613974e9933708082164fe76040115f6ef8194d8dd7b466600c7f03dd085701e9ac2f88eeebd7415201c5472aadcac8e6fa62fb5221e6f6a1e488c3878292f080ef3c4e2066fb3cac93a6e882eae0314c"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x200, 0xfb, 0x8, 0xe}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x4, 0x7, 0x8}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x9, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xc, 0x1}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x6, 0x21, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2d3}, @generic={0xc8, 0x31, "7cfb5667cd93706cc42747c8abe6f7abda579228908f0ad34e2c390d2c91d3149595e54219c15e1021f8f41c4660d04e8755317a67072cea768aa479f89b137b4aa26e0be35f411fda6b1744f2c260887ad301643ff6f7463b33a7519178c6efdae8d0e970345bc3be5e819e607ac6292f23482b0172798af19bbfcf6f8a1490f829c7f1c876e75234f92baa79e5ff8acfd28c9e596c421dc2bb307659b43d55ec781941d90412f67a179c2994267065145f7749a70afb41544441e9416f7a45319d720101ad"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x6, 0x3, 0x4, [@generic={0x33, 0x2, "c4d74ae89db78a2403366e5dd10a8e9d6dabeb2593aa65100dea42247b89be6a3f0b960b30f967fe5acf902850c0c023f9"}, @generic={0xa9, 0x22, "fdcbb64130da17ac515857270163aa8d22283ea579516506869f486a3302ac4510e0a76ef92d8a9c08c95dc87fec678d61e27c1024dddc80c15f7b9697ea5d99dfe35274867f8db90c8bb8009fc78b5d3e741b4069f24aaaaa1e9e93fecf73e076bdfbfd92617ff88dcea416d159364319e7159e321a77ac9a5fa7f57360df618522f47395fa50cbe04a3ec266daa37aa40dde157d8697b8defc027c5ae19b682828860d874e78"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x8, 0x87, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x7df, 0x4, 0xd, 0x7, [@generic={0x27, 0xb, "3056920e205ccfa1823bc4f849432410c74b2175f3c576d10a0961baa79be7368999e10287"}, @generic={0xc7, 0x1, "5312bd87199210d26587973c0cdc81530a2593221fa7e5b8e88993afe388b8494aa4954aa0a70928267d8f9638f0720ce3039052dbe54699e59173dc20f223b73502c7026ca39f3be5f4cf1dfa36a7376205bf4bf58332479db2e4d480e688f2f9fe74395217b1a39ab8d3e85a34868733698c408cfe889ccf3a2cca7e6374f64e49d9495516609b62f7210aca8b7153877f00d8693d2162b9d4c52f6085a8fddba5c0625f794ed2064633c4912d3745d1d7ce1c6427d3755ec3b816affe36df21a296b2ec"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xca, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x400}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x0, 0x99, 0x40, [@generic={0x31, 0x21, "04b8a37dca97a5274e01fddcc890d32db6b315b25087ee7f74b0080a0ac78e770dda8e379d882d9304a7b33cbd1b3d"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x6}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x1, 0x0, 0x10}}, {{0x9, 0x5, 0xc, 0x10, 0x0, 0x40, 0x7, 0x0, [@generic={0x10, 0x7, "babcdc4b5da83a4f91e92c47e4d4"}, @generic={0x82, 0x54, "caae628f26d55d4bb63a11a4b9ef3cacdd84ffd556a299a07d971a3f175eb4101b97c62a8d723b28c141c52962b01d5e9d24b193c37d054947f0e17537589566dc63fda80ff9e6653cd610e453d3c2b277bdf42c1bd212b0ec019f0509a8918f4eab429b7247b41fa5bb075dd3d8bce2c31d85dced0e816199de51910625acf1"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x5, 0x8, 0x9, [@generic={0xe4, 0x7, "fe9e06d32b94b19c19af74e67c2ca9b4b82843002894af9be8694f643728bee973a434f37c98807eea18e68cf0d03a9446a42f6f85ae62bbfc194f80c9d03b5514670cb498854b35cf0803e4962fb32b9537f29066f1848f3e05de86ee22ec7725a90460d8abe49c7d75fa612f89c88a084f8834d69a894158d77e816ae32355d6a37307c073f3f5def82d0db246fbb969c1405e65f24b34e623ec2087f7bf02308dea6c9fa8451d79c237182f999279a88538879415ac563ec6540acf46c215f55a1851a4bcb0573b33fc25e1b7f47d43c36da898e945fa5b70109daa2058fc688c"}, @uac_iso={0x7, 0x25, 0x1, 0xc2, 0x8, 0x3}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0xfd, 0x0, [@generic={0x3d, 0x3, "149e1e83887e7e3f143eef78030088b25d924708048a1cef5369516b21982b2118f59e40128517be51cb49090cad59cc4f0d87cc95920bd715e413"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x1, 0x6, 0xd2}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x2, 0xd2, 0x6, [@generic={0x1f, 0x2, "672e272873ed8251f4e8796c17e3defc219f7de2843dce2751102d0301"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x1}]}}]}}]}}]}}, &(0x7f00000025c0)={0xa, &(0x7f00000021c0)={0xa, 0x6, 0x310, 0x3f, 0xc, 0xfe, 0x0, 0x3}, 0x2f, &(0x7f0000002200)={0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x9, 0x31, 0xfff9, 0x8}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x8, 0xf, 0x3, [0xff00c0, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x25, 0xc, 0x8, 0xfffd, 0x4}]}, 0x9, [{0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000002280)=@lang_id={0x4, 0x3, 0x448}}, {0x7e, &(0x7f00000022c0)=@string={0x7e, 0x3, "047694171e031838ce3196146e13e35e169cb095413456b2dae8f7fe369971e2a3652db3d5f5025ad8d83129c1177dbb2791533477c3cc227836e72975bfa4efc2103387001ed21fce69e3da9ba1ab68047028b2b91ec6107f298eae6de40baa1c3bdf9eb32bc231b5e89ca79a533d31e7e04b146487b60e9692492c"}}, {0x43, &(0x7f0000002340)=@string={0x43, 0x3, "79aa51310bcf937475ca8eeeabbbd898db53314613c89305f9d2f79c43f243947deadcbaa736e251cc1726c03ff27a894d671866e494bdcbcf305bbdb48e499b5f"}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x400a}}, {0xeb, &(0x7f0000002400)=@string={0xeb, 0x3, "63db78ae474c0a18ba10544121edfa722fff53baa9382626abc30d2a07610ab3e6408fe4e4c3b8e640efc9d17de8b4abbd2e5b04bd327d37f819d23a56078f4e54c6bcd807771dc97c956041d2bcb204c27c35c93834dbb75a29f4f2ec6d0fbc8864bbebaf138680250389276e6a3d01d7fc9028504d3a3993a9ece3213d4637eb50764fe6b39e20ba02ebce57e726836571a3e82a2daea5b0fc95b8fd9656e4fa7309cb1b784f55d934915ffa1485712ae596928cf11d5cf7c1e6163919e7e58d0361002aa11e3fb45cc37cede1e271cca7dc7716bed76e153a1aa333fcd3dff1898aaf2c71a2abf6"}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000002540)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000002580)=@lang_id={0x4, 0x3, 0x2c36}}]}) 23.751634379s ago: executing program 0 (id=140): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000240)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x0, 0x3, 0xd, 0xb9, 0xff, 0xe, 0x5, 0x204}, {0x40, 0x1, 0x4, 0x45, 0x0, 0xff, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x80, 0x4, 0xff, 0x2, 0xec, 0x70, 0x4, 0x5}], 0xffffffff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x0, 0x7, 0xd, 0xb9, 0x0, 0xe, 0xfc, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x5, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x8, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="141e00001400010300000000000000000b000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40488a0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x4, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000001c0)={0x0, 0x8, 0x4812}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000040)={0x2}) 23.751140889s ago: executing program 0 (id=141): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) socket$inet6(0xa, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xef) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0xb6) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x80002c, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}, {@mmap}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_role}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsname={'fsname', 0x3d, 'workdir'}}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000080)=""/35, 0x23}], 0x3) 23.7146862s ago: executing program 0 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x402740, 0x17b) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/90, 0x5a}], 0x1, 0x8007, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r1, &(0x7f0000007100)={0x2020}, 0x941f) 15.104711327s ago: executing program 3 (id=255): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000021c0)={{0xe, 0x7, 0x1, 0x7ff}, 'syz1\x00', 0xd7dd}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0xffffffffffffffff, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x0, 0x0, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) 15.056108048s ago: executing program 3 (id=257): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = userfaultfd(0x1) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4000}) r5 = epoll_create1(0x80000) r6 = fcntl$dupfd(r3, 0x406, r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000040)={0x10000000}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000180)=0x1b34a93f, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x407d0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x4b0000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000106, 0x0, 0x3ff000000}]}) r11 = socket(0x10, 0x802, 0x0) write(r11, &(0x7f0000000140)="1c00000018000718ab092500090007000a0700000000000600003693", 0x1c) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)={0x80002001}) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) 14.984733869s ago: executing program 3 (id=259): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0xf, 0x0, &(0x7f00000042c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r1, 0x5bc7000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4) sendmmsg$inet6(r2, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x12003, 0x0, 0x0) io_setup(0x7, &(0x7f0000000080)) io_setup(0x2262c21a, &(0x7f0000000240)=0x0) io_pgetevents(r3, 0x20000003, 0x0, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000040)={0x0, 0x400}) 14.896365231s ago: executing program 3 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x40000, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 14.89540096s ago: executing program 3 (id=264): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x200) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 14.799316833s ago: executing program 3 (id=266): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00\x000'}, @local=@item_4={0x3, 0x2, 0x0, "0500"}, @global=@item_4={0x3, 0x1, 0x6, "05986f89"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x130) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x0, 0x2c, 0x7f, {0x7f, 0xf, "66395f8f20404a39009ad871f20225b63e02637b12a7a6c51b441a1a213165ff06e592716e8f0d3bfff3887159c50a32d14caf903fc423799e3ceddb6fd292d803f2668a59ad9f5e0cbec743c37ef3a1a94e161602c2ea39b094805e21d46e4256d0a4df1d918821a3149823c55688948fa24dd52f99ab2cce00000000"}}, &(0x7f00000001c0)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "40b97702c66ddc0370c40a40a0a9aab7ffb1b154071d400a1f4060d50b52d5fe67b6889bed31ed9f62c449da4cd8084232aa877a77aec6ea90dd66be26a96233faa823d44b963fdf187064cef8606974245fb8d8418748bde31426a9b9a2ca40e94c9e1bde23db4ee9d5f2dc6240d645b1df2a1c32c196610ead76159861fc9e911941e2102f5a04e0c0e50ef0bd0413aae866802ce84b4857ce20e5139d6d23354db6be90f1ef5189bfc5ee284dc0cde3815d"}}, &(0x7f0000000280)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "d58b20ceb7f4a1b7c063dce2d031e130"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x5b, 0x3, 0x6, 0x0, 0x8}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0x8, 0x2, "5a8eb931", "ccf83cd6"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x19, 0xfa, 0x1, 0x2, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x11, 0x93, "b90a14388f2f7d30b81c607ba3e901e5dbebabb8361e1459e1678ed10324e26e43563549e4fd80a501d3602485a9487b42563c6b26f8ecde8bed08a24fd1fa97a2dc464d692fda5563f1b4151cb79b380175503c8ed8d88c27e03e46c27680033b0ba81647d2d7544d62ef9b77acb82775cae2a9dc5f1783f0a6135d7512c0399d35f05330d701ae15e26a0a522261c0e43b76"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x1, 0x2, [0xf]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0xc}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xf7}, &(0x7f0000000640)={0x40, 0xb, 0x2, "fc38"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "ed50"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x8}}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4008800) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00\x000'}, @local=@item_4={0x3, 0x2, 0x0, "0500"}, @global=@item_4={0x3, 0x1, 0x6, "05986f89"}]}}, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) (async) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x130) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f"], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x0, 0x2c, 0x7f, {0x7f, 0xf, "66395f8f20404a39009ad871f20225b63e02637b12a7a6c51b441a1a213165ff06e592716e8f0d3bfff3887159c50a32d14caf903fc423799e3ceddb6fd292d803f2668a59ad9f5e0cbec743c37ef3a1a94e161602c2ea39b094805e21d46e4256d0a4df1d918821a3149823c55688948fa24dd52f99ab2cce00000000"}}, &(0x7f00000001c0)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "40b97702c66ddc0370c40a40a0a9aab7ffb1b154071d400a1f4060d50b52d5fe67b6889bed31ed9f62c449da4cd8084232aa877a77aec6ea90dd66be26a96233faa823d44b963fdf187064cef8606974245fb8d8418748bde31426a9b9a2ca40e94c9e1bde23db4ee9d5f2dc6240d645b1df2a1c32c196610ead76159861fc9e911941e2102f5a04e0c0e50ef0bd0413aae866802ce84b4857ce20e5139d6d23354db6be90f1ef5189bfc5ee284dc0cde3815d"}}, &(0x7f0000000280)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "d58b20ceb7f4a1b7c063dce2d031e130"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x5b, 0x3, 0x6, 0x0, 0x8}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0x8, 0x2, "5a8eb931", "ccf83cd6"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x19, 0xfa, 0x1, 0x2, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x11, 0x93, "b90a14388f2f7d30b81c607ba3e901e5dbebabb8361e1459e1678ed10324e26e43563549e4fd80a501d3602485a9487b42563c6b26f8ecde8bed08a24fd1fa97a2dc464d692fda5563f1b4151cb79b380175503c8ed8d88c27e03e46c27680033b0ba81647d2d7544d62ef9b77acb82775cae2a9dc5f1783f0a6135d7512c0399d35f05330d701ae15e26a0a522261c0e43b76"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x1, 0x2, [0xf]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0xc}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xf7}, &(0x7f0000000640)={0x40, 0xb, 0x2, "fc38"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "ed50"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x8}}) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4008800) (async) readv(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 14.735039924s ago: executing program 33 (id=266): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00\x000'}, @local=@item_4={0x3, 0x2, 0x0, "0500"}, @global=@item_4={0x3, 0x1, 0x6, "05986f89"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x130) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x0, 0x2c, 0x7f, {0x7f, 0xf, "66395f8f20404a39009ad871f20225b63e02637b12a7a6c51b441a1a213165ff06e592716e8f0d3bfff3887159c50a32d14caf903fc423799e3ceddb6fd292d803f2668a59ad9f5e0cbec743c37ef3a1a94e161602c2ea39b094805e21d46e4256d0a4df1d918821a3149823c55688948fa24dd52f99ab2cce00000000"}}, &(0x7f00000001c0)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "40b97702c66ddc0370c40a40a0a9aab7ffb1b154071d400a1f4060d50b52d5fe67b6889bed31ed9f62c449da4cd8084232aa877a77aec6ea90dd66be26a96233faa823d44b963fdf187064cef8606974245fb8d8418748bde31426a9b9a2ca40e94c9e1bde23db4ee9d5f2dc6240d645b1df2a1c32c196610ead76159861fc9e911941e2102f5a04e0c0e50ef0bd0413aae866802ce84b4857ce20e5139d6d23354db6be90f1ef5189bfc5ee284dc0cde3815d"}}, &(0x7f0000000280)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "d58b20ceb7f4a1b7c063dce2d031e130"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x5b, 0x3, 0x6, 0x0, 0x8}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0x8, 0x2, "5a8eb931", "ccf83cd6"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x19, 0xfa, 0x1, 0x2, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x11, 0x93, "b90a14388f2f7d30b81c607ba3e901e5dbebabb8361e1459e1678ed10324e26e43563549e4fd80a501d3602485a9487b42563c6b26f8ecde8bed08a24fd1fa97a2dc464d692fda5563f1b4151cb79b380175503c8ed8d88c27e03e46c27680033b0ba81647d2d7544d62ef9b77acb82775cae2a9dc5f1783f0a6135d7512c0399d35f05330d701ae15e26a0a522261c0e43b76"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x1, 0x2, [0xf]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0xc}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xf7}, &(0x7f0000000640)={0x40, 0xb, 0x2, "fc38"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "ed50"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x8}}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4008800) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00\x000'}, @local=@item_4={0x3, 0x2, 0x0, "0500"}, @global=@item_4={0x3, 0x1, 0x6, "05986f89"}]}}, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) (async) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x130) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f"], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x0, 0x2c, 0x7f, {0x7f, 0xf, "66395f8f20404a39009ad871f20225b63e02637b12a7a6c51b441a1a213165ff06e592716e8f0d3bfff3887159c50a32d14caf903fc423799e3ceddb6fd292d803f2668a59ad9f5e0cbec743c37ef3a1a94e161602c2ea39b094805e21d46e4256d0a4df1d918821a3149823c55688948fa24dd52f99ab2cce00000000"}}, &(0x7f00000001c0)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "40b97702c66ddc0370c40a40a0a9aab7ffb1b154071d400a1f4060d50b52d5fe67b6889bed31ed9f62c449da4cd8084232aa877a77aec6ea90dd66be26a96233faa823d44b963fdf187064cef8606974245fb8d8418748bde31426a9b9a2ca40e94c9e1bde23db4ee9d5f2dc6240d645b1df2a1c32c196610ead76159861fc9e911941e2102f5a04e0c0e50ef0bd0413aae866802ce84b4857ce20e5139d6d23354db6be90f1ef5189bfc5ee284dc0cde3815d"}}, &(0x7f0000000280)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "d58b20ceb7f4a1b7c063dce2d031e130"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x5b, 0x3, 0x6, 0x0, 0x8}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0x8, 0x2, "5a8eb931", "ccf83cd6"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x19, 0xfa, 0x1, 0x2, 0x7}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x11, 0x93, "b90a14388f2f7d30b81c607ba3e901e5dbebabb8361e1459e1678ed10324e26e43563549e4fd80a501d3602485a9487b42563c6b26f8ecde8bed08a24fd1fa97a2dc464d692fda5563f1b4151cb79b380175503c8ed8d88c27e03e46c27680033b0ba81647d2d7544d62ef9b77acb82775cae2a9dc5f1783f0a6135d7512c0399d35f05330d701ae15e26a0a522261c0e43b76"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x1, 0x2, [0xf]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0xc}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xf7}, &(0x7f0000000640)={0x40, 0xb, 0x2, "fc38"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "ed50"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x8}}) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4008800) (async) readv(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 8.323422409s ago: executing program 34 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x402740, 0x17b) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/90, 0x5a}], 0x1, 0x8007, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r1, &(0x7f0000007100)={0x2020}, 0x941f) 2.02627229s ago: executing program 6 (id=429): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x821}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0xfc, 0x15, 0x10, 0x70bd29, 0x25dfdbfc, {0x1f}, [@nested={0x10, 0xb1, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @pid}, @nested={0x4, 0xa0}]}, @generic="781d6634e5803a2746e2f2f87ae43b91d78e04ebe0fd015df9fe18252ac823b8cfa09f358f8b6ef97f8da48b135856f15925814afffb690feb6b1d3d310aa402ab6278c0c1a65c55d14e13fb5056ec69dab6748d62679d3c6dd379592c7e3765ef757839c1b0cfb553d8ebfc398d3635d8fb7122858f5a782c11c3b1b4a872d30ad786f3e8cd5b37415ffbaf7a7359315b672dddc4dee206af435634223df142256885d102ace4d02454fb4a0fea40caacce01c53e0a07b08b59a4ff9c64617186b93d683bec724849b2a0cf2560d0857a629dc6e3f638"]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='noinode32']) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in6=@local, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000000, 0xfffffffffffffffb, 0x0, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0}) (async, rerun: 32) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000100)='./cgroup\x00', 0x21) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x290002, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000440)=0x2) 1.811849084s ago: executing program 6 (id=432): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c01000010000100000000000000000064010102000000000000000000000000200100000000000000000000000000024e24000000000000000000001f000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac060000000000000000000000000000000000006c000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000400000000008000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000100000003000000fcffffff00000000033500000a0000100000000000000000480003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000000000000000000080016"], 0x14c}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 1.736424886s ago: executing program 6 (id=433): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) getitimer(0x1, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x24400, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) (async) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f00000016c0)=[@uexit={0x0, 0x18, 0x625}, @wr_crn={0x46, 0x20, {0x8, 0x7}}, @cpuid={0x14, 0x18, {0x40, 0x2}}, @uexit={0x0, 0x18, 0x1}, @wrmsr={0x1e, 0x20, {0x893, 0x7}}, @wr_crn={0x46, 0x20, {0x4, 0xc3e}}, @cpuid={0x14, 0x18, {0x5, 0x7}}, @rdmsr={0x32, 0x18, {0xb54}}, @wrmsr={0x1e, 0x20, {0x8d7, 0x2}}, @code={0xa, 0x81, {"46f466b837018ec866baf80cb840d5ad81ef66bafc0cb89a000000efb8010000000f01d9b805000000b91b0000000f01c166baf80cb84ce9d087ef66bafc0cb80c000000efb9810a0000b800000000ba010000000f302666460f388068006566f3428591c5dbc1e6420f2fa08d4e0000"}}, @code={0xa, 0x60, {"2e40d8158bd80000660fd6b30400000066b8cf000f00d841f40f01c9b9800000c00f3235001000000f30c42271be3bb930060000b80c000000ba000000000f303ef2440f38f124f70f1cbb0d000000"}}, @code={0xa, 0x6b, {"66b813008ed00f528310fdf7e9653e66430f38819197000000f30f0966bad004b007eeb96a0a0000b82c810000ba000000000f3066baf80cb87e2e0a87ef66bafc0c66ed0fc7bf40eb00000f01b500380000660fc7b103000000"}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0xfffffffffffffff2}, @wrmsr={0x1e, 0x20, {0x619, 0x8}}, @cpuid={0x14, 0x18, {0x3, 0x17}}, @wr_crn={0x46, 0x20, {0x8, 0x9}}, @wrmsr={0x1e, 0x20, {0xa64, 0x33}}, @wrmsr={0x1e, 0x20, {0x659, 0x7fffffff}}, @uexit={0x0, 0x18, 0x1}, @rdmsr={0x32, 0x18, {0x8aa}}, @wr_crn={0x46, 0x20, {0x4, 0x3e}}, @rdmsr={0x32, 0x18, {0x330}}, @rdmsr={0x32, 0x18, {0x40a}}, @wr_crn={0x46, 0x20, {0x2, 0x9}}, @wrmsr={0x1e, 0x20, {0x332, 0xc}}, @rdmsr={0x32, 0x18, {0x97e}}, @uexit={0x0, 0x18, 0x3}], 0x3fc}) ioctl$KVM_SMI(r3, 0xaeb7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x104, r6, 0x405, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0xe8, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x20}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1b) ioctl$KVM_CAP_HYPERV_SEND_IPI(r8, 0x4068aea3, &(0x7f0000000000)) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='memory.stat\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000900)={0x8c, 0x0, &(0x7f0000000780)=[@free_buffer, @dead_binder_done, @enter_looper, @increfs_done, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x6, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/29, 0x1d, 0x0, 0xb}, @ptr={0x70742a85, 0x8001, &(0x7f0000000380)=""/28, 0x1c, 0x1, 0x37}}, &(0x7f0000000740)={0x0, 0x20, 0xfffffffffffffcfc}}}, @increfs_done={0x40106308, 0x1}], 0xb8, 0x0, &(0x7f0000000840)="4d6089cd257f268a6053ff5d8b210d057ca48a3e8075f13d10da6c623ca14f39ac896cf34aa171631e6dcd268660a91a35e9646eeb6f74720e2382ca1bffc831a1971c6fdcb0f1eb375f7b9b578dfce8d292b4e857527bc56779b4edbd676ee8614ddfd286240be47c89c01868b85cded4e099d276c1f18bbd439fef9384768eb0e26c218ddc20d0ebef183a345545b1268ee6eee98e4ccea516c70c6a5db000af54b2a047d1df8e93e70b29bf"}) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000640)={0x8}) (async) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r9, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf250300000008000400040000000800050000000000100001800c000700010000002300000008000500090000004f8e71200390faa8bfa6c655488c6486411c936fa22b626b172c08f48612a5d98b44bd8d1ee50de9a8a17fbb14b9e8e2abf1c645088088249afbe72865aa87d83c1fc94d1c78e787e5f54348c343474feb6931f7c3a655e37421aebe0699d72c52d4222109a374accb9bc9ecd2332d4c6077c19aa0e571315b8a2233c6885b6f025c9bb7b9dfa1b0a98a325b1b07c8e660d3707f47961d6d9d63ce7a1be68db7865fc29f6612b6d5bdad7c4ceaf8aa7d8f40f0d8552c4dea80ee33ed3b98e8a5708516fe08407ab56c7786fad348e903d81d5a0bcb27ff9a89e4ef81"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44005) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 892.231863ms ago: executing program 2 (id=453): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 890.127583ms ago: executing program 2 (id=454): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1e, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) setresuid(0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x4000, 0x40, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 863.865253ms ago: executing program 6 (id=457): pipe2$9p(0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x138) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r2) (async) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000006080)={'wlan1\x00'}) (async, rerun: 64) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x7fd00100}]}) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0x6}) (rerun: 32) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3]) (async, rerun: 64) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xe) (async, rerun: 64) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r5, &(0x7f00000029c0)={0x2020}, 0x2020) r6 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r6, 0x9, 0x0, &(0x7f0000000500)) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000030000008900000008000300", @ANYRES32=0x0, @ANYBLOB="10001d800c475565fda8c8f61e341bcc"], 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r8, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x891}, 0x5c) 796.663304ms ago: executing program 6 (id=459): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x8000, 0xfffffffffffff000}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1800, 0x7ff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x1898424, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@version_9p2000}, {@mmap}, {@posixacl}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '^){-)@*\''}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@obj_user={'obj_user', 0x3d, 'rw'}}, {@euid_eq={'euid', 0x3d, r3}}, {@smackfshat={'smackfshat', 0x3d, 'binder\x00'}}, {@dont_appraise}, {@uid_gt={'uid>', r4}}]}}) 796.023845ms ago: executing program 6 (id=461): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x200000000003}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000380)=[{0x6, 0xa, 0x51, 0x7fffffff}]}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000001) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x7, 0x0, 0xffffffffffffff81, 0xd544, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d8, 0x10000, 0x6, 0x1, 0x1], 0xddcd6000, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000080)=@x86={0x80, 0x4, 0x1, 0x0, 0x2009, 0x5, 0xfd, 0x7, 0x8, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0x3, 0x4, '\x00', 0x4, 0x800000000000009}) ioctl$KVM_RUN(r7, 0xae80, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000000c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x4}, 0x38) fcntl$lock(r8, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x9}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r8, 0x25, &(0x7f00000000c0)) r10 = dup2(r3, r1) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000"], 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r10, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000240)={@loopback, 0x1}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 728.657226ms ago: executing program 5 (id=465): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x4ce, 0x3, 0x9dff, 0xf, "000300eb00cbe600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x323}, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r5 = open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) r6 = dup(r5) write$FUSE_BMAP(r6, 0x0, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x367342, 0x0) readv(r7, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) 574.318008ms ago: executing program 4 (id=466): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) getrlimit(0x1d, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006ac0)={0x2020}, 0x2020) setrlimit(0x7, &(0x7f0000000080)={0x6, 0xfff}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x4, 0x0, &(0x7f0000000ac0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f"}) r2 = socket(0x10, 0x803, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000580)=[@request_death={0x400c630e, 0x2}, @increfs, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 566.779649ms ago: executing program 4 (id=467): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) read(r1, 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 516.71743ms ago: executing program 4 (id=468): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') lseek(r2, 0x10001, 0x0) futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='aio\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000005500)={0xffffffffffffffff}, 0x800) fcntl$getflags(r3, 0x408) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000000000)) 514.97793ms ago: executing program 4 (id=469): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x2, 0x4) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6c, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x2f, 0x0, &(0x7f0000000300)=0x700) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000ee0b"], 0x20}], 0x1}, 0x0) r6 = socket(0x28, 0x5, 0x0) (async) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x20008040) listen(r6, 0x3) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r8, 0xc4c03d09, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @mcast2, 0x3}, 0x1c) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r9, 0x0) 431.648711ms ago: executing program 4 (id=470): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d953f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) 417.845482ms ago: executing program 4 (id=471): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "26a56d13adf6c8f701dfefa9cdfd5019"}) socket(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 232.793075ms ago: executing program 5 (id=472): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) fallocate(r0, 0x66, 0x3, 0x6) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS2(r4, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 229.428965ms ago: executing program 5 (id=473): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)=@generic={0x1e, "0f17f24a88fb74ab784756049543bf8513db440ced8bd731905460b92344dd908e0e6cb87c9010aa6e908b13f0110401a6a0d933b11786444a4a0cd1e6fbc00cabdb64726006357ce6f942680b1ab3955ba1f40662fde79d99a7690faf46241b10f9b6f425c619fa7b0d0dff1a83043ea34dc822b7d4f23c5c622e530ca1"}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="a58217211bc4a34328a9bc1f995a37430325c2f7acaa44", 0x17}, {&(0x7f00000000c0)="ab44b758842981cec3c877a6e39c6153c41330d95dfd125abc224e70ee69fc22e6f1687a2b5dd7692c11df10b9cb66f7671594d2a38aeae19028e0dc7f8592c088a4314b373d06be35a3b85e9c83f83dd7e9e77d2fb559283db03c5964b71ff9bb9e68968554abb3bc8aa3a6001fbcfbca22a47c6b09d29700a73dfc3b6bc605d7f60e677c5e1b77a4572bc70eaf4e9b6877218dc25a64cd0d5cdd361d74403b12d98e5444f260cd3cbf9cde08ac9ddb177738405baa1e06c65b945fb959d5e2af7054f8", 0xc4}, {&(0x7f00000001c0)="085099b7904b624474f123b2228dfacad68864260b289f0c816bf500b080340c2ee15ecbd582db7b8b2cfa2aa07649c96560c2bff0834d82508901f22d898b65a498af38e4441659b741227a2bec2750dac3059cc806c665d4a2ebaf90b883a48e21b5ee9bb55f61173860d6de8b1ffaed4c0e0f878ac600cb6aabacd926f6fb3388f8d4a3d664da", 0x88}], 0x3}}], 0x1, 0x400040c0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001380)={'filter\x00', 0x0, 0x4, 0x1000, [0x8, 0x1, 0x5, 0x4, 0x10001, 0xffffffffffffff01], 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/4096}, &(0x7f0000001400)=0x78) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001600)={'vxcan1\x00', 0x0}) sendmsg$inet6(r1, &(0x7f0000001880)={&(0x7f0000001440)={0xa, 0x4e22, 0x7, @empty, 0x2}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001480)="72d4dbb5beee18a135832f3c37cd13df822a0cf00586895281b1c18f46765ae732d2b7963c8f1e856d9ca18ab3e524b426a815e154c1764c38a50504e8a9d09bdca8b832ec589c041e5d94218fee628b3648e04d53c6a0dc5c3274e2e14d16f4be80a9d505e1e8d8e08efc59db3a79815e1250c9086c031a343227", 0x7b}, {&(0x7f0000001500)="110e68d2b3cab26fbdeb0305e31c291bbe2a35a219731329861ddd7ecdd17ed0aa78aaaae0779faec65b3770e566901baf04572f54c2dbc0c7d56e4524e60a61b516d2e1e8f8ef9623b9981eaf4c3fc6ba6654779dc2b7489033312628baee253f18897b837b5bc93a87f5046909872fb448d173831ea4dee90694b14113ac6b3dd0a34dfc5d778f671ba37af259053c33c1b86e0f477bc3c60eb09d008e57ae72", 0xa1}], 0x2, &(0x7f0000001640)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}, @dstopts={{0x50, 0x29, 0x37, {0x3d, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0xb}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0x6, 0x1, [0x9]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x4}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @rthdr={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x1, 0x7, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local]}}}, @hopopts_2292={{0xa0, 0x29, 0x36, {0x2e, 0x10, '\x00', [@hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x40}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x9, 0x59, "94af1572b0a7dd7350b10bc828690b1f3d64f3f2e4b424f3f827ac4dd143e0f8aec325596caef9bb01cf657244a548724fb23bf74e029d906eb67bd9232aa09e58431465b9de7da4d1d0105e822afc693873af2b5221ff88e4"}, @jumbo, @jumbo={0xc2, 0x4, 0x6cd2}, @ra={0x5, 0x2, 0xe}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xa01f}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r2}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x32, 0x8, 0x0, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @local, @rand_addr=' \x01\x00']}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}], 0x240}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000019c0)=0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001a00)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001c00)={"673af66da7c8db0ceb4b42384d522fbf", r4, r5, {0x2, 0x8}, {0xb8b, 0x5}, 0x2, [0x100000001, 0x2f, 0x5, 0x7, 0x6, 0x100, 0x8, 0x10000, 0xd, 0x1, 0xfff, 0xfffffffffffffffd, 0x4, 0x7, 0x40, 0x100000000]}) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001d00), &(0x7f0000001d40)=0x4) accept$unix(0xffffffffffffffff, &(0x7f0000001d80)=@abs, &(0x7f0000001e00)=0x6e) unlinkat(0xffffffffffffff9c, &(0x7f0000001e40)='./file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001e80)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000001ec0)='tasks\x00', 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f00000020c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001f80)={0xf4, r8, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xd9}, @ETHTOOL_A_LINKINFO_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xfa}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r9 = open(&(0x7f0000002100)='./file0\x00', 0x440080, 0x0) getdents64(r9, &(0x7f0000002140)=""/129, 0x81) sendto$packet(0xffffffffffffffff, &(0x7f0000002200)="86a63d75da3a2e0848dfe4cd4dd7ee61abc6ae79b5792938e2842d843d021e", 0x1f, 0x40010, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000002240)={0xd92, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000016800), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r10, 0x8004af80, &(0x7f0000016840)) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000016980)={&(0x7f0000016880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000016940)={&(0x7f00000168c0)={0x80, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x6c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x52, 0x5, "06ff0001c14548c4a54a6216e414061f5a12aa79ce74ea9dd68d9ba7a110e61a7d06b21c2dae6cd6670702f82c707f7b3f8b92099bd9f09b460291c05f7b841d4ab3fb5e08f3987605bca39e474c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff0}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendto(r11, &(0x7f00000169c0)="982eedb7ddf89e7bc3093192895d61111f1228c9c1349a6ba1df17efbb2cf0e9c08512c78a60f7922a4512e656fc8758b443598dc235e54c0cd58523ff9e042f17a6bf043e40d910366bc8385d0abc52b6b42b1c7494611cb43ee560d9f6b9b375d268ecac95dc2d1d1abdc58cc7048dba717f7dccca225892c9feafc2ef8f901991e125ef2c2e74eaf47d976882606921711b362fbae10b39a15845adc8d96eacc5bb80457bd29342772a7cdbbb74d68eafc658784f97fea150f3081e7c1b5a8f8158dbb8464b019f4ca42c7129e62e4ae4095e40962db2380a06c7595066ae8892b7d33a1125d4891fbd86fa09713b5b0c8852049b35dadfaa0a93920a80e7ca1f5b59310340b82bb943328721c5e9c634bbc69fddc179f1139d3eae73b220ec9c3e8507e45368273b6471b3bf854edfec0b376ea4d8dd6edafca2a38a8d934a50dc8fd27cb51f39f89053ead909edf5a635ce9d31407d778a7615e2cb51a0ade629725d90fd7ade6229ca33620be61dc5007133a679c79f86e496aca226288339f2a03c388fe1c89ab342e9558295a6554635a63e479261d15c680fc57ab43a7b801ffba67e72a2ddf65dc68ff86bef21e37f243e7dd0ae9a306163a7fb8074bedf556d717c21eecd86af6aaffab967de8857dcba07904964f1ef8e880efa34693e1c08ba64a29cd6e1936200f17695a30fbd86573fd4416087c488f336e2bad74b14e40d370eca7bf10c25526afb6ce7690f55900b3450a1be00d6266911f4662b8f11cb305166fa650a590bb4722dfd61a6e691d07f0de54d18dfeeeff28f363c993c8b7945d9a2d07ed3c839156a2f51a0f0984d37e13521514752aaa11be35e12c73cad0387a91dff7343dd70b3d6b0eba7f7fb9f59f552e4f6234bcc6c2f8c8bd22b39a30cb16d3b9234fada6bdcc7b4d521859bb64dbeb3e1ed85993c66598475804f7efd2a0aba73cb1730686597f4b35dc333b0873dd05480426d3e580d8f14006b9aea6c60bd296735b5f2f43cab2090c90eebed7c489efa3f144a490378840b2ef285c7fb5971eef12f6c509f6ed6e9c59e44f51b8e5c3c6e9e3c5024553959ea824b6bdc6280fdcac5918030c3647c0cd85fbd840f8941acf97dc5c32256a091ab80f5cd3029bc54b3f5fec46c253f7e685b6cc2be5ac0b93d04e5d19cb80c66599fcb6b472150294bff17894135726559f0e336628953b00334c58982a3315078f12568a8720d3b70d5d7a9fdf089b69f1724e7cb732663c90cf15bb8d0fa6023dabe6606a47c722bb87867fa2fab08a87d095310c520c8452b476b99308b41be9447a0a88ceadb7b407135f7b6b5fec609733fec85c46bc51792d7f484b1d7a195da527032606760323fca41368ec80b21cf020c5f4f90b9efe49478e4af7291a99e30669e218fe669917eaab7cc9d8fc3e12f0a1feca32baaec709b15555b677b3a53e21d54a75ebf1fcf4993b629991d7bcd3f0a7b7e3e8470d69d34e09dfaa5e66deebe84fb13d7061c9fdc5d31da0f72e45cb838b7891c341bcc268ae21b3f3c0024be4c374ee014a357f3f7e0a7ba268ff43b5832e3224a2c6e4f6c8130d4e2f05bb4f34f1deb9ed5de12af66a11ab0253ecedb1e30d70066bac920db1c997c2e41d7279891c76e974249a0796d0928d646f4936f0161f511a386a8f1e24b4d8827d9ff3632757ce85c317ec323f4b599e8fa368cf75e9e84fd3464b985702673b32f63341e9cc77e7fec80513197e8be49947e2cd38fbfca9c6d7031d5bc8f0a95415a29fc95b6986a9a694b28df6751115424bbcb4dc316f42a064a9bb9cd9ba2d5371c0c9142e024f9d9890ceeb80ba86360c1e6b7ccafe44aff5114067d38f6a740317033c01cf62dfdee89e7222f0ce8fe98455ddb7ea0ab0b4fb6a20acc564ba96723d9bca3f2b6eb2926105acb5c602dea739e0469ddb0dd7a2b13978910f1051ec463520e90ea5b44e1ee58f2799d61edcde2aec02b7fa35ae797e8e04ffa238f142e9b6c8cfa478936895b3a890290659c77980a4f4fb0fa19387570f8961ddf6e19eb364716eb02e2c581b0117a8a026af8fefe8b8e82f6b4485c5e0bf536a761ce079c7486ea03d1aa58f2e7d9932c410ff87f4f794ca32bf0fdee63c506a9e44bf6baf9487518afdf109fd0b50a9f55440150c9f6dc27df707f0fdefc2f9ffc3d83bbccaa28cd540ff9b9216641fd339f683764d5d07a1ee641283d08cac0f325810ee572120a73e3088a984538f92155c83801a69f8f97281788ce2d77e502d7dc85356d489a1398d115eb42eed5120f4958b8471152a460633ce8b0088ca9936e4efd94da7797a7e0d7948c6f44a2343aef43708856eac75b47b1fd9875c5d3ff4e9c89b07e6a597b459887b2acab4949689217dc62c8738a80f9d639df45b01af0fd472f57b540c869ab51c90101b9455985b3971cd7c4b5dd6405caa7ed08cddc113bf42411646d9a2de714667e6135c2659561079d4dd99ac90f7125f4afa73bc9f0f3b9ac53c643e3f735080bda5d9a40a2395763fd673779cfec3c14d12c5e8147baff1c9509680a158826fe9bc180ef3064ae3d7a83ade9849b6099fb1de823e526021107a58abdbc349e4fb3ef1e7b55a4e8c702ee9ecbf26f348fd7ee33d36af1c86efe7929dcf2e94333c6edd0b03cb8e454e03474eb225ffa6655f06d5191d11d415d6c0b9f4872ee4376425398fde5ef7d14e0d67fd4bde0776251311c405f113e0cf6672faf96ddd2a052a0f9a7d967207525d29041efd68668ec3b1e7d400273223fe7e127c0ad7e4a19f8a1dbc15b6a4cc9d95bb06f8d6453c7d643e1f7790a2fb62f7ac5f2978a9bc9f95cb596dbbbfa44bc95507628951acec2bcad1e9890f988639c59740e9c8cb9f68a79eb0cf221c3beda01d6a321f610a4b12ca41b1de5ad78b203d2563413d0b7ec043d6e4778f4155d41bceaf505373607d9343559956c6a867db1dc70927a6d616f8952f20ff6084fc36618ea466de966f16e53c7d8a1bf54d592c4789027b729af92d139ee0e58260b92e680b681ba7ad9090cf44e9a55db2d1f9299cf8c5443220cf0048286a9136a086614c58528c6ab0858d2869e781cb7cede36409b52d7bbd0f6395694c495a79599b5ae25870d4242ec00f28a10147f1702e5d0c0a58330d0e463d75f2797e9b36a41ec98168c7b5258024b235d65cbf411c29f420b46cb37e1406576672d123ab76b89ea65820d340034373fdc4447fd2271df8360d99810e60c1b798239d638b9beb77cb63db9d1a04cbb8b6f10a402d75d674f965849487bdfd3c2127e7cabbf5f02f0e1f3e0284fd3b51321fd71a73b4c2ac89ccb68e0d183322f3579f8a2a58b17cd435d542935a6b953d90085cb72f248e1ad8b9f49d2512f0f1a8f4012a796a4efa9fee3aeae664256196daf329081423770ebdf87468677fb83da768db98db7b7af3a6a241ef7a90c43664808581903e3007d6a93cf5bc1246a6b8ceb5db624736ebdc8843ef5b38070b77febc85fa27fd6c4c52797cd3466763373797d57d63e1236544e1142cfe3ff700ad8f7e1843f3014726ad06ce322a23223ac6c7314d05f4ca6dc75ed36cda617c3f00d58bd29e30d5b7555755a09cf1e341d848a5e1aa1de1a9b83094b025aa9fa83b604d8af1e91fe143bec1595e61f7f31672b253d937750c252ab96023cd87013355b28fb4c9789bce3491772a871739a3c551aed844ae90171cb0c96cc8fed063e32450d57bc48601c576a782edad628ed6803ec93d930ba66b7fea8c11e619746ba665cdbad3c52f5265a58b45a2a9a2796b8783e4a1f14e1dcf2e282008c53fe4b0824181ec3bc172eedb25c06cd61f39f86ed4af1ecbe5ba7fc817840fd5164eededb9d1d4f99bd2c040ba67c49656b7fe15cf9afcdd11be6678a42a35206134de32b813443455294c879f66a7970ecbc66ac05dc1ccb3d560b5c3f5a0002e2ac0e66a71b1c9d16cb82fb624ead5da5bb7e45372650487547006b1d4e363603544b039ed2aefffe5a68739a445d64c5a39def3b99e35617870f73fab21390f4066e30845eae3102b822fe2f4e13287ebf458e7e59cb89f01a88f4b6f06f960c1cd87bc71d5acf0e8c448ecfa2c8a7c5f5affb4b118de8acd7e2d988d2dcae8655b89945dc21ac9a397910263ec921f649aa484fbbd58b25ab397c55260165e6525e5543a62bf197140c285b7aa332de15184b826d47f962d082c7b2e1d23f543b813378e93bbe0f8ab71710b852a5e709dd87da81cbfd0000821d7956afd9e6aeb65247d936145792e1eb64b8310b94cb049265eb59613cfca10be03f72d289f0a0662a706feb26ff7a75c7cb465db8061f7c23709f5a92c94bf3b2e13976bc473a5409fc4de815a9ae779e91c8b48dd9925e3af320c041ce3d68e4a41d544649e3ce03ad04b4c3fba9b2a51d5e800308d6ce7c2a3b241f3985c816f33e20803ce9299cdace20ff4b245813ea0ef3216b367a59e1b8ddd8598e9f37ca267eac9ea5cd8c4926c9d5c26cc9f8070443daab934c11959e7457313cb6e89652ff7d1f45f7dfd877b8d53d1de2edc9c03eba0040e39f2ca89cbca3aad9b74981e16523237007cacd6450cc48b0a1890abfa85728140da9a4a2750d337935724f995f4d65b83417d3c1245b583677a3f0d76f9f26f49d66ed17f14a7464ecf10b2f579cf01db128a871902aaefe11ada066720fddea58162ecb932280f3b5c51daa4c97e2bc9a730a5d8696d5f26ffb47a5f59ea43403d6cd68ce7d34f01af197dc01700414937d387255094734d25e140910acf6e8aa1f79420acf57e80ca520402c126f7ee998c751f0a235e717c350e4dcff81204fed22446800b642a74a2012476d6ed54d08e0b73841cd28e4952feb22498de06770a03d50e535677b0c97f84a48db17aac0c7a12c7a2f6c05fbbfd1bec3aec350aa6268d35e32d4d25d60cd5a937b0700fafcb62901327a7b7ff147d7141f6e8195b37a3b33a6d0837e38901461f16df02f553fdcef1e59b7ff9446e20a95b57409a3f96c5ed7ae5c7909d629cef5699bc858852bfe72d0de8f23ea4570e8728af9210b4112f161e0e4ecf4a1f34356d494d43e564a3a91ab086b04b3291ebd3e65710b5d09b44e481fd52d53acf0eb0d3aea25fbb06898a94bfd2ca806036a00ecdf756ef614287344309efab11321581a0b9f4285451fb45203d9474b8f93ee89f25a1a3c95e7c950390d2b16538a1c9cd538ee177755d370feaeecdacba9c96dc9228676a9b2cd01e975350517918e6c256439fa97db85da8c9b0120165742e5e4e6dbb143465f431b400da7ec4b9d1fca62b4f8b746bee1508138910ed5e9b9d7d510b7a16a44a2fe9ee57ce2acb8a75e883da8fd9fd787c2123ba7ad02028fa3ad7018a506f00afe12662701748eecc278368a40c5781db7c4d76ab1959644651428d6d7291a6071880e68e0ef3d585d72d78ac293ebeba3944bc90851ff79364a4c89c47004fba1cb5219e252d411279666b53f2bf239f645cd79a18d52fb52dc7070145489b57b54c99823b593a95e709f1df526d513aba3aed89b6c3787e59fc2c379fae5d1fd4f7029082906f8e679f1f02e05e310f52fabcf4b5761ea05a4b6220892476b4dff1ff1ef5e2702e01e2bceab7b10e10bfa212beec2b107af2f3390e3a481a51ab8ae709e00ef0a37d58910995a09af27f83f8ec73c38c06433636b3a5f90dff397eea7675bdec9711016dee085ff738d20e7735d4a1c58e5af6e730f78ab6f800c5b17", 0x1000, 0x50, &(0x7f00000179c0)=@ieee802154, 0x80) 228.580655ms ago: executing program 5 (id=474): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setuid(0xee00) (async) r2 = socket$inet6(0xa, 0xa, 0xb096) ioctl$VT_RELDISP(r1, 0x5605) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) (async) setsockopt$sock_linger(r2, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/udp6\x00') preadv(r4, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000340)=""/182, 0xb6}], 0x2, 0x8, 0x3) (async) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setrlimit(0x40000000000008, &(0x7f0000000000)={0x1, 0x6}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f00000001c0)={&(0x7f0000000100)=@canfd={{0x3, 0x0, 0x1}, 0x29, 0x0, 0x0, 0x0, "d1d83b13725860372cb89fda98ab29b1e134afdc0fd3172a54fb816b60242ef208c2a2ccc4b4c0d7c28d71b92a027f047c7e6edffc8261486f6e86b1fffddd66"}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) 180.780456ms ago: executing program 5 (id=475): accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x1000) (async) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x1000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x1c20c4, &(0x7f0000000080)={[{@stats}], [{@euid_lt={'euid<', r1}}, {@measure}]}) 179.896296ms ago: executing program 5 (id=476): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r2, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffff9}, 0x1c, 0x0}}], 0x1, 0x20004808) recvmmsg(r2, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/5, 0x5}, 0x9d39}], 0x1, 0x12141, 0x0) (async) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812002b08020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) (rerun: 64) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000480), &(0x7f0000000980)=0x4) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x0, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x2, {0x8}}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0xffffff00, 0x0, 0xb, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x2, 0x4, 0x9, 0x6, 0x9, 0xf, 'macsec0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x240}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @multicast2, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc090, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffe, 0x2d, 0x0) (async) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, 0xffffffffffffffff, 0x7fffffff) (async, rerun: 32) syz_usb_control_io(r5, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x40, 0x6, 0x55, {0x55, 0x2, "74f880ed3af007d3d98a102ba95216e11825cf99f4740df849c29f4cfe7cc657f2843ea928040b08ef5db9779929b9c5b9d804bc0a935fd68b0d72d93f54f4899b64a2c3f338f40b6163d153b15020ed23fd93"}}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x4, 0x6, 0xf, "77271e35", "98971ba0"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8f, 0x8, 0x9, 0x9, 0x8, 0x6, 0x8}}}, &(0x7f0000000b00)={0x84, &(0x7f00000006c0)={0x20, 0x9, 0x6, "4d44f47e16b6"}, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x8, {0xe0, 0x40, [0xf00]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x1}, 0x0, &(0x7f00000008c0)={0x40, 0xb, 0x2, "a2ca"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x6}, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xfffffffc, &(0x7f0000000300)=""/210, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0xffa3, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 69.349379ms ago: executing program 2 (id=477): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r2 = getpid() syz_pidfd_open(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 59.522208ms ago: executing program 2 (id=478): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x2, {0x400000000001, 0x180, 0x20ff, 0x4, 0x89, 0xd615, 0x9, 0x3, 0x8, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) (async) pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0xd5db) pread64(r1, 0x0, 0xbd5695353d88c232, 0x2) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0x0) r3 = userfaultfd(0x801) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil) read(r3, &(0x7f00000000c0)=""/62, 0x3e) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 690.65µs ago: executing program 2 (id=479): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40, 0xc1) execve(&(0x7f0000004700)='./file0\x00', &(0x7f0000004800)={[], 0x23}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x1000000000003}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100}}, 0x0}}], 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=480): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000a84000/0x1000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'geneve0\x00', {0x2, 0x0, @dev}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) copy_file_range(r0, &(0x7f0000000000)=0x5, r0, 0x0, 0xfffffffffffffffe, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 21.312034][ T36] audit: type=1400 audit(1757748945.869:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.313098][ T282] cgroup: Unknown subsys name 'net' [ 21.334659][ T36] audit: type=1400 audit(1757748945.869:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.361947][ T36] audit: type=1400 audit(1757748945.899:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.362092][ T282] cgroup: Unknown subsys name 'devices' [ 21.520915][ T282] cgroup: Unknown subsys name 'hugetlb' [ 21.526508][ T282] cgroup: Unknown subsys name 'rlimit' [ 21.679199][ T36] audit: type=1400 audit(1757748946.229:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.702382][ T36] audit: type=1400 audit(1757748946.239:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.727204][ T36] audit: type=1400 audit(1757748946.239:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.735835][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.759158][ T36] audit: type=1400 audit(1757748946.309:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.784640][ T36] audit: type=1400 audit(1757748946.319:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.813733][ T36] audit: type=1400 audit(1757748946.369:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.839274][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.839452][ T36] audit: type=1400 audit(1757748946.369:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.021775][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.028806][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.036068][ T289] bridge_slave_0: entered allmulticast mode [ 23.042298][ T289] bridge_slave_0: entered promiscuous mode [ 23.054396][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.061475][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.068509][ T289] bridge_slave_1: entered allmulticast mode [ 23.074744][ T289] bridge_slave_1: entered promiscuous mode [ 23.092557][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.099595][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.106620][ T292] bridge_slave_0: entered allmulticast mode [ 23.112924][ T292] bridge_slave_0: entered promiscuous mode [ 23.127757][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.137412][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.144613][ T292] bridge_slave_1: entered allmulticast mode [ 23.150858][ T292] bridge_slave_1: entered promiscuous mode [ 23.156865][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.163941][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.171025][ T290] bridge_slave_0: entered allmulticast mode [ 23.177155][ T290] bridge_slave_0: entered promiscuous mode [ 23.183319][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.190358][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.197396][ T291] bridge_slave_0: entered allmulticast mode [ 23.203649][ T291] bridge_slave_0: entered promiscuous mode [ 23.209935][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.216953][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.224029][ T291] bridge_slave_1: entered allmulticast mode [ 23.230163][ T291] bridge_slave_1: entered promiscuous mode [ 23.239119][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.246168][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.253221][ T290] bridge_slave_1: entered allmulticast mode [ 23.259403][ T290] bridge_slave_1: entered promiscuous mode [ 23.414857][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.421915][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.429197][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.436213][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.452168][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.459238][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.466498][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.473546][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.482505][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.489557][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.496800][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.503819][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.517374][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.524426][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.531689][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.538696][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.573103][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.580884][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.588079][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.595256][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.602885][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.610134][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.617412][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.624788][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.641611][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.648644][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.661120][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.668139][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.675985][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.683015][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.690794][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.697802][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.722679][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.729732][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.738698][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.745738][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.753760][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.760783][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.774785][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.781819][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.816970][ T290] veth0_vlan: entered promiscuous mode [ 23.824570][ T292] veth0_vlan: entered promiscuous mode [ 23.847666][ T291] veth0_vlan: entered promiscuous mode [ 23.855925][ T289] veth0_vlan: entered promiscuous mode [ 23.870746][ T290] veth1_macvtap: entered promiscuous mode [ 23.877672][ T292] veth1_macvtap: entered promiscuous mode [ 23.888695][ T291] veth1_macvtap: entered promiscuous mode [ 23.922691][ T289] veth1_macvtap: entered promiscuous mode [ 23.938703][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.989416][ T334] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.007431][ T342] input: syz1 as /devices/virtual/input/input4 [ 24.112337][ T356] rust_binder: Write failure EFAULT in pid:4 [ 24.219628][ T377] rust_binder: Write failure EFAULT in pid:10 [ 24.220869][ T378] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.332672][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 24.784719][ T426] pim6reg1: entered promiscuous mode [ 24.798912][ T426] pim6reg1: entered allmulticast mode [ 24.893960][ T428] overlay: Unknown parameter 'euid<00000000000000000000' [ 24.923604][ T430] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 24.942750][ T435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 24.959259][ T436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 25.065629][ T448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:37 [ 25.132731][ T455] /dev/rnullb0: Can't open blockdev [ 25.567623][ T473] rust_binder: Write failure EFAULT in pid:26 [ 25.714078][ T481] rust_binder: 476 RLIMIT_NICE not set [ 25.720552][ T481] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 25.733651][ T481] rust_binder: Write failure EINVAL in pid:41 [ 25.939252][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.100426][ T9] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 26.108661][ T9] usb 2-1: config 1 has no interface number 0 [ 26.114781][ T9] usb 2-1: config 1 interface 105 has no altsetting 0 [ 26.122910][ T9] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 26.132018][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.140055][ T9] usb 2-1: Product: syz [ 26.144346][ T9] usb 2-1: Manufacturer: syz [ 26.148929][ T9] usb 2-1: SerialNumber: syz [ 26.396780][ T488] overlayfs: failed to clone upperpath [ 26.409288][ T396] Bluetooth: hci0: command 0x1003 tx timeout [ 26.415312][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 26.427195][ T493] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.440299][ T36] kauditd_printk_skb: 111 callbacks suppressed [ 26.440309][ T36] audit: type=1400 audit(1757748950.999:185): avc: denied { connect } for pid=494 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.466524][ T36] audit: type=1400 audit(1757748951.019:186): avc: denied { getopt } for pid=492 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.486648][ T495] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 26.505429][ T497] netlink: 'syz.3.52': attribute type 4 has an invalid length. [ 26.515578][ T36] audit: type=1400 audit(1757748951.069:187): avc: denied { append } for pid=496 comm="syz.3.52" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.538612][ T498] netlink: 'syz.3.52': attribute type 4 has an invalid length. [ 26.567924][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.580270][ T36] audit: type=1400 audit(1757748951.119:188): avc: denied { connect } for pid=502 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 26.588126][ T508] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 26.619091][ T508] rust_binder: Write failure EINVAL in pid:21 [ 26.620208][ T36] audit: type=1400 audit(1757748951.119:189): avc: denied { write } for pid=502 comm="syz.2.54" laddr=fe80::8459:9aff:fec8:6a2e lport=1 faddr=ff01::1 fport=19973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 26.657874][ T36] audit: type=1400 audit(1757748951.119:190): avc: denied { read } for pid=502 comm="syz.2.54" laddr=fe80::8459:9aff:fec8:6a2e lport=1 faddr=ff01::1 fport=19973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 26.697094][ T518] rust_binder: 510 RLIMIT_NICE not set [ 26.760355][ T9] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 26.777040][ T9] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 26.788180][ T9] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 26.800309][ T9] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8e:e5:a2:1f:82:f1 [ 26.814128][ T9] usb 2-1: USB disconnect, device number 2 [ 26.820323][ T9] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 26.834707][ T36] audit: type=1400 audit(1757748951.389:191): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.869821][ T9] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 26.879235][ T9] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 26.888583][ T9] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 27.203558][ T36] audit: type=1400 audit(1757748951.759:192): avc: denied { create } for pid=523 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.223215][ T36] audit: type=1400 audit(1757748951.779:193): avc: denied { write } for pid=523 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.242759][ T36] audit: type=1400 audit(1757748951.799:194): avc: denied { ioctl } for pid=523 comm="syz.0.61" path="socket:[4541]" dev="sockfs" ino=4541 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.364326][ T534] loop4: detected capacity change from 0 to 8388608 [ 27.612225][ T555] fuse: Bad value for 'user_id' [ 27.617136][ T555] fuse: Bad value for 'user_id' [ 27.640628][ T557] rust_binder: Write failure EINVAL in pid:35 [ 27.864883][ T563] netlink: 'syz.0.73': attribute type 29 has an invalid length. [ 27.878798][ T563] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.73'. [ 27.887901][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.943478][ T575] capability: warning: `syz.0.77' uses deprecated v2 capabilities in a way that may be insecure [ 28.059204][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 28.069356][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 28.091148][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.110167][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.121529][ T31] usb 4-1: Product: 䰭 [ 28.129383][ T31] usb 4-1: Manufacturer: ꮞ磱쫜᮪흪⪨嬼弭鏷◛齃玝齴纛螙ዥ爨ꅒ酴쳒㰪傿襁緐ᕪ옌䒵ꄮ⍫쒟ユ䞨᭒눬妡쳖쑀㉵豢⽡⸉暏傃靌 [ 28.153928][ T31] usb 4-1: SerialNumber: syz [ 28.569252][ T396] Bluetooth: hci0: command 0x1003 tx timeout [ 28.569355][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 28.585955][ T9] rust_binder: 502: removing orphan mapping 0:1048 [ 28.890795][ T31] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 28.900646][ T31] usb 4-1: USB disconnect, device number 2 [ 28.909004][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.575940][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 43.575969][ T36] audit: type=1400 audit(1757748968.129:200): avc: denied { read append } for pid=591 comm="syz.1.83" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.592166][ T594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.618037][ T36] audit: type=1400 audit(1757748968.129:201): avc: denied { open } for pid=591 comm="syz.1.83" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.625152][ T594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:48 [ 43.650473][ T36] audit: type=1400 audit(1757748968.169:202): avc: denied { ioctl } for pid=591 comm="syz.1.83" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.688542][ T603] netlink: 'syz.0.87': attribute type 11 has an invalid length. [ 43.703393][ T606] syz.2.88: attempt to access beyond end of device [ 43.703393][ T606] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 43.716140][ T606] exFAT-fs (loop2): unable to read boot sector [ 43.718107][ T36] audit: type=1400 audit(1757748968.269:203): avc: denied { nlmsg_read } for pid=607 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.722470][ T606] exFAT-fs (loop2): failed to read boot sector [ 43.749315][ T609] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 134217728 [ 43.749883][ T606] exFAT-fs (loop2): failed to recognize exfat type [ 43.757335][ T609] rust_binder: Write failure EINVAL in pid:37 [ 43.829651][ T626] capability: warning: `syz.0.95' uses 32-bit capabilities (legacy support in use) [ 43.852369][ T629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.862766][ T629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.940069][ T36] audit: type=1400 audit(1757748968.499:204): avc: denied { write } for pid=633 comm="syz.1.98" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.970948][ T636] rust_binder: Write failure EFAULT in pid:57 [ 43.982684][ T36] audit: type=1400 audit(1757748968.539:205): avc: denied { create } for pid=638 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.008619][ T36] audit: type=1400 audit(1757748968.539:206): avc: denied { create } for pid=638 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 44.024377][ T644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 44.028537][ T644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:62 [ 44.033298][ T36] audit: type=1400 audit(1757748968.539:207): avc: denied { setopt } for pid=638 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.066730][ T36] audit: type=1400 audit(1757748968.539:208): avc: denied { write } for pid=638 comm="syz.1.100" path="socket:[4796]" dev="sockfs" ino=4796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.090222][ T36] audit: type=1400 audit(1757748968.539:209): avc: denied { block_suspend } for pid=638 comm="syz.1.100" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.165895][ T330] bridge_slave_1: left allmulticast mode [ 44.171641][ T330] bridge_slave_1: left promiscuous mode [ 44.177307][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.185245][ T330] bridge_slave_0: left allmulticast mode [ 44.191080][ T330] bridge_slave_0: left promiscuous mode [ 44.196751][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.286540][ T651] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.293601][ T651] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.300657][ T651] bridge_slave_0: entered allmulticast mode [ 44.306777][ T651] bridge_slave_0: entered promiscuous mode [ 44.313346][ T651] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.320411][ T651] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.327466][ T651] bridge_slave_1: entered allmulticast mode [ 44.333855][ T651] bridge_slave_1: entered promiscuous mode [ 44.340405][ T330] veth1_macvtap: left promiscuous mode [ 44.345907][ T330] veth0_vlan: left promiscuous mode [ 44.425163][ T651] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.432248][ T651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.439536][ T651] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.446563][ T651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.465531][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.472874][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.483937][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.491011][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.499623][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.506694][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.533016][ T651] veth0_vlan: entered promiscuous mode [ 44.543022][ T651] veth1_macvtap: entered promiscuous mode [ 44.626733][ T681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:59 [ 44.626859][ T681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:59 [ 44.783477][ T695] rust_binder: Error while translating object. [ 44.793978][ T695] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.800273][ T695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 44.818033][ T697] /dev/rnullb0: Can't open blockdev [ 44.849669][ T701] __vm_enough_memory: pid: 701, comm: syz.2.118, bytes: 18014402804453376 not enough memory for the allocation [ 44.864941][ T704] incfs: Can't find or create .index dir in ./bus [ 44.871632][ T704] incfs: mount failed -1 [ 44.876394][ T704] incfs: Can't find or create .index dir in ./bus [ 44.884893][ T704] incfs: mount failed -1 [ 44.899903][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.902666][ T706] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 45.048065][ T711] rust_binder: Write failure EFAULT in pid:74 [ 45.863482][ T733] rust_binder: Write failure EINVAL in pid:34 [ 45.943473][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 45.957038][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 45.964457][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 45.971874][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 45.979302][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 45.986679][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 45.994115][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.001523][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.008892][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.016337][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.023899][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.031306][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.038677][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.046084][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.053472][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.060856][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.068233][ T31] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.076149][ T31] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 46.179229][ T65] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 46.329430][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 46.335875][ T65] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.346155][ T65] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 46.356524][ T65] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 46.365617][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.373693][ T65] usb 3-1: Product: syz [ 46.377849][ T65] usb 3-1: Manufacturer: syz [ 46.382542][ T65] usb 3-1: SerialNumber: syz [ 46.387674][ T65] usb 3-1: config 0 descriptor?? [ 46.597109][ T735] tipc: Started in network mode [ 46.602109][ T735] tipc: Node identity 4afdab493247, cluster identity 4711 [ 46.611854][ T735] tipc: Enabled bearer , priority 0 [ 46.612687][ T761] Zero length message leads to an empty skb [ 46.618915][ T735] syzkaller0: entered promiscuous mode [ 46.629851][ T735] syzkaller0: entered allmulticast mode [ 46.747284][ T775] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 46.766316][ T775] overlay: ./file0 is not a directory [ 47.271883][ T792] fuse: Unknown parameter '' [ 47.729206][ T45] tipc: Node number set to 2025499465 [ 47.781783][ T800] __vm_enough_memory: pid: 800, comm: syz.4.148, bytes: 18014402804453376 not enough memory for the allocation [ 47.820404][ T803] random: crng reseeded on system resumption [ 47.892533][ T818] rust_binder: 818 RLIMIT_NICE not set [ 47.912715][ T45] rust_binder: 0: removing orphan mapping 0:1168 [ 48.074195][ T826] rust_binder: 61: no such ref 0 [ 48.087288][ T827] rust_binder: 61: no such ref 0 [ 48.189451][ T844] bridge0: port 3(veth0_macvtap) entered blocking state [ 48.197643][ T846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.197673][ T846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70 [ 48.219217][ T844] bridge0: port 3(veth0_macvtap) entered disabled state [ 48.250259][ T844] veth0_macvtap: entered allmulticast mode [ 48.269419][ T844] veth0_macvtap: entered promiscuous mode [ 48.275251][ T844] bridge0: port 3(veth0_macvtap) entered blocking state [ 48.282224][ T844] bridge0: port 3(veth0_macvtap) entered forwarding state [ 48.320690][ T851] rust_binder: Error while translating object. [ 48.320736][ T851] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 48.329434][ T851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:74 [ 48.596479][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 48.596494][ T36] audit: type=1400 audit(1757748973.149:247): avc: denied { create } for pid=857 comm="syz.4.165" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.649327][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 48.672542][ T36] audit: type=1400 audit(1757748973.149:248): avc: denied { write } for pid=857 comm="syz.4.165" name="file2" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.697621][ T36] audit: type=1400 audit(1757748973.149:249): avc: denied { open } for pid=857 comm="syz.4.165" path="/22/file2" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.720177][ T36] audit: type=1400 audit(1757748973.229:250): avc: denied { unlink } for pid=651 comm="syz-executor" name="file2" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.743539][ T36] audit: type=1326 audit(1757748973.249:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=862 comm="syz.4.166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc92298eba9 code=0x7eff0000 [ 48.821353][ T45] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.844802][ T45] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.866166][ T45] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 48.871388][ T868] netlink: 'syz.2.168': attribute type 13 has an invalid length. [ 48.889250][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 48.905131][ T868] __vm_enough_memory: pid: 868, comm: syz.2.168, bytes: 18014402804453376 not enough memory for the allocation [ 48.909189][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.949729][ T859] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 48.973076][ T36] audit: type=1400 audit(1757748973.529:252): avc: denied { write } for pid=869 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.582954][ T36] audit: type=1400 audit(1757748974.139:253): avc: denied { mounton } for pid=879 comm="syz.4.173" path="/proc/94/task/94/net/dev_snmp6" dev="proc" ino=4026532873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 49.670819][ T36] audit: type=1400 audit(1757748974.229:254): avc: denied { bind } for pid=884 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.745266][ T895] netlink: 'syz.2.177': attribute type 6 has an invalid length. [ 49.764669][ T895] netlink: 'syz.2.177': attribute type 4 has an invalid length. [ 49.773021][ T45] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 49.781441][ T45] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input6 [ 49.790527][ T895] netlink: 'syz.2.177': attribute type 6 has an invalid length. [ 49.798159][ T895] netlink: 'syz.2.177': attribute type 13 has an invalid length. [ 49.819219][ T895] netlink: 'syz.2.177': attribute type 15 has an invalid length. [ 49.827130][ T36] audit: type=1400 audit(1757748974.369:255): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=452 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.850205][ T895] netlink: 'syz.2.177': attribute type 19 has an invalid length. [ 49.862788][ T895] netlink: 3684 bytes leftover after parsing attributes in process `syz.2.177'. [ 49.885214][ T36] audit: type=1400 audit(1757748974.369:256): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=452 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.909377][ T898] /dev/rnullb0: Can't open blockdev [ 49.960692][ T905] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 49.973013][ T909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.183'. [ 50.128939][ T921] 9pnet: p9_errstr2errno: server reported unknown error [ 50.205890][ T925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 51.108870][ T939] can: request_module (can-proto-4) failed. [ 51.402107][ T45] usb 4-1: USB disconnect, device number 3 [ 51.402155][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 51.484131][ T955] rust_binder: 953 RLIMIT_NICE not set [ 51.487173][ T520] rust_binder: 952: removing orphan mapping 0:24 [ 51.610324][ T967] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 51.623165][ T967] rust_binder: Write failure EINVAL in pid:86 [ 51.623479][ T969] netlink: 'syz.2.201': attribute type 3 has an invalid length. [ 51.649194][ T969] netlink: 944 bytes leftover after parsing attributes in process `syz.2.201'. [ 51.669374][ T969] rust_binder: Got transaction with invalid offset. [ 51.669424][ T969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.676277][ T969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 51.713801][ T974] rust_binder: 136: no such ref 3 [ 51.728062][ T974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 51.728592][ T974] rust_binder: Error while translating object. [ 51.738066][ T974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.744498][ T974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 51.829414][ T978] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 51.850317][ T980] netlink: 'syz.4.204': attribute type 1 has an invalid length. [ 51.869674][ T977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.878099][ T977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.488133][ T988] kvm: kvm [987]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 52.509478][ T988] kvm: kvm [987]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 52.693555][ T988] kvm_intel: kvm [987]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xfbbf [ 52.722255][ T988] kvm: kvm [987]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xfbae [ 52.747677][ T988] kvm: kvm [987]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xfb9d [ 52.772908][ T988] kvm: kvm [987]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xfb4a [ 52.801492][ T988] kvm: kvm [987]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xfb3a [ 52.822953][ T988] kvm: kvm [987]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xfb2a [ 53.052590][ T1003] rust_binder: Write failure EFAULT in pid:93 [ 53.798913][ T1040] rust_binder: 1025 RLIMIT_NICE not set [ 53.812436][ T1041] af_packet: tpacket_rcv: packet too big, clamped from 4710 to 4294967272. macoff=96 [ 53.828280][ T1041] netlink: 'syz.4.225': attribute type 5 has an invalid length. [ 53.896147][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 53.896164][ T36] audit: type=1400 audit(1757748978.449:282): avc: denied { getopt } for pid=1053 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.926906][ T36] audit: type=1400 audit(1757748978.479:283): avc: denied { map } for pid=1053 comm="syz.2.229" path="/dev/rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 53.951453][ T36] audit: type=1400 audit(1757748978.479:284): avc: denied { execute } for pid=1053 comm="syz.2.229" path="/dev/rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 53.990398][ T36] audit: type=1400 audit(1757748978.549:285): avc: denied { mount } for pid=1053 comm="syz.2.229" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 54.026763][ T36] audit: type=1400 audit(1757748978.569:286): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 54.069266][ T1068] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 54.069288][ T1068] rust_binder: Error while translating object. [ 54.070063][ T36] audit: type=1400 audit(1757748978.619:287): avc: denied { ioctl } for pid=1067 comm="syz.3.233" path="socket:[7889]" dev="sockfs" ino=7889 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.079832][ T1068] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.110624][ T1068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 54.149694][ T1074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.169815][ T1074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.235'. [ 54.196563][ T1073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.235'. [ 54.237650][ T1070] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 54.251535][ T1070] rust_binder: Write failure EINVAL in pid:154 [ 54.264347][ T1084] netlink: 'syz.3.237': attribute type 16 has an invalid length. [ 54.293328][ T1088] netlink: 'syz.4.240': attribute type 3 has an invalid length. [ 54.309251][ T1084] sit0: entered promiscuous mode [ 54.315870][ T1084] netlink: 'syz.3.237': attribute type 1 has an invalid length. [ 54.339235][ T1084] netlink: 9 bytes leftover after parsing attributes in process `syz.3.237'. [ 54.348627][ T1090] veth1: entered allmulticast mode [ 54.403713][ T1097] syz.3.243: attempt to access beyond end of device [ 54.403713][ T1097] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 54.425074][ T1097] EXT4-fs (loop3): unable to read superblock [ 54.436457][ T36] audit: type=1400 audit(1757748978.989:288): avc: denied { bind } for pid=1101 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.477964][ T36] audit: type=1400 audit(1757748979.009:289): avc: denied { name_bind } for pid=1101 comm="syz.4.245" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 54.478278][ T1107] ======================================================= [ 54.478278][ T1107] WARNING: The mand mount option has been deprecated and [ 54.478278][ T1107] and is ignored by this kernel. Remove the mand [ 54.478278][ T1107] option from the mount to silence this warning. [ 54.478278][ T1107] ======================================================= [ 54.499038][ T36] audit: type=1400 audit(1757748979.009:290): avc: denied { node_bind } for pid=1101 comm="syz.4.245" saddr=fc01:: src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 54.561241][ T1089] veth1: left allmulticast mode [ 54.566343][ T1107] incfs: Options parsing error. -22 [ 54.579257][ T1107] incfs: mount failed -22 [ 54.602558][ T1107] fuse: Unknown parameter 'g' [ 54.613217][ T1115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.622527][ T1115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.726759][ T36] audit: type=1400 audit(1757748979.279:291): avc: denied { module_load } for pid=1117 comm="syz.3.250" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 54.789760][ T1120] rust_binder: 117: no such ref 0 [ 54.794832][ T1120] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.794846][ T1120] rust_binder: Read failure Err(EFAULT) in pid:117 [ 55.284824][ T1123] overlayfs: failed to clone upperpath [ 55.380247][ T1130] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 55.405472][ T1130] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.405506][ T1130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 55.480385][ T1139] erofs: dax options not supported [ 55.679711][ T329] bridge_slave_1: left allmulticast mode [ 55.685395][ T329] bridge_slave_1: left promiscuous mode [ 55.699353][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.717274][ T329] bridge_slave_0: left allmulticast mode [ 55.722953][ T329] bridge_slave_0: left promiscuous mode [ 55.741023][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.916900][ T329] veth1_macvtap: left promiscuous mode [ 55.927182][ T329] veth0_vlan: left promiscuous mode [ 55.985369][ T1171] 9pnet: p9_errstr2errno: server reported unknown error ottle.io_service_bytes_recursive [ 56.072406][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.079818][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.104604][ T1161] bridge_slave_0: entered allmulticast mode [ 56.115682][ T1175] 9pnet: Could not find request transport: xen [ 56.122464][ T1161] bridge_slave_0: entered promiscuous mode [ 56.139435][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.146474][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.165139][ T1161] bridge_slave_1: entered allmulticast mode [ 56.179620][ T1161] bridge_slave_1: entered promiscuous mode [ 56.267822][ T1182] fuseblk: Bad value for 'fd' [ 56.305663][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.312738][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.320035][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.327054][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.442009][ T1161] veth0_vlan: entered promiscuous mode [ 56.463407][ T1161] veth1_macvtap: entered promiscuous mode [ 56.561690][ T1205] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 56.639259][ T1211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:10 [ 56.730479][ T1214] netlink: 16 bytes leftover after parsing attributes in process `syz.5.283'. [ 57.087235][ T1249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:19 [ 57.095342][ T1252] fuse: Bad value for 'user_id' [ 57.116557][ T1252] fuse: Bad value for 'user_id' [ 57.122671][ T1255] rust_binder: inc_ref_done called when no active inc_refs [ 57.881137][ T1273] rust_binder: 1272 RLIMIT_NICE not set [ 57.910997][ T1276] netlink: 9 bytes leftover after parsing attributes in process `syz.2.300'. [ 57.925927][ T1276] gretap0: entered promiscuous mode [ 57.942715][ T1276] netlink: 5 bytes leftover after parsing attributes in process `syz.2.300'. [ 57.951933][ T1276] 0{X: renamed from gretap0 [ 57.957985][ T1276] 0{X: left promiscuous mode [ 57.963372][ T1276] 0{X: entered allmulticast mode [ 57.969643][ T1276] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 58.986128][ T1287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.019465][ T1287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.437560][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 59.437577][ T36] audit: type=1400 audit(1757748983.989:303): avc: denied { execute } for pid=1299 comm="syz.5.307" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.596667][ T1303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.