last executing test programs: 3m6.462059375s ago: executing program 3 (id=339): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x3f, 0x1, 0xc3}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x509040, 0x16a, 0x10}, 0x18) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x3, 0x0, [{0x4, 0x546, 0x7d, 0x5, 0x6}, {0x80000001, 0x2, 0x90f0, 0x1, 0x9}, {0xd, 0x2, 0x800, 0x75, 0x8001}]}) recvmmsg(r1, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}, 0x65}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000007c0)=""/82, 0x52}, {&(0x7f0000000840)=""/126, 0x7e}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/120, 0x78}, {&(0x7f00000003c0)=""/145, 0x91}], 0x6}, 0x9}], 0x3, 0x12040, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x15, 0x6, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0x400448e7, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m6.440307177s ago: executing program 3 (id=340): syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902480001010020000904000003020200fe052406ee0005240000000d240f01000000800000000000042402040905810300040503fa09058202200000000209050302"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) gettid() ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x402002, 0xcd) open_tree(r3, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000080005"], 0x30}}, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26008, 0x13, r1, 0xb085c000) 3m5.103564048s ago: executing program 3 (id=347): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000300)='./cgroup\x00', r0, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x202}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001f00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40010}}], 0x1, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[], 0x20c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000041) (async) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[], 0x20c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000041) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffa000/0x3000)=nil) ioctl$KVM_NMI(r5, 0xae9a) (async) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7dd, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) (async) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0xa) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 3m4.854161289s ago: executing program 3 (id=348): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\xda\xfb\x8c#\x8cI\x8d\xaa^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\x00\x00\x00\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\xe5\x8b\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9}\xf7\xa9\x96P\x920Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\xd3\xfc\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xce\x1c\xb5\x85maJ\x0f\xf7+Y\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+W\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xdb\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc2]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) r6 = dup(r2) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x358, 0xffff8881f6e281a0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0xffffffffffffffff}) 3m4.853595899s ago: executing program 3 (id=349): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000f40)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0x7, 0x0, {{0x5, 0x4, 0x3, 0x31, 0x14, 0x68, 0x0, 0x8b, 0x2f, 0x0, @loopback, @multicast2}}}}) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) read(r2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x4, r5, 0x1, 0x80, 0x6, @broadcast}, 0x14) (async) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sendto$inet(r6, &(0x7f0000002080)=')4dL', 0x4, 0x20048091, 0x0, 0x0) (async) write(r0, &(0x7f0000002400)="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", 0x1000) 3m2.626980243s ago: executing program 3 (id=363): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x100) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m2.576391897s ago: executing program 32 (id=363): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x100) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m50.579703961s ago: executing program 0 (id=474): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0x8, &(0x7f00000000c0)={0x400000000000008, 0x100000000000084}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x7, 0x1, 0x40, @empty, @mcast1, 0x7, 0x40, 0xfff, 0x7ff}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000100000002000000000000000000000080000000040000000000000000004000"/56]) ioctl$KVM_RUN(r4, 0xae80, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/14, 0xe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x43, &(0x7f0000000180)=0x7, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "e476d0501796a924", "50ac495230f834b7f7768b40b65222de", '\beKx', "009dd280960531d3"}, 0x28) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @remote, @rand_addr=0x64010101}}}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 2m49.511247999s ago: executing program 0 (id=480): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5432, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r2) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="25032abd7000fcdbdf251300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x6, 0x2, 0x4, 0x8}, {0x8000, 0x7, 0x2, 0x5}, {0x0, 0x5, 0xa, 0x9}, {0x5, 0x40, 0x3, 0x9}, {0x401, 0xf9, 0xd, 0x1000}]}) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r1, 0x22e7c000) 2m49.490334551s ago: executing program 0 (id=481): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x1) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000040)) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) 2m49.402095019s ago: executing program 0 (id=482): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="010000009fa81673b7000040f26572b34752c5110000000094058822d3ce5836af23040cb3b782c9410659a8f218ad55fe08de66"]) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x1, 0x40) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x80108907, 0x0) getsockname$tipc(r4, 0x0, &(0x7f00000000c0)) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r7 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2ccebc6000000707db2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0x0) keyctl$update(0x2, r7, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r8, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r9, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r10) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendfile(r8, r8, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r6, 0x45809000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r11 = syz_usb_connect$cdc_ncm(0x1, 0x133, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x121, 0x2, 0x1, 0x0, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "bafaa62a"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x3, 0x8, 0x2}, {0x6, 0x24, 0x1a, 0x8, 0x10}, [@country_functional={0xa, 0x24, 0x7, 0x2, 0x7, [0x5, 0x5]}, @mdlm_detail={0xaf, 0x24, 0x13, 0xb5, "51a2ecceca039f5ccc17b5e7415bf1c69188cb1ee3acb8ea14c940227b7d459a58f4fbc2341a0e9505b3472a3026c4fc8fc4fafa7bd5ee58f483bf8b0f8e1fd0597ee23e27421406af8e508d5699076ca0dcf49eb81d60d9306e900594bf435b0f19638a5683d76016f904eb5c1da30423181e0ae10b5fe5cbd60c8abba3c7c2ea6ea35005a58e7f9cae19c345e91eaa7b7a64a777d10b02e8e48f5446809f04e7501f304886a7a5904e5d"}, @country_functional={0x8, 0x24, 0x7, 0xc, 0x2, [0x9]}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x81, 0x7, 0x5a}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0xb, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xcf, 0xa, 0xe2}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0xf9, 0x72, 0x2, 0x10, 0x80}, 0x38, &(0x7f0000000300)={0x5, 0xf, 0x38, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xdc, 0x4, 0x7, 0x5, 0x18}, @wireless={0xb, 0x10, 0x1, 0x8, 0x12, 0x3, 0x0, 0x8, 0xf4}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "1a6c70e99eea24f3559ea3b3461cc336"}]}, 0x5, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x500a}}, {0xec, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_disconnect(r11) socket$inet6_udp(0xa, 0x2, 0x0) 2m49.371041601s ago: executing program 0 (id=483): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000007"]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000280)=[@dead_binder_done, @enter_looper], 0xc2d, 0x0, &(0x7f0000001480)="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"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x74, 0x0, &(0x7f0000000200)=[@request_death, @increfs={0x40046304, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f00000020c0)=""/4096, 0x1000, 0x0, 0x25}, @fda={0x66646185, 0x5, 0x0, 0x22}, @flat=@handle={0x73682a85, 0x18a, 0x1}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) 2m48.471199576s ago: executing program 0 (id=486): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x1000, 0x6, '9P2000'}, 0x13) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0xde, 0x0, 0x0, {0x7, 0x21, 0x3, 0x0, 0x74, 0xfffe, 0x20000000, 0x0, 0x0, 0x0, 0x162, 0xfffffff2}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$KDSKBENT(r4, 0x4b47, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000001a0001002abd70000000000081ff80"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) 2m23.330571179s ago: executing program 33 (id=486): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x1000, 0x6, '9P2000'}, 0x13) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0xde, 0x0, 0x0, {0x7, 0x21, 0x3, 0x0, 0x74, 0xfffe, 0x20000000, 0x0, 0x0, 0x0, 0x162, 0xfffffff2}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$KDSKBENT(r4, 0x4b47, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000001a0001002abd70000000000081ff80"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) 2m15.902194314s ago: executing program 1 (id=677): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd9", 0xbb}, {&(0x7f0000000180)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a80)="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", 0x37e}], 0x1}}], 0x2, 0x840) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 2m15.887228665s ago: executing program 1 (id=678): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4dd97000) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000020c0)=0x9, 0x4) futex(0x0, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r4, &(0x7f0000000140)="f09bda31", 0x4) sendfile(r3, r4, &(0x7f0000000000), 0xfffb) fcntl$addseals(r4, 0x409, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4dd97000) (async) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000020c0)=0x9, 0x4) (async) futex(0x0, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) (async) write$binfmt_misc(r4, &(0x7f0000000140)="f09bda31", 0x4) (async) sendfile(r3, r4, &(0x7f0000000000), 0xfffb) (async) fcntl$addseals(r4, 0x409, 0x8) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 2m15.654359365s ago: executing program 1 (id=680): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2m15.641295376s ago: executing program 1 (id=682): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x28) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r0 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r0, &(0x7f00000002c0)=""/200, 0xc8, 0x40, &(0x7f0000000200)=@llc={0x1a, 0x6, 0x10, 0xe4, 0x8, 0xb, @remote}, 0x80) (async) recvfrom$inet_nvme(r0, &(0x7f00000002c0)=""/200, 0xc8, 0x40, &(0x7f0000000200)=@llc={0x1a, 0x6, 0x10, 0xe4, 0x8, 0xb, @remote}, 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000021c0), 0x40843, 0x0) r4 = inotify_init1(0x80000) close(r4) (async) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, &(0x7f0000000500)=""/179, &(0x7f0000000440)=0xb3) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000002200)={0x0, 0x4}) (async) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000002200)={0x0, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000200, r1, &(0x7f0000000400)='./file1/file0\x00') 2m15.536800514s ago: executing program 1 (id=685): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) close(0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x1000}, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000700000000fc000000000000000000000000000000ac1e000100000000000000000000100000000000000000008a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000700000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000200000000000000"], 0xb8}}, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x10101, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f00000001c0)=0x3ff, 0x4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m15.447660361s ago: executing program 1 (id=691): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0x2, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) statx(r2, 0x0, 0x1000, 0x6000, 0x0) (async) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000004c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x262659b}}, 0x50) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) (async) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r5, 0x4004e502, &(0x7f00000001c0)=0x7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') (async) unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x200) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r7, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x803fc01f7a03dea1, 0x8, 0x1f, {0x2c, 0x24, "00f4387006c2836f285175715452948eb748ac84dee6ccbe85f9941a6b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1105, 0x1000003}) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000100)={0xfffffffffffffffa, 0x400000000000006, 0x10}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r8 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x1000000000000, 0x1000}) mmap(&(0x7f000064c000/0x3000)=nil, 0x3000, 0x2, 0x12, r8, 0xffffb000) 2m15.401513886s ago: executing program 34 (id=691): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0x2, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) statx(r2, 0x0, 0x1000, 0x6000, 0x0) (async) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000004c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x262659b}}, 0x50) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) (async) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r5, 0x4004e502, &(0x7f00000001c0)=0x7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') (async) unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x200) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r7, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x803fc01f7a03dea1, 0x8, 0x1f, {0x2c, 0x24, "00f4387006c2836f285175715452948eb748ac84dee6ccbe85f9941a6b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1105, 0x1000003}) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000100)={0xfffffffffffffffa, 0x400000000000006, 0x10}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r8 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x1000000000000, 0x1000}) mmap(&(0x7f000064c000/0x3000)=nil, 0x3000, 0x2, 0x12, r8, 0xffffb000) 2m11.382617098s ago: executing program 5 (id=763): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f5dd000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = epoll_create(0x9) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x1, 0x0, 0xd6c6, 0x7}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x8) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) unshare(0xc040480) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x46, &(0x7f0000000280)={0x0, 0x0}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f00000000c0), 0x0, 0x12f, 0x2) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0x9aa6, 0x0, 0x1, 0xc2}, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x7ffff000) 2m11.239857001s ago: executing program 5 (id=764): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xeeee8000, 0x0, 0x0, 0x8, 0x1b, 0x0, 0x2, 0x0, 0x9, 0x9, 0x10}, {0x0, 0x4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x5, 0xff}, {0x3000, 0x5000, 0xd, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x80a0000, 0x2, 0x4, 0x0, 0x0, 0x0, 0xf7, 0xaa, 0x8, 0x0, 0x4}, {0xdddd0000, 0xdddd0000, 0x8, 0x6, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c, 0x5}, {0x0, 0x0, 0xd, 0x80, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x80, 0x40}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0xe8, 0x8}, {0x0, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x26, 0x3, 0x10, 0xfc}, {0x10000}, {0xeeef0000}, 0xddfcffd9, 0x0, 0x0, 0x22c, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) r5 = fcntl$dupfd(r1, 0x0, r0) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa1}, {0x6}]}) sendfile(r6, r6, 0x0, 0x7ffff000) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2080, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xeeee8000, 0x0, 0x0, 0x8, 0x1b, 0x0, 0x2, 0x0, 0x9, 0x9, 0x10}, {0x0, 0x4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x5, 0xff}, {0x3000, 0x5000, 0xd, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x80a0000, 0x2, 0x4, 0x0, 0x0, 0x0, 0xf7, 0xaa, 0x8, 0x0, 0x4}, {0xdddd0000, 0xdddd0000, 0x8, 0x6, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c, 0x5}, {0x0, 0x0, 0xd, 0x80, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x80, 0x40}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0xe8, 0x8}, {0x0, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x26, 0x3, 0x10, 0xfc}, {0x10000}, {0xeeef0000}, 0xddfcffd9, 0x0, 0x0, 0x22c, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) (async) fcntl$dupfd(r1, 0x0, r0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa1}, {0x6}]}) (async) sendfile(r6, r6, 0x0, 0x7ffff000) (async) 2m10.978230162s ago: executing program 5 (id=768): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000640)) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) 2m10.975345522s ago: executing program 5 (id=769): get_robust_list(0x0, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2m10.613918602s ago: executing program 5 (id=776): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1bb30100000002000000010000000c00060002"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x48c4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$BLKSSZGET(r4, 0x1268, &(0x7f0000000000)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x20, {0x2, 0x4e21, @empty}, 'veth1_to_batadv\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r7, @ANYBLOB="0600000021a500000c003a"], 0x2c}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x33, 0x0, &(0x7f0000000080)=[@clear_death, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) 2m10.206615786s ago: executing program 5 (id=781): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x24, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x0) listen(r4, 0x9) sync() flock(0xffffffffffffffff, 0x5d1f28f9a5fa22e3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x20000, 0x20) mkdirat(r8, &(0x7f0000000200)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdir(0x0, 0x18b) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f00000001c0)=ANY=[], 0x110) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x200c4004) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = dup(r10) setsockopt$packet_int(r11, 0x65, 0x10, 0x0, 0x0) 2m7.578908674s ago: executing program 4 (id=818): r0 = socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x5, 0x10001, 0x20, @local, @mcast2, 0x8059, 0x7, 0x9, 0x8}}) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f00000000c0)={0x0, 0x1, 0xa, r1, 0x7b79}, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) write$ppp(r2, &(0x7f0000000140)="b4c157bddd81e00b3b55ee3faced04c18216c4b81be1be27a8c8baa44c52baab2d0cf37c10c33e5566571bb048bf9c3d2ace035b29601ed156a5c9b3cd5ef761dadfefe6ae2fc1c37ef429657dd6060c9db939b43426e1a2126602536edb43cd155dbd3e09b82f2be06f25992c8b7de6cb276bc6409673", 0x77) (async) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r3, 0x1, 0x4002) (async) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x86e22) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000280)=r6) (async) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000002c0), 0x10) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000700)={0x3, 0x0, 0x17, 0x1f, 0x44, &(0x7f0000000300)}) r7 = timerfd_create(0x2, 0x80000) readv(r7, &(0x7f0000000d40)=[{&(0x7f0000000740)=""/64, 0x40}, {&(0x7f0000000780)=""/220, 0xdc}, {&(0x7f0000000880)=""/109, 0x6d}, {&(0x7f0000000900)=""/13, 0xd}, {&(0x7f0000000940)=""/241, 0xf1}, {&(0x7f0000000a40)=""/197, 0xc5}, {&(0x7f0000000b40)=""/194, 0xc2}, {&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/49, 0x31}, {&(0x7f0000000d00)=""/29, 0x1d}], 0xa) (async) getsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000e00)={@initdev, @local, @multicast2}, &(0x7f0000000e40)=0xc) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000e80)={0x8f, 0x0, 0xa}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000f80)={'ip6gre0\x00', &(0x7f0000000f00)={'ip6_vti0\x00', r1, 0x4, 0x5, 0x3, 0x2, 0x1, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78a0, 0x10, 0x4, 0xfffffffc}}) (async) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000fc0)={0x2}) (async) r8 = socket(0x26, 0x3, 0x5) r9 = accept4$bt_l2cap(r8, &(0x7f0000001000)={0x1f, 0x0, @fixed}, &(0x7f0000001040)=0xe, 0x80000) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(0xffffffffffffffff, 0x8010aebc, &(0x7f0000001080)={0xd000, 0x108000}) (async) r10 = accept4(r9, 0x0, &(0x7f00000010c0), 0x80800) getsockopt$IP_VS_SO_GET_DESTS(r10, 0x0, 0x484, &(0x7f0000001100)=""/69, &(0x7f0000001180)=0x45) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, r11, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x25}, @val={0x8, 0x3, r12}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r13 = syz_open_dev$usbmon(&(0x7f0000001340), 0x7, 0x408100) close(r13) (async) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) 2m7.578331254s ago: executing program 4 (id=819): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4004880) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x2040050}}], 0x1, 0x4) openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) futex(&(0x7f0000000040), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0xb) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) symlink(0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa0) lseek(r6, 0x2, 0x3) 2m7.574810234s ago: executing program 4 (id=820): socket$inet6_icmp(0xa, 0x2, 0x3a) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000840), 0x100600a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x70, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x1}, [@typed={0x59, 0x1, 0x0, 0x0, @str='/dev/rnlb0\x00\xe1\xb6y\xe7\xa3\xd3o\x8a\x84\xb7@~Z\xb4t\x87\x19\x87\xa6u\x80\xe4\x81\xad\xe7\xb4 \xc9\xcd\xd5o\xb6V\xc3\xebs\x8f\xba\xd5\xc4wm6\xb5\x85\xa2\x89<\fY\xc6K\xef[\xd0\x9a($R[C\x1d\x13/\x93\xea\x9f\xd1\xf8r\xca:\x88\x8d'}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002400)=""/4096, 0x1000}, {0x0, 0xffffffffffffffdc}, {&(0x7f0000000880)=""/225, 0xe1}, {&(0x7f0000000280)=""/69, 0x45}, {&(0x7f0000000140)=""/228, 0xe4}, {&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000400)=""/5, 0x5}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000540)=""/229, 0xe5}], 0x9) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$sock(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000800) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000001400)={0x0, 0x0, 0xfc000000}) fcntl$setpipe(r1, 0x407, 0x9) 2m7.549220046s ago: executing program 4 (id=821): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) close(0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x1000}, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000700000000fc000000000000000000000000000000ac1e000100000000000000000000100000000000000000008a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000700000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000200000000000000"], 0xb8}}, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x10101, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f00000001c0)=0x3ff, 0x4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m7.548554156s ago: executing program 4 (id=822): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000000c0)={0x1, 0x0, [{0x80000000, 0x0, 0x4, 0x0, 0x5, 0x9, 0x5}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 2m7.490333331s ago: executing program 4 (id=823): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x2e0a, 0x2, 0xd8, 0x81}, {0x1, 0x7, 0xad, 0xcf}, {0x1, 0x0, 0xa, 0x400}, {0xfff7, 0x5b, 0x2, 0xe25}, {0xfeff, 0x6, 0x70, 0x1}]}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x20000000) read$FUSE(r1, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sync() setsockopt$inet_tcp_int(r4, 0x6, 0x25, &(0x7f0000000100), 0x4) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000003000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r6 = syz_open_procfs(r3, &(0x7f0000000040)='totmaps\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}}) 1m53.98004777s ago: executing program 35 (id=781): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x24, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000fbff31000000ac14143500000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd00000000000000600002006362632861657329000000000000000000000000000000000000000000000000000081043bb5761707000000e9eaf7f359000000000000000000000000000000000000000000000000000000000000000000001c001700ff80000000000000000000002abd700028bd7000000000004c001400636d616328616573290000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000180000009b02206f264d8aab4ab874d9b9f9e8dc89958da37ab54ddf5cb73db3500c9f2f0bfa87f6c0427244125d71e43d4d470a79598201dd0dd748cde25c76c5ee90cec1cda88fecd5b5c2afc3086afc363268d96e68a477c6efa7146bc3a56cae9c6cf31f27161767808535dc322dba0a9cf10407eaa6641d26"], 0x1a0}}, 0x0) listen(r4, 0x9) sync() flock(0xffffffffffffffff, 0x5d1f28f9a5fa22e3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x20000, 0x20) mkdirat(r8, &(0x7f0000000200)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdir(0x0, 0x18b) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f00000001c0)=ANY=[], 0x110) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x200c4004) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = dup(r10) setsockopt$packet_int(r11, 0x65, 0x10, 0x0, 0x0) 1m50.8386474s ago: executing program 36 (id=823): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x2e0a, 0x2, 0xd8, 0x81}, {0x1, 0x7, 0xad, 0xcf}, {0x1, 0x0, 0xa, 0x400}, {0xfff7, 0x5b, 0x2, 0xe25}, {0xfeff, 0x6, 0x70, 0x1}]}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x20000000) read$FUSE(r1, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sync() setsockopt$inet_tcp_int(r4, 0x6, 0x25, &(0x7f0000000100), 0x4) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000003000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r6 = syz_open_procfs(r3, &(0x7f0000000040)='totmaps\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}}) 2.901336637s ago: executing program 7 (id=1992): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r3, &(0x7f0000001fc0)=""/4079, 0xfef) (async) getdents64(r3, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.880335819s ago: executing program 7 (id=1993): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101341) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64a00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000)=0x40, 0x4) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="1e6d", 0x2}], 0x1}, 0x4000001) (async) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="1e6d", 0x2}], 0x1}, 0x4000001) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) (async) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xe3071000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xe3071000) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000100)={{0x0, 0xa837, 0x4, 0x3b3, 0x2, 0x9, 0x2, 0x4, 0x10, 0x7, 0xffffffff, 0xfffffffffffffff7, 0x6, 0x2, 0x8}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f000016c000/0x1000)=nil, 0x1000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.814356144s ago: executing program 7 (id=1994): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f00000001c0)={0x0, 0x3, 0x5, 0x408f}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) r3 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.795378295s ago: executing program 7 (id=1995): prlimit64(0x0, 0xd, &(0x7f0000000140)={0xa, 0x88}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') write$tcp_mem(r1, &(0x7f0000000140), 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000440)=[@acquire_done={0x40106309, 0x2}], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[@cpuid={0x14, 0x18, {0xb, 0xde}}], 0x18}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000003c0)=ANY=[@ANYBLOB]) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x4, 0x2, 0x1, 0x5, 0x401}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af60, &(0x7f0000000000)) connect$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffb}, 0xe) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0x34, &(0x7f0000000340)=0x80000001, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x24, r8, 0x20, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x24}}, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.797513885s ago: executing program 7 (id=2012): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000000c0)={0x77359400}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="b9004d564b0f32b9250a00000f32b8010000000f01c1c4a1fc517170c422d1a6a67268000066b863008ee8470f00d4362e2e66470ffcb1006000000f06b914080000b8b0070000ba000000000f30", 0x4e}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r5 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000140), 0x12) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000000)=[@request_death, @free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 1.474232441s ago: executing program 8 (id=2022): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r1) (async, rerun: 64) recvmmsg$unix(r1, &(0x7f0000006500)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40010003, 0x0) (async, rerun: 64) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) (async) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r3, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f00000000c0)=""/128, 0x80}], 0x3}}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005a0001", @ANYRES32=r5], 0x1c}], 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$bt_sco(r2, &(0x7f00000001c0), 0x8) (async) listen(r6, 0x8) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'ip6tnl0\x00', 0x1}, 0x18) (async) syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x96, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4], 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x2401) (async) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9) 1.473833991s ago: executing program 8 (id=2023): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x78528a686ef81f3b, r0, 0xdd837000) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @empty, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r3, 0x7800, 0x7800, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x66, 0x4, 0x40, 0x4, 0x0, @broadcast, @multicast1}}}}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x2010, 0xffffffffffffffff, 0x10000000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, 0xffffffffffffffff, 0x45809000) (async) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = dup(r4) accept4$unix(r5, 0x0, 0x0, 0x80800) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) (async) unshare(0x62040200) (async) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000000180)=""/158, 0x9e}], 0x2, 0xc098, 0x9) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0xfffffff6) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x2d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) (async, rerun: 64) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_X86_SET_MCE(r10, 0x4040ae9e, &(0x7f0000000080)={0x2800000000000000, 0x8000000, 0xb1, 0x8, 0xd}) (async) ioctl$BLKRRPART(r6, 0x125f, 0x0) 1.472528841s ago: executing program 8 (id=2024): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') socket(0x10, 0x5, 0xde3e) (async) r0 = socket(0x10, 0x5, 0xde3e) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000002000010000ffffffffffffff81"], 0x20}, 0x1, 0x0, 0x0, 0x40048840}, 0x0) r1 = getpgid(0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) fcntl$dupfd(r2, 0x0, r2) (async) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x1, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de81000040"]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000195e4ce485000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084000500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fe8000000000000000000000000000000200000000000000000800000008000000000000"], 0x13c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1}, 0x8000) (async) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1}, 0x8000) open(&(0x7f0000000000)='./file1\x00', 0x109901, 0x1) (async) open(&(0x7f0000000000)='./file1\x00', 0x109901, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r9, @ANYBLOB="00022abd7000fddbdf251d00000078002f8038000380140003800800020001000000060001000200000020000380080002000000000006000300a3aa00000c0004000200aaaaaaaaaaaa08000100090000000800010033060000240003800c000500080000000000000008000100010000000c000500010000000100000008000100001000000c000600020000000000000008000300", @ANYRES32=r2, @ANYBLOB="978c2bf27706375ef18a87883c7938b59aafb3c058c0d3d3e0d548d3fcc048994bf8c7af86f3e171d4df08fba9d6e92bd240ab821739eb5843c0a29dc3a623cdde021d3d3d802956e02aeed5c27b4d2dee9ddea05af9c2f7df5f7f60cb1a6c9ba715f714b1acf36b8e56f32580096489aa87fd41ffbbccc2f646d6d8bd51d2717e1431281771df016e044dcb64fe774fb6797171923456b99de953fee2bb8889a3672aa17f659d775845a6e51f8e36e0e0b5c0bd000000000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4004050}, 0x20000081) r10 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r10, &(0x7f0000000000), 0x10) (async) bind$can_raw(r10, &(0x7f0000000000), 0x10) ioctl$sock_proto_private(r10, 0x89ea, &(0x7f00000000c0)="8a86e3e3a85dd5021cccd497c8bc47130c332cc791dd41d380dcbf075bd14a73f3b8dc755569d34e737c055db0952f48ea56cfab979240930667dd9cbffa47d6") setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 1.429756745s ago: executing program 8 (id=2025): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x310240, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$KVM_IRQFD(r2, 0x40806685, 0x0) 1.417210195s ago: executing program 8 (id=2026): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x7c0, 0x1125, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x80, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x1, 0x30, {0x9, 0x21, 0xd, 0x4, 0x1, {0x22, 0x9d9}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc2, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) umount2(&(0x7f00000003c0)='./cgroup\x00', 0xd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 1.264633098s ago: executing program 6 (id=2030): socket$inet6(0xa, 0x80002, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000500)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0xfffffffffffffffd, 0x2, 0xe}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.264104058s ago: executing program 6 (id=2031): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000001c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x110, r0, 0x74886000) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x39d}) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x47bb) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="66b9790100000f3266b9160b000066b89d0a000066ba000000000f30ba210066ed66b8050000000f23c80f21f866350800c0000f23f8c0f30064650f1626f4ba360ff3d264f20f5cf1660f388210260f08", 0x51}], 0x1, 0x43, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160009000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.214843812s ago: executing program 6 (id=2032): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000)=0xa000000, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x51, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x2, 0x0, [{0x40000104, 0x0, 0x6}, {0x40001ff1, 0x0, 0x9}]}) ioctl$KVM_NMI(r5, 0xae9a) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x80, 0xa, 0x9, 0x9}, 0x10) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7dd, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x10}, 0x1, 0x7}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x6, 0x4, 0xefffffffffffffff, 0x2, 0x1000, 0x2000000, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41900}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) chown(0x0, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.199006493s ago: executing program 6 (id=2033): syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905", @ANYRES32], 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@pppol2tpv3, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/133, 0x85}], 0x1, &(0x7f0000000240)=""/33, 0x21}, 0x2ccf083ec5b8ed9e) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="0c0100002d0001000000000000000000140073000000000000000000000000000000000009000080976b640868000000db0001"], 0x10c}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x8019, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendfile(r3, r2, 0x0, 0x7ffff000) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f000042b000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x2}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) 797.991475ms ago: executing program 7 (id=2038): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000001c0)="430fc73f0f2390b9800000c00f32f30f090f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e00b9600500000f322d1aa80000460f1c46004b41ad", 0x4b}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0xffffffffffffffa2, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002281", @ANYRESOCT=r1, @ANYRES16=r0], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x2401) close_range(r0, 0xffffffffffffffff, 0x0) 560.977475ms ago: executing program 6 (id=2039): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x28080, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xbe) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000003c0)={0x40, 0x16, 0x4, "abe7c7a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000640)={0x1c, &(0x7f00000004c0)={0x0, 0x7, 0x23, "f214e1e2ab795242244ede36c5466650dad24e1281a0f98eff19c66d1db23ab1197155"}, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x3c}, 0x3, @in6=@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x0, 0x4, 0x2}]}]}, 0x17c}}, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000280)={0x14, &(0x7f0000000000)={0x20, 0xe, 0xe4, {0xe4, 0x23, "275a61846526304039f7acd1f5029eddb52de7afad1bb37c62e9c7ac0a51a665761adc02fbc9ff8c3dd43aaaf4feb0b23cc15a86829bb1a6e7fed27fd9f637004a776cab6cb434e496c8b71e6d7f272eae68a02683454bd5a4c2219e80e920d04822a925310a9967c85ceba6c7fd04f31e331b69ee640a3aea36971b58e77e79cc608fefbcdf31fcfa33fae98c1ac9ef9cd6394cbcc082b7b8e9ba5b031af62caae774f9fe13bd93686feccd58e6875c0e26697291e068f5426ffc786df1e1dfa3e7a4bccfb8e94ecc5b9d3f637b68471e12ebf813847fd947edc01cfaa769dfc2e1"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x20, 0x0, 0x63, "d766f60b9c88bb9a60a6abd3826a620333289e16e3330a6f0824e44e07f882da9d58dc40a151a29bdb5f906e398623de466693b2151385c459d808038696fc629adc836e2c01aa40d90c50788897a67f1ec286defdc2d9c65bde7860f8d1a148011e0d"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x8, 0x6, 0xfea, 0x3a5f, 0x1b1, 0x2, 0x1000, 0x1, 0x4, 0x5616, 0x1, 0x9}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xbd76c000) 207.943993ms ago: executing program 2 (id=2047): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c4, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2b380bedc500927331dce9dc2fcc8693fc1634eeea650628bc5c"}}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "961fb1955a9ca5ed37b25e2bdb382e33632ab3e66da85ef35c8ab807e53a5b76"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "04b67b636d9f534f969cd7985b36ea6b297a912d479f"}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x83}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff587}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x10c, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x60}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x44c3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2980ebe3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x23c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x88}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ec0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7cb3ceca}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc79c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x74}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x859}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1200, @empty, 0xc89}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @loopback, 0x7fff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x78b}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @private2, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000940), 0x200000, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000009c0)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e21, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000980)='veth0_to_hsr\x00', 0x1000, 0x2, 0x903c}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000a40), 0x200, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000a80)={'veth0_macvtap\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r3) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r5, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x2bcd}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40), r4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xe4, r6, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x260}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xaf9211e}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x39ed}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff04}]}, 0xe4}, 0x1, 0x0, 0x0, 0x11}, 0x4000) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e40)={0x110, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd807}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x130}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2d}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x3}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x805b}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9a9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb6}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x8) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x90, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000814}, 0x840) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000011c0), r3) r8 = syz_open_procfs$userns(0x0, &(0x7f0000001200)) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x8c, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000014c0)=0x0) fcntl$getownex(r3, 0x10, &(0x7f0000001500)={0x0, 0x0}) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000001540)=0x0) syz_clone3(&(0x7f00000015c0)={0x13030000, &(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400), {0x4}, &(0x7f0000001440)=""/15, 0xf, &(0x7f0000001480)=""/38, &(0x7f0000001580)=[0x0, r9, r10, 0xffffffffffffffff, r11, 0x0], 0x6, {r3}}, 0x58) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x74, r12, 0xc03, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x789, 0x7d}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x1c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x21}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x12}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0xeb99605c71595d0d}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40084}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000017c0)={0x2, 0x0, [{0x774, 0x0, 0x2}, {0x814, 0x0, 0xfffffffffffffffa}]}) r13 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001800), 0x1, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r13, 0xffffffff80000902, 0x0, &(0x7f0000001840)) 207.451203ms ago: executing program 2 (id=2048): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x74886000) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000001500010027bd7000fbdbdf25ac14143dec0000000000451900000000000000000000000000000000000000004e22051a4e220fff0a0080805c0000003d246fc76a431edfbb0332c5b9"], 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 206.178533ms ago: executing program 2 (id=2049): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = getpid() syz_open_procfs$namespace(r2, 0x0) ptrace(0x4207, r2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') chmod(&(0x7f0000000040)='.\x00', 0x35e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000100)="68e7ee2c0d000000b473fec986ddec", 0xf}, {&(0x7f0000001180)='\x00'/12, 0xc}, {&(0x7f0000000540)="1a3febd50ed22b51278289322c44fda2bd39cdfd6d32e46deb8ac013c3", 0x1d}], 0x3) setuid(0xee01) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) io_setup(0x8f0, 0x0) setns(r1, 0x24020000) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) 205.498313ms ago: executing program 2 (id=2050): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="19510d705bf8d1c8d9c17dc1ecf9fd51fa9e4db8eaf8ba0c3632a1eecbda31eedb96bd7fc392759c90709c456bc9"]) r2 = socket(0x840000000002, 0x3, 0xff) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40844}, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2a00000006"], 0x2a) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000009c0)=0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000380)={0x50, 0x0, r12, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r11, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x6, 0x0, {0x5, 0x2, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, r14, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r11, &(0x7f0000006680)="8e503ba12553ae35664093744598ff2ed98313cfeff69bbb1f3ba451bc98d27cf439225d75522ac543a153ac5284bf131a87e53d0b20f8dddcb2af841def3e560070344be18fcee4983553ba856738012b512e3dc760fb581a17e5622e0e22e22546476d6cc6d6d94d828a2fa22ec77a1cf082f5ca88f1f8976e8b6c3a7a537f8f50b432bf4df69c912bfcc539a65851f86b23f24e714e0643429ec1198ea1647316538a3ce23fad21e19e087c0dedc7aa6d5e4b0dcbfcbe22c857f5a848aef15126b9ecc810249cbbc82c8b6ba49e46b71cb79f6ef9449d0838b9130946398941a4c64f6e2d84118b60ed4ccfed8a26446032fecf87434e71b7989253f64feb6d2e1013673a9600b1915174e55ad78d1d666fb75c24142e44ceca89a18ca66b4b5e66ba953ca42fb6a36d4a3612a2948393f67a7d1d0957a8553c73855fd007abbb6c3d4bbc943f3b102bb2ea6f40e714516a3de91acc6e1468e9e7b66ee57815da23054153d9d5fca6bdb26ed8f7754d88154d46df2f2e4964ee5d7f47e9218d6877c3b232c945cddeef70b24e5c6c434fa30fd0a2ad1c348c3658494f7cfdfb6bb56b43f1d9b2d049c1166161c3232ada01f3c789b2d6958cdd9f044a654f8397d64cb928f4d57f0c4e9739afbf3afbf0e9f84d56a1aba6db7538d98404b7cdfa97f8770a6df4a13145c1d0cfb7ec0349b5639d9180eada54b2f8c12472fb379901e6d514fbfd6d41d2dd77eb42608a784fc016ae48fb126776b10be5c03f62ec90987e766d20d821a17c03e0d867f4aa3f4902fb803e8261833aa9397e107e6c100daa3d8b792bf4b5081ef56670762b5ae3f528836029ca332f44fcc5cf3750f39091985032afa8dd2e80b69cbffc29aa13fcdc0ff811a108794b4154ecaf70e58a9f70a573cf9d1040e23f5a04a873a583e4ab0fa5f77d620c60f0a45cdc789b849e9e8746528846bbbf8251a84f2aa97ccc3e49f4c9b6abf0248344e86a71486eba9e62ff5920bb80ceccc5813f068da0d5aa208c440b7889118d2f4e8baf22a84544f232d6a3a1aedf31d5fc22f0ece56ac611b1363ff35e5071342a0257d3f146dc3ea1cc795d2f06afeb1d6995e50eb2d2d21dc6c4377a2626dd9486446517d03a4a03c43ef2e255a92b775c198bfe92c21375599235aac33c69190bbbfaad76860d0c9e70ad53273460c370b06bdf94ee8bfc31c48609ff6de0d39f873ec11e8c2835f17b3f18891c8ae335a7074fb5a5c794007a327fbb2622e71d62e43f50a00cc59b7eeb3f8ceed5d87fa5eb62a7a8c74ec90b1096a0b24606bf14b1f13f78ea4ab522304c7ca1d7b8ae47b5859f6a0d9baf3b6ffd29a4fb6782732febcfa51446aa87691ac81bf891717fbf8e4deaccac63477d3bc7b8ed52e9b6ca3fd39eefee6a337c2ad76df9739e2fbff34bf36027be0cfbebfe5b2fd168d75b2fd64479e2faf85654c013955e04044a9b7bf8b3d42da91962796bfe6eb53fe29e36a7a7512a155c712ae561d885703cb26d72e6f1df3976cc665960f871f3110309ffb6b5a79e54057a7a286c62c11e973ef671e86051686f77992f985d729740f38fecf83e03a1fef542cd6b4cee48546f67873a9c682c4afe4a5beccfc64085c622c5a0b5a1f6355f938d16925cabe61426a837c48fd6ad790afe54448fb296a03322f3427e132e8c0623bd311af8a619c2d91415e851744941700f09a2d8471def9dbc448c6aefb4c664f8902c872cc7de9d26e8b300b55b1d08a80257095efef35d9b497487607a22bc95c68f39aeeae243e76ccd40dd1b7ccad6eb39b35d91d239b2b005c8bb6e50037ffb1253276e20384398a5e97ad705fcffd04c720539ddf80cf4e929e82e3fec3d7542e0b7495733eb5da29f6dff5a34ec88a71881f660a5bc9481e755fd3c5683e95ed97cc91ab0edf49afda477aea42bc436b364747d973d61be806e1e63b6982e42814a13c5adb3bd767ec724d2d654afb106198fba6b4c798f4b82f329c2b8055ac4d247da971e32eb4cb971c9ac99d18c0a216d48dd7dffd372e0cad9ce6f05b06e47842c2f53b7c987139c6ddac3446fdb163342f8ca8f5401db91d324a6b710f28dece5839d37760c2515d6ad815a746cd7ccd3a438a5d3f28ca331f6874dedbab107c64127a7590a2813c1287ca977807827d52df80a9c19bc7ef335791da1be53c89f6de8ee1f02f26069b786f22bfd23cd8366e3ca02c0b296d0966d7f8fdbc0ef06895c547224f1a01c92d5f43f81b35539469d1fd9cd76dbf8cdd21b479a6474578863c9906ce6b12d0dbf5a458dafc042fcabe64aeebeb70c0da9300ed22e5d2851c5e77b20f9da1cd26cd810e0b8f1ba17d7c819e8a8ad86aa5bc4eb64748b75ab4a85f05bb1dc542234ac175eced1fe8f3fbd86f1c7349a360f5af0244818df303dce6842ea7afa722be19cf162d671256e5659c77c5569d827b28dc44b7dbb7d9433bc9eff26edbff36cf796b8afb285393f2dab6bb9a3ed40dd065ba8a8ab62cb575e696b97a2853b1700835ae429b983a5bb88972e367f5996a21e9a3b00e943e15c1163fdee023e1cf6e8dc42655cb175590fb6b8c46148b37957c5026aa94e96cbb71bcf9e7899c489edd9b34ca2d3d0dbd29f135cb158652ded6c959820b26a5fb6e8f3a6cfb80bcfa52c36ae0a3868914bda36b5ac09d2ae6cfccff9859550cfc5c6c3b30cddf6a2130c0c563445ae10634f38c65a47aeb8c72a0f25a6747a6787e703e1723303dd6d5bd4303240cb6d4659ee32d80b92859327e882ec84d9bb2a6976d9c6fa450d5598c6af1c92fc4ed7614e3192a06e62e704278424e2e5d521ec4f2cbd87d9b8a65405e807f6247e3f9228e8a5c44e31c9de9247d1b8248ce71d34663cbfcce728c9f08628629fca3f334566118aeb86470886147d714d2dce240408fac3c971b851dd33cb7997e238a2362195ba4f0e83d5c1c5039328817f258d6645bcbc20512398a7a34e2288585b4dc626c6867f3af5a0f573492cdb04e5613bd95bcfe6a61541c3912b4e841b34db2820ed5aca226dcba496f9586b83ab44ed3b9f34cfd2397f36dc4f9811815b975a208b6cd163031296b289b7d202036bca9c4e862f6b1d6356c3c54d47de63e0d0b38e7b9e41e1b25d94fbd03853f786fcf2325020355469e52dd2cfc879e2758382f609173cb2c01775030d1d536af97f5bd0a4b71ad9bf3e5becfccd7dce72fa8882733d2c32cab1338ce67f301be74b1c51dbacff9bdc22868f3f16531cb86b7597aff03040a821c4f7cae2b5b92db792f327dce81e79ac83d4ca15aa248ddc2fad518ebd360c5ac8ff3636e15e8ff61501b1e5c6338847ff43c0d3ed38c87aa623c318c8facffb72fbad8bf4effdd2013dc60ad91f1f5a791905b572321ce0956ffded80e2152b0672875fe71923de673ce343a665d327560c5267223b6fa636ef188b94d4a42884721b4f2d51f90ff3e5145aab164fb56982648a7215601d23017b749c01b684082e250330d109af89bf5d20ca788fbd95fd8d1c128aad3306c4e1bd1c054def7b7ea1948e3c95826078991d234808f55c2314706c8177d7674b2378792afe66b2d65484b481b0e52d8b60e0980163fcf2fffa2cd81f4dbf57afd76fd4e71ec8a6604a697fcaf57e65bba50489f6f0c5b4c046a14303eac05700550ee10fa29d8f68a9eb02fa504b640865f7e2c21f1451ed7d75c90a4734ba64327bc3597b5aff23d0a8f1229f0539720bece2b980f85e11c5ecbf3a560e5dedc40e1260349ccbc647d4d9763b17a45fe1b63e5d16e1a49d55c0011e3ab898b64a6618682bd7bb7e8ed18dafa1b462f20f6aaf2d7c4777a6fb73aa7a1720d67a644f4f4b0bc3ff965e696fd3513979f2e72289dec447af56b240380cfa2a9ce38a808e961d26b6ee6810c75778e9d23a93b3f79b3b293f138f23ef2596b60ecd4afc2036debb7e14f61774d84c1325ee7b8f95dc80c12b001e32e894516473a82aa2c24b5ff7f8c3374e245f1b3ff2a8cf0cc33ecd4b9b7528c34cf54d77756ed3e1b74a0e66c9c1dd8e53c123872c084f70e8a04efe8a8c3527ba75f4d9ced8469229ad7453a1376cae90b155638696103216a07b02e93e3924c4a98d159ce8633b2c8bda44ef28f37ba5edf1e80184c9ac2c8b0db77096dbf2f866536ac4f5ee9eed4bb8dfe0dad4361e901450ba499c119aa1af2a1a7c527b09562a47d8260bd7647e29ee422432f063a84d195e9c843e6f6fa684dd044bd09b8cb3e7a976df68049f09caba37b69a595cea61667f2631e561be743309568b4c37fdaed8ebc628889bc3bf9c5a63bc74e9358a9c2228f51370eb483ee39e682cd4f56f15a16217904c6189ef50044e04f244da23d1c9f41a5209f4f485df4ad8d1922203d365eb11102d48c93c09b700e177aef00f8bf729c0406b89de32490fca998bd34f80c99be60601d4de10e9a86a5a22652eb9df948daa66529b6445cdde70ad125d06e41a3469216233a8b9eeb928f2d041eded321d518f0435ca377e90ae49e95793aabccf299c1f1a82ddec49b2b8732aecd1610d5f09cc5e509d4065c5cfb4edc55f6a15fbaf4dea24439ea95b63bae312ed90e47787000810f22ab9b6aa0622ab969fa30b724b24d82447d6a357468b2d1ec61a80ae680ff7b8b894158218b0e63f99103879f3c1dae33aedec60a1e755755604e33a6698cd0e378b0a0b04017278411f33eade9c4c0e3b7d0d6e62fdc3ebf5559310e0a2913d5aff1ce1bead51578b3879c0e25d96a7a150ba655c97875d864c3a6d5b595ff9dd9698857b3b0bab2d087bbf7f80f5a7225cdebf794ede16a61ca73201f311f87ef9cececb8fd07b2bf384a22a8ae988a5e91e6355e26ac923e78004968bf7f4ae3b319e61a422a43841831a51e2c41df8a118da5239c87b4b0aceb32854413d53e0228090babc167ed6600041390ce04e96c94c65c51fdc00e617e4ed870fe9ed2bbef84c1e1f3f796b2867b0f383b6e01ba2b82ecfced722ac5a7c092716d18b9b41674c342a1a6a7ef961893d451648cce5d0ccb4c180e0493a53f5453de43a6535c486acbfb9f480f3255f998831b684a468a88840e1e7e8a310ef296ce89bef65b7e54265c88bff204e48963cea9945608260e5de37b949acacc938e8e2de9fff925022c010f94a0cd6c7bf16d4e3132034a8a3301f1c1950b9a31ee8227b17cbf460db666f6207a59783064115eac2d4f29f9483ebcd34e8792809d5c25a380b2137bbcd7cda502f4a41a043f7d626e922adec9b4c6478ac0df9842bd4e8912deb2ad2026461510ca392383ee9a7ad0388ae499951a4283db39ca57ed9bebf43dcaa6caa391169077a189641fda3151d8e3a3a0b525dcafa2d9d7b2a01468e658c10c27a8ba74b487a968b05031a3d53b59139068b28ca87c5bfd9db867c0e9b9abd91142c96dbf8883e1a89db8d96c9f0a8999a4f9d6b07f32d6f8bb2ea6d2eaa8a531edf85f25aef35c84eb4bf3f46ab4213602be20cad885d404ef47fafc7793247247848f1c3a06ea31c23d0cbffa07aa5981714dc85736e95cd4d60ed1f25351b1c723e4f042f55f02d24a089862df124c75cc4f618853914439c1406a393a0f1ec0f2346f4cbd6beb17713149d67b9bf1854c814bd8ba3a199218e6eac655db998c955df382c8dee2b4d30c750a63a08e9a88009840e96a331bde3767bce177fc5c44528cb673e862e24c2dc2399be1435cd20916e9e060f8bef39d4b47f335dde4493e0e44b0f619822a35e69b7c5d93dc69575ff71ced7c858e43dbee46f4e50846288cbc8fecbb9291d455a015fdd6e1412aec0e6104d0377074b8e160ec7d813bbc6d3b8e6b0256bce8d255d7a592b408cdf6e63164c99d94f00a693e06c2ecba9dc6d36c6a35697c1647f942df4c805c18344b8e5ac885689068f864c395e8c970702e40cf6c683d10455c7ad75fc035ae260f359c2d8c91305406c6f56ec535be445601c75ffdde1758904787f29a558d0f3bd04bfa08f1612a7ee8a7acf129ed5eb854bba757d34afa354098ed8b4e3a599db4b7611a665fcbbb182a0774cb026a00714d8b91c7fb8691b629b6a93f92da2f3701348885dcefe5a548c90101e50dbaf3f4907611623f7616bcea943bd3feedecf3b3681b4d04a938ac83d9f18a21991a90dc17005e7c56d2e09a0f4ad9f3c676e7da478e96122046d0a167f7e1a28d97d514aa68d24dac8501a1a35ddb6f3703311b26bfa3319361ff5e4d38cd55a04ef1b4fb417a3b638cde7f8569531a22c0fa12ad3a55dfe3c2642205fe1ba0c82d36f8815ec52f6381fe789fcf89efb305498a9b1f0ffafe01bcc5581f5b5d195bba77797085ab1837fd081cf5f086da2a16b6a7f8ca9efbc4c9cf771961b70626120e3715b16b222932291e4ee2449591b1807d56a53d4d86f25011704e7d5efcb799ab130ec2aacd54afd3c43c8acda1c5874ce23234b090c4eaa8ddaedf979b1218a5b9dfb36b8196ce05924dcdc7f50d96b95d0c288551a0498ff23f56c7ccdfb8966480477849c7471bea99cb0af35dbcaa5e781b5ddecf3cde51d78067aed9ca267550dfae119a3d83710ecb92fe80841837b41a40d262f5fad16c20203d1cc3455ca63ebdf0f5dbb7a498b4629dcb87333f2d58726871e6b5adf60faa0f8c9cb4718005e5e199457330da1a11cd0d7e78f617b6805fff8fa45c2cb56e1e17904773e165d2a39470ce1616418e7e15481c798afed92efad9c2babcc3e3346f8022ce30b3e1db015a2b9f5dbd4560ee9776c77eb9cff5cf2af28ebf1085650e29bd8dac01b814e6c285bf964da2eb1a442aeb671589a02c29d58208829c9501c355644ac28c38835f4025dcdabfd3852b1a16e45e9c032e97f7f2f0f612739c6569f44731692e3f3b97ba5bcd0b7f2dea1ee6303b5f92514c022e54aa4c587eff74a5d509c17785686c613bf6b778e3624ff3653674e6daab3f788ec9cf879f06957a673a20fdccf721ced05a0d23e074de82614f775a84dfcd31c621cf0369e28791ab742b62f271218fa1bc8681e9d41b4a93b05cc693013d54d367b1e6e1a7e74b43b44b920192ed8fbb63b89f393e5ffab584d7c201d1b99b7bc6907033109986a4fe7bb79e803315c4df94ed471cba889e148645fd1748374015ea8c696ff64bf6d23bce7e5efa7c7e6215ceefa938cd88aa0374da4ee1e10cbfa96d5283b4a0867f4d76b8492fc618e2bca34ba9bc2ff3368756080a78a1ece2f0d1d1cc30cb721677de3c4cd6da378697c40419bc1f2184b86b8e40abd627aab9c308d8fd2db8daf8b43225003ea9124c11dfcbd1b6ea959a86623e360b40c381d991892c1fa6c0c81bb4d03d8d3656cedd1e48539192fc8bd1474ce961159816dcdc76e95ed9d9893e91a0ca670cd1152cb014310facf952fa9fd0d30900196b604c10596c1a31c1e70416824c207656426b09ef9b558496ae87fc7449bfdba0d5628e9af6397385ddadc986424fde545c07664fb6ef2756ed9e443e39257eef2179fb9e4a9e84062f9b6048125151e2e7fad2560df277323b5e22ab2731dc802d6f372d2a335b5da7e5a86508329b3dceb56f0d4f9f6f9e48507af3ec99fc172c237e67ece3d51198a033a9c66f3243ef694893af85421ff6f93ecb95eacceba5fdc1a76810e999a40733b46433328b24ee17b718b135b74dd535202c7966de2de5a26412e600971704bb90007e42d3e6a3acd33e7358da6b32883c9ad30c2abb1cdef7452e211734c6fb6d199a397bea8aa3cf1f014929941c34ba06096e70d852fc420effc7924ec29c03bea29f289c82338f0115e00de549007456d5867253a5b9bb4493bcff815a3100fc45a0de0aad7b0b5c641ed1be3e8f07fb3b1a8a496ecfd3dff5abf0d8f5854621faeb4a9920d8c52b7a0338d49fd21d99c24e1943de3ba2668aea7bc95bcf21e2bf0b2d5f899f33d0cec31b60df4ef5a23e1b173cc89390c8bc3ee96e38de06f6016a2b0eafe86af9dc59bead4f5f948a81b1008a95e3ab39f8009bdb4f268f3002245e73ee2ff50cf1cd37e867cbe44ad370b9336e0dddcffb6dd8f2f79155235300bce6385e544105e6d278d345870216e61100337a871ab51b2cde74fe976e1f8b77a90bb8b51eefe7e4201db41915f482edbe1f8ae268314d5af95ffdeb94aba3f4e316990792d281a123d7febbba7f6abaed7ccfc0c567d4bd1c2d9ca217535167c9a09f1ad0ecaa99cc08338fead5deef7fab77d2082d893b91c27f8ea4e48e052a2a31c8e3f9510c4ce94ef16053bcc25eafa324e5a1d045a3de8f7d731e58ec9130427552323bcfde47f6b55b5634e8cb190fe183af132f12d72ef5e4d98508b57106ccb647ab505369c728958a0789c67ee80acc4bbf41b97fa56d8701c3ec5ead411aed16882dfb026c50c28b5fcc442c432837a82f8bfd47650b83aa71b909be61ea77cc029a0c615f8e390874995d19e224c38349c64bc166f50c54332d1a3eff0071d7a0b11a901c56a847b93ab5bd0bfad8f965cbfb53c2184c588fb7dbc5c693a3ade89b303e801a650b79c1ea957aabed937998b5df77ff29fd43515e8a5ffe441e323fefa45a2775237e1c749897d448f1f3ef60c7755d1a1441b96a136a86d341471d57c68c859813656658266c40b8bb8bafded8ed0d940f8c5954923eb43ad5afb58eb452d6430990bc924afb97191f31cd1a1f58e30b0c243f9636245c459280d16da1df1a30ff63de677554d6b252487455e8aff91370c4a0ba9f341384cf8483d18b9d3f2fc51b07ba8a5fa795d7925189ca344f0fddb8bf55e35013f6fab3806b3c4d17499ec1ae819d4f3aa6b6a570c2ea68558fa33373394584dbf11d41f7059b55f186bd54bdc30dea390872737bf0312f4c68dc963d28d5b218eca6314e23b7381cfbcd01c325d9a3869f1176eb82c183b37d65c8500a48e9bbb1c465e27bfb668a16100e5384d9116aa35f3b00b4ee3bc84700ab17283d4db6b420e6140d14d09b51ad020fc8e505d2c820ac307d45b211213c18487ce12dff233a5caf87cd94a77d0eba69d61452f41c1f82cbe32b567a39a4615a6d2155cc73c3b90dc55daf33c8d9eba3eb0e182c79dede1293dd30840ebf048df8a93e38d0136e856d94ea105cd04323406dc429b5551538625109105d88b1ac480d0fb1e9d1977099707f9f9534b683d855c4d3c30a29c6678a3221e0dea7772f8859f572420708da9a030ddf973cf9f221404117b05efb76bb08ecf34aa9b36b0418c74f90a07e8e5c91e1d7c8a8ea596c0de9b10c222e9588c2bbc77d860b7197b42b42a1ab834ce24fccbbe20f2579ec6dbd4efb9aa1a3d2e062de594d289273e98342440045a0c134e400003b50d4243826b029ecd177cf3d2cf3d164ddc58f88a970a0bbdc7f0d60271cab0df2dde79d1b929cd3028effccbe94c05008f4261297024e4f72604d52db9da7b0e5f2f4f59ebe77b319c54aaab9581a8355b75594eb6dc0fc25e91052c89764256ca464f9f6e45bc34d6e5aa28e1fd93997b58f21feff551aa3ecb5375c19ee4543f7339418c11b9ea18fe2637a9bc9744cc9fcb21a7643eb87683694732154bd1eec746f1c57bac65cf18a83267ea437f7993644c510ac44307703ea28b20e52644dbaabbe9ee1e23a38b29b91cf9077fecdb98ff4e4749c9d6ad2901c5a891c07a8b0c26ad1f8126e6db537df7fff65486afeb85eda80e2a04d09d46720330700267cbcf205b5c00076c01d9db0a64d5426864d14cce1781098afdc28f9f5948ab7791627baf78c3e9df2c0ed9ce50b083bc7a34ee0087f4efde579e2dea313e4e20580c5e63d5ef4509c05a9dc38ced91340bbb9cf948bb03ea5e60c666a1a5c4acd385d0c1a01797b9b3183f4afbc925dd2641d21410b4b1af2f21f8cca330fbc08834e1e8210fdcf332f70f08b48a2655cf017ec8a19640f2f263c54876d6f4ad2193be944667f6498baa32225d2b5b82abd3f2fc64033f1db9adff6b1c788555d5ffa1a35d4a691802447b163ba9a615d6c958036528bbab84230d676145054828d530f0e3af417ad0480eaf2004b9002b644bcd8f0ecf860c31766ace95769ab4fd01f297c595b45e6c7b1c9f662044f43fc82b6244e5d08b1e556599096c034600e20ff000d996b6ba3a6700116127b9468c9567ad920ddcf7ccf9c0a74f49984e24a7aaa2321ee58583c1bdba668cb98c319f682ffc5957015ba1799930d4b676bd3bc76037f6bc2d9ddcb47efebd366a90dc7e67076ebc25e2ef2929a89faee06aa04538a3ae7b196dfecd33725ce9f859c5df4713b220ecd18b1613ba76aebbe8f9f93eeaea9e88e46e7ed24c4efbd86fcd57a4f9fc76152175782871ab211a18ae303be8e9459aab930597d17875c5f5f24d9b16bd8dc4e25f6a7a1de05763da11ee7e26e1e32ee0a5ab2de5d069d03a6ea95a33abc1025d59800fccfff1f0e0f7335e2778b8731cbae94828dbe70507c5369f36d457e98d6042e342cbffde2ee74e05cf0f8aa7185de485e5050294472cd8c7ae03977b62cb287a9d6e4d66650dbc4d89e58ad4f7c24d46573acf85f633d1af73cf655788b431bf22315bdae78d9f6f9cfe32330cbf77bb0195a60244d4bcd0ea35b94bcdf7255ff58f1fb11a09a06747337c95f332a0ade622d49ce0f2943517fb4da8049f3c1b53cb68475c2eb52551d40cbeaf5e79a748c5314bb531b4fc28494b65ee8513427e1fd3cc990fe4ef5ead14b65f1c3e9e0598edf42e2862e2eb180b3e674fc3005859ac56ad17022a8f48b49dcc97e991cfece1d52b7ca82e711944a877567ca0da0663276480d69fa4be56f425bb84dc9177d3e3ed45fb737ce026b8df38336f9efedb89a8650f9fb73918d300c909e9f9189458e1930f09b05433980e79a2eacd0dda32852bdb1a417e4ba62b83d0e17ac8d39834f41c8cd49517013ec658c4e10b38d0788df96764d13ce074271b51041671240549d18540271c8898a5c9e4be4895881235d59666a1f0f3b3cd098786afd6ab4781b73275232b488fb3d9eff77e71f8448a95c653fc80d069c15aa2a80d5799e6c45eb27ea8d6675f28f7aa7cfe3cef877c91ecf3e576e942a20312ffb48a64a91876ec5d1ad2f6a68946e73db4785894736106906731793c3482365d4151051c8d5f16dcb0348628e3aba4087ea8c9ce24bb93190fa12916f529c8eed6dfd3f5bc24d09b1ad377699de3f687b392ec921d81e35dc27bd14be4d004e713c3d07cf600255d45fdfb326b4327c9507c6f69d01236eb9383133dbaa787ba37de14a12e850ec60381a9ffab939ce16cb9b490685343048c0933bc280e809fc8114096ae2d303bbcbbc941b70b5d1d03f59f0b534fa195cbcf34e57d2aaee9c1dcddb5eafd8399fd1d53bfdb48a6f6d3153bb903ce411800f7220bdcfa312ac603672c163a0896b85409859b817cd304e73f278634fab0b1dbe226d7e4f93f220180c3434c7c22ac3143e06702f9a21e66a46d4980bd20d9b0c62846362d0a1151584a28a87902dd0f35187850d501c68900", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x0, 0x1, 0xfffffffffffffff3, 0xfffffffffffffffd, 0x9, 0x0, {0x2, 0x80000808000080, 0x3, 0x6, 0x800000000003, 0x100000000000008, 0x7ffdffff, 0x4, 0x6, 0x6000, 0x7fffffff, r13, r14, 0x0, 0xcc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000d00)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000e00)=0xe8) syz_fuse_handle_req(r1, &(0x7f0000002ac0)="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", 0x2000, &(0x7f0000000f80)={&(0x7f00000003c0)={0x50, 0xfffffffffffffffe, 0x3, {0x7, 0x2b, 0x7, 0x2020000, 0x7, 0x1, 0x101, 0x39, 0x0, 0x0, 0x10, 0x5}}, &(0x7f0000000300)={0x18, 0x0, 0x5, {0x8}}, &(0x7f0000000440)={0x18, 0xffffffffffffffda, 0x0, {0xe3f}}, &(0x7f0000000480)={0x18, 0x0, 0x80, {0x2}}, &(0x7f00000004c0)={0x18, 0x0, 0x498, {0x4}}, &(0x7f0000000500)={0x28, 0x0, 0x1, {{0x70, 0xd1}}}, &(0x7f0000000540)={0x60, 0x0, 0x400, {{0x3, 0x1, 0x4, 0x2, 0x0, 0x4, 0xfff, 0xfffffffc}}}, &(0x7f00000005c0)={0x18, 0x0, 0x9, {0x1}}, &(0x7f0000000600)={0x11, 0x0, 0x6, {'\x00'}}, &(0x7f0000000640)={0x20, 0x0, 0x9, {0x0, 0x18}}, &(0x7f0000000740)={0x78, 0xfffffffffffffffe, 0x0, {0x5a49, 0x0, 0x0, {0x4, 0x8001, 0x7, 0x6, 0x0, 0x2, 0x6, 0x2, 0x8000, 0x4000, 0x7, r4, 0xee01, 0xfffffffa, 0x1ff}}}, &(0x7f0000000880)={0x90, 0x0, 0xfffffffffffff000, {0x4, 0x3, 0xe, 0x7, 0x0, 0x2, {0x1, 0x3, 0xffffffff, 0x3, 0x8, 0x4, 0xffffffff, 0xfffffffc, 0x985, 0xa000, 0xa83c, r5, r6, 0x0, 0x80}}}, &(0x7f0000000980)={0x30, 0x0, 0x8, [{0x1, 0x1ff, 0x2, 0x401, '-\x00'}]}, &(0x7f0000000a80)={0x160, 0x0, 0x7, [{{0x1, 0x1, 0x8001, 0x1, 0x10001, 0x735, {0x1, 0x1638, 0x4800, 0x3f6, 0x2, 0x6c, 0x0, 0x5, 0x7fffffff, 0x4000, 0x5c, r7}}, {0x1, 0xb35, 0x5, 0x5d, 'fuse\x00'}}, {{0x0, 0x3, 0x3, 0x3, 0x5, 0x17a, {0x2, 0x2000000040000, 0x7, 0x57fc, 0x0, 0x7f, 0x5, 0x496, 0x932, 0x8000, 0x7, r9, r10, 0x3, 0x1}}, {0x2, 0x7fee, 0x13, 0x0, './binderfs/binder1\x00'}}]}, &(0x7f0000000c00)={0xa0, 0x0, 0x4, {{0x6, 0x3, 0xe, 0x9, 0xf28, 0x9, {0x3, 0x4, 0x9013847, 0x83, 0x1, 0x8001, 0x7ff, 0x7, 0x3, 0x8000, 0x2, r13, 0xffffffffffffffff, 0xe, 0x2}}, {0x0, 0xa}}}, &(0x7f0000000cc0)={0x20, 0x0, 0xc4e4, {0xed, 0x0, 0x6, 0x1}}, &(0x7f0000000e40)={0x130, 0x0, 0x9, {0x40, 0x81, 0x0, '\x00', {0x1000, 0x101, 0x68a94cec, 0x8, r15, 0xee01, 0x8000, '\x00', 0x1400, 0x5, 0x2, 0xffffffffffffffff, {0x4, 0x7}, {0xffff, 0x8e3f}, {0x6, 0x6}, {0x7b4d, 0x3ff}, 0x101, 0xad, 0x98, 0x8}}}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x54, 0x0, 0x0, 0x80}, {0x6}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 205.024233ms ago: executing program 2 (id=2051): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x1, r1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x400800, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2, 0x13}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0x6, 0xcbff, 0x0, {0x5, 0x3, 0x200000003, 0x6c, 0x7, 0x40000000000f, 0x3, 0xfffff2df, 0x101, 0x4000, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', 0xee01, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 195.825774ms ago: executing program 2 (id=2052): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x10) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f00000000c0)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x68, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x1dd, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r3) syz_genetlink_get_family_id$tipc2(&(0x7f00000013c0), r3) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r3) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0xded4a1e4217ab166) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r7, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x7ffff000, 0xa) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYBLOB="65e86ef6deed835eed2d96e1d86761e3fb6caf9c66473a5a9701da1b3771bdfee27692669b03ac5da58015d5c832bf0307e9c27433bc8cb1842447d8a52322e5942ab8069727b176638be88a5cb3146f2d25bcd37073659528224b4497fdf4", @ANYBLOB="20002dbd7000fedbdf2507000000050005004901000008000400030000004c00018014000400fc000000000000000000000000000000060005004e210000060005004e210000140004000000000000000000000000000000000105000200ac0000000800060004000000080004005e07000008000200060000002000018014000400fe8000000000000000000000000000aa06000100020000000c000180060005004e24000008000300010000000800040002000000"], 0xbc}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x6, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) timerfd_settime(r2, 0x2, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x31, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 73.087344ms ago: executing program 8 (id=2053): r0 = userfaultfd(0x80001) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x114, 0x4}], 0x10}, 0xc4) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000080), &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00', 0x19, 0x3) open(&(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x3f148d96c8c04982, 0x1eb) 0s ago: executing program 6 (id=2054): setresgid(0xee00, 0xee01, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x1800490, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): h errno=-22 [ 151.659458][ T3840] netlink: 416 bytes leftover after parsing attributes in process `syz.6.1145'. [ 151.903266][ T1160] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 151.935555][ T45] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 152.042231][ T1160] usb 7-1: device descriptor read/64, error -71 [ 152.074311][ T45] usb 9-1: device descriptor read/64, error -71 [ 152.119118][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 152.119137][ T36] audit: type=1400 audit(1756234617.006:7063): avc: denied { setopt } for pid=3854 comm="syz.2.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.145109][ T36] audit: type=1400 audit(1756234617.006:7064): avc: denied { ioctl } for pid=3854 comm="syz.2.1150" path="socket:[25878]" dev="sockfs" ino=25878 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.309567][ T1160] usb 7-1: device descriptor read/64, error -71 [ 152.554711][ T3865] /dev/rnullb0: Can't open blockdev [ 152.561752][ T36] audit: type=1400 audit(1756234617.418:7065): avc: denied { read } for pid=3864 comm="syz.7.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.589687][ T1160] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 152.748022][ T1160] usb 7-1: device descriptor read/64, error -71 [ 153.004825][ T1160] usb 7-1: device descriptor read/64, error -71 [ 153.122370][ T1160] usb usb7-port1: attempt power cycle [ 153.207443][ T45] usb 9-1: device descriptor read/64, error -71 [ 153.464511][ T45] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 153.496631][ T1160] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 153.519097][ T1160] usb 7-1: device descriptor read/8, error -71 [ 153.603519][ T45] usb 9-1: device descriptor read/64, error -71 [ 153.658187][ T1160] usb 7-1: device descriptor read/8, error -71 [ 153.860201][ T45] usb 9-1: device descriptor read/64, error -71 [ 153.913645][ T1160] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 153.936214][ T1160] usb 7-1: device descriptor read/8, error -71 [ 153.977918][ T45] usb usb9-port1: attempt power cycle [ 154.075254][ T1160] usb 7-1: device descriptor read/8, error -71 [ 154.191745][ T1160] usb usb7-port1: unable to enumerate USB device [ 154.342282][ T45] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 154.364136][ T45] usb 9-1: device descriptor read/8, error -71 [ 154.503046][ T45] usb 9-1: device descriptor read/8, error -71 [ 154.758537][ T45] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 154.781057][ T45] usb 9-1: device descriptor read/8, error -71 [ 154.919427][ T45] usb 9-1: device descriptor read/8, error -71 [ 155.036632][ T45] usb usb9-port1: unable to enumerate USB device [ 168.003742][ T3882] Unsupported ieee802154 address type: 0 [ 168.012169][ T36] audit: type=1400 audit(1756234631.856:7066): avc: denied { ioctl } for pid=3879 comm="syz.8.1163" path="socket:[26671]" dev="sockfs" ino=26671 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 168.129139][ T3899] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.192112][ T36] audit: type=1326 audit(1756234632.034:7067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.2.1170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f43b118ebe9 code=0x0 [ 168.192366][ T3904] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.231442][ T3908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.277001][ T3911] tmpfs: Bad value for 'huge' [ 168.289514][ T45] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 168.292125][ T36] audit: type=1400 audit(1756234632.127:7068): avc: denied { connect } for pid=3910 comm="syz.2.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.393147][ T1160] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 168.457250][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 168.463718][ T45] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.473959][ T45] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 168.484620][ T45] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 168.493823][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.501891][ T45] usb 7-1: Product: syz [ 168.506052][ T45] usb 7-1: Manufacturer: syz [ 168.510761][ T45] usb 7-1: SerialNumber: syz [ 168.516483][ T45] usb 7-1: config 0 descriptor?? [ 168.553477][ T1160] usb 9-1: Using ep0 maxpacket: 32 [ 168.559938][ T1160] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.572502][ T1160] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.584257][ T1160] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 168.593893][ T1160] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 168.602505][ T1160] usb 9-1: Product: syz [ 168.606963][ T1160] usb 9-1: Manufacturer: syz [ 168.613535][ T1160] hub 9-1:4.0: USB hub found [ 168.830761][ T1160] hub 9-1:4.0: config failed, hub has too many ports! (err -19) [ 169.163238][ T538] usb 9-1: USB disconnect, device number 11 [ 169.166154][ T3885] rust_binder: Write failure EFAULT in pid:317 [ 169.172583][ T45] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 169.189614][ T45] asix 7-1:0.0: probe with driver asix failed with error -71 [ 169.198882][ T45] usb 7-1: USB disconnect, device number 21 [ 169.716888][ T36] audit: type=1400 audit(1756234633.455:7069): avc: denied { map } for pid=3916 comm="syz.6.1174" path="/proc/319/task/320/pagemap" dev="proc" ino=26711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 169.717201][ T3917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:319 [ 169.754016][ T3920] netlink: 'syz.6.1175': attribute type 4 has an invalid length. [ 169.847479][ T1160] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 170.007841][ T1160] usb 9-1: Using ep0 maxpacket: 8 [ 170.014758][ T1160] usb 9-1: unable to get BOS descriptor or descriptor too short [ 170.023383][ T1160] usb 9-1: config 4 has an invalid interface number: 147 but max is 0 [ 170.031709][ T1160] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 170.041965][ T236] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 170.049570][ T1160] usb 9-1: config 4 has no interface number 0 [ 170.058398][ T1160] usb 9-1: string descriptor 0 read error: -22 [ 170.065913][ T1160] usb 9-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 170.075084][ T1160] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.211054][ T236] usb 7-1: Using ep0 maxpacket: 8 [ 170.217777][ T236] usb 7-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 64 [ 170.228164][ T236] usb 7-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.241339][ T236] usb 7-1: config 1 interface 0 has no altsetting 0 [ 170.250536][ T236] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 170.260074][ T236] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.268661][ T236] usb 7-1: Product: ᮃ彽풬冘䔷ɦ枩ᡏᚮ吷鱁ƕ䰄픹⧣흘뒅ꃃ뮚깰࿑懍⢿꟠ￒ [ 170.280610][ T236] usb 7-1: Manufacturer: о [ 170.285127][ T236] usb 7-1: SerialNumber: ᐌ [ 170.291083][ T3922] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 170.300251][ T1160] usb 9-1: USB disconnect, device number 12 [ 170.522693][ T36] audit: type=1400 audit(1756234634.213:7070): avc: denied { getopt } for pid=3921 comm="syz.6.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.545043][ T36] audit: type=1400 audit(1756234634.241:7071): avc: denied { write } for pid=3921 comm="syz.6.1176" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 170.548921][ T236] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 8 proto 1 vid 0x0525 pid 0xA4A8 [ 170.586158][ T236] usb 7-1: USB disconnect, device number 22 [ 170.593406][ T236] usblp0: removed [ 170.848313][ T3924] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 170.856717][ T3924] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 170.865164][ T3924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 170.865625][ T3924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 171.046497][ T36] audit: type=1400 audit(1756234634.708:7072): avc: denied { bind } for pid=3927 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.047312][ T3928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.086895][ T3928] veth0_to_team: entered promiscuous mode [ 171.105293][ T3928] veth0_to_team: entered allmulticast mode [ 171.249618][ T3946] /dev/rnullb0: Can't open blockdev [ 171.325854][ T3944] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 171.348676][ T3953] rust_binder: 3950 RLIMIT_NICE not set [ 171.477517][ T36] audit: type=1400 audit(1756234635.110:7073): avc: denied { sqpoll } for pid=3956 comm="syz.8.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 171.506364][ T3962] rust_binder: 209: no such ref 0 [ 171.511829][ T3963] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 171.519424][ T3963] rust_binder: Write failure EINVAL in pid:209 [ 171.783282][ T236] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 171.955378][ T236] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.966450][ T236] usb 9-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 171.975620][ T236] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.984340][ T236] usb 9-1: config 0 descriptor?? [ 172.033745][ T3967] rust_binder: 1015: no such ref 2 [ 172.038927][ T3967] rust_binder: 1015: no such ref 0 [ 172.044226][ T3967] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 172.051411][ T3967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1015 [ 172.200347][ T36] audit: type=1400 audit(1756234635.784:7074): avc: denied { unmount } for pid=2513 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 172.245918][ T36] audit: type=1400 audit(1756234635.821:7075): avc: denied { getopt } for pid=3977 comm="syz.7.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.266040][ T3978] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.267543][ T3979] rust_binder: Error while translating object. [ 172.267555][ T3978] rust_binder: Error while translating object. [ 172.267594][ T3979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 172.274098][ T3978] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 172.296795][ T3978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:151 [ 172.305018][ T3979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:151 [ 172.429677][ T236] ortek 0003:05A4:2000.0011: hidraw0: USB HID v0.00 Device [HID 05a4:2000] on usb-dummy_hcd.8-1/input0 [ 172.537591][ T3992] input: syz1 as /devices/virtual/input/input22 [ 172.618845][ T3996] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1201'. [ 172.728432][ T4001] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 172.980724][ T236] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 173.151935][ T236] usb 7-1: Using ep0 maxpacket: 16 [ 173.160346][ T236] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 173.168731][ T236] usb 7-1: config 0 has no interface number 0 [ 173.174918][ T236] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 173.185122][ T236] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 173.196590][ T236] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 173.205843][ T236] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.213886][ T236] usb 7-1: Product: syz [ 173.218279][ T236] usb 7-1: Manufacturer: syz [ 173.223041][ T236] usb 7-1: SerialNumber: syz [ 173.228478][ T236] usb 7-1: config 0 descriptor?? [ 173.233760][ T4001] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 173.241121][ T4001] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 173.462846][ T4001] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 173.470819][ T4001] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 174.107391][ T4038] rust_binder: Failed copying remainder into alloc: EFAULT [ 174.107430][ T4038] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 174.114863][ T4038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 174.123276][ T4038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1057 [ 174.145143][ T4040] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 174.171307][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 174.171346][ T36] audit: type=1400 audit(1756234637.626:7078): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 174.740890][ T338] usb 9-1: USB disconnect, device number 13 [ 174.758381][ T36] audit: type=1400 audit(1756234638.177:7079): avc: denied { bind } for pid=4044 comm="syz.8.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.759324][ T4045] tipc: Started in network mode [ 174.783051][ T4045] tipc: Node identity 100, cluster identity 4711 [ 174.789537][ T4045] tipc: Node number set to 256 [ 174.811548][ T4047] overlayfs: failed to resolve './file1': -2 [ 175.354780][ T45] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 175.527103][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.540203][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 175.549654][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.560003][ T45] usb 3-1: config 0 descriptor?? [ 175.592921][ T36] audit: type=1400 audit(1756234638.954:7080): avc: denied { connect } for pid=4058 comm="syz.7.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 175.615748][ T36] audit: type=1400 audit(1756234638.982:7081): avc: denied { execute_no_trans } for pid=4058 comm="syz.7.1227" path="/58/file1" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 175.664899][ T338] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 175.826475][ T338] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.836527][ T338] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 175.849657][ T338] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 175.858948][ T338] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.868311][ T338] usb 9-1: config 0 descriptor?? [ 175.997643][ T236] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 176.008590][ T236] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 176.018875][ T236] asix 7-1:0.251: probe with driver asix failed with error -5 [ 176.020531][ T4064] rust_binder: Error while translating object. [ 176.026481][ T4064] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 176.029350][ T236] usb 7-1: USB disconnect, device number 23 [ 176.033364][ T4064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:354 [ 176.072991][ T337] Bluetooth: hci0: Frame reassembly failed (-84) [ 176.210934][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 176.217068][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 176.226034][ T45] usb 3-1: USB disconnect, device number 31 [ 176.306145][ T338] kovaplus 0003:1E7D:2D50.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.8-1/input0 [ 176.791039][ T4087] input: syz0 as /devices/virtual/input/input23 [ 176.821131][ T4092] random: crng reseeded on system resumption [ 176.837352][ T36] audit: type=1400 audit(1756234640.113:7082): avc: denied { ioctl } for pid=4091 comm="syz.2.1236" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 177.166399][ T4057] incfs_lookup_dentry err:-13 [ 177.166399][ T36] audit: type=1400 audit(1756234640.431:7083): avc: denied { ioctl } for pid=4056 comm="syz.8.1226" path="/83/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 177.239582][ T338] kovaplus 0003:1E7D:2D50.0012: couldn't init struct kovaplus_device [ 177.247850][ T338] kovaplus 0003:1E7D:2D50.0012: couldn't install mouse [ 177.255932][ T338] kovaplus 0003:1E7D:2D50.0012: probe with driver kovaplus failed with error -71 [ 177.269598][ T338] usb 9-1: USB disconnect, device number 14 [ 177.339838][ T4097] rust_binder: 4099 RLIMIT_NICE not set [ 177.344977][ T45] rust_binder: 4096: removing orphan mapping 0:4120 [ 177.621872][ T236] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 177.783497][ T236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.793621][ T236] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.806726][ T236] usb 3-1: New USB device found, idVendor=056a, idProduct=0061, bcdDevice= 0.00 [ 177.816005][ T236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.824811][ T236] usb 3-1: config 0 descriptor?? [ 177.877649][ T4109] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1240'. [ 178.260164][ T236] wacom 0003:056A:0061.0013: Unknown device_type for 'HID 056a:0061'. Assuming pen. [ 178.270232][ T236] wacom 0003:056A:0061.0013: hidraw0: USB HID v1.01 Device [HID 056a:0061] on usb-dummy_hcd.2-1/input0 [ 178.284918][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 178.291065][ T439] Bluetooth: hci0: command 0x1003 tx timeout [ 178.297607][ T236] input: Wacom PenStation2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0061.0013/input/input24 [ 178.318777][ T36] audit: type=1400 audit(1756234641.506:7084): avc: denied { setattr } for pid=4124 comm="syz.6.1245" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 178.318967][ T4125] rust_binder: Error while translating object. [ 178.342316][ T4125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 178.348588][ T4125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:361 [ 178.359707][ T338] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 178.377615][ T4127] overlayfs: conflicting options: userxattr,verity=require [ 178.427520][ T4130] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.476034][ T236] usb 3-1: USB disconnect, device number 32 [ 178.542871][ T338] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.553022][ T338] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 178.562640][ T338] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.563529][ T4135] /dev/sr0: Can't lookup blockdev [ 178.573926][ T338] usb 9-1: config 0 descriptor?? [ 178.593188][ T4137] 9pnet: Could not find request transport: xen [ 178.662849][ T36] audit: type=1400 audit(1756234641.824:7085): avc: denied { ioctl } for pid=4146 comm="syz.6.1253" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 178.915806][ T1160] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 179.015578][ T338] lua 0003:1E7D:2C2E.0014: unknown global tag 0xe [ 179.022124][ T338] lua 0003:1E7D:2C2E.0014: item 0 0 1 14 parsing failed [ 179.029414][ T338] lua 0003:1E7D:2C2E.0014: parse failed [ 179.035047][ T338] lua 0003:1E7D:2C2E.0014: probe with driver lua failed with error -22 [ 179.075449][ T4161] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.076007][ T4161] rust_binder: Write failure EINVAL in pid:1099 [ 179.083822][ T1160] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.093731][ T4163] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.100672][ T1160] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 179.114602][ T4169] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 179.118713][ T1160] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 179.128918][ T4169] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 179.137745][ T1160] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.159576][ T1160] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 179.160410][ T4173] overlayfs: failed to resolve './file0': -2 [ 179.169579][ T1160] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.186914][ T1160] usb 7-1: config 0 descriptor?? [ 179.194452][ T1160] usb 7-1: MIDIStreaming interface descriptor not found [ 179.198856][ T4175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.203338][ T4175] rust_binder: Error while translating object. [ 179.210254][ T4175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.216640][ T4175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1112 [ 179.235118][ T36] audit: type=1400 audit(1756234642.357:7086): avc: denied { ioctl } for pid=4177 comm="syz.2.1262" path="socket:[27330]" dev="sockfs" ino=27330 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.413858][ T45] usb 7-1: USB disconnect, device number 24 [ 179.447871][ T896] usb 9-1: USB disconnect, device number 15 [ 179.578808][ T338] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 179.762613][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.775775][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.786593][ T338] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.799962][ T338] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.809370][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.837409][ T338] usb 3-1: config 0 descriptor?? [ 179.866128][ T36] audit: type=1326 audit(1756234642.947:7087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.7.1265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3a058ebe9 code=0x0 [ 180.231153][ T896] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 180.392741][ T896] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 180.404001][ T896] usb 7-1: New USB device found, idVendor=056a, idProduct=4002, bcdDevice= 0.00 [ 180.413485][ T896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.422965][ T4195] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 180.496194][ T36] audit: type=1400 audit(1756234643.536:7088): avc: denied { accept } for pid=4196 comm="syz.8.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.530623][ T4182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.539467][ T4182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.575788][ T338] usbhid 3-1:0.0: can't add hid device: -71 [ 180.581922][ T338] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 180.591660][ T338] usb 3-1: USB disconnect, device number 33 [ 180.739622][ T4200] overlayfs: failed to resolve './file0': -2 [ 180.860870][ T896] wacom 0003:056A:4002.0015: unknown main item tag 0x0 [ 180.867970][ T896] wacom 0003:056A:4002.0015: unknown main item tag 0x0 [ 180.875112][ T896] wacom 0003:056A:4002.0015: unknown main item tag 0x0 [ 180.882170][ T896] wacom 0003:056A:4002.0015: unknown main item tag 0x0 [ 180.889181][ T896] wacom 0003:056A:4002.0015: unknown main item tag 0x0 [ 180.896312][ T896] wacom 0003:056A:4002.0015: Unknown device_type for 'HID 056a:4002'. Ignoring. [ 181.129926][ T4195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.138762][ T4195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.151555][ T338] usb 7-1: USB disconnect, device number 25 [ 181.151583][ T896] rust_binder: 4193: removing orphan mapping 0:4120 [ 188.829129][ T36] audit: type=1400 audit(1756234651.325:7089): avc: denied { write } for pid=4205 comm="syz.7.1270" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 188.861604][ T4206] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 188.864083][ T36] audit: type=1400 audit(1756234651.335:7090): avc: denied { open } for pid=4205 comm="syz.7.1270" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 188.902268][ T36] audit: type=1400 audit(1756234651.363:7091): avc: denied { ioctl } for pid=4205 comm="syz.7.1270" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 188.930690][ T36] audit: type=1400 audit(1756234651.363:7092): avc: denied { create } for pid=4208 comm="syz.8.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 188.951388][ T36] audit: type=1400 audit(1756234651.428:7093): avc: denied { getopt } for pid=4220 comm="syz.6.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 188.992950][ T4232] overlayfs: failed to resolve './file0': -2 [ 189.016209][ T4234] __vm_enough_memory: pid: 4234, comm: syz.7.1279, bytes: 18014402804453376 not enough memory for the allocation [ 189.085693][ T338] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 189.117690][ T538] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 189.165706][ T4241] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1282'. [ 189.175128][ T4241] SELinux: security_context_str_to_sid () failed with errno=-22 [ 189.246016][ T338] usb 3-1: Using ep0 maxpacket: 32 [ 189.247681][ T36] audit: type=1400 audit(1756234651.727:7094): avc: denied { mount } for pid=4242 comm="syz.6.1283" name="/" dev="configfs" ino=2567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 189.252693][ T338] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.274590][ T36] audit: type=1400 audit(1756234651.727:7095): avc: denied { search } for pid=4242 comm="syz.6.1283" name="/" dev="configfs" ino=2567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.289949][ T338] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.308485][ T36] audit: type=1400 audit(1756234651.727:7096): avc: denied { read } for pid=4242 comm="syz.6.1283" name="/" dev="configfs" ino=2567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.331678][ T338] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 189.341509][ T36] audit: type=1400 audit(1756234651.727:7097): avc: denied { open } for pid=4242 comm="syz.6.1283" path="/" dev="configfs" ino=2567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.373720][ T338] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.376183][ T538] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 189.385178][ T338] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 189.394637][ T538] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.414606][ T538] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 189.423177][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.428083][ T36] audit: type=1400 audit(1756234651.765:7098): avc: denied { write } for pid=4242 comm="syz.6.1283" name="/" dev="configfs" ino=2567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.442344][ T338] usb 3-1: config 0 descriptor?? [ 189.463744][ T538] usb 9-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 189.479647][ T538] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.496172][ T538] usb 9-1: config 0 descriptor?? [ 189.931617][ T538] elecom 0003:056E:00FE.0016: item fetching failed at offset 0/3 [ 189.940214][ T538] elecom 0003:056E:00FE.0016: probe with driver elecom failed with error -22 [ 190.102027][ T4264] netlink: 'syz.7.1292': attribute type 2 has an invalid length. [ 190.111409][ T4263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 190.112394][ T4263] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 190.169143][ T338] usbhid 3-1:0.0: can't add hid device: -71 [ 190.175290][ T338] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 190.185856][ T338] usb 3-1: USB disconnect, device number 34 [ 190.358217][ T538] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 190.497209][ T538] usb 7-1: device descriptor read/64, error -71 [ 190.749274][ T4274] overlayfs: overlapping lowerdir path [ 190.755793][ T538] usb 7-1: device descriptor read/64, error -71 [ 191.010510][ T538] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 191.104591][ T4308] netlink: 'syz.2.1306': attribute type 1 has an invalid length. [ 191.113125][ T4308] netlink: 416 bytes leftover after parsing attributes in process `syz.2.1306'. [ 191.124048][ T4302] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 4096) [ 191.124082][ T4302] rust_binder: Error while translating object. [ 191.143479][ T4302] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.152164][ T4302] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 191.162915][ T538] usb 7-1: device descriptor read/64, error -71 [ 191.182067][ T4302] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:209 [ 191.214661][ T1160] rust_binder: 4299: removing orphan mapping 0:24 [ 191.240137][ T4315] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.250891][ T4315] rust_binder: Error while translating object. [ 191.261540][ T4315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 191.268537][ T4315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1149 [ 191.300954][ T4315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1149 [ 191.324053][ T4319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1151 [ 191.334017][ T4320] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.334243][ T4321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1151 [ 191.448949][ T538] usb 7-1: device descriptor read/64, error -71 [ 191.485916][ T4334] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1316'. [ 191.506710][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.520603][ T4334] bridge_slave_0 (unregistering): left allmulticast mode [ 191.528014][ T4334] bridge_slave_0 (unregistering): left promiscuous mode [ 191.535210][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.588090][ T538] usb usb7-port1: attempt power cycle [ 191.605814][ T4334] fuseblk: Bad value for 'fd' [ 191.673516][ T45] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 191.833991][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 191.839833][ T45] usb 3-1: too many configurations: 143, using maximum allowed: 8 [ 191.849009][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 191.856919][ T45] usb 3-1: can't read configurations, error -61 [ 191.951570][ T538] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 191.973981][ T538] usb 7-1: device descriptor read/8, error -71 [ 191.994337][ T45] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 192.049051][ T896] usb 9-1: USB disconnect, device number 16 [ 192.080778][ T4344] rust_binder: Error while translating object. [ 192.080811][ T4344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 192.087165][ T4344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:267 [ 192.119185][ T538] usb 7-1: device descriptor read/8, error -71 [ 192.155172][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 192.161305][ T45] usb 3-1: too many configurations: 143, using maximum allowed: 8 [ 192.170934][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 192.184794][ T45] usb 3-1: can't read configurations, error -61 [ 192.197696][ T45] usb usb3-port1: attempt power cycle [ 192.400756][ T538] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 192.434001][ T538] usb 7-1: device descriptor read/8, error -71 [ 192.572290][ T45] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 192.581409][ T538] usb 7-1: device descriptor read/8, error -71 [ 192.593591][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 192.599360][ T45] usb 3-1: too many configurations: 143, using maximum allowed: 8 [ 192.608466][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 192.616441][ T45] usb 3-1: can't read configurations, error -61 [ 192.687597][ T4357] fuse: Invalid rootmode [ 192.700265][ T538] usb usb7-port1: unable to enumerate USB device [ 192.747538][ T4363] netlink: 'syz.8.1326': attribute type 16 has an invalid length. [ 192.753644][ T45] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 192.755404][ T4363] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.1326'. [ 192.776264][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 192.777414][ T4363] rust_binder: Error while translating object. [ 192.781445][ T4363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 192.781858][ T45] usb 3-1: too many configurations: 143, using maximum allowed: 8 [ 192.787898][ T4363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:284 [ 192.798560][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 192.824835][ T45] usb 3-1: can't read configurations, error -61 [ 192.831303][ T45] usb usb3-port1: unable to enumerate USB device [ 192.889385][ T4365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.889713][ T4365] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 192.896903][ T4365] rust_binder: 223: no such ref 1 [ 192.909939][ T4365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 192.910479][ T4365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 192.931225][ T4367] fuseblk: Unknown parameter 'grup_iD' [ 193.136787][ T4380] fuse: Invalid rootmode [ 193.198015][ T4382] fuse: Bad value for 'user_id' [ 193.202960][ T4382] fuse: Bad value for 'user_id' [ 193.938817][ T4393] SELinux: Context system_u:object_r:unconfined_exec_t:s0 is not valid (left unmapped). [ 194.185471][ T4407] rust_binder: Failed copying into alloc: EFAULT [ 194.185496][ T4407] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 194.191949][ T4407] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 194.199607][ T4408] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1339'. [ 194.200499][ T4407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:303 [ 194.211750][ T4408] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 194.237262][ T4408] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 194.265345][ T4412] binder: Binderfs stats mode cannot be changed during a remount [ 194.893919][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 194.893942][ T36] audit: type=1400 audit(1756234657.011:7112): avc: denied { bind } for pid=4420 comm="syz.8.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.145713][ T4439] fuse: Unknown parameter 'grӐ.7o00000000000000000000' [ 195.354778][ T4443] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1353'. [ 195.364864][ T4443] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 195.372273][ T4443] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 195.379793][ T4443] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 97) [ 195.379812][ T4443] rust_binder: Error while translating object. [ 195.390645][ T4443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.397019][ T4443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320 [ 195.406568][ T338] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 195.407976][ T4443] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 195.437446][ T4443] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.438516][ T4443] netlink: 'syz.8.1353': attribute type 4 has an invalid length. [ 195.547056][ T4445] rust_binder: validate_parent_fixup: fixup_min_offset=38, parent_offset=36 [ 195.547079][ T4445] rust_binder: Error while translating object. [ 195.555923][ T4445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.562360][ T4445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1165 [ 195.578104][ T338] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 195.598404][ T338] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.609394][ T338] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.619765][ T338] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 195.633687][ T338] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 195.642826][ T338] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 195.650964][ T338] usb 7-1: Manufacturer: syz [ 195.656510][ T338] usb 7-1: config 0 descriptor?? [ 195.693283][ T4450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1170 [ 196.103847][ T338] usbhid 7-1:0.0: can't add hid device: -71 [ 196.124343][ T338] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 196.141828][ T338] usb 7-1: USB disconnect, device number 30 [ 196.271324][ T36] audit: type=1400 audit(1756234658.282:7113): avc: denied { map } for pid=4475 comm="syz.7.1366" path="socket:[30090]" dev="sockfs" ino=30090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 196.291743][ T4480] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false [ 196.327925][ T4486] fuse: Unknown parameter 'grӐ.7o00000000000000000000' [ 196.390205][ T4488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.400468][ T4490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:471 [ 196.416926][ T4492] sock: sock_timestamping_bind_phc: sock not bind to device [ 196.436334][ T4492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 196.436365][ T4492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:473 [ 196.448342][ T36] audit: type=1400 audit(1756234658.460:7114): avc: denied { create } for pid=4491 comm="syz.6.1370" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 196.450512][ T4492] ./file0: Can't lookup blockdev [ 196.458152][ T36] audit: type=1400 audit(1756234658.460:7115): avc: denied { mounton } for pid=4491 comm="syz.6.1370" path="/file0" dev="ramfs" ino=30116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 196.544413][ T4494] rust_binder: Error while translating object. [ 196.544463][ T4494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 196.551188][ T4494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:475 [ 196.797583][ T36] audit: type=1400 audit(1756234658.787:7116): avc: denied { name_bind } for pid=4502 comm="syz.6.1375" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 196.838614][ T4505] rust_binder: 486: no such ref 3 [ 196.851964][ T36] audit: type=1400 audit(1756234658.834:7117): avc: denied { name_bind } for pid=4506 comm="syz.6.1377" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 196.921956][ T4514] overlayfs: failed to resolve './file0': -2 [ 197.046596][ T4521] rust_binder: Failed copying remainder into alloc: EFAULT [ 197.046619][ T4521] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 197.054123][ T4521] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 197.062558][ T4521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:502 [ 197.140286][ T4524] overlayfs: overlapping lowerdir path [ 197.169740][ T36] audit: type=1400 audit(1756234659.124:7118): avc: denied { execute } for pid=4526 comm="syz.6.1384" path="/selinux/commit_pending_bools" dev="selinuxfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 197.304931][ T4538] rust_binder: Error in use_page_slow: ESRCH [ 197.304965][ T4538] rust_binder: use_range failure ESRCH [ 197.311484][ T4538] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 197.317047][ T4538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 197.325526][ T4538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:514 [ 197.379709][ T4540] overlayfs: failed to resolve './file0': -2 [ 197.415447][ T36] audit: type=1400 audit(1756234659.358:7119): avc: denied { create } for pid=4541 comm="syz.6.1389" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 197.602955][ T4546] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 197.663868][ T896] rust_binder: 4544: removing orphan mapping 0:112 [ 197.718325][ T4556] rust_binder: Error while translating object. [ 197.718355][ T4556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 197.724829][ T4556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:533 [ 198.137772][ T4575] binder: Unknown parameter '0x0000000000000000' [ 198.207437][ T1160] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 198.391435][ T1160] usb 7-1: config 4 has an invalid interface number: 24 but max is 1 [ 198.410623][ T1160] usb 7-1: config 4 has an invalid interface number: 103 but max is 1 [ 198.431398][ T1160] usb 7-1: config 4 has no interface number 0 [ 198.441595][ T1160] usb 7-1: config 4 has no interface number 1 [ 198.452643][ T4580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 198.452680][ T4580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1180 [ 198.462897][ T1160] usb 7-1: config 4 interface 24 altsetting 3 endpoint 0xE has invalid maxpacket 951, setting to 64 [ 198.549722][ T1160] usb 7-1: config 4 interface 24 altsetting 3 endpoint 0xD has an invalid bInterval 49, changing to 7 [ 198.564459][ T1160] usb 7-1: config 4 interface 24 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 198.591071][ T1160] usb 7-1: config 4 interface 24 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 198.604283][ T4587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.616568][ T1160] usb 7-1: config 4 interface 24 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 198.657843][ T1160] usb 7-1: config 4 interface 24 altsetting 3 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 198.681463][ T1160] usb 7-1: config 4 interface 24 altsetting 3 endpoint 0xA has an invalid bInterval 31, changing to 7 [ 198.692892][ T4589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.693097][ T1160] usb 7-1: config 4 interface 24 altsetting 3 endpoint 0x7 has an invalid bInterval 64, changing to 10 [ 198.712454][ T4589] rust_binder: Error while translating object. [ 198.712493][ T4589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 198.718770][ T4589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1189 [ 198.733430][ T1160] usb 7-1: config 4 interface 24 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 198.757365][ T1160] usb 7-1: config 4 interface 24 altsetting 3 has a duplicate endpoint with address 0x86, skipping [ 198.771888][ T1160] usb 7-1: config 4 interface 24 altsetting 3 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 198.792968][ T1160] usb 7-1: config 4 interface 103 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 198.809921][ T1160] usb 7-1: config 4 interface 103 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 198.835489][ T1160] usb 7-1: config 4 interface 103 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 198.846817][ T1160] usb 7-1: config 4 interface 103 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 198.859182][ T1160] usb 7-1: config 4 interface 103 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 198.881537][ T1160] usb 7-1: config 4 interface 103 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 198.893943][ T4599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.894064][ T1160] usb 7-1: config 4 interface 103 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 198.916480][ T1160] usb 7-1: config 4 interface 103 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 198.927521][ T1160] usb 7-1: config 4 interface 103 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 198.938542][ T1160] usb 7-1: config 4 interface 103 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 198.949537][ T1160] usb 7-1: config 4 interface 24 has no altsetting 0 [ 198.956610][ T1160] usb 7-1: config 4 interface 103 has no altsetting 0 [ 198.965231][ T1160] usb 7-1: New USB device found, idVendor=1b3d, idProduct=01f9, bcdDevice=9d.75 [ 198.974640][ T1160] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.982838][ T1160] usb 7-1: Manufacturer: о [ 198.987359][ T1160] usb 7-1: SerialNumber: ⥣ⱖ뚗摫뺯甶竩䫚侀⩲쨹皔訲圽穨堡澪鸻⮖ꢆ຋멼刨 [ 199.016839][ T1160] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 199.036478][ T1160] usb 7-1: no configuration chosen from 1 choice [ 199.169888][ T338] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 199.330313][ T338] usb 3-1: Using ep0 maxpacket: 32 [ 199.336634][ T338] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.348388][ T338] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 199.357682][ T338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.365823][ T338] usb 3-1: Product: syz [ 199.370003][ T338] usb 3-1: Manufacturer: syz [ 199.374844][ T338] usb 3-1: SerialNumber: syz [ 199.380372][ T338] usb 3-1: config 0 descriptor?? [ 199.386151][ T338] cdc_ether 3-1:0.0: skipping garbage [ 199.391734][ T338] usb 3-1: bad CDC descriptors [ 199.396724][ T338] usb 3-1: unsupported MDLM descriptors [ 199.546929][ T4604] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1412'. [ 199.568295][ T4607] fuse: Unknown parameter 'user_i00000000000000000000' [ 199.603561][ T4599] rust_binder: Error while translating object. [ 199.603597][ T4599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 199.610227][ T4599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1196 [ 199.621787][ T896] usb 3-1: USB disconnect, device number 39 [ 200.129625][ T4612] binder: Unknown parameter '3 ]' [ 200.388989][ T538] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 200.431779][ T896] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 200.550623][ T538] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.560577][ T538] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 200.569771][ T538] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.579700][ T538] usb 9-1: config 0 descriptor?? [ 200.593412][ T896] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 200.601711][ T896] usb 3-1: config 0 has no interface number 0 [ 200.607885][ T896] usb 3-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 200.618824][ T896] usb 3-1: config 0 interface 214 has no altsetting 0 [ 200.627080][ T896] usb 3-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 200.636376][ T896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.644509][ T896] usb 3-1: Product: syz [ 200.648807][ T896] usb 3-1: Manufacturer: syz [ 200.653456][ T896] usb 3-1: SerialNumber: syz [ 200.659063][ T896] usb 3-1: config 0 descriptor?? [ 200.664445][ T4616] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 200.886646][ T4616] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 201.016110][ T538] lenovo 0003:17EF:6047.0017: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0 [ 201.173138][ T1160] usb 7-1: USB disconnect, device number 31 [ 201.198156][ T36] audit: type=1400 audit(1756234662.893:7120): avc: denied { associate } for pid=4620 comm="syz.6.1419" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 201.235476][ T4612] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1415'. [ 201.315033][ T4628] fuse: Unknown parameter 'grӐ.7o00000000000000000000' [ 201.661594][ T1160] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 201.791302][ T538] lenovo 0003:17EF:6047.0017: Fn-lock setting failed: -71 [ 201.798925][ T538] lenovo 0003:17EF:6047.0017: Sensitivity setting failed: -71 [ 201.808415][ T538] usb 9-1: USB disconnect, device number 17 [ 201.823539][ T1160] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 201.834670][ T1160] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.845726][ T1160] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.855641][ T1160] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 201.869441][ T1160] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 201.878880][ T1160] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 201.887225][ T1160] usb 7-1: Manufacturer: syz [ 201.892452][ T1160] usb 7-1: config 0 descriptor?? [ 202.315847][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 202.326960][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 202.339881][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 202.355314][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 202.366931][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 202.380535][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 202.392652][ T4633] fuse: Unknown parameter 'user_i00000000000000000000' [ 202.410225][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 202.425694][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 202.426404][ T1160] usbhid 7-1:0.0: can't add hid device: -71 [ 202.445196][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 202.450091][ T1160] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 202.461655][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 202.469038][ T1160] usb 7-1: USB disconnect, device number 32 [ 202.482623][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 202.494930][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 202.507086][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 202.514260][ T36] audit: type=1400 audit(1756234664.127:7121): avc: denied { unmount } for pid=2513 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 202.520905][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 202.550397][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 202.561971][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 202.583285][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 202.594871][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 202.601195][ T4644] 9pnet_fd: Insufficient options for proto=fd [ 202.606412][ T36] audit: type=1400 audit(1756234664.211:7122): avc: denied { mounton } for pid=4643 comm="syz.8.1427" path="/syzcgroup/cpu/syz8/cgroup.procs" dev="cgroup" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 202.637347][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 202.648735][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 202.664367][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 202.668737][ T4646] netlink: 'syz.8.1428': attribute type 11 has an invalid length. [ 202.676628][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 202.686476][ T4646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 202.694539][ T4646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:366 [ 202.709575][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 202.730267][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 202.741761][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 202.749127][ T4652] fuse: Unknown parameter 'user_i00000000000000000000' [ 202.753042][ T896] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 202.772840][ T896] ax88179_178a 3-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 1a:7c:1a:f0:92:51 [ 202.788891][ T36] audit: type=1400 audit(1756234664.379:7123): avc: denied { write } for pid=338 comm="kworker/0:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31915 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 202.819783][ T896] usb 3-1: USB disconnect, device number 40 [ 202.819850][ T4655] fuse: Unknown parameter 'grӐ.7o00000000000000000000' [ 202.826336][ T896] ax88179_178a 3-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 202.870540][ T36] audit: type=1400 audit(1756234664.464:7124): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 202.959994][ T36] audit: type=1400 audit(1756234664.548:7125): avc: denied { ioctl } for pid=4661 comm="syz.7.1434" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 203.115937][ T538] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 203.277721][ T538] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 203.288975][ T538] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.300474][ T538] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.310245][ T538] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 203.324440][ T538] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 203.333628][ T538] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 203.341765][ T538] usb 7-1: Manufacturer: syz [ 203.346971][ T538] usb 7-1: config 0 descriptor?? [ 203.410255][ T36] audit: type=1400 audit(1756234664.969:7126): avc: denied { ioctl } for pid=4687 comm="syz.7.1444" path="socket:[32214]" dev="sockfs" ino=32214 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 203.438598][ T36] audit: type=1400 audit(1756234664.987:7127): avc: denied { append } for pid=4685 comm="syz.2.1443" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 203.708664][ T4708] sock: sock_set_timeout: `syz.8.1450' (pid 4708) tries to set negative timeout [ 203.783956][ T4712] binder: Bad value for 'stats' [ 203.811449][ T36] audit: type=1400 audit(1756234665.343:7128): avc: denied { remount } for pid=4714 comm="syz.8.1452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 203.876151][ T538] usbhid 7-1:0.0: can't add hid device: -71 [ 203.888086][ T538] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 203.904186][ T538] usb 7-1: USB disconnect, device number 33 [ 204.034404][ T4733] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 204.087038][ T4735] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.089759][ T4735] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 204.099893][ T4735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 204.107903][ T4735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1216 [ 204.163040][ T4742] fuse: Unknown parameter 'grӐ.7o00000000000000000000' [ 204.171644][ T4744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:567 [ 204.199977][ T4748] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 204.388505][ T538] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 204.420571][ T338] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 204.538206][ T3622] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 204.548932][ T538] usb 3-1: Using ep0 maxpacket: 16 [ 204.555304][ T538] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.566448][ T538] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 204.576623][ T538] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 204.586866][ T538] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 204.600765][ T538] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.603490][ T338] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 204.609957][ T538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 204.621247][ T338] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.629123][ T538] usb 3-1: SerialNumber: syz [ 204.640746][ T338] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.648379][ T4738] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 204.654744][ T338] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 204.662062][ T4738] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 204.676647][ T338] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 204.683054][ T538] hub 3-1:1.0: bad descriptor, ignoring hub [ 204.691290][ T338] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 204.697103][ T538] hub 3-1:1.0: probe with driver hub failed with error -5 [ 204.705249][ T338] usb 9-1: Manufacturer: syz [ 204.717871][ T338] usb 9-1: config 0 descriptor?? [ 204.730710][ T3622] usb 7-1: Using ep0 maxpacket: 16 [ 204.737014][ T3622] usb 7-1: config 0 has an invalid interface number: 94 but max is 0 [ 204.745318][ T3622] usb 7-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 204.755950][ T3622] usb 7-1: config 0 has no interface number 0 [ 204.763888][ T3622] usb 7-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 204.773141][ T3622] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.781415][ T3622] usb 7-1: Product: syz [ 204.785621][ T3622] usb 7-1: Manufacturer: syz [ 204.790270][ T3622] usb 7-1: SerialNumber: syz [ 204.795830][ T3622] usb 7-1: config 0 descriptor?? [ 204.802009][ T3622] usb 7-1: unsupported MDLM descriptors [ 204.931468][ T4738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.941073][ T4738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.952979][ T4738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.962824][ T4738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.971315][ T4738] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 204.978640][ T4738] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 205.020397][ T3622] usb 7-1: USB disconnect, device number 34 [ 205.053580][ T4757] rust_binder: Write failure EFAULT in pid:576 [ 205.178937][ T338] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 205.192644][ T338] appleir 0003:05AC:8243.0018: No inputs registered, leaving [ 205.201992][ T338] appleir 0003:05AC:8243.0018: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 205.400878][ T338] usb 9-1: USB disconnect, device number 18 [ 205.416319][ T538] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 205.435923][ T36] audit: type=1400 audit(1756234666.858:7129): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.519349][ T4763] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 205.636656][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 68! [ 205.859557][ T4738] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 205.859588][ T4738] rust_binder: Read failure Err(EFAULT) in pid:1218 [ 205.908407][ T338] usb 3-1: USB disconnect, device number 41 [ 205.921572][ T338] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 206.268674][ T4821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=4821 comm=syz.6.1474 [ 206.281766][ T4821] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1474'. [ 206.293574][ T4821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4821 comm=syz.6.1474 [ 206.362212][ T4822] rust_binder: Error while translating object. [ 206.362254][ T4822] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 206.368586][ T4822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:594 [ 206.454820][ T4824] overlayfs: missing 'lowerdir' [ 206.478763][ T4826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.479599][ T4826] rust_binder: Write failure EINVAL in pid:1223 [ 206.487828][ T4826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.494821][ T4826] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 206.501367][ T4826] rust_binder: Error while translating object. [ 206.513530][ T4826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 206.519776][ T4826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1223 [ 206.587160][ T4830] fuse: Unknown parameter 'grӐ.7o00000000000000000000' [ 206.869625][ T3622] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 207.031029][ T3622] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 207.042261][ T3622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.053272][ T3622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.063294][ T3622] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 207.077671][ T3622] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 207.087364][ T3622] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 207.095686][ T3622] usb 3-1: Manufacturer: syz [ 207.101098][ T3622] usb 3-1: config 0 descriptor?? [ 207.171063][ T4845] overlayfs: missing 'lowerdir' [ 207.245169][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 207.245193][ T36] audit: type=1400 audit(1756234668.559:7143): avc: denied { remount } for pid=4846 comm="syz.6.1485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 207.329306][ T538] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 207.343647][ T4852] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 207.476416][ T4861] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1489'. [ 207.494108][ T538] usb 9-1: Using ep0 maxpacket: 32 [ 207.500605][ T538] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.511815][ T538] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.523286][ T538] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 207.532502][ T538] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 207.540894][ T538] usb 9-1: Product: syz [ 207.545242][ T538] usb 9-1: Manufacturer: syz [ 207.552439][ T538] hub 9-1:4.0: USB hub found [ 207.558101][ T3622] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 207.565592][ T3622] appleir 0003:05AC:8243.0019: No inputs registered, leaving [ 207.574667][ T3622] appleir 0003:05AC:8243.0019: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 207.766014][ T4843] fuse: Bad value for 'fd' [ 207.774214][ T3622] usb 3-1: USB disconnect, device number 42 [ 207.774237][ T4843] netfs: Couldn't get user pages (rc=-14) [ 207.787123][ T538] hub 9-1:4.0: config failed, can't read hub descriptor (err -22) [ 207.810915][ T538] usb 9-1: USB disconnect, device number 19 [ 208.096688][ T4868] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 208.105350][ T4868] rust_binder: Write failure EINVAL in pid:605 [ 208.121042][ T4872] overlayfs: missing 'lowerdir' [ 208.141653][ T4874] fuse: Unknown parameter '0x0000000000000006' [ 208.183238][ T36] audit: type=1400 audit(1756234669.429:7144): avc: denied { mounton } for pid=4875 comm="syz.6.1495" path="/220/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 208.183278][ T4876] incfs: Error accessing: ./file0. [ 208.211430][ T4876] incfs: mount failed -20 [ 208.219738][ T4876] rust_binder: Read failure Err(EAGAIN) in pid:613 [ 208.227493][ T4879] rust_binder: Write failure EFAULT in pid:615 [ 208.244105][ T4881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:618 [ 208.324916][ T4887] 9pnet_fd: Insufficient options for proto=fd [ 208.341812][ T4887] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 208.369916][ T4891] overlayfs: missing 'lowerdir' [ 208.386848][ T4893] fuse: Unknown parameter '0x0000000000000006' [ 208.504070][ T4901] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 208.521547][ T4903] fuse: Unknown parameter 'grӐ.7o00000000000000000000' [ 208.555570][ T36] audit: type=1400 audit(1756234669.775:7145): avc: denied { mounton } for pid=4908 comm="syz.8.1509" path="/154/file0" dev="tmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 208.612544][ T538] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 208.775563][ T538] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 208.784749][ T538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.792740][ T538] usb 3-1: Product: syz [ 208.797041][ T538] usb 3-1: Manufacturer: syz [ 208.801648][ T538] usb 3-1: SerialNumber: syz [ 208.809007][ T538] r8152-cfgselector 3-1: Unknown version 0x0000 [ 208.815394][ T538] r8152-cfgselector 3-1: config 0 descriptor?? [ 208.965466][ T3622] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 209.125852][ T3622] usb 9-1: Using ep0 maxpacket: 16 [ 209.132455][ T3622] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.143474][ T3622] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.153444][ T3622] usb 9-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 209.162735][ T3622] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.172161][ T3622] usb 9-1: config 0 descriptor?? [ 209.199468][ T4916] fuse: Unknown parameter '0x0000000000000006' [ 209.253624][ T4889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.264207][ T4889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.274035][ T4889] binder: Bad value for 'max' [ 209.281688][ T1160] r8152-cfgselector 3-1: USB disconnect, device number 43 [ 209.340580][ T4920] /dev/rnullb0: Can't open blockdev [ 209.746162][ T45] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 209.907753][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 209.917810][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 209.930111][ T45] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 209.939699][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.947767][ T45] usb 7-1: Product: syz [ 209.952391][ T45] usb 7-1: Manufacturer: syz [ 209.957059][ T45] usb 7-1: SerialNumber: syz [ 209.962756][ T45] usb 7-1: config 0 descriptor?? [ 210.088314][ T538] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 210.185115][ T4932] fuse: Unknown parameter 'l' [ 210.190535][ T4932] rust_binder: Error while translating object. [ 210.190580][ T4932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 210.196981][ T4932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:642 [ 210.213197][ T45] usb 7-1: USB disconnect, device number 35 [ 210.248700][ T538] usb 3-1: Using ep0 maxpacket: 32 [ 210.255198][ T538] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 210.263470][ T538] usb 3-1: config 0 has no interface number 0 [ 210.269741][ T538] usb 3-1: config 0 interface 184 has no altsetting 0 [ 210.278367][ T538] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 210.287565][ T538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.295746][ T538] usb 3-1: Product: syz [ 210.299931][ T538] usb 3-1: Manufacturer: syz [ 210.304740][ T538] usb 3-1: SerialNumber: syz [ 210.310026][ T538] usb 3-1: config 0 descriptor?? [ 210.316329][ T538] smsc75xx v1.0.0 [ 210.757610][ T4939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.766655][ T4939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.008072][ T1160] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 211.169697][ T1160] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.180192][ T1160] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.189999][ T1160] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 211.199216][ T1160] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 211.207268][ T1160] usb 7-1: SerialNumber: syz [ 211.394696][ T538] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 211.671544][ T538] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 211.682645][ T538] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 211.692860][ T538] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 211.703506][ T538] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 211.712982][ T538] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 211.727187][ T538] usb 3-1: USB disconnect, device number 44 [ 211.785515][ T4944] fuse: Unknown parameter 'fd0x0000000000000006' [ 211.831176][ T4946] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.831206][ T4946] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.837949][ T4946] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.929932][ T3622] usbhid 9-1:0.0: can't add hid device: -71 [ 211.942425][ T3622] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 211.951497][ T3622] usb 9-1: USB disconnect, device number 20 [ 211.964651][ T1160] usb 7-1: 0:2 : does not exist [ 211.970070][ T1160] usb 7-1: unit 5 not found! [ 211.980649][ T1160] usb 7-1: USB disconnect, device number 36 [ 212.175771][ T4954] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 212.328822][ T36] audit: type=1400 audit(1773012118.311:7146): avc: denied { accept } for pid=4970 comm="syz.2.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 212.348622][ T36] audit: type=1400 audit(1773012118.311:7147): avc: denied { write } for pid=4970 comm="syz.2.1530" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 212.456176][ T36] audit: type=1326 audit(1773012118.424:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.2.1532" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43b118ebe9 code=0x0 [ 212.587712][ T36] audit: type=1400 audit(1773012118.545:7149): avc: denied { mounton } for pid=4987 comm="syz.8.1536" path="/162/file0" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 212.587723][ T4988] fuseblk: Bad value for 'fd' [ 212.615973][ T36] audit: type=1400 audit(1773012118.545:7150): avc: denied { nlmsg_read } for pid=4987 comm="syz.8.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.751380][ T45] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 212.775603][ T36] audit: type=1400 audit(1773012118.723:7151): avc: denied { create } for pid=5001 comm="syz.8.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 212.808086][ T36] audit: type=1326 audit(1773012118.760:7152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5007 comm="syz.7.1543" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3a058ebe9 code=0x0 [ 212.922508][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 212.931785][ T45] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 212.944380][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.952611][ T45] usb 3-1: Product: syz [ 212.957646][ T45] usb 3-1: Manufacturer: syz [ 212.962287][ T45] usb 3-1: SerialNumber: syz [ 212.968240][ T45] usb 3-1: config 0 descriptor?? [ 212.974128][ T45] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 212.982218][ T45] usb 3-1: Detected FT232H [ 213.043346][ T5020] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 238) [ 213.043367][ T5020] rust_binder: Error while translating object. [ 213.054485][ T5020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 213.060713][ T5020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:662 [ 213.061547][ T3622] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 213.189966][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 213.200496][ T5029] rust_binder: Error while translating object. [ 213.200587][ T5029] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 213.206896][ T5029] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:671 [ 213.256411][ T3622] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 213.274739][ T3622] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.282032][ T5037] overlayfs: failed to resolve './file1': -2 [ 213.283399][ T3622] usb 9-1: Product: syz [ 213.293151][ T3622] usb 9-1: Manufacturer: syz [ 213.299296][ T3622] usb 9-1: SerialNumber: syz [ 213.361618][ T5041] binder: Bad value for 'max' [ 213.627747][ T45] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 213.649786][ T338] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 213.766676][ T3622] rtl8150 9-1:1.0: couldn't reset the device [ 213.772891][ T3622] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 213.784308][ T3622] usb 9-1: USB disconnect, device number 21 [ 213.812465][ T338] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 213.823881][ T338] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.834966][ T338] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 213.855683][ T338] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 213.864421][ T338] usb 7-1: Product: syz [ 213.868677][ T338] usb 7-1: Manufacturer: syz [ 213.876277][ T338] hub 7-1:4.0: USB hub found [ 213.920902][ T36] audit: type=1400 audit(1773012119.800:7153): avc: denied { bind } for pid=5058 comm="syz.7.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 213.992930][ T3622] usb 3-1: USB disconnect, device number 45 [ 214.001359][ T3622] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 214.011552][ T3622] ftdi_sio 3-1:0.0: device disconnected [ 214.031358][ T5061] netlink: 'syz.7.1563': attribute type 29 has an invalid length. [ 214.096486][ T5047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.105343][ T5047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.120784][ T338] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 214.236590][ T5076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.236620][ T5076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.243555][ T5076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.250219][ T5076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.256767][ T5076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.263513][ T5076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.270006][ T5076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.276652][ T5076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.283442][ T5076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.290371][ T5076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.297193][ T36] audit: type=1400 audit(1773012120.136:7154): avc: denied { create } for pid=5074 comm="syz.7.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 214.336678][ T338] usb 7-1: USB disconnect, device number 37 [ 214.340740][ T5084] rust_binder: Error while translating object. [ 214.342646][ T5084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 214.348948][ T5084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:468 [ 214.394884][ T36] audit: type=1400 audit(1773012120.239:7155): avc: denied { map } for pid=5092 comm="syz.8.1573" path="socket:[34542]" dev="sockfs" ino=34542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 214.427570][ T36] audit: type=1400 audit(1773012120.239:7156): avc: denied { connect } for pid=5092 comm="syz.8.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 214.474727][ T5099] FAULT_INJECTION: forcing a failure. [ 214.474727][ T5099] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 214.487934][ T5099] CPU: 1 UID: 0 PID: 5099 Comm: syz.8.1576 Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 214.487978][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.487997][ T5099] Call Trace: [ 214.488004][ T5099] [ 214.488014][ T5099] __dump_stack+0x21/0x30 [ 214.488045][ T5099] dump_stack_lvl+0x10c/0x190 [ 214.488069][ T5099] ? __cfi_dump_stack_lvl+0x10/0x10 [ 214.488094][ T5099] dump_stack+0x19/0x20 [ 214.488117][ T5099] should_fail_ex+0x3d9/0x530 [ 214.488146][ T5099] should_fail+0xf/0x20 [ 214.488169][ T5099] should_fail_usercopy+0x1e/0x30 [ 214.488186][ T5099] _copy_to_user+0x24/0xa0 [ 214.488208][ T5099] simple_read_from_buffer+0xed/0x160 [ 214.488234][ T5099] proc_fail_nth_read+0x19e/0x210 [ 214.488259][ T5099] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 214.488297][ T5099] ? bpf_lsm_file_permission+0xd/0x20 [ 214.488323][ T5099] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 214.488346][ T5099] vfs_read+0x27b/0xb60 [ 214.488373][ T5099] ? __asan_memset+0x39/0x50 [ 214.488401][ T5099] ? __cfi_vfs_read+0x10/0x10 [ 214.488427][ T5099] ? __kasan_check_write+0x18/0x20 [ 214.488452][ T5099] ? mutex_lock+0x92/0x1c0 [ 214.488478][ T5099] ? __cfi_mutex_lock+0x10/0x10 [ 214.488504][ T5099] ? __fget_files+0x2c5/0x340 [ 214.488526][ T5099] ksys_read+0x141/0x250 [ 214.488543][ T5099] ? __cfi_ksys_read+0x10/0x10 [ 214.488561][ T5099] ? __kasan_check_read+0x15/0x20 [ 214.488586][ T5099] __x64_sys_read+0x7f/0x90 [ 214.488603][ T5099] x64_sys_call+0x2638/0x2ee0 [ 214.488630][ T5099] do_syscall_64+0x58/0xf0 [ 214.488652][ T5099] ? clear_bhb_loop+0x50/0xa0 [ 214.488670][ T5099] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 214.488698][ T5099] RIP: 0033:0x7ff35378d5fc [ 214.488721][ T5099] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 214.488735][ T5099] RSP: 002b:00007ff35454a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.488756][ T5099] RAX: ffffffffffffffda RBX: 00007ff3539b5fa0 RCX: 00007ff35378d5fc [ 214.488771][ T5099] RDX: 000000000000000f RSI: 00007ff35454a0a0 RDI: 0000000000000009 [ 214.488785][ T5099] RBP: 00007ff35454a090 R08: 0000000000000000 R09: 0000000000000000 [ 214.488798][ T5099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.488810][ T5099] R13: 00007ff3539b6038 R14: 00007ff3539b5fa0 R15: 00007ffec2065488 [ 214.488827][ T5099] [ 214.757251][ T5109] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1580'. [ 214.767307][ T5109] __vm_enough_memory: pid: 5109, comm: syz.2.1580, bytes: 18014402804453376 not enough memory for the allocation [ 214.879743][ T338] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 214.999090][ T5123] /dev/rnullb0: Can't open blockdev [ 215.018559][ T5125] overlayfs: missing 'lowerdir' [ 215.061573][ T338] usb 7-1: Using ep0 maxpacket: 32 [ 215.068450][ T338] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 215.076917][ T338] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 215.085692][ T338] usb 7-1: config 0 has an invalid interface number: 255 but max is 80 [ 215.094090][ T338] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.104343][ T9] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 215.111953][ T338] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 215.121187][ T338] usb 7-1: config 0 has no interface number 0 [ 215.127652][ T338] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 215.138811][ T338] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 215.152302][ T338] usb 7-1: config 0 interface 255 has no altsetting 0 [ 215.159218][ T338] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 215.168484][ T338] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.177421][ T338] usb 7-1: config 0 descriptor?? [ 215.287451][ T9] usb 3-1: config 16 has an invalid interface number: 19 but max is 0 [ 215.295716][ T9] usb 3-1: config 16 has no interface number 0 [ 215.303655][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 215.312929][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.321076][ T9] usb 3-1: Product: syz [ 215.325314][ T9] usb 3-1: Manufacturer: syz [ 215.330015][ T9] usb 3-1: SerialNumber: syz [ 215.399114][ T5070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.407858][ T5070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.459614][ T538] usb 7-1: USB disconnect, device number 38 [ 215.551335][ T5119] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.551622][ T5119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 215.558288][ T5119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1262 [ 215.574969][ T9] usb 3-1: USB disconnect, device number 46 [ 215.604589][ T4213] udevd[4213]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 216.016873][ T5144] rust_binder: Fixups oob 164 166 363 196 [ 216.016907][ T5144] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 216.023143][ T5144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 216.031665][ T5144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:698 [ 216.135144][ T5149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 216.429351][ T36] audit: type=1400 audit(1773012122.137:7157): avc: denied { remount } for pid=5154 comm="syz.2.1596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 216.457056][ T5155] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 216.528484][ T36] audit: type=1400 audit(1773012122.240:7158): avc: denied { read } for pid=5158 comm="syz.2.1598" name="file0" dev="tmpfs" ino=2494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 216.614783][ T36] audit: type=1326 audit(1773012122.315:7159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5163 comm="syz.2.1600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43b118ebe9 code=0x0 [ 216.847656][ T3622] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 217.008100][ T3622] usb 9-1: Using ep0 maxpacket: 8 [ 217.015466][ T3622] usb 9-1: config 0 has an invalid interface number: 198 but max is 0 [ 217.025163][ T3622] usb 9-1: config 0 has no interface number 0 [ 217.041072][ T3622] usb 9-1: config 0 interface 198 has no altsetting 0 [ 217.047967][ T3622] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=c2.4d [ 217.057129][ T3622] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.065936][ T3622] usb 9-1: config 0 descriptor?? [ 217.286709][ T5161] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 217.286743][ T5161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:496 [ 217.297478][ T236] usb 9-1: USB disconnect, device number 22 [ 217.601101][ T5179] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 217.934865][ T5195] rust_binder: Failed copying into alloc: EFAULT [ 217.934895][ T5195] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 217.941358][ T5195] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 217.949932][ T5195] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:505 [ 217.959765][ T5195] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 217.976082][ T5195] rust_binder: Write failure EINVAL in pid:505 [ 218.280892][ T3622] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 218.400866][ T5203] overlayfs: failed to clone upperpath [ 218.451930][ T3622] usb 9-1: Using ep0 maxpacket: 32 [ 218.463596][ T3622] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 218.472216][ T5222] netlink: 'syz.6.1625': attribute type 27 has an invalid length. [ 218.475229][ T3622] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 218.481652][ T5222] netlink: 'syz.6.1625': attribute type 27 has an invalid length. [ 218.489240][ T5223] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.497191][ T3622] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.512791][ T5228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.515181][ T5230] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 218.519220][ T3622] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 218.539895][ T3622] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 218.546242][ T5235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1628'. [ 218.549132][ T3622] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.567333][ T3622] usb 9-1: config 0 descriptor?? [ 218.690102][ T5245] veth1_macvtap: left promiscuous mode [ 218.762092][ T236] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 218.796960][ T5199] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 218.796982][ T5199] rust_binder: Error while translating object. [ 218.805875][ T5199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 218.812188][ T5199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:509 [ 218.893833][ T3622] usb 9-1: USB disconnect, device number 23 [ 218.922554][ T236] usb 3-1: Using ep0 maxpacket: 32 [ 218.929337][ T236] usb 3-1: unable to get BOS descriptor or descriptor too short [ 218.937840][ T236] usb 3-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 218.948037][ T236] usb 3-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.961393][ T236] usb 3-1: config 1 interface 0 has no altsetting 0 [ 218.969623][ T236] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 218.978820][ T236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.986846][ T236] usb 3-1: Product: syz [ 218.990999][ T236] usb 3-1: Manufacturer: syz [ 218.995593][ T236] usb 3-1: SerialNumber: syz [ 219.001258][ T5229] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 219.008567][ T5229] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 219.173975][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 219.174009][ T36] audit: type=1400 audit(1773012124.708:7162): avc: denied { mount } for pid=5272 comm="syz.6.1642" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 219.234047][ T236] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 219.246642][ T236] usb 3-1: USB disconnect, device number 47 [ 219.254402][ T236] usblp0: removed [ 219.564762][ T5298] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 219.774214][ T5303] netlink: 'syz.2.1650': attribute type 7 has an invalid length. [ 219.782703][ T5303] netlink: 'syz.2.1650': attribute type 5 has an invalid length. [ 219.790823][ T5303] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1650'. [ 219.831581][ T9] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 219.903284][ T5336] overlayfs: failed to clone upperpath [ 219.911525][ T5339] fuse: Bad value for 'user_id' [ 219.916751][ T5339] fuse: Bad value for 'user_id' [ 219.933596][ T5347] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.984577][ T5355] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1667'. [ 219.988635][ T5356] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 220.000283][ T5356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 220.002710][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 220.008371][ T5356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1311 [ 220.023090][ T9] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.044022][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 220.051105][ T9] usb 9-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 220.060626][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.070806][ T9] usb 9-1: config 0 descriptor?? [ 220.136813][ T5377] overlayfs: failed to clone upperpath [ 220.180179][ T5388] syz.6.1677 (5388): attempted to duplicate a private mapping with mremap. This is not supported. [ 220.507646][ T9] ryos 0003:1E7D:31CE.001A: unknown main item tag 0x0 [ 220.514575][ T9] ryos 0003:1E7D:31CE.001A: unknown main item tag 0x0 [ 220.521534][ T9] ryos 0003:1E7D:31CE.001A: unknown main item tag 0x0 [ 220.528396][ T9] ryos 0003:1E7D:31CE.001A: unknown main item tag 0x0 [ 220.535214][ T9] ryos 0003:1E7D:31CE.001A: unknown main item tag 0x0 [ 220.543385][ T9] ryos 0003:1E7D:31CE.001A: hidraw0: USB HID v0.05 Device [HID 1e7d:31ce] on usb-dummy_hcd.8-1/input0 [ 220.723116][ T36] audit: type=1400 audit(1773012126.153:7163): avc: denied { create } for pid=5300 comm="syz.8.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 220.723831][ T5301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.752890][ T5301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.764764][ T5393] IPv6: NLM_F_CREATE should be specified when creating new route [ 220.766609][ T5301] rust_binder: Failed copying into alloc: EFAULT [ 220.773018][ T5301] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 220.773833][ T5393] netlink: 'syz.6.1679': attribute type 4 has an invalid length. [ 220.780124][ T5301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 220.797580][ T5393] netlink: 'syz.6.1679': attribute type 4 has an invalid length. [ 220.804461][ T5301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:527 [ 220.827054][ T338] usb 9-1: USB disconnect, device number 24 [ 220.846618][ T5398] netlink: 'syz.2.1682': attribute type 2 has an invalid length. [ 220.862188][ T5398] syz.2.1682 (5398): /proc/5397/oom_adj is deprecated, please use /proc/5397/oom_score_adj instead. [ 220.895696][ T5410] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.147232][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 221.318291][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 221.324715][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.335763][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.345779][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 221.355016][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.364569][ T9] usb 3-1: config 0 descriptor?? [ 221.370580][ T9] hub 3-1:0.0: USB hub found [ 221.460355][ T5420] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 221.518674][ T3622] rust_binder: 5416: removing orphan mapping 0:112 [ 221.525577][ T3622] rust_binder: 0: removing orphan mapping 112:1048 [ 221.528712][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1697'. [ 221.544412][ T5432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5432 comm=syz.8.1697 [ 221.584189][ T5432] binder: Unknown parameter '' [ 221.585476][ T9] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 221.813243][ T5410] rust_binder: Error while translating object. [ 221.813310][ T5410] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 221.819792][ T5410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1316 [ 221.830780][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 221.846150][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 221.876572][ T9] usb 3-1: USB disconnect, device number 48 [ 221.891993][ T5443] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1701'. [ 221.914555][ T5445] overlayfs: failed to get inode (-116) [ 221.920327][ T5445] overlayfs: failed to get inode (-116) [ 222.173939][ T338] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 222.334264][ T338] usb 9-1: Using ep0 maxpacket: 32 [ 222.341044][ T338] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 222.349437][ T338] usb 9-1: config 0 has no interface number 0 [ 222.355659][ T338] usb 9-1: config 0 interface 184 has no altsetting 0 [ 222.365067][ T338] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=68.ee [ 222.374170][ T338] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.382896][ T338] usb 9-1: Product: syz [ 222.388191][ T338] usb 9-1: Manufacturer: syz [ 222.393878][ T338] usb 9-1: SerialNumber: syz [ 222.400394][ T338] usb 9-1: config 0 descriptor?? [ 222.409590][ T338] smsc75xx v1.0.0 [ 222.547835][ T36] audit: type=1400 audit(1773012127.855:7164): avc: denied { getopt } for pid=5468 comm="syz.6.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 222.834619][ T338] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 222.845743][ T338] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 222.856036][ T338] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 222.866962][ T338] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -61 [ 223.105875][ T3622] usb 9-1: USB disconnect, device number 25 [ 223.660478][ T538] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 223.831601][ T538] usb 3-1: Using ep0 maxpacket: 32 [ 223.838458][ T538] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 223.846663][ T538] usb 3-1: can't read configurations, error -61 [ 223.918903][ T36] audit: type=1400 audit(1773012129.145:7165): avc: denied { read append } for pid=5506 comm="syz.8.1724" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 224.013418][ T538] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 224.047165][ T36] audit: type=1326 audit(1773012129.267:7166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.7.1725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3a058ebe9 code=0x0 [ 224.135945][ T5531] x_tables: unsorted underflow at hook 2 [ 224.173878][ T538] usb 3-1: Using ep0 maxpacket: 32 [ 224.183529][ T538] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 224.191372][ T538] usb 3-1: can't read configurations, error -61 [ 224.200082][ T538] usb usb3-port1: attempt power cycle [ 224.209825][ T5549] fuse: Unknown parameter 'grӐ.7o00000000000000000000' [ 224.246600][ T36] audit: type=1400 audit(1773012129.444:7167): avc: denied { map } for pid=5556 comm="syz.6.1737" path="pipe:[17290]" dev="pipefs" ino=17290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 224.569589][ T538] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 224.591353][ T538] usb 3-1: Using ep0 maxpacket: 32 [ 224.598054][ T538] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 224.605721][ T538] usb 3-1: can't read configurations, error -61 [ 224.761140][ T538] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 224.783805][ T538] usb 3-1: Using ep0 maxpacket: 32 [ 224.790426][ T538] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 224.798068][ T538] usb 3-1: can't read configurations, error -61 [ 224.804583][ T538] usb usb3-port1: unable to enumerate USB device [ 224.821993][ T5568] netlink: 'syz.6.1742': attribute type 2 has an invalid length. [ 224.852020][ T5572] fuse: Unknown parameter 'grӐ.7o00000000000000000000' [ 224.888483][ T5578] 9pnet_fd: Insufficient options for proto=fd [ 225.061555][ T1160] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 225.119397][ T36] audit: type=1400 audit(1773012130.267:7168): avc: denied { write } for pid=5583 comm="syz.7.1748" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 225.144462][ T36] audit: type=1400 audit(1773012130.267:7169): avc: denied { setattr } for pid=5583 comm="syz.7.1748" name="/" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 225.222085][ T1160] usb 9-1: Using ep0 maxpacket: 32 [ 225.229176][ T1160] usb 9-1: unable to get BOS descriptor or descriptor too short [ 225.238153][ T1160] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 225.246602][ T1160] usb 9-1: config 0 has no interface number 0 [ 225.252813][ T1160] usb 9-1: config 0 interface 55 has no altsetting 0 [ 225.261546][ T1160] usb 9-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=25.d9 [ 225.270730][ T1160] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.279645][ T1160] usb 9-1: Product: syz [ 225.283982][ T1160] usb 9-1: Manufacturer: syz [ 225.288732][ T1160] usb 9-1: SerialNumber: syz [ 225.294174][ T1160] usb 9-1: config 0 descriptor?? [ 225.518169][ T1160] usb 9-1: unsupported MDLM descriptors [ 225.525385][ T1160] usb 9-1: USB disconnect, device number 26 [ 225.652360][ T5590] netlink: 'syz.6.1750': attribute type 33 has an invalid length. [ 225.660981][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1750'. [ 225.750282][ T5611] fuse: Unknown parameter 'grӐ.7o00000000000000000000' [ 226.127307][ T36] audit: type=1400 audit(1773012131.202:7170): avc: denied { module_load } for pid=5617 comm="syz.8.1755" path="/209/bus" dev="tmpfs" ino=1228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 226.127413][ T5618] Invalid ELF header magic: != ELF [ 226.283595][ T5625] /dev/loop0: Can't lookup blockdev [ 226.283588][ T5624] /dev/loop0: Can't lookup blockdev [ 226.847502][ T36] audit: type=1400 audit(1773012131.875:7171): avc: denied { create } for pid=5649 comm="syz.2.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 226.872223][ T36] audit: type=1400 audit(1773012131.885:7172): avc: denied { sys_admin } for pid=5649 comm="syz.2.1768" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 227.002087][ T5655] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 227.021611][ T5655] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 227.340303][ T538] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 227.510777][ T538] usb 9-1: Using ep0 maxpacket: 8 [ 227.517654][ T538] usb 9-1: unable to get BOS descriptor or descriptor too short [ 227.526261][ T538] usb 9-1: config 0 has an invalid interface number: 88 but max is 0 [ 227.534845][ T538] usb 9-1: config 0 has no interface number 0 [ 227.540944][ T538] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 227.552067][ T538] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 227.562138][ T538] usb 9-1: config 0 interface 88 has no altsetting 0 [ 227.570662][ T538] usb 9-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 227.579907][ T538] usb 9-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 227.588291][ T538] usb 9-1: Product: syz [ 227.592490][ T538] usb 9-1: Manufacturer: syz [ 227.597264][ T538] usb 9-1: SerialNumber: syz [ 227.602654][ T538] usb 9-1: config 0 descriptor?? [ 227.824310][ T5660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.833373][ T5660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.834539][ T5673] 9pnet_fd: Insufficient options for proto=fd [ 227.848778][ T36] audit: type=1400 audit(1773012132.820:7173): avc: denied { bind } for pid=5659 comm="syz.8.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.872159][ T36] audit: type=1400 audit(1773012132.820:7174): avc: denied { listen } for pid=5659 comm="syz.8.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.892614][ T36] audit: type=1400 audit(1773012132.820:7175): avc: denied { accept } for pid=5659 comm="syz.8.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.896604][ T5682] overlayfs: failed to clone upperpath [ 227.914406][ T538] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.88/input/input35 [ 227.920048][ T36] audit: type=1400 audit(1773012132.838:7176): avc: denied { ioctl } for pid=5674 comm="syz.2.1778" path="socket:[37204]" dev="sockfs" ino=37204 ioctlcmd=0x89fc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 227.934587][ T538] usb 9-1: USB disconnect, device number 27 [ 227.958281][ T36] audit: type=1400 audit(1773012132.848:7177): avc: denied { watch_reads } for pid=5676 comm="syz.2.1779" path="/476" dev="tmpfs" ino=2676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 228.001011][ T4213] udevd[4213]: Error opening device "/dev/input/event3": No such file or directory [ 228.012039][ T4213] udevd[4213]: Unable to EVIOCGABS device "/dev/input/event3" [ 228.019970][ T4213] udevd[4213]: Unable to EVIOCGABS device "/dev/input/event3" [ 228.645940][ T5713] overlayfs: failed to clone upperpath [ 228.652793][ T5713] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1793'. [ 229.054707][ T5722] rust_binder: Error while translating object. [ 229.054745][ T5722] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 229.060960][ T5722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:408 [ 229.184767][ T5728] bpf: Bad value for 'gid' [ 229.376296][ T5742] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 229.766287][ T5754] rust_binder: Error while translating object. [ 229.766321][ T5754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 229.772837][ T5754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:608 [ 229.877005][ T5757] 9pnet_fd: Insufficient options for proto=fd [ 229.902545][ T5759] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 229.902571][ T5759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 229.910723][ T5759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:411 [ 230.290833][ T5781] fuse: Bad value for 'user_id' [ 230.295905][ T5781] fuse: Bad value for 'user_id' [ 230.329615][ T5790] overlayfs: failed to clone upperpath [ 230.367771][ T5797] overlayfs: failed to clone upperpath [ 230.472436][ T5805] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 230.481405][ T5805] overlayfs: missing 'lowerdir' [ 230.721828][ T5822] input: syz1 as /devices/virtual/input/input37 [ 230.810576][ T338] rust_binder: 5824: removing orphan mapping 0:8 [ 230.929545][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1838'. [ 230.940607][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 230.940627][ T36] audit: type=1326 audit(1773012135.709:7185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.7.1838" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3a058ebe9 code=0x0 [ 231.026380][ T36] audit: type=1326 audit(1773012135.784:7186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.8.1839" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff35378ebe9 code=0x0 [ 231.082472][ T5845] 9pnet_fd: Insufficient options for proto=fd [ 231.502171][ T5874] overlayfs: failed to clone upperpath [ 231.954444][ T5893] input: syz0 as /devices/virtual/input/input38 [ 232.019083][ T36] audit: type=1326 audit(1773012136.719:7187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.2.1867" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43b118ebe9 code=0x0 [ 232.624536][ T36] audit: type=1400 audit(1773012137.289:7188): avc: denied { append } for pid=5921 comm="syz.7.1872" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.650995][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1873'. [ 232.902761][ T5952] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 232.913361][ T36] audit: type=1400 audit(1773012137.560:7189): avc: denied { relabelto } for pid=5951 comm="syz.6.1883" name="file0" dev="tmpfs" ino=2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 232.940290][ T36] audit: type=1400 audit(1773012137.560:7190): avc: denied { associate } for pid=5951 comm="syz.6.1883" name="file0" dev="tmpfs" ino=2285 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 233.064202][ T5965] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1888'. [ 233.080377][ T36] audit: type=1400 audit(1773012137.710:7191): avc: denied { map } for pid=5964 comm="syz.8.1888" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 233.104316][ T36] audit: type=1400 audit(1773012137.710:7192): avc: denied { bind } for pid=5964 comm="syz.8.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 233.128364][ T36] audit: type=1326 audit(1773012137.757:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.2.1892" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43b118ebe9 code=0x0 [ 233.219978][ T5977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.228611][ T5976] rust_binder: Error in use_page_slow: ESRCH [ 233.228630][ T5976] rust_binder: use_range failure ESRCH [ 233.234740][ T5976] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 233.240405][ T5976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 233.248936][ T5976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:638 [ 233.267818][ T5980] fuse: Unknown parameter 'yd' [ 233.477228][ T36] audit: type=1400 audit(1773012138.074:7194): avc: denied { rmdir } for pid=2513 comm="syz-executor" name="file0" dev="tmpfs" ino=2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 233.519954][ T5997] overlayfs: failed to clone upperpath [ 233.536256][ T5999] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1902'. [ 233.639116][ T236] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 233.799514][ T236] usb 9-1: Using ep0 maxpacket: 32 [ 233.805242][ T236] usb 9-1: no configurations [ 233.809909][ T236] usb 9-1: can't read configurations, error -22 [ 233.949358][ T236] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 234.109678][ T236] usb 9-1: Using ep0 maxpacket: 32 [ 234.115393][ T236] usb 9-1: no configurations [ 234.120057][ T236] usb 9-1: can't read configurations, error -22 [ 234.126535][ T236] usb usb9-port1: attempt power cycle [ 234.505379][ T236] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 234.527250][ T236] usb 9-1: Using ep0 maxpacket: 32 [ 234.532891][ T236] usb 9-1: no configurations [ 234.537808][ T236] usb 9-1: can't read configurations, error -22 [ 234.676531][ T236] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 234.720878][ T236] usb 9-1: Using ep0 maxpacket: 32 [ 234.726424][ T236] usb 9-1: no configurations [ 234.731398][ T236] usb 9-1: can't read configurations, error -22 [ 234.738309][ T236] usb usb9-port1: unable to enumerate USB device [ 234.745289][ T6040] x_tables: unsorted entry at hook 2 [ 235.400439][ T6062] overlayfs: failed to clone upperpath [ 235.422071][ T6065] /dev/loop0: Can't lookup blockdev [ 235.422080][ T6064] /dev/loop0: Can't lookup blockdev [ 235.531158][ T6080] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 235.540345][ T6080] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 235.549210][ T6080] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 235.951764][ T6089] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6089 comm=syz.2.1936 [ 235.965181][ T6089] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6089 comm=syz.2.1936 [ 236.093559][ T6101] overlayfs: failed to clone upperpath [ 236.610864][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 236.610882][ T36] audit: type=1400 audit(1773012141.010:7201): avc: denied { bind } for pid=6110 comm="syz.8.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.835621][ T6120] fuse: Unknown parameter 'd' [ 236.870892][ T6122] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.921806][ T6122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 236.928547][ T6122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:457 [ 237.007503][ T36] audit: type=1326 audit(1773012141.375:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6131 comm="syz.2.1952" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43b118ebe9 code=0x0 [ 237.063274][ T6138] 9pnet: Could not find request transport: f [ 237.247646][ T6143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.255964][ T36] audit: type=1326 audit(1773012141.618:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6146 comm="syz.8.1956" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff35378ebe9 code=0x0 [ 237.541222][ T36] audit: type=1400 audit(1773012141.880:7204): avc: denied { setopt } for pid=6153 comm="syz.6.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 237.967729][ T6179] overlayfs: failed to clone upperpath [ 238.046862][ T36] audit: type=1400 audit(1773012142.357:7205): avc: denied { create } for pid=6188 comm="syz.2.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 238.072667][ T36] audit: type=1326 audit(1773012142.375:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.2.1971" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43b118ebe9 code=0x0 [ 238.204514][ T6199] overlayfs: failed to resolve './bus/file0': -2 [ 239.014371][ T6214] incfs_lookup_dentry err:-13 [ 239.019136][ T6214] incfs: Can't find or create .index dir in ./bus [ 239.025700][ T6214] incfs: mount failed -13 [ 239.046208][ T36] audit: type=1400 audit(1773012143.282:7207): avc: denied { getopt } for pid=6219 comm="syz.6.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.611043][ T6224] overlayfs: failed to clone upperpath [ 239.625966][ T6226] fuseblk: Bad value for 'fd' [ 239.642803][ T6228] fuse: Unknown parameter 'grӐ.7o00000000000000000000' [ 239.814783][ T6242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:675 [ 240.120358][ T896] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 240.291478][ T896] usb 9-1: Using ep0 maxpacket: 16 [ 240.296913][ T6249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.301249][ T896] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.318460][ T896] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.335409][ T896] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.344720][ T896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.353291][ T896] usb 9-1: Product: syz [ 240.357943][ T896] usb 9-1: Manufacturer: syz [ 240.362932][ T896] usb 9-1: SerialNumber: syz [ 240.495147][ T6254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.496692][ T6256] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 240.601127][ T6263] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.613042][ T6265] overlayfs: failed to clone lowerpath [ 240.645147][ T6269] fuse: Bad value for 'user_id' [ 240.650165][ T6269] fuse: Bad value for 'user_id' [ 240.668855][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.676094][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.683530][ T6275] bridge0: entered promiscuous mode [ 240.688903][ T6275] bridge0: entered allmulticast mode [ 240.698461][ T6274] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 240.699786][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.715181][ T6275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.722805][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.730488][ T6275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.803402][ T896] usb 9-1: cannot find UAC_HEADER [ 240.810128][ T896] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 240.825880][ T4213] udevd[4213]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 241.019037][ T6245] 9pnet_fd: Insufficient options for proto=fd [ 241.025996][ T236] usb 9-1: USB disconnect, device number 32 [ 241.312938][ T36] audit: type=1400 audit(1773012145.405:7208): avc: denied { associate } for pid=6288 comm="syz.2.2002" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 241.371951][ T6295] netlink: 'syz.2.2005': attribute type 15 has an invalid length. [ 241.433054][ T36] audit: type=1326 audit(1773012145.517:7209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6305 comm="syz.2.2009" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43b118ebe9 code=0x0 [ 241.489690][ T6307] /dev/sr0: Can't lookup blockdev [ 241.511019][ T6307] tipc: Enabling of bearer rejected, failed to enable media [ 241.581854][ T6310] SELinux: security_context_str_to_sid () failed with errno=-22 [ 241.643398][ T6319] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2015'. [ 241.644607][ T6313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.657594][ T6319] binder: Unknown parameter '0x0000000000000004' [ 241.713211][ T6327] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 242.131414][ T6367] netlink: 'syz.6.2031': attribute type 4 has an invalid length. [ 242.139247][ T6367] netlink: 'syz.6.2031': attribute type 27 has an invalid length. [ 242.147175][ T6367] netlink: 3609 bytes leftover after parsing attributes in process `syz.6.2031'. [ 242.237989][ T896] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 242.368898][ T6374] overlayfs: failed to clone upperpath [ 242.409821][ T896] usb 9-1: not running at top speed; connect to a high speed hub [ 242.418825][ T896] usb 9-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.432113][ T896] usb 9-1: config 1 interface 0 has no altsetting 0 [ 242.440276][ T896] usb 9-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 242.451635][ T896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.460015][ T896] usb 9-1: Product: syz [ 242.464428][ T896] usb 9-1: Manufacturer: syz [ 242.470203][ T896] usb 9-1: SerialNumber: syz [ 242.754551][ T6351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 242.754789][ T6351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:710 [ 242.768107][ T896] usbhid 9-1:1.0: can't add hid device: -71 [ 242.783339][ T896] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 242.792288][ T896] usb 9-1: USB disconnect, device number 33 [ 243.050823][ T6399] fuse: Unknown parameter 'Fe֗e0x0000000000000006' [ 243.059764][ T36] audit: type=1400 audit(1773012147.041:7210): avc: denied { read write } for pid=6398 comm="syz.2.2043" name="file0" dev="tmpfs" ino=3147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 243.083341][ T36] audit: type=1400 audit(1773012147.041:7211): avc: denied { open } for pid=6398 comm="syz.2.2043" path="/558/file0" dev="tmpfs" ino=3147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 243.150273][ T6411] overlayfs: failed to clone upperpath [ 243.166728][ T6413] fuse: Bad value for 'group_id' [ 243.171894][ T6413] fuse: Bad value for 'group_id' [ 243.310146][ T236] rust_binder: 6350: removing orphan mapping 0:24 [ 243.403854][ T6430] 9pnet: Could not find request transport: d [ 260.762236][ T37] INFO: task syz.5.781:2773 blocked for more than 122 seconds. [ 260.769956][ T37] Not tainted syzkaller #0 [ 260.775142][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 260.784044][ T37] task:syz.5.781 state:D stack:0 pid:2773 tgid:2772 ppid:2091 flags:0x00004004 [ 260.794338][ T37] Call Trace: [ 260.797806][ T37] [ 260.800830][ T37] __schedule+0x1322/0x1df0 [ 260.805460][ T37] ? __sched_text_start+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 260.810628][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 260.816404][ T37] ? mutex_unlock+0x8b/0x240 [ 260.821183][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 260.821435][ T36] audit: type=1400 audit(1773012163.647:7212): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1519]" dev="pipefs" ino=1519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 260.827648][ T37] schedule+0xc6/0x240 [ 260.854731][ T37] super_lock+0x150/0x300 [ 260.859503][ T37] ? user_get_super+0x350/0x350 [ 260.864383][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 260.870098][ T37] ? __kasan_check_write+0x18/0x20 [ 260.875248][ T37] iterate_supers+0x8a/0x560 [ 260.879926][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 260.885496][ T37] ksys_sync+0x95/0x160 [ 260.889678][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 260.894665][ T37] ? switch_fpu_return+0x12/0x20 [ 260.899634][ T37] __ia32_sys_sync+0x12/0x20 [ 260.905079][ T37] x64_sys_call+0x2a58/0x2ee0 [ 260.909786][ T37] do_syscall_64+0x58/0xf0 [ 260.914542][ T37] ? clear_bhb_loop+0x50/0xa0 [ 260.919236][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 260.943853][ T37] RIP: 0033:0x7f12bdf8ebe9 [ 260.948518][ T37] RSP: 002b:00007f12bee75038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 260.982370][ T37] RAX: ffffffffffffffda RBX: 00007f12be1b5fa0 RCX: 00007f12bdf8ebe9 [ 260.990538][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.998711][ T37] RBP: 00007f12be1b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 261.006795][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.014937][ T37] R13: 00007f12be1b6038 R14: 00007f12be1b5fa0 R15: 00007fff9f502ba8 [ 261.023171][ T37] [ 261.034271][ T37] INFO: task syz.4.823:2891 blocked for more than 123 seconds. [ 261.046629][ T37] Not tainted syzkaller #0 [ 261.056541][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 261.066779][ T37] task:syz.4.823 state:D stack:0 pid:2891 tgid:2890 ppid:1523 flags:0x00004004 [ 261.077519][ T37] Call Trace: [ 261.080827][ T37] [ 261.085246][ T37] __schedule+0x1322/0x1df0 [ 261.089997][ T37] ? __sched_text_start+0x10/0x10 [ 261.095090][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 261.100568][ T37] ? mutex_unlock+0x8b/0x240 [ 261.105383][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 261.111338][ T37] schedule+0xc6/0x240 [ 261.115651][ T37] super_lock+0x150/0x300 [ 261.120006][ T37] ? user_get_super+0x350/0x350 [ 261.125005][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 261.130527][ T37] ? __kasan_check_write+0x18/0x20 [ 261.135662][ T37] iterate_supers+0x8a/0x560 [ 261.140411][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 261.145984][ T37] ksys_sync+0x95/0x160 [ 261.150386][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 261.155629][ T37] ? switch_fpu_return+0x12/0x20 [ 261.160730][ T37] __ia32_sys_sync+0x12/0x20 [ 261.165434][ T37] x64_sys_call+0x2a58/0x2ee0 [ 261.170369][ T37] do_syscall_64+0x58/0xf0 [ 261.174809][ T37] ? clear_bhb_loop+0x50/0xa0 [ 261.179510][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 261.185595][ T37] RIP: 0033:0x7f31dc78ebe9 [ 261.190082][ T37] RSP: 002b:00007f31dd6ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 261.198604][ T37] RAX: ffffffffffffffda RBX: 00007f31dc9b5fa0 RCX: 00007f31dc78ebe9 [ 261.206826][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.214880][ T37] RBP: 00007f31dc9b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 261.223034][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.231142][ T37] R13: 00007f31dc9b6038 R14: 00007f31dc9b5fa0 R15: 00007ffc30e75928 [ 261.239330][ T37] [ 261.272647][ T37] NMI backtrace for cpu 1 [ 261.272668][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 261.272696][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 261.272708][ T37] Call Trace: [ 261.272715][ T37] [ 261.272723][ T37] __dump_stack+0x21/0x30 [ 261.272754][ T37] dump_stack_lvl+0x10c/0x190 [ 261.272778][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 261.272804][ T37] dump_stack+0x19/0x20 [ 261.272826][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 261.272850][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 261.272874][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 261.272897][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 261.272918][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 261.272943][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 261.272966][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 261.272989][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 261.273034][ T37] watchdog+0xd8f/0xed0 [ 261.273059][ T37] ? __cfi_watchdog+0x10/0x10 [ 261.273083][ T37] ? __kasan_check_read+0x15/0x20 [ 261.273109][ T37] ? __kthread_parkme+0x138/0x180 [ 261.273127][ T37] ? schedule+0xc6/0x240 [ 261.273152][ T37] kthread+0x2c7/0x370 [ 261.273171][ T37] ? __cfi_watchdog+0x10/0x10 [ 261.273195][ T37] ? __cfi_kthread+0x10/0x10 [ 261.273214][ T37] ret_from_fork+0x67/0xa0 [ 261.273239][ T37] ? __cfi_kthread+0x10/0x10 [ 261.273258][ T37] ret_from_fork_asm+0x1a/0x30 [ 261.273292][ T37] [ 261.273300][ T37] Sending NMI from CPU 1 to CPUs 0: [ 261.431228][ C0] NMI backtrace for cpu 0 [ 261.431245][ C0] CPU: 0 UID: 0 PID: 3939 Comm: syz.2.1182 Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 261.431272][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 261.431283][ C0] RIP: 0010:filter_irq_stacks+0x36/0xa0 [ 261.431313][ C0] Code: 41 55 41 54 53 85 f6 74 70 49 89 fe 41 89 f4 31 db 49 bd 00 00 00 00 00 fc ff df 49 89 ff 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 ff e8 70 bf 67 00 49 8b 04 de 48 3d 30 02 a0 85 0f 93 [ 261.431327][ C0] RSP: 0018:ffffc9000eca6aa8 EFLAGS: 00000246 [ 261.431342][ C0] RAX: 1ffff92001d94d7d RBX: 0000000000000009 RCX: 0000000000000001 [ 261.431353][ C0] RDX: 0000000000002801 RSI: 0000000000000010 RDI: ffffc9000eca6ba0 [ 261.431364][ C0] RBP: ffffc9000eca6ad0 R08: ffffc9000eca6af0 R09: ffffc9000eca6ae8 [ 261.431376][ C0] R10: 000000000000000f R11: ffffffff81744340 R12: 0000000000000010 [ 261.431386][ C0] R13: dffffc0000000000 R14: ffffc9000eca6ba0 R15: ffffc9000eca6be8 [ 261.431398][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 261.431412][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.431423][ C0] CR2: 000055ca62a2c620 CR3: 000000010bfd0000 CR4: 00000000003526b0 [ 261.431437][ C0] Call Trace: [ 261.431443][ C0] [ 261.431450][ C0] stack_depot_save_flags+0x38/0x800 [ 261.431476][ C0] stack_depot_save+0x12/0x20 [ 261.431489][ C0] save_stack+0x106/0x1f0 [ 261.431507][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 261.431529][ C0] ? __reset_page_owner+0x450/0x450 [ 261.431545][ C0] ? free_unref_folios+0xcfe/0x1680 [ 261.431564][ C0] ? folios_put_refs+0x4c9/0x5c0 [ 261.431583][ C0] ? __folio_batch_release+0xac/0x100 [ 261.431601][ C0] ? shmem_undo_range+0x44d/0x1140 [ 261.431615][ C0] ? shmem_evict_inode+0x26e/0xa00 [ 261.431632][ C0] ? evict+0x4d0/0xa90 [ 261.431653][ C0] ? iput+0x639/0x8d0 [ 261.431669][ C0] ? dentry_unlink_inode+0x373/0x420 [ 261.431683][ C0] ? __dentry_kill+0x1b4/0x5f0 [ 261.431703][ C0] ? shrink_dentry_list+0x2e6/0x4f0 [ 261.431722][ C0] ? shrink_dcache_parent+0xac/0x250 [ 261.431743][ C0] ? shrink_dcache_for_umount+0x95/0x1a0 [ 261.431764][ C0] ? generic_shutdown_super+0x6a/0x300 [ 261.431784][ C0] ? kill_anon_super+0x4b/0x1d0 [ 261.431803][ C0] ? kill_litter_super+0x5a/0x70 [ 261.431822][ C0] ? deactivate_locked_super+0xd5/0x2a0 [ 261.431841][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 261.431858][ C0] __reset_page_owner+0x79/0x450 [ 261.431875][ C0] free_unref_folios+0xcfe/0x1680 [ 261.431894][ C0] ? __mem_cgroup_uncharge_folios+0x143/0x1c0 [ 261.431917][ C0] ? __kasan_check_write+0x18/0x20 [ 261.431938][ C0] ? __cfi_free_unref_folios+0x10/0x10 [ 261.431956][ C0] ? folios_put_refs+0x590/0x5c0 [ 261.431974][ C0] ? __cfi___filemap_remove_folio+0x10/0x10 [ 261.431991][ C0] folios_put_refs+0x4c9/0x5c0 [ 261.432080][ C0] ? __cfi_folios_put_refs+0x10/0x10 [ 261.432116][ C0] ? folio_unlock+0x12f/0x1a0 [ 261.432136][ C0] ? __cfi_filemap_remove_folio+0x10/0x10 [ 261.432152][ C0] ? __cfi_folio_unlock+0x10/0x10 [ 261.432169][ C0] __folio_batch_release+0xac/0x100 [ 261.432189][ C0] shmem_undo_range+0x44d/0x1140 [ 261.432204][ C0] ? arch_stack_walk+0x10b/0x170 [ 261.432228][ C0] ? shmem_truncate_range+0xc0/0xc0 [ 261.432246][ C0] ? __kernel_text_address+0x11/0x40 [ 261.432265][ C0] ? unwind_get_return_address+0x51/0x90 [ 261.432284][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 261.432319][ C0] ? kasan_save_stack+0x4d/0x60 [ 261.432334][ C0] ? kasan_save_stack+0x3e/0x60 [ 261.432349][ C0] ? __kasan_record_aux_stack+0xb2/0xd0 [ 261.432369][ C0] ? __call_rcu_common+0xd5/0x700 [ 261.432393][ C0] ? call_rcu+0x14/0x20 [ 261.432415][ C0] shmem_evict_inode+0x26e/0xa00 [ 261.432433][ C0] ? inode_wait_for_writeback+0x113/0x2a0 [ 261.432458][ C0] ? __cfi_shmem_evict_inode+0x10/0x10 [ 261.432476][ C0] ? __cfi_inode_wait_for_writeback+0x10/0x10 [ 261.432501][ C0] ? __cfi_shmem_evict_inode+0x10/0x10 [ 261.432519][ C0] evict+0x4d0/0xa90 [ 261.432540][ C0] ? mapping_shrinkable+0x140/0x140 [ 261.432570][ C0] ? _raw_spin_lock+0x8c/0x120 [ 261.432590][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 261.432607][ C0] ? __call_rcu_common+0x41f/0x700 [ 261.432630][ C0] ? __kasan_check_write+0x18/0x20 [ 261.432651][ C0] iput+0x639/0x8d0 [ 261.432669][ C0] dentry_unlink_inode+0x373/0x420 [ 261.432683][ C0] __dentry_kill+0x1b4/0x5f0 [ 261.432704][ C0] ? lock_for_kill+0xa7/0x230 [ 261.432724][ C0] shrink_dentry_list+0x2e6/0x4f0 [ 261.432746][ C0] shrink_dcache_parent+0xac/0x250 [ 261.432768][ C0] ? __cfi_shrink_dcache_parent+0x10/0x10 [ 261.432789][ C0] ? __kasan_check_write+0x18/0x20 [ 261.432814][ C0] ? _raw_spin_lock+0x8c/0x120 [ 261.432832][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 261.432850][ C0] shrink_dcache_for_umount+0x95/0x1a0 [ 261.432874][ C0] generic_shutdown_super+0x6a/0x300 [ 261.432894][ C0] kill_anon_super+0x4b/0x1d0 [ 261.432915][ C0] kill_litter_super+0x5a/0x70 [ 261.432935][ C0] deactivate_locked_super+0xd5/0x2a0 [ 261.432955][ C0] deactivate_super+0xb8/0xe0 [ 261.432974][ C0] cleanup_mnt+0x3f1/0x480 [ 261.433009][ C0] __cleanup_mnt+0x1d/0x40 [ 261.433025][ C0] task_work_run+0x1e3/0x250 [ 261.433044][ C0] ? __cfi_task_work_run+0x10/0x10 [ 261.433062][ C0] ? free_nsproxy+0x223/0x290 [ 261.433085][ C0] do_exit+0x9bc/0x2630 [ 261.433105][ C0] ? __sched_text_start+0x10/0x10 [ 261.433127][ C0] ? __cfi_do_exit+0x10/0x10 [ 261.433145][ C0] ? __kasan_check_write+0x18/0x20 [ 261.433166][ C0] ? _raw_spin_lock_irq+0x8d/0x120 [ 261.433187][ C0] ? __kasan_check_read+0x15/0x20 [ 261.433208][ C0] ? cgroup_update_frozen+0x160/0x990 [ 261.433226][ C0] do_group_exit+0x22a/0x300 [ 261.433244][ C0] ? cgroup_leave_frozen+0x16c/0x2b0 [ 261.433260][ C0] get_signal+0x139d/0x14f0 [ 261.433283][ C0] arch_do_signal_or_restart+0x96/0x720 [ 261.433323][ C0] ? common_nsleep+0x93/0xb0 [ 261.433338][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 261.433360][ C0] ? __se_sys_clock_nanosleep+0x300/0x390 [ 261.433387][ C0] ? __kasan_check_read+0x15/0x20 [ 261.433407][ C0] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 261.433426][ C0] syscall_exit_to_user_mode+0x58/0xb0 [ 261.433442][ C0] do_syscall_64+0x64/0xf0 [ 261.433461][ C0] ? clear_bhb_loop+0x50/0xa0 [ 261.433477][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 261.433501][ C0] RIP: 0033:0x7f43b11c14a5 [ 261.433516][ C0] Code: Unable to access opcode bytes at 0x7f43b11c147b. [ 261.433525][ C0] RSP: 002b:00007f43b209af80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 261.433543][ C0] RAX: fffffffffffffdfc RBX: 00007f43b13b5fa0 RCX: 00007f43b11c14a5 [ 261.433555][ C0] RDX: 00007f43b209afc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.433567][ C0] RBP: 00007f43b1211e19 R08: 0000000000000000 R09: 0000000000000000 [ 261.433578][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 261.433589][ C0] R13: 00007f43b13b6038 R14: 00007f43b13b5fa0 R15: 00007ffd23f73948 [ 261.433603][ C0] [ 262.277999][ T329] bridge_slave_1: left allmulticast mode [ 262.283725][ T329] bridge_slave_1: left promiscuous mode [ 262.289794][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.297544][ T329] bridge_slave_0: left allmulticast mode [ 262.303273][ T329] bridge_slave_0: left promiscuous mode [ 262.308996][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.453719][ T329] tipc: Left network mode [ 262.459246][ T329] veth1_macvtap: left promiscuous mode [ 262.464799][ T329] veth0_vlan: left promiscuous mode [ 262.656268][ T329] bridge_slave_1: left allmulticast mode [ 262.662380][ T329] bridge_slave_1: left promiscuous mode [ 262.668117][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.675842][ T329] bridge_slave_0: left allmulticast mode [ 262.681673][ T329] bridge_slave_0: left promiscuous mode [ 262.687516][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.785967][ T329] veth1_macvtap: left promiscuous mode [ 262.791687][ T329] veth0_vlan: left promiscuous mode