last executing test programs: 3m15.778744801s ago: executing program 32 (id=383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = dup(r3) write$FUSE_BMAP(r4, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000700)=0x4, 0x4) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) dup(r3) (async) write$FUSE_BMAP(r4, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000700)=0x4, 0x4) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup2(r0, r0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil) (async) 2m43.32310539s ago: executing program 33 (id=908): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x24cb00, 0x0) (async, rerun: 32) syz_clone(0x23a40080, 0x0, 0x38, 0x0, 0x0, 0x0) (async, rerun: 32) mount$incfs(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x4000000, @local}}}, 0x88) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x4000000) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000300), 0x10) (async) connect$can_bcm(r2, &(0x7f0000000340), 0x10) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x48) (async) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x4000, 0x25daa903, 0xffffffffffffffff, r6, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x21, 0xffffffff, 0x50339398, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6}}, 0x50) (async, rerun: 32) chown(&(0x7f00000000c0)='./file0\x00', r5, 0x0) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3, 0x4}}, 0x10) (async, rerun: 64) io_setup(0x4, &(0x7f0000000100)) (rerun: 64) 2m1.670761175s ago: executing program 34 (id=1672): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x14, r1, 0xb31, 0x0, 0x0, {0x7, 0x0, 0xa1ff}}, 0x14}}, 0x0) 1m32.456931502s ago: executing program 35 (id=2076): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x2) connect$netlink(r0, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x488e80, 0x0) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) r2 = socket$inet_icmp(0x2, 0x2, 0x1) flock(r2, 0x2) 1m19.785935074s ago: executing program 36 (id=2228): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)=0x2) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x1e) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) read(r4, &(0x7f0000000240)=""/2, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x240000, 0x0) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0xfffff21e, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x9, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x13, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x48, 0x4, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x8, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x100303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x3, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x1, 0xbb33, 0x7, 0xf, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10200, 0x0, 0x7e, 0x100, 0x8, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x2000005, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r6 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r9, &(0x7f0000000080), 0x0, 0x0, 0x2) sendmsg$can_bcm(r6, &(0x7f0000000880)={&(0x7f00000001c0), 0x10, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0400006f8626abcaad4cf5ff00000000b5f14a6751cd25f1e3d3ce3c12016fad97dfad90429613adb9219d5d0d4b61a417740a51c23815327b46840b36ae1d979e7478d61785abd574dbe5fb7f813b0ec03eb55dbe5146f0edf2c8107fce0c3321c6a2ff04289fd8a0c3970a3ec3bf", @ANYRES64=r7, @ANYRES64=r8/1000+10000, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="010000a0010000000300008014020000b3f44100878aef37a7993451a7928f1615beba14b053be6ba6aed53cdf4233f1d1d3b49e389dde3e3398d50dc2cea958eb004c2207bd4cc84d6e51e11876a9cf"], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x44040000) socket$unix(0x1, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0xb20, 0x4) 1m16.721675083s ago: executing program 7 (id=2255): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x600}}, 0x30) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r4, 0x4068aea3, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) io_setup(0x2, &(0x7f0000000100)) 1m16.710855264s ago: executing program 7 (id=2256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r2, &(0x7f0000010140)={0x2020}, 0x2036) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x5, 0x3a, '{&:@[', 0x3a, '', 0x3a, './file0'}, 0x2c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r4, 0x99b33000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 1m16.618872745s ago: executing program 7 (id=2257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) fgetxattr(r1, &(0x7f0000000040)=@known='security.apparmor\x00', &(0x7f0000000140)=""/110, 0x6e) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000331000/0x2000)=nil, 0x2000, 0x3000001, 0x12, r1, 0x33db7000) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000100)=0x3) 1m16.616956635s ago: executing program 7 (id=2258): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = epoll_create1(0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x4010, r1, 0x0) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r2, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x7fffffff, 0x40001) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mlock(&(0x7f0000754000/0x3000)=nil, 0x3000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m16.576924976s ago: executing program 7 (id=2259): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="c00000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffff7f000000000000000000000000000000000253b8bd5efe0000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000008001f0002000000"], 0xc0}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="c00000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffff7f000000000000000000000000000000000253b8bd5efe0000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000008001f0002000000"], 0xc0}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/1, 0x1, 0x2, 0x3a}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) 1m16.475389317s ago: executing program 7 (id=2260): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = creat(&(0x7f0000000380)='./file1\x00', 0x18) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa, 0x1, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "0609e8dbe108598948224ad5cafac11d875397bdc02d0000b420a1a93c524bfe4ab10000000000008dd4992861ac0100", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) copy_file_range(r1, 0x0, r2, 0x0, 0x9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) setresuid(0x0, 0xee00, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x2, 0x1, 0x37}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m16.444631758s ago: executing program 37 (id=2260): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = creat(&(0x7f0000000380)='./file1\x00', 0x18) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa, 0x1, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "0609e8dbe108598948224ad5cafac11d875397bdc02d0000b420a1a93c524bfe4ab10000000000008dd4992861ac0100", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) copy_file_range(r1, 0x0, r2, 0x0, 0x9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) setresuid(0x0, 0xee00, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x2, 0x1, 0x37}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m13.686674132s ago: executing program 4 (id=2297): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) preadv2(r1, &(0x7f0000000500)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1, 0xfffffffe, 0x6, 0x15) 1m13.686190052s ago: executing program 4 (id=2298): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) setuid(0xee00) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r1, &(0x7f00000000c0), 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 1m13.629374623s ago: executing program 4 (id=2299): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000080)={0x14, r1, 0x5, 0x70bd28, 0x0, {0x22}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c094) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32) futex_waitv(&(0x7f00000005c0)=[{0xfffffffffffffffd, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000740)={0x0, 0x989680}, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000400)={0x2, 0x0, @ioapic={0x8000000, 0x7f, 0xb, 0x1, 0x0, [{0x6d, 0x0, 0x3e, '\x00', 0x9}, {0x1, 0x1c, 0x3, '\x00', 0x5}, {0x7, 0x1, 0x9, '\x00', 0x9}, {0xff, 0x5, 0xa, '\x00', 0x81}, {0xff, 0x30, 0x5, '\x00', 0x7}, {0x9, 0x6, 0x5, '\x00', 0x5}, {0xd, 0xbc, 0x4, '\x00', 0x35}, {0x4, 0x7, 0x7, '\x00', 0x90}, {0x40, 0x6, 0x7}, {0x4, 0x3, 0x1, '\x00', 0x4}, {0x3, 0x87, 0x1, '\x00', 0xfe}, {0x16, 0x10, 0xf7, '\x00', 0xff}, {0x26, 0xc, 0x6, '\x00', 0x7}, {0x7, 0x40, 0x3, '\x00', 0x9}, {0x9, 0x42, 0x7, '\x00', 0x6}, {0x9, 0x4, 0xf, '\x00', 0x7}, {0x0, 0x5, 0x8, '\x00', 0x5}, {0x6, 0xf, 0x1a, '\x00', 0x4f}, {0x80, 0x6, 0x9, '\x00', 0x9}, {0x7f, 0x40, 0x10, '\x00', 0xf9}, {0xfd, 0x0, 0x9, '\x00', 0xce}, {0xff, 0x4, 0xa, '\x00', 0x3}, {0x5d, 0xfe, 0x3, '\x00', 0xf7}, {0x0, 0x8, 0x7, '\x00', 0x2}]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (rerun: 64) r7 = openat$cgroup_ro(r6, &(0x7f0000000480)='cgroup.freeze\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00'}}, 0x118) (async) r8 = syz_open_dev$rtc(&(0x7f0000000000), 0xb48, 0x0) ioctl$RTC_AIE_OFF(r8, 0x7002) (async) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x52c8}], 0x2d, 0x6) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_handle={0x77682a85, 0x2100, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 1m13.621502183s ago: executing program 4 (id=2300): mkdir(&(0x7f0000000400)='./file0\x00', 0x99) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) fstat(r0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='0000037777777777,\x00']) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getenv(0x4201, r3, 0x0, &(0x7f0000000080)) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x4, 0x7}, 0x0) syz_io_uring_setup(0xcbe, &(0x7f00000000c0)={0x0, 0xdd79, 0x20, 0x5, 0x256}, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000140)={[0x893]}, 0x8) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "74b658a7aa0b2d59", "a4918a29c9ea8feb40a19d514e52f36f", "c7e0a3c2", "ff9019438d66c38c"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x4, 0x0) recvmmsg(r1, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10020, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) 1m12.776271426s ago: executing program 4 (id=2310): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x11, r0, 0xd6a49000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000040)='./file0\x00', 0xce) 1m12.723937358s ago: executing program 4 (id=2311): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) r1 = openat(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getdents(r1, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x1fd) r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xc0000484) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02af", 0x14, 0x6000000000000000, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00"], 0x1c}], 0x1}, 0x4000080) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x200008c4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc00, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) 1m12.660137858s ago: executing program 38 (id=2311): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) r1 = openat(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getdents(r1, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x1fd) r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xc0000484) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02af", 0x14, 0x6000000000000000, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00"], 0x1c}], 0x1}, 0x4000080) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x200008c4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc00, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) 1m6.026350694s ago: executing program 0 (id=2388): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) syz_clone(0x80843711, 0x0, 0xfffffcf7, 0x0, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='1-2:5/', @ANYRESOCT], 0x31) pread64(r0, &(0x7f00000002c0)=""/202, 0xca, 0xff) 1m6.015062144s ago: executing program 0 (id=2389): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, '\x00', "d62cb2759e70ad75c3b50ef30b007511", "0894cb4c", "2a6f9fea1f1bb653"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x8080, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000702, r4, &(0x7f00000001c0)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r5, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000040)={0xf000, 0x118000}) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_clone(0x41020000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_int(r8, 0x29, 0xa, &(0x7f0000000240)=0x5, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r7, 0x147a5000) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000040), 0x4) close_range(r1, 0xffffffffffffffff, 0x0) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) fcntl$notify(r10, 0x402, 0x80000006) 1m5.931412266s ago: executing program 0 (id=2390): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003640)=""/4097, 0x1001}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/65, 0x41}, {&(0x7f0000000100)=""/121, 0x79}, {&(0x7f0000000180)=""/68, 0x44}], 0x9}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 1m5.923087046s ago: executing program 0 (id=2391): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x27, &(0x7f00000000c0), 0x1}, 0x8}], 0x1, 0x2, 0x0) r4 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x89, &(0x7f0000000480), &(0x7f00000004c0)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m5.873965947s ago: executing program 0 (id=2393): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x1, 0x3, 0x25dfdbfd, {{@in=@local, @in=@multicast1=0xac1414bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in=@broadcast, 0x4000000, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000000000}, {0x7b, 0x0, 0x2000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6b}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, 0x3f) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000180), 0x4) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) mprotect(&(0x7f00003e4000/0x2000)=nil, 0x2000, 0x2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0040, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) close_range(r0, r4, 0x2) 1m5.743525429s ago: executing program 0 (id=2399): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x81) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000d016bcd7576c660aedf9ecdc1abf9a0958069bc10c08e89b659ac9381040b25524b88a2f82a7ad7366667de2fa2825ac1ce4b4de4ca15c88b93f09f79f75f0707252d37387241c9f27102e3f0d96", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf251100000004000980"], 0x18}, 0x1, 0x0, 0x0, 0x48040}, 0x4000) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 1m5.71481168s ago: executing program 39 (id=2399): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x81) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000d016bcd7576c660aedf9ecdc1abf9a0958069bc10c08e89b659ac9381040b25524b88a2f82a7ad7366667de2fa2825ac1ce4b4de4ca15c88b93f09f79f75f0707252d37387241c9f27102e3f0d96", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf251100000004000980"], 0x18}, 0x1, 0x0, 0x0, 0x48040}, 0x4000) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 41.948558019s ago: executing program 8 (id=2656): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) chdir(&(0x7f0000000140)='./bus/file0\x00') (async, rerun: 64) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000240)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 41.90793505s ago: executing program 8 (id=2657): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$can_bcm(r1, &(0x7f0000000040), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x1, 0xa4, 0x5, {r3, r4/1000+10000}, {0x77359400}, {0x0, 0x1}, 0x1, @canfd={{}, 0x30, 0x2, 0x0, 0x0, "6fdd238e0957d32bbec6cbf6c2c81076dfaf91ddcb937c80251cae443b334bb35ff3b016efd767e177407828bd5e08cab930f5c78bd205fbe34b6a925e1e9d82"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)={0x1, 0xc0, 0x2, {r5, r6/1000+10000}, {}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x2, 0x1}, 0x6, 0x3, 0x0, 0x0, "6c979226155bf175"}}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x894) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/custom0\x00', 0x802, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)="89536d832ba08d", 0x7}, {&(0x7f0000000440)="c5cbf23046e127feb9eab05020c98deb77f2dc9f65c448496a302a7d656a408cd0efecb7dd909534ffc574b03322bec5ced98b064aca80d91a3b507852663c053bc23a6a05ed403807f52b41257b9c29a5ec3f96b0457174281423a13b362e495fb54a252127ec", 0x67}], 0x2) timer_create(0x3, &(0x7f0000001580)={0x0, 0x36, 0x0, @thr={&(0x7f0000000500)="622ff40542e5440f0a853627447414ca9a07d7b9e03f98d19ffd2adfc6f1803cc1cc9b5c4a6d0efaa015258dd41bd5354281867b84892d481d3b58ef7736288b26462b6eea64538dacad2f364d463d2a4adfe6c9b3963c33ede39a1aeb1c060acee336efcb1834e584330a4c990e46515578c6915353db0c69da", &(0x7f0000000580)="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"}}, &(0x7f00000015c0)=0x0) timer_gettime(r8, &(0x7f0000001600)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001640)={@remote, 0x52, r2}) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x1c5380, 0x1, 0x6}, 0x18) unlinkat(r9, &(0x7f0000001700)='./file0\x00', 0x13d7b2e8018dc2c0) lstat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)) r10 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000001800)=@x86={0x8, 0xff, 0x2, 0x0, 0xa, 0xb2, 0x68, 0x5, 0x7, 0x2, 0x6, 0xf4, 0x0, 0x7, 0x80000000, 0x3, 0x81, 0x8, 0x7, '\x00', 0x3, 0x9c6d}) connect$inet6(r1, &(0x7f0000001840)={0xa, 0x4e21, 0xb67b, @mcast1, 0x7ff}, 0x1c) sendto$inet6(r0, &(0x7f0000001880)="208a256492dcc3b3548aaa822d2b480e53fd43d585d19525e6f51c9096f6b287dc14a5d61c3dbc8280616fb881e9135de6e930012d369d80bf509224f76143a7747bb8ba4e9699d9e7852b98e9a9ef761bdccfe777bec1f7ce85f6512c409179740ecc5f0faf37bbef8d41cc58e750e9eb1e645f07027522293083dd94e58aff246a999559d9950e0ca3", 0x8a, 0x4048082, 0x0, 0x0) r11 = socket$inet6(0xa, 0x80000, 0x280) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) r12 = socket$pppl2tp(0x18, 0x1, 0x1) close_range(r12, r7, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) lstat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) unlinkat(r9, &(0x7f0000001a40)='./file0/file0\x00', 0x0) preadv(r11, &(0x7f0000002b40)=[{&(0x7f0000001a80)=""/89, 0x59}, {&(0x7f0000001b00)=""/24, 0x18}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x3, 0xa000, 0x3ff) recvmsg$unix(r1, &(0x7f0000002d00)={&(0x7f0000002b80), 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002c00)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x80000040) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002d40), 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f0000002e40)={0x1, 0x3, 0x1000, 0xb, &(0x7f0000002d80)="95cf94095574470f0187ef", 0x56, 0x0, &(0x7f0000002dc0)="2921cfe3fc2be764b22433185a6fea16908ba25407900d72280157ab255872265063f9b59e175cd0d3a32424455d8fcf602808b4beda678cce464ee368c40af1243481910a104a0e18cd5d786075ddcf1002fe070a10"}) 41.90492911s ago: executing program 8 (id=2659): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1b2e}) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000034d564b"]) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002400010001000000c2e79f760eb62f83060003"], 0x1c}}, 0x8004) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000015c0)='smaps\x00') close(r6) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001640)={{0x12, 0x1, 0x188, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x81, {0x9, 0x21, 0xe64c, 0x9, 0x1, {0x22, 0x505}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x29, 0x1}}}}}]}}]}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r6, 0x80085502, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 41.162072032s ago: executing program 8 (id=2662): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) write$P9_RLERROR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="13"], 0x13) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x891e, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f0000000040)) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x86) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x300, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x8, 0x7, 0xe44, 0x9f1, 0x17, "de98cd550c0f9c4a"}) 40.778540898s ago: executing program 8 (id=2666): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0xffff) capget(&(0x7f00000000c0)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000100)={0x8, 0x1, 0x9, 0x9, 0xffffffff, 0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x10, 0x2, 0x9, 0x16, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x40, 0x3, 0x800}}) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@delchain={0x1080, 0x65, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xe, 0xb}, {0xf, 0x3}, {0xffff}}, [@f_tcindex={{0xc}, {0x1050, 0x2, [@TCA_TCINDEX_POLICE={0x82c, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff9, 0x8100000, 0x6, 0x40, 0x8, 0xb, 0x2, 0x18, 0xfe000000, 0x1, 0x200, 0x8, 0xffff32b5, 0x0, 0x9, 0x9, 0x0, 0xfffffff7, 0x8000, 0xffffecfd, 0x7, 0x2, 0xcce, 0x0, 0xaa, 0x5, 0x400, 0x3, 0x1000, 0xa49b, 0x8, 0x9a, 0x9, 0x529, 0x6, 0x7fffffff, 0x7, 0x4, 0x68, 0x396, 0x9, 0x1, 0x5, 0x2, 0xfffffffe, 0x40, 0x5, 0xc, 0x1000, 0x8, 0x143, 0xd35, 0x401, 0x0, 0x8001, 0x81, 0x6, 0x3ff, 0xfc, 0x3, 0x3, 0x9, 0x7, 0x4, 0x0, 0x5, 0x2, 0x8001, 0x6, 0x3, 0x5, 0x7, 0x5, 0x1, 0x1, 0x4, 0x6, 0x1, 0x80000001, 0xfffffe00, 0x5, 0x2, 0x2, 0x10001, 0x3, 0x0, 0xfffffffd, 0x8001, 0xdb, 0x2, 0x10001, 0x3, 0xd4a, 0x80, 0x9, 0x2, 0x0, 0x3, 0x9, 0x2, 0x7f, 0x4, 0x2, 0x1, 0x3, 0x6, 0xffffffff, 0xffffffff, 0x9, 0x401, 0xffff9ff5, 0x9, 0x5, 0x1000, 0x2, 0x3, 0x8001, 0x7ff, 0x0, 0x90, 0x27ea1f75, 0x9, 0x80, 0x400, 0x7, 0x5, 0x4f2ae7b1, 0x7, 0x5, 0x4, 0x5, 0xf, 0x6, 0xc, 0x0, 0x7, 0x3, 0x8, 0xae9, 0x239413e, 0x8, 0x2, 0x800, 0x1, 0x3, 0x1, 0x7f, 0x3, 0x9, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x6d6e, 0x73, 0x5, 0x4, 0x9, 0x6e9, 0x1f, 0x1, 0xdec8, 0x4, 0x0, 0x0, 0x8, 0x3, 0xf, 0xfffffbff, 0x4, 0x1, 0x8, 0x9, 0x5, 0x1, 0x5, 0x7fffffff, 0x2, 0xfffffffb, 0x2695, 0xa, 0x2, 0x4, 0x2, 0x40, 0x0, 0x5, 0x65, 0x8, 0x8, 0x2, 0x8, 0x4, 0x3, 0x7f, 0x4bae, 0x7ff, 0x8, 0x3, 0xd, 0xffffffff, 0x8, 0x200, 0x8001, 0x3, 0x10455dbc, 0x1, 0x3ff, 0x0, 0x10, 0x1e, 0x0, 0xf, 0x6, 0x78, 0x0, 0x9, 0x9, 0x5, 0x3baf, 0x5, 0x1, 0x7, 0x685, 0x1c0, 0x9, 0xf38a, 0x7fffffff, 0x7, 0x7, 0x9, 0x2, 0x81, 0x5, 0xac, 0x3800000, 0x9, 0x300000, 0x7f, 0x401, 0x0, 0x8, 0x3, 0x200, 0xc, 0x6, 0x0, 0x8, 0xdb2, 0x7, 0x7, 0x2, 0x5, 0x8001, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1000, 0x2, 0x10, 0x6, 0x0, 0x10001, 0x5, 0x0, 0x100, 0xfffffff5, 0x9, 0xfffeffff, 0x7, 0xd, 0x1, 0x8, 0x0, 0x9, 0xffffff16, 0x80, 0x7, 0x7a, 0x5, 0x101, 0x8, 0x2, 0x8, 0x7ff, 0x2, 0xec, 0x4, 0x1ff, 0x8, 0x9, 0x228, 0x3, 0x4, 0x8, 0x10001, 0xda, 0x2, 0x5, 0x101, 0x6, 0x3, 0xffffffff, 0x5, 0x8, 0x4, 0x4, 0x2, 0x5, 0x1, 0x2, 0x4, 0x6, 0x5, 0x10001, 0xc785, 0xffffff00, 0x2, 0x8, 0x7d8, 0x3, 0x0, 0x9, 0x7ff, 0x4, 0x5, 0x1, 0x5, 0x2, 0x6, 0x5, 0x6, 0x7, 0x9e0303, 0x9, 0x5a, 0x1, 0xd, 0x5, 0x5, 0x7fff, 0x8, 0xb, 0x4, 0xd, 0x2, 0x6, 0x80, 0xf, 0x1ebe, 0x5, 0x1, 0x4, 0x4, 0x5, 0x10, 0xfffffffe, 0x8, 0x1800, 0x10, 0xff, 0xd, 0xb831, 0x8e0, 0x6, 0x1, 0x3, 0xd, 0xfffffffc, 0x3, 0x4, 0x60000000, 0xff, 0xbd33, 0x6, 0x5, 0x1, 0x8c2, 0x4, 0xb0f2, 0x6, 0x9, 0xf19, 0x81, 0xb4c4, 0x6, 0xff, 0xe, 0xca, 0xffffffff, 0x0, 0x7, 0x3, 0xa, 0x6, 0x7, 0x80000001, 0x6, 0x7, 0x5, 0x6, 0x2, 0x6, 0x9, 0xf, 0x1, 0x6, 0x2, 0x4, 0x5, 0x9, 0x6, 0x101, 0x6, 0x1, 0x0, 0x4, 0x9, 0x6, 0xffffffff, 0xffffffff, 0xa, 0x2, 0x1, 0x7fffffff, 0x568b, 0x5, 0xe5e, 0xc4b, 0x9, 0x1, 0x60000000, 0x6d, 0x9, 0x0, 0xc4, 0x3, 0x8, 0x7f, 0x401, 0xe, 0xa, 0x5, 0x4000, 0x1ff, 0x85ac, 0x7, 0xa, 0x4, 0x0, 0x81, 0x0, 0xb68, 0x401, 0x9, 0xffff, 0x5, 0xfff, 0x8201, 0x0, 0x63, 0x5, 0x3800, 0x4, 0x1ff, 0x88, 0x0, 0xcc, 0xe575, 0x8, 0x2, 0x9, 0x2, 0x3, 0x2, 0x6, 0x7, 0x27d0, 0x9, 0x7fff, 0x6, 0x6, 0x200, 0x7, 0x6, 0x5, 0x80000001, 0x6, 0x6, 0xfffffffd, 0x9, 0x2, 0x0, 0x7f, 0x40, 0x34c7, 0x4, 0x400, 0x5, 0x8, 0x6, 0x1, 0x200, 0x0, 0xd7e, 0xffff7fff, 0x40, 0x6, 0x0, 0x1, 0xbde, 0x2]}]}, @TCA_TCINDEX_POLICE={0x818, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5ec}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0xfffff801, 0x27, 0x101ea1bc, 0xa774, 0x81, 0x8, 0xcd, 0x80, 0xfffffff8, 0xeb8, 0x4, 0x2, 0x2c, 0x573, 0x7, 0x1000, 0xb, 0x3, 0x2, 0xffffffff, 0xb1, 0x9, 0x1, 0x414, 0x1000, 0xf, 0x5, 0x6e5, 0x8, 0x41, 0x400, 0x4, 0x4, 0x67fe, 0x633, 0xfffffff7, 0x7, 0x8, 0x7b, 0x3de8ef7e, 0x603, 0x2, 0x3, 0x5, 0x4, 0x8, 0x6, 0xfffffffd, 0x3ff, 0x6, 0x8, 0x7, 0x7, 0x5, 0x7ff, 0x0, 0x3000000, 0xfffffffd, 0x0, 0x6, 0x10, 0x3, 0x6, 0x9d34, 0x3, 0x675d, 0x10001, 0xfffffffa, 0x8, 0x2, 0xfffffffb, 0x7fff, 0x9, 0x4, 0xc8c5, 0x4, 0x279, 0x9, 0x1, 0x4, 0x6, 0x0, 0x0, 0x8000, 0xff, 0x1000, 0x1, 0x8b, 0xa36a, 0x80000000, 0x3ff, 0x2, 0x9, 0x22dbbe97, 0x5, 0xf, 0xdf2d, 0x7, 0x2, 0x4, 0x9, 0x0, 0x3, 0x3, 0x81, 0x5, 0xa9, 0x80, 0x1, 0x7fff, 0x0, 0x80000000, 0x6, 0x0, 0xb35, 0x2, 0x6, 0x0, 0x3, 0xfffffff7, 0x100, 0x80000000, 0x4, 0x8, 0xb, 0x7, 0x4, 0x62, 0x3, 0x0, 0x5607, 0x3, 0x0, 0x8001, 0x8, 0x1, 0x6, 0x10000, 0x7, 0x2, 0x25f, 0x0, 0x7, 0x2, 0x0, 0x7, 0x58, 0x3, 0x8, 0x2, 0x3dc1, 0xf, 0x0, 0x6, 0x0, 0xa891, 0x7c10, 0x8001, 0xa, 0x0, 0x2, 0x0, 0x2, 0x80, 0x2, 0xfffffe3d, 0x5, 0x6, 0xffff0000, 0x4, 0x80000000, 0x1, 0x9, 0x1, 0x7ff, 0x9, 0x7, 0x7, 0x7f, 0x0, 0xdc, 0x2, 0x947e, 0x7, 0x1, 0xbb, 0x4, 0x0, 0x1, 0x3, 0x0, 0xfff, 0x7fff, 0xd93, 0x7d5, 0x49, 0x8, 0x8, 0x6, 0x40801065, 0x401, 0x7, 0x9d2b, 0x60254da9, 0x3, 0x4, 0x1, 0x0, 0x9, 0x7, 0x1, 0xf, 0xb00c, 0x2, 0x9, 0x6, 0x9, 0x0, 0x5, 0x0, 0x4, 0xffff5f55, 0x6, 0x5, 0x8, 0x5, 0x3ff, 0x80000001, 0x4, 0x0, 0x9, 0x3, 0x5, 0x3, 0x79, 0x7cc, 0x1, 0x9, 0x9, 0x8, 0x2bbb, 0x93e, 0x5, 0x8, 0x9, 0x3, 0x8001, 0x8, 0xff, 0x2, 0x4, 0x1298, 0x1, 0xfffffffa]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x9, 0x2, 0x3, 0x648, 0x0, 0x40, 0x4, 0x6, 0x101, 0x401, 0x0, 0x0, 0x7, 0x1, 0xff, 0x7, 0xfc, 0xe, 0x6, 0x9, 0x7, 0x2, 0x1, 0xe3f, 0x0, 0x3, 0xfffffffc, 0x8, 0xffffffff, 0x5, 0x9, 0x7fffffff, 0xffffff80, 0x3, 0x7, 0x0, 0xfd76, 0x7, 0x479, 0x3, 0x4, 0x5, 0x7, 0x6, 0xffff, 0x0, 0x1, 0x7fffffff, 0x4e, 0xcdd, 0xd5500000, 0xf0, 0x100, 0x4, 0xffff, 0x2, 0x1, 0x80, 0x401, 0x7fffffff, 0x101, 0x1, 0x8, 0x3, 0x3, 0x8000, 0x2, 0x2, 0xa, 0x6, 0x6, 0x0, 0x4, 0x3, 0x4, 0xe1000000, 0x3, 0x8, 0x9, 0x68, 0xfffffffa, 0x80000001, 0x8, 0x34ea, 0x6, 0x400, 0x0, 0x2, 0x3ff, 0xc, 0x7, 0x4, 0xffffffff, 0x0, 0x91, 0x7, 0x34000, 0xa, 0x4, 0x7, 0x1, 0x3, 0xe4, 0x5, 0x3, 0xa310, 0x6, 0x6, 0x5, 0x0, 0x8, 0x4, 0x2, 0x9, 0x6, 0xc, 0x8, 0x1, 0x2c9, 0x8, 0x1, 0x3fff, 0xfffffff8, 0x8, 0x4, 0x7, 0x200, 0x4, 0xf2, 0xffffffff, 0x5, 0x2, 0x8, 0xc1, 0xb8a, 0x7a, 0xd, 0x3, 0x0, 0x7, 0x0, 0x7, 0x3, 0x7, 0x80, 0x3, 0x800, 0x0, 0x2, 0xfffffe00, 0x1, 0xf1b5, 0x8000, 0x650, 0x400, 0xffffffff, 0x6, 0x6, 0x7, 0x0, 0x8, 0x6, 0x200, 0x10001, 0x2, 0x1ff, 0x1, 0xc, 0xdab2f9b5, 0x1, 0x0, 0x44f7e4fc, 0x80000000, 0x7, 0xffffffff, 0xa, 0x8001, 0x6, 0x6, 0x4, 0x7, 0x5f53b, 0x1, 0x18f8d92e, 0xa3b, 0xb, 0x4, 0x4, 0x100, 0xe2a1, 0x0, 0x1, 0x7, 0x1, 0x4, 0x101, 0x400, 0x800, 0x2, 0x7, 0x8001, 0xdc1, 0x4, 0x6, 0x3, 0x3, 0x2278, 0xfdf, 0x4, 0x8, 0x5, 0x1, 0xea, 0x1, 0xb, 0xfffffff9, 0x1, 0x2, 0x6, 0x3, 0xc, 0xc, 0x40, 0x800, 0x8, 0x4d, 0x0, 0x6, 0x9, 0x664, 0xfffffe00, 0xf, 0x660f, 0x8000, 0x400, 0xfff, 0x2, 0xffffffff, 0x3, 0xfffffff8, 0x1, 0x1000, 0x8, 0x6, 0x1, 0x5, 0x400, 0x9, 0x0, 0x800, 0x6, 0x0, 0x3, 0x5, 0x3]}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x3798}]}}]}, 0x1080}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000004100)={0x2020, 0x0, 0x0}, 0x2020) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000000)='\x00') write$FUSE_BMAP(r4, &(0x7f0000000140)={0x18, 0x0, r5, {0xfffffffffffffc00}}, 0x18) 40.763732088s ago: executing program 8 (id=2667): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0xffff8881f6e281a0) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r2, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x2b}, 0x4c) read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x160e) r4 = syz_open_procfs(r3, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000100)={'nat\x00', 0x0, 0x3, 0x6c, [0x8000, 0xafa9, 0x1ff, 0x9, 0x6, 0x5], 0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/108}, &(0x7f0000000180)=0x78) 40.714346819s ago: executing program 40 (id=2667): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0xffff8881f6e281a0) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r2, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x2b}, 0x4c) read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x160e) r4 = syz_open_procfs(r3, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000100)={'nat\x00', 0x0, 0x3, 0x6c, [0x8000, 0xafa9, 0x1ff, 0x9, 0x6, 0x5], 0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/108}, &(0x7f0000000180)=0x78) 34.873565092s ago: executing program 2 (id=2743): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r1, 0x0, 0xb, 0x0, &(0x7f00000008c0)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x2, @empty}}, 0x1e) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1f, 0x202812, r0, 0x7dfff000) 34.873090962s ago: executing program 2 (id=2744): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg(r1, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x24044044) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x4, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@sg0, r3, &(0x7f0000000180)='./file0\x00') mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1964874, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) 34.872619292s ago: executing program 2 (id=2745): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) fcntl$getown(r0, 0x9) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) waitid(0xffffffffffffffff, r1, &(0x7f0000000040), 0x40000000, &(0x7f0000000100)) 34.872275152s ago: executing program 2 (id=2746): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/custom1\x00', 0x1000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db9638edbc"}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRESHEX, @ANYRES64, @ANYRES16=r2], 0xffdd) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x10000a}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/77, 0xffffffffffffffe1}], 0x1}, 0x5}], 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) epoll_pwait2(r3, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000200)={r6, r7+10000000}, &(0x7f0000000240)={[0x401]}, 0x8) shutdown(r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000500)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xdc, 0x81000, 0x8, 0x5, 0x4, 0xe, 0x0, 0x0, 0x100, 0x3}}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x30, 0xffffffffffffffff, 0x663de000) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={0x0, 0xffffff6e}) r9 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x24, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}}) close_range(r0, 0xffffffffffffffff, 0x0) 34.731057964s ago: executing program 2 (id=2747): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)="a1a48e2be5", 0x5}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x2108}}], 0x1, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000300)=@ccm_128={{0x304}, "f5c5f4b1e2acf6df", "5d201d9d9a2ec44c9dede2469dbbb7c9", "d3b10002", "aed9742e03934b2b"}, 0x28) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x0, 0x8, 0x2, @mcast2, @private1, 0x10, 0x46, 0xf538, 0x40}}) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 34.554401608s ago: executing program 2 (id=2749): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@hash}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@subj_type}, {@appraise_type}]}}) (async) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x10002, 0x6, 0x1}, 0x18) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x4) (async) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r4, &(0x7f0000000040)={0xe, {0x7, 0x7, 0x7f}}, 0xc) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) (async) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000400, 0xee01, &(0x7f0000000140)) mprotect(&(0x7f0000573000/0x2000)=nil, 0x2000, 0x1) (async) r5 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r5, 0x3a, 0x1, 0x0, &(0x7f0000000100)) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0xcb3, 0xea}}, 0x30) (async) openat(r2, &(0x7f0000000180)='./file0\x00', 0x200000, 0x102) 19.441737339s ago: executing program 41 (id=2749): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@hash}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@subj_type}, {@appraise_type}]}}) (async) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x10002, 0x6, 0x1}, 0x18) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x4) (async) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r4, &(0x7f0000000040)={0xe, {0x7, 0x7, 0x7f}}, 0xc) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) (async) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000400, 0xee01, &(0x7f0000000140)) mprotect(&(0x7f0000573000/0x2000)=nil, 0x2000, 0x1) (async) r5 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r5, 0x3a, 0x1, 0x0, &(0x7f0000000100)) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0xcb3, 0xea}}, 0x30) (async) openat(r2, &(0x7f0000000180)='./file0\x00', 0x200000, 0x102) 8.082926861s ago: executing program 6 (id=3012): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getpriority(0x0, 0xffffffffffffffff) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x6) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = getpid() r2 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) setpriority(0x2, r1, 0x8001) 8.070738961s ago: executing program 6 (id=3013): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x73, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000240)=@x86={0x0, 0x2, 0x84, 0x0, 0x1, 0x5, 0x3, 0x4, 0x80, 0x10, 0x3, 0xbe, 0x0, 0x7f, 0x4, 0xf0, 0xd5, 0x8, 0x6, '\x00', 0xc, 0x21}) close_range(r1, 0xffffffffffffffff, 0x0) 7.974709382s ago: executing program 6 (id=3014): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) preadv2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/220, 0xdc}], 0x1, 0xfffffffe, 0x6, 0x15) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x81) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) recvmmsg(r4, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) arch_prctl$ARCH_SET_GS(0x1001, 0x0) recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/76, 0x4c}], 0x6}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @multicast1}, 0x4, 0x4, 0x3, 0x100}}, 0x2e) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 7.850919644s ago: executing program 6 (id=3015): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x40000000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)={0x0, 0x4000003, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) ioctl$TIOCGPTPEER(r5, 0x5441, 0x10) (async) ioctl$TIOCGPTPEER(r5, 0x5441, 0x7870) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x5) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x9, 0x0, 0x80002004cb, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x4, 0x0, 0xfffffffffffffffb, 0x0, 0x9d], 0x80a0000}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x20}, 0x6}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002340), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) 7.732679156s ago: executing program 6 (id=3016): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44142, 0x0) sendfile(r0, r0, 0x0, 0xa121) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000080)=0x4) 7.608399168s ago: executing program 6 (id=3017): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x7fff, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0xb, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x28}, 0x8000) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000003c0)={'filter\x00', 0x7, "f0a23923263408"}, &(0x7f0000000200)=0x2b) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) fsopen(0x0, 0x2000000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8804, &(0x7f0000000140)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) fchdir(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x7, &(0x7f0000000080)) read$FUSE(r2, &(0x7f0000002f40)={0x2020}, 0x2020) 7.548606089s ago: executing program 42 (id=3017): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x7fff, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0xb, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x28}, 0x8000) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000003c0)={'filter\x00', 0x7, "f0a23923263408"}, &(0x7f0000000200)=0x2b) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) fsopen(0x0, 0x2000000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8804, &(0x7f0000000140)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) fchdir(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x7, &(0x7f0000000080)) read$FUSE(r2, &(0x7f0000002f40)={0x2020}, 0x2020) 3.163483359s ago: executing program 9 (id=3078): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x102102, 0x0) pwritev2(r0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000300)="b656f9a5015bc4eb175478fcff8af08088e56a6a03ad78292d7eee3202c8822888da0b1deaf380cb8484d3c74aca9931557bcea91f77f4a599303310652ac0259e917e75fe0039d6377421a4b4dcd49dcc79fa0acba12c4260dfae2656e0828b333f86146ad7b7eac4dd29db8f84fa2a6d94a300933f2e9230aeaeb238403ac98776208a8ca090738540631bf45d677cb1f564a5e9d9958b584adb655890d4e55ce3019603a552aa7bc0e5ee5fdc049e72f0de79e0725746e38ca94b65b89fffcd60c6d98a5ec17fcc9b16eb3c46882be7ac623f4e3f53452cec8361cf3ce521aa02", 0xe2}, {&(0x7f0000000400)="2547d180cb49f635f63164ae8d65587dd35090d0abaab89e4ac37f3e3bdf3139ff79e23bf105a79f33b6086ebde0ca0caf70155fd330e24a4e4f368ae2ff89f422fb8720c20eafc6946d301b8196ecaa24b3ccb549374865ab3f2fcff55b1083cedcd65abafa73e5766307787c04d55d383193a03c61325a71f76733639b16bd460c4f9d30a20f9c34ee07cfa20642d86e4c16cf880639d92d614666f85371db3078f3f2eb06f2eb51233a6113414e4a", 0xb0}, {&(0x7f0000000500)="b7acf632112c1c7dca7107cee3374574926af0c9c385e6c5643c4cf8f0dd9695db4a0469cdac173f640d5f37e2d170f25a24f6ef77ad138af9f6db8a00e22f810009f033f0ae1e4099b6fcf4e38cb0558b81d36d07882df9a9fc4a21adda3ffcbbf805fbba6b81d7cb7a6e828eacc2", 0x6f}, {0x0}, {0x0}], 0x6, 0xfffffe00, 0x400, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x108) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000480)='./file0/../file0\x00') r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_WRITE(r1, 0x0, 0x0) lstat(0x0, 0x0) r2 = gettid() kcmp(0x0, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = creat(0x0, 0x5b3393367dc26357) close(r3) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', &(0x7f0000000600), 0x4000) preadv2(r0, &(0x7f0000002f00), 0x0, 0x2, 0x9, 0x9) 3.156787139s ago: executing program 9 (id=3079): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@default_permissions}]}) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000280)={0x10, 0x0, r4}, 0x10) chdir(&(0x7f00000001c0)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r7, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x94001, 0x40) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r8, @ANYBLOB='fd=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r8, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0xfffffffa, 0x490420, 0x2}}, 0x50) (async) syz_fuse_handle_req(r8, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (async) io_setup(0x8, &(0x7f0000000300)=0x0) io_submit(r11, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r10, 0x0}]) 3.058921981s ago: executing program 9 (id=3081): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x65, 0xffffffffffffffda, 0x4, {0x7, 0x28, 0x3, 0x8010, 0x9aeb, 0x2, 0x0, 0x3, 0x0, 0x0, 0x10, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (rerun: 64) 3.057813531s ago: executing program 9 (id=3082): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="73746174733d676c7f62616c2c00"]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_settime(0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0x9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf25010000000000000009410000004c0018002001ff00000000000000a11eae261cbe9aa1fd60b8dca500"/96], 0x68}, 0x1, 0x0, 0x0, 0x1000}, 0x400a000) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r9, r9) ioctl$EVIOCGPROP(r7, 0x80404509, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r10, {0x7, 0x2b, 0x2, 0x40000, 0x6, 0x1, 0xc0, 0x5496c542, 0x0, 0x0, 0x10, 0x7}}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mount$binderfs(&(0x7f0000000080), &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x408, &(0x7f0000000140)={[{@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0xfff}}, {@max={'max', 0x3d, 0x3}}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x2}}, {@stats}], [{@subj_user}, {@pcr={'pcr', 0x3d, 0x1d}}, {@fsmagic={'fsmagic', 0x3d, 0x91a1}}, {@smackfsfloor={'smackfsfloor', 0x3d, './binderfs2/binder0\x00'}}]}) 1.726255652s ago: executing program 5 (id=3088): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000000ec58"], 0x29, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x125082, 0x0) syz_clone3(&(0x7f00000006c0)={0x52000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) syz_fuse_handle_req(r1, &(0x7f0000002800)="d1f89c14e7f8640b43b1f1d1e00b2b0b3146d223d281c321953af4ade40d696d07f4b7d2ed1c1fd5691291056351901df48500519139568c88f49bb32801c2e3e2932895f1eb24b30efbab27313a3acab179fd6ce1f7150b0f0aae8cde4dd46b4f63cd60f647ea9bcf83f107e981a050f61f5d1bb5c7883f93269bba25e4122796c0f88ab27d913586d055f8c977ffcb05c85210f93cbad91499fedb2ab95e06bf009e54b422f66cef043560f4d77ae5c083cc67fcb0d3f10699aac8cceaf6d3b8f32e15555924edbc42b4ca3d2f4a92f5d30c18176c3abd17db4de2ef74472ffb637dd07460aeb7c882811c089217d88cbb5eec41d2be903e1c65cad2ad742f9ba8b512adab575f89d539492034ddfe4fd28205c8f27c52f0f631703d384634bfcad149ea9e842125062ac67006ca474be31f708b4f4f1e0c97a4eb2f26b671e172e251e8a6e9e1510bb74931aaf6b6ff84f8aefd63591f18f2ae8028985d78fcc5ed2d57bf595d3068e904387eeddd19bd359721a432bed0bff033cbca6acfddb6529fb11290bf1563b45034bd9b6c331091efef04303ca9942fcb64e56f3ff74d610e14c8f8a87e41582aebb272e5d6e945fdc7095bd181b93f13ddbdc18545f9cfc4db7f134c9ffa6add6727ab8755a06dca23d24a67658fda84321bb97fc475ace3b9912dad73f0ee6c8b2d6d58d7328ca63d1aeceb22a419fe4ec4c3b943051e9d276c559c33e6a45a97813bfcf80c7d79ebe04b1827878c4c8c2da2d598f9f3e444ae82f142716827dddcd94f8997d88a30be2a76432641125e28d5a0896b3e040a8b6805abc98da90844261468826b89f6cbac8d7b5eb6cd8a23f7c7ae9b99dfa6616f9dd10ac48e8c53a38ebfcee8c0ae1be1ee982515ce12a1ebf5d2d19022b4407a9bd062c453845ce75f54dd07e3d8079e19b3b116dc51f7a07d005ba682da13b73e3854bb60059fb021b8f4b9430629d408b32ccd3678bf1dc149a3493c44b2a52a5572c128957e0db8a4a214848b64bea6733bb48fc17a4e42474e2b1f47b507d038bb87a3fc32e7bf471685a61f736a414772cc1825e9342c58768640c83486dbf058050dd6c8a9843c106d1a4efa5e5b36deae71448e55f4ef2721d2d210ce075bdc52c97bd6c097a9a4120a507f6c99cd9054579c250cd5b207684deadf75f2f8c54349a57500625be7577fd6c81ca72111935f577c74c2bd1e9419344e2a3563b5a7d6026722469a30a061d123b45f93027a01c7d38863589118d25e333c07f5c3eb85d4dde937d8f1421b72035f8733754ef4793acdc8d1362ef08ac1e9f0246bfb478647ada002f809a3e63433d031e6d5e4f86218ace6a6221103608705719c3106b4659c377f7e3b6ae1777075ea45a68df2004deb6ef742c5971c23d409278be94c5de68153d93d1a2378f1b1656786ec896b72de0da8259a6f181be8829f9cb7cb98ce0b169e734e4a240508952f6ce3ca984eef7e0cd549996147fe56a0bb1598f015ab955df145a51d783397366084e53455840d5688cb9b7d2cdf8abbfcdf850a7de4073eada567d6ca989611c4910e692e44677a857eec2b654f8dc66b2be192786dce3b9780f9806652bdef013304a43dba3f8d15e5105414f6d1fb2a57dea02211fa311b489088a9802e36d649ada97d72a216f54ca6da090a51c01f5638a04f364a3cbf24bb374f644fda38856a7e0f5c3c9cd7b00555d105daf57561379cf1d77bce66d12de44f202a866a43a7a05a6e0910a1f0ab5b1341d8ae992ae9d95fa2c876db1bcd3635d7851f03dde1eddae6dcf95b182edab72a0521c88c8c3a8c2ad3c6ec2cc44321ce1550d51476e95a18ae5fdab801ef4f5a7a56580261d850f392929061ae5808ba390b2f7d8fe7325df9c07c39faadeeb0ee1ed95db7ccf49c9b93fca83e06be745156d422c8b936d65b8e7e76d9eeb2bbf19c1f9a59b8ee6b55d594d4794a869b2d3b37b0b936866894f00e6a90c788c22e0fb87d0ac53ce75e519765647deee2862552c77ceb75d419627e0627067ba24571807cbfae0bd959fa95cb14c2812a1ce41f76d2ad620c55df55f473e56cb219f7b13bed8cc4a98dddfda9d3b9b5650754f73c34bf00496993a1c4056aeb44e4160c3e2090d733604b2b13f40ae346b726a31365b7a230d8f66665dcb726594280678a258f8ddddfe69d424d62abe910db05c0efa5e773d0f6d8ef8c4c49926b46568a7a1321d996eacabb2f716539a020e34a02afc3bfead458287dd22c11e1c5f57cda7668853637dba0b2eb5e5318750b63c829ab0145c02d6bc05aef4113ee0ea0ba97c44d74cedcc89adff648eb5d7fe932a7a76c772b1e2e36c148dd3be951cfa0cfe11bc58635b38708fa1ff88f949eb15f4a4a3de71c33e2915c799d8204d7d1f9cf7c13c608e6ddf29e12b409028ee5edf37353df7982f67a120ff1871001094b1a3148ed5f4f75d9372aa21b2bb6e02b470336a2c20efee8af866032acd6dc56d1fa7a84dc314cafea1a7bba5fbae89e037a4a5597d2eefd153406d67ddbb3b4eeed6d981b229c2c1b76347b05d20835ecc979b697a2981f6785df853d3d5ce07c624136c805d4dc6c7419d68afe2ad4822aea38da761742b33de8394bcd2462518b35c6ef265eb2a9b130e5a3d669b55d457f92500a7b69156475e001989d55547fc831edf2afe2290591e902858914af73ad4e87ddb8ea3a719f435fe1c2839a39fe088ccc863e7c82e96b66e1b6d32ddbdc42bf2f6076b9e93ed2ec4b6ba6fce5dd3a8f5b3aa105aecf72a5cc9108d02a0b923de2d490ad90aed3a45c46d4594948e7b3f3cc7d153f4b2837ca378fb4af215657f016fd9c66395b98357c1d12a655ce07268beccb35acb3f928c1522bea5df98a0337c751308bfb361e68f3775c75e020ac9570283119264d4f8916c143ccc28d8e0709df356de6b6f35fccde79a677606b5b4d846fdad7c271fc5c2ae5f5e2fbcd6fbf21508a2615ab8f0208e276164bce80fb886b648b4cb085c7922a829c2bccdd850cec329870c866f7923c2c1cd59d6c2653263f7aa1f13d84c82575a021793ef875954ce8737c98abee465e780ab64f1d23da92828e62908543850e5730099eb34f5e47dee740581f596413b8e2711bbfc9d25e4a35b57416a741a60ba650b52ae2189cdd125f64565544f9e75bd8c2cbd898ed2dbdd704ee40d1746715eab4155a51289cf7d89a19ab7a355609dff8111c94f6cdf94a94c667508d7201eab7e86569b8b08bca2291cf3fb166df68f6d6da05398e8a1c0c5c66ca3cee621727a77f19b92927569ba44709302c1102683f338150989d971ea6d0151b69865e540ad4e5a186ad9fc8ce57a56ad114487c5ad99c0beae0fd49927c52380de839cc952f8e41e167006573b4ffc39ebec8f9f9fb4168386a78fe52c00cf3c3be6dbcd4ab32ac7cb8fdd1bae70a5c3da6f555aa6c8e6bd7e69e511bd5d87e39ee21f9035b0b14dd50b3c4e211794bfd7e8fbc48658044eab550f6b564d8f663c25ddb30233fb260e2d30bc9956f7293fd5532df2f74019f639c7313ca029280c513c2fc3c77dc4d0e7f5a9f273fda00349c28319743bc8f7eaeacc7f487bcf5866a55b2fa5b66e31964f090ac448a1ccd3b8cbc9735db5d7d1dd2f2bcdad1ee48b4f8a36688d8ddead1f166a5afb2efe12e943ce6ca41f1f45fe650536860881c28ff04a66ddce9cd19b4304c26e3238f114a1f4080999aaf6ff1f4b8b59ef5d54c10cd8a6598420949f1c0eff13259ba7da9f4c749b58f31f01627b780c2502cc6d1d82f68271e2bc945ddcb6784532e1aba414385096eeeb45afca0ddec570b16b476fbf7b4818275a05afe4beec9086e1c816ebf96608ed57a570c931577ca5b14c9359718b4b31b4789f291f5cb012f832e5763ba53521f58d3ee0a10930d3b4ea7747c5c751cfb476159287a9d371530e5d7cffa6ab09f049d2435960b0ad34f7890df22a3cfd6ce052b08409e67a1291f8459a59b988d7b97d2534f306d83656fd43313eebce1732837b6c22dc60a80d03c54b695b4efbf31381916c7da9644ef8e0f6739c98e7892ca89bf696715391c989c3bd53362e01b81d998e50e46fab088f9312465d200c034691b7e5dcb22ead3c3f3225f16a5588b2be09470e225290d8073dce5cd955d31e7acd452950505597f01c4b54a6f16f2e7d00ab182258f26e40bb70db783b2a10aae019f87708e1306e1957fcc081dac3659d603d4044c10b0a1fe61f4482e56d031d43fc355100a9dcf822db16d0895e554b439bd032e6103df725123da3fdd4a48b68863e6bb36e05343136e171d39d86168be30188bf1ebac4a1d748115167033149ac61bb4f8d4cad7f4c68c32de226b03fb42d24d5e37ba886fa357100644e64d869f6395e3d6d3768a30f53e2aca3688408807bd4818a2c5150f8ee770121a4a6402c7dc334a9ee5e876566d19867e45d4bdc73477ff7f543a23f38d5f0bf666219b0391e66457af4238c5bd9a05586333556f8972aca1def4507c4b073d1bc1c3051f0bf34f71673ccc1de9c69170c9fc5299ac733569cfde6a7bbb3cd60b601cfca16510bf7fbb26ffab3b674000844daf55fbf4ab48eade708cf70fdf901454acc8cc95c63fd2ee771bffaf19205e9a119b847931bcfb4c738e39701a3882cef4ff47b46b72ce26ac207a1ccaa253cd3ddae2b2eb61d5b9b3c8156928a169d7dbb2874b884c3b2097cb8ea92ce7fe70af90514c11887df33c4f7ec3d3ee6c327e7129b0188b0ca8c777451b17d8f489d547d711404bef72d1914f66a5676e9d716ede8c4282526419adb31d071d241db47a58bb55ee6ebcb67c82765a25e5e6fedc4c8d1d9b17e2b5bac5e0af3c63ea870ad8c5f9521390b660fc735d331e6eb326abde284256cdb381b4651d05f55807f4ad1b5b883bf6b55ee87285fad8de366f3248ae0b9c32bf85fc95d5bc19a716ac2a5f41e4e58d26bfdfa582be5d506f9929bfe7cea70184c81722ef7300f779d5d64c08a225a083d44ce75ced73f3a016f5047af67245bc8a81214024e905f383252cc0228085aa5fc184cbcb41db3eccede89480e0a1c1d1754cc3ffa53edc27c337ec86ae2f68c6225edb0027c1c5bf9aee1b94b62f6144e4631887272a36add32d908add308207559064cd61576f917db864845e5e89efcb27c80d259eb6fd5fca398da0c7e62fc423511bb8eb3969732c862de33448e95aa5e15d2028b84b3b8348a50abb39c5c10ac7fdc2034d1ceeae9870dc4486f48ac6aae573a775716ec380ed57665b9bf1c77f6869f720e428f8b94170b14c23786ff1cacf95a66ae631c70245bf264ce5078c3bddb4aaa7928eb6f1261d52e45ae5fde6f1b3bff90cd560c6c2f77ecfcf553db137051685c925be70def2be6c9bdd5825eac58d4c892a6d4ad5dcc078c6582ca140e5a75993e5ab7b487f31e5c601844f18f13039c099317f5e512eb9e054dcd8535106a9bd8977bf74254b68753b7f3a9b385d4a38ccaa17e029bd9ab4ff9b9b561b2a7e613ea05eb18a50fc231f32b79b9f32514469193a3d12269f58f3c932e501513e48e81774ad389275d9f00b4f8c677b8bb584b503201f83c7ad2e934e909f9ae1fc540f544dd2327fe1d8e3bb86984a252e2ffa88e2aed6d65a302d1883e51654fdb046d35270130fb9f8e4a4861d7278a07ee627fe272dcf99d294d7b1ce72f2f804cddfe4fa7aeb2c9543ef2665bf826c8ce0ca82dc7d4e57b7181b55a5d96ad83417b79376793235ed5a320a3ffac3a025aefa669450a6df20d830042034c0953836097c9461bc0d9c1446485692d1b9d5c991086f3f118a49bfe2a0888a5af8a868d880e31946dbd0c7ddcfcd27dcf5c62c9c5ff8fa9750d129f32e3c4f524eb3c31d5c9cb33fbcf52384a04a9f4faa216020e45be91181efeb7393d96b1f3ad8e9fadcffe49bec1bf36e70c2291475356ec5a416feb5d3b4f1331052271679d1186b338163682ac5b6bb79c64d6d0f8ddfec84d0d9870f45a64413f529c8dd93b358e66c9da2fd233e53b73ae2761f363ee69a38a0d7320a149c90c086e6a426abca5c461088747a2fb5006919ad7640aad79b1ec03cf6f49206f37382ad3105fcbd0e08d00815029d8cc3ca16472e58226f1def116bfab456c32a2a2323bb5a661eacb3b7c915d1eaa8c5aa8b1bf25c3a7bc9a2e047c499d8f2fbf2fe25606fc7f0ae5a539af68830b1955f82962f596e2ad0feb3e99b1982ffe3e553f102b4360b8e1d659575a8f713b8bb88d97dbcfd98f91c147a97e896646a47a43334569da8a01541b012063e0465c4122cb96b57484b0ab8c5f0c8f346c0766be69decf4e3ebef7f74f153ef8c6b6e9c5fe224e8f995f11c1867c5600cd7a345afacafec9076d4ccfca741fd41e445476d31f7cdf06b0d0cf596c755235408782a5e37abeb1f2dad79c83e59a1040c4b3b6a5a2acce9df0ebdb607c9c0549a4b16028595f7a9cd9da115dab0189f3d98b0dc2b8ddf6be4de2b38421a2071d91f14f8752c74df31fecb64de59dce09da2c3a1a2826446d982509baaa89b76379d8320bf3c1f76448e0ddc0889fe57ba756ab1403949cd2ca9ab520fa485576eca5acb471002a14a31e8d7f54c8c3edda8f416b0ae9d9fdfc445b54ed8fb34ed7c1d11b3c57a2c5ad92217ab2fdebafc195d09fee7a518e027ccf9d2e8de8cef1e0ad52144d82b65519495b8a5c314e85361adca8953dce587cf461a461dc9bbc0eb13a54144964930d80d8b4a015676f3efd10ccfd0ec5fe64deb93b5901b506581461bf2aaf04fa9f8118936c5e67e1cee60ccfc4f011ee2812eb9716af42b22c40d83c55d4e4c4838826cc34387a2085aa3e17219c78255ace7bb1fc30ec80676449084744c0887dc4e7696d25a544f3e4b365cc6ad800931d5787be99d678347ea4d6cdeab5662f6cbcb5fa80590e513c4ca96d73d378085026e0e7c71d968a670aefd48519e35beaeef9c67506db6f9b3edb62ef1b3b52b9c2db876b76101644e7dcf5a5056a8d916a0f69ea5bf096e7a4c2f8f1d0da29dbcef9d2ad1b82179ccd0ef95006b7a1d542a847e3e0f864d63434c15d6de4fecad18b788a867da5515e3d51871417bfd783d2dffd852953ea7113d3a61aac3c7c1a4efb449faa928456eb570e62d0ff9542a971b542d7c1fed9d633eb4a81499c105d0f73c5165badb54b0e83f8192d3d51d46ddd9908b04e9f57d5a4e6b65affee3799ae7cc51b4098f71e8ee947ffdeee4fd03095536376e1281ef8158fd1da4a39aebdad37fad75f6217bf45bfad16f2f1a80f5e8a3eea1141a56beb91319fe948bb44350a6e79959c140a5dad9955fb287aeba0a8a45d1fd8d692d30c96d01c9100e417082ae6edf62965fef7e190af60a99145925a307d1e11534d2a64484be3c6cd642432a2db66ba6d3ab1b7ea645edf4e54623d2ba0619bcc2a917cc2df8b0dbed096951947445ed5f08c626e1f9a5f566515bf106c48174f73587314b513962ed556fa7f16d8c6a953bcdda72f083a9b16357b3262c13cd500dfa09cc3d09240a7338514031768ea3053caa5166c8e4e090b3128464a88ccdc751d8ee1b3b1098997c9eaa2b3a13a47e43723a49e5d011dabb22c0d9605e48d5e26b90a47519536fd77c5260bc713e2b510fa6da698069f6c1df7a72462399d7dd288be19a0eab18adb072677268a306f19685c2d813564bab4ac90b7389c2fb87c0517e769577c081ced55572da71b40d18e4979b6b6290afcde4caa610166920549286dfa80197a10ff074b08d6b96c97110e36742fdbc5607f4c48ea9dd53301eecb5c25fce4eec9381b84e6b5af767c5bcca600149a3021c3f4aa237a0143363549a705c5768b5aa6ed51fd1ca9f0f9dd242f0df21f7c3eaf321fca97837d989ca101b5462d2dc248316c21339cb2b4e3451bb483390c09c958d474c6df2f2eac208ef704cbae5c9f6597c19ce48c4c9161c1b14622ed824b0e8669cbe6746051729fd2fcabb020190764a468c58ce369528bfca46cf8ec51ab69e711a53c4121476d2a5d2ceb19c332a5a86a52cabb246d2be739f361d97a6efc2c1d408b6f079ff5cbfdfa7ffb5da3af4611e42f876a44f8180ebadf8efe05645f3326fd1b1bb7f82753ee13e25c406469a6b103b9083ac06d590a48543240bca6e467eafc7069c97aa93a3a4ef61b6043383b6e990d174637d695893bd910f217c9c2465688eccd8a171cb5270fca2e002261f2e3e595f3484b67c0bbd7b50ea53a470e3935c0eafc6226521f0a15fc7cf5494b67fcfb705019a86a5972a9dd285bc50985947e42ca8519de25510db7ba6553419d4e368fe56c2a7acec8e77cd734f557a0f1b507e0869d2d5c9913c52fcd78b42b8f59ad3ae92226e292ea4439b5486629b739f4cca3d7f21cef79045427656fd1679dc5ab23686e13500dcb6284df60599ce81e2570d1cd5c7c2e0026640177bf1395fcf6e999acac08e3a993c3700ad891b1a68d5efc32a4b4f9cc8841e837e778c2500eb6cffc1b9970b2adf724839c7711ebbb2ee3e55f7aa97746d7538153589deafeef63eee6dfbd43fc72e0b763a0e4709da3deb26691303e99230a93c490029383b322099363ba3b2f76b4773c0c43907361b578cfb312cde55ea6de2f477c351ac82786d15b52f08a42385b2a3349116d34f8719264f79082d7c24165423a8e6764c53b922a0b3121cbb88976e6f53c455be77521bc1ad4997135ff24c520b2fa0002cbcc8eb8ee5cb33b1140dc811ee36816f47f23ff0b77d6680d597ec2fe77f5bfe1bb75c3eddb2356940c01e694da66d1c4fd78f7df5857111c01bb5e9954585e54086af287dc0ce861d921b378e9a2a9c9c5a37d9812595063643b1dae4afa57d884501ee0de2d7e39692ed5ecbd2ba1d9bf4e3f291cf0b1dfb809a2f915ae90bd5fbe76d5848752c298f34e69d8e95f6f3c8a8ef365d0927811b8a90c8f58836da07c058f71b01025af8c9829f761d71465d3d813e1e08a7d8f66dcb0f98daa19bb106fb9b25d49a35e8900e6de4502668cecbb9638c5b0d158317970e802be345ab3570f6a452e18da421fb4957429ec4b6c481b5393be9c7f1cea3d77ad1c935ce6cab01ed08f7f24e5b01d25105211d5e28b25d3a5fea30e3c4cd1289bc2606728f127574cdfed91d7c19d7381c3e532c92d7e532e74f3d24281cbf0f4e1908dd4f5cf145daeb21db6b34f2fe175aafd1c20224544c113f132cefe620bd99c5caff7b74d6acf8a1aae2fda5212ec64c80d647308439d5f90f6f481101599b539cd09a1bdfc510b6c9027c879f76bfd397dce9d3985ff01e62ee0455372960b68202412c6d5eb7b09c36f265b7b8b3822aa489dc169f8079e71dc96e0b75de2ade686761b067416e4915287dfdd6309946487a68115ee9d0bec73ffc63223e9463a30b819297d24824cb20724c6b524d58af1e03264e8e2b8dce59377c78dbd5ff5977782181aeaa8c2bd6d9f3d25ec566fa4a01eb5aeaeb6912acad55ca7336d28e305781bf128d6575dba16110d64c55ec9840f299e353fcc5628f248bd660f4dfa5f3a1bb7fbdac78ec727e87a134c98a98f405a4cd3773e79bd4f22bd3239a5fa8cd5806601e07241b25678f048b05bab6f8da56818f8dd9c97d001f4a7ea8beb3fa65ed7a951878bcef7e1da873e21ac6208cf0852c6cb297c10c84b74582bf59aaa11e7d8239997c9e7fd3c5bbee5b8466c17394fa61771aa10a3541f88419b16bb4fa36126745e99c292911d30ed0fa366dcd62c10879a6826609ab2b80b3a0c2de3d877805a564ce925916063c53d9698bb918eed2b49315fb83465a0db1a63a0528a887f5106dd054edbf381280989581c859a517573a6eb4946e0fcc61956fd5868fd37c788090fd7c3341028cf1bcb38ed595a4fd845ccd45558282c6e23d92d4268875f80ebad1c24f8d247595de2f8b83708b504f674447bc6fa1748b86fdfc971c9275baedda1348324c4dbde22d423744e2d537a4e28d95771b18302bc5d92f9e0ba6b1029a3e73761080a4e6e1b52a9ebe3538cb3e982586c23f0b0cfa78126198a0a496d96734880885e4aef7b35d90af287f9d5b18998fba69cf5a13b9153edc5f1c3cd0d181c1cecb4936a489f34682b056eaf5c57caea4a9ebd9fc7d842bc3850046f925dc430769863922ce5bea6709fa9bf7f21098097d7f47c74269b524c4194bceae0571fe968ebdda85a28fa5be7f794632189da179e248fdc237a3ba3fd53845e42db45747caa6cebf574e9abb75e3b33c1096e40e0e845385d6f961c56fd1c71f92ae31a0c9088b2100b457cf2f8b33ac984fe79ceeb65fde350f9c6229433aa20d226aeb7677e0e7e8002e3e220fb74d4a1bc07ca43fa23fcf9cbabe7799b5b8daeb63b35923c4a92d2c636d36d58e719e6855b57445a26072d716aba7b653dfcdee115b3310b0c8af8649337597c1ac8bcee8b0533cb458d165b4ca4ee72c60a49f4a7061aab09449a318a6dc1d5b1a4f2a7f82c5af241e1f0cbe3e9fd5079e385ec86bc978ca82aaf1de5b470dcbb06b5f0360142857a0519583e3a77a6fbdadfff48de440bb5c3dcb2c3e6624800fa7898ab00242b7109809d58e5aa8a25705266d9bb04f165f843f1c61c23b41f010ad67f80aa8e455385cf3ff89073dc9434ce9be78993d6c73a8adf4db6b540e7a9f60d8dbcf3133a8f5c5c59f8378f2e5aad07f31707fb9834c66d6d0ded8a8b2d984ff5b4bfe70bb6479aecf208beb8f4da7b23957ce77d574993e1a44de0b3a5cb245f0ebf8ea32a22472270798defec3deeb94a4d025d1fe276612ebfe0f4e6e639de1300d47e542fb032150ab0aded71ba693817feb9cb43beb6f3074c2d7bfb77b9b2783e0335449c9a9775ccf9060ab2468a6644ebddd41f70add6d2d24fb9dd377c4f0dce3439283f22075ff3973e4e70e0bdcb53001be03800392084d6768c3e8f7fad09b192a497a36f602d07655d3e6a7ccab561ab92c79506e1e06aad05975accc9b8b48c41da8bc611d331717ee312d77403f9f66ee9a81fa4e624cca690540dca722986dc740a919597f7836ee95b554d3c34db3443ee5b6908f8623b2c82f32b65c3e8c3c0e15c3065d09214ea6290b55bf5520ee92825d9c82745bb5368ddda47036390910e26470b96cfd7c4e7b0df89f897153fd5ab4302de65fcda1f48206346d6051a94d8e0c32b959d914c218f54813811d13d99ef6259f54c0e635c04f875772b38524e94fae3a73109f60d0b00c96c1809f37e8fb37e61620690b07d726d388e9ae5dbc3a1c3557d1e4288da0622d77081ab4cd00ce22243824c363ad1be5cb0ceaad6336a797d8ca6d988c4373b3c00667d651452d50f81a830ac6ebb71559590181eea67dce1599d13f2e778d69a40c2b736dcc7c36782c1788cdc8d5c3820d68093ea84d56daaeaac19c19724ed7d3ebc1b8c1e3092839314dc6eddd99dc0eede13dbcb7fd22d401df8eb7f679a04f785006d3b4c4012bf78b7e43b1b355a9f6d04ca0e86c32d44f73fa514d1e2b147464", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.674746513s ago: executing program 5 (id=3089): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000040)={0xd5, 0x0, 0x5d4e2d5abcb1bf9c}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0xc, 0x40010, r0, 0x5de000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140), 0x3000011, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)=ANY=[], 0x5c}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000e9ffff4f000000000000000f080f0866ba2100b0db000000ef450f22c2"], 0x296}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db9638edbc"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x280) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/mem_sleep', 0x100, 0x4) ioctl$TCSETS2(r7, 0x402c542b, &(0x7f00000001c0)={0x7, 0xfffffffb, 0x6, 0x8, 0x6, "bba285014d55b0e5b2b9b0fd02c4f016ef89bf", 0x5, 0x5}) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) 1.616512924s ago: executing program 5 (id=3090): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000280)=0x57, 0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000080), 0x8) 1.607757924s ago: executing program 5 (id=3091): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0x10}, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x3}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 1.21561497s ago: executing program 3 (id=3096): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x189) getdents64(r2, &(0x7f0000000100)=""/33, 0x21) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x6b940000) (async) r5 = socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) (async) connect$netlink(r4, &(0x7f0000000380)=@unspec, 0xc) (async) setsockopt$inet_opts(r5, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) (async) open(&(0x7f0000000300)='./file0\x00', 0x111000, 0x1) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_mmap}, {@ignoreqv}]}}) (async) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x2003004, &(0x7f0000000480)={[{@verity_off}, {@uuid_on}, {@redirect_dir_off}, {@xino_auto}, {@redirect_dir_off}, {@nfs_export_off}], [{@subj_type}, {@smackfstransmute={'smackfstransmute', 0x3d, 'x})&:'}}]}) (async, rerun: 64) getresuid(&(0x7f0000000280), &(0x7f0000000400)=0x0, &(0x7f0000000440)) (rerun: 64) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000540)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d", @ANYRES8], 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB="660000b6dd1da9052e28f44f4cc2d95569fe8cf958c72a924346a3806ecf238853b98e27a315964572152bbf4106d166fd356133a69e1ee82dd43d2f889b7110ccee803fd1f0c2264a73adcc189ee4d14ee930db96464008dc8d4a1d4049accca0e4d4922e38f584f3312676bbfa1c9c7e4a98e348302aab9ae1781c370830eb35ed8bb20a85bb80d9e01a9ea179fd82423d9a387dd012888b2a91a5c353bd57bde6c994bf976c7802afabfc1f96f610f3595388192af584", @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r0, @ANYRESHEX=r7, @ANYRES64=r5]) read$FUSE(r8, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000240)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x1008800a, 0x0, 0x6, 0xfffffffc, 0x0, 0x0, 0x0, 0x20, 0x1}}, 0x50) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x2b, 0xffa, 0x4, 0x8001, 0x3, 0x9, 0x7, 0x0, 0x0, 0x8, 0x1000}}, 0x50) (async, rerun: 32) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32) read$FUSE(r10, &(0x7f0000000980)={0x2020}, 0x2020) 745.369318ms ago: executing program 5 (id=3103): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2=0xe0000001}}, {{0x2, 0x4e21, @local}}}, 0x108) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r3, &(0x7f0000000100)=@abs={0x27}, 0x6e) 744.177518ms ago: executing program 5 (id=3105): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = syz_usb_connect$cdc_ecm(0x5, 0xc2, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x1, 0x1, 0x7, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0xe5, {{0x9, 0x24, 0x6, 0x0, 0x0, "0e3641b0"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x7, 0x2, 0xfc}, [@mdlm_detail={0x68, 0x24, 0x13, 0x5, "a28788e3cab9d79421de0c5a8fa0a6203e6c1183b6ce7730a9ea1f5c500c6d5ccd0b7b9949488e35a74692019c903d08e93fc4fd8cfc4e7b701304c2f6d2b7a6df4b4593fb19d088deb9e41d86fd5455b5c79c5f5b3245604dac180c79525fdf6068e3a2"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x3, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xc1, 0x6b, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x0, 0x5, 0x10, 0x18, 0x6}, 0x63, &(0x7f0000000200)={0x5, 0xf, 0x63, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x5, 0x36, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x69, 0x4, 0x2, 0xf, 0xb69, [0xffffc0, 0xc0, 0xff0000, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x6, 0x2, 0x3, 0x48}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x8, 0xad8b}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xd, 0x1, 0x7f}, @ssp_cap={0x1c, 0x10, 0xa, 0xf7, 0x4, 0x7, 0x1e00f, 0x1, [0xc0, 0xc0, 0xff0090, 0x3fcf]}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x411}}, {0x40, &(0x7f00000002c0)=@string={0x40, 0x3, "210a6064e104b6dd2f58f84ab579d1aae0ed7e3b97ebb5784a006870ab0d49954aa4f02941ab466cb0aed861648a9150c3bd3fada6bb98c1fe918e7777af"}}]}) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="4000c0000000c010846b2a4fcd3e80cef7faf8a1cdcec136eae1f5bf569ba0e026ff4e066307a634060a95355f3bc9155c3edb57f33daac86a4113004448f7ba322bfe06064e2b08f8d492111b931a86b53cb3ee9632b41fb9fa3827e537cb425a6bf3fc448538841d5f47edf7eafa2c2475d2dae40087ec00533ae0526770a8718502dee431a9d641077257f863f6da55ff894a63a69b8b2aeacd318176837fbf4893eb76d6b108261cb52aae7c1b205eae3cdb104809876baa39625233a6c9421dd20ac832"], &(0x7f0000000440)={0x0, 0x3, 0x8f, @string={0x8f, 0x3, "c484d4543d1c06d1b16245be5c41a70e99605b16818e63055d26a2429e5c683315aa4b23e3cdf9d11475f2b2371f4ca4be386598b8489a0d9d646b146ca2d6d0e9a3189e6148537e41a5c22a4a2ae6c18b2323828be652728eb4b418d80b43b45d19141621a0415903b5bded7b46fe2560708552b52458b639f875f8c65b0ab710ce097d49962722622ddaaccb"}}, &(0x7f0000000540)={0x0, 0xf, 0x6c, {0x5, 0xf, 0x6c, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x1, 0x9, 0xba7c, 0xa}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x2, 0x6, 0x3, 0x81}, @wireless={0xb, 0x10, 0x1, 0x2, 0x42, 0x3e, 0xb9, 0x9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xca, 0x3, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc, 0x3, 0xb, 0x4, 0x7}, @generic={0x31, 0x10, 0x3, "0ad340c6bb0e37043052dafe5fc1616d55e7a5875abf5d8d51ef326519487ecc09bb650e1640eb7623ea45b07025"}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0xc2, 0x7, "16efaa34", "e3a8ecec"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0xf, 0xf1, 0x2, 0x40, 0x9}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000680)={0x40, 0x30, 0xe6, "2ea970132be9b84d6233da0df8b1ee1e269c21e5eced54331bd1e44e678577a5bb7eb2acf9fb0fd5952c5db4a1696a2bb279059a2d7308015a380efa442e8ef5e4ddfa939f07091dd00417f0bad9138723ff4b0a25df0c05f4817bd6a2d0f1a54cdbec0ca81677e296d54331969d97eabca0716c5b74efa39791d4b3894860886505a2c1395b10290dbb4ab77ea403a3349cdd3c9d9b0a8e797d41fe1ec9a06a92f0aa3e8d575f666425185068cb70c7f3caa7ce898584c04eb0c5ddc70094af3828374ade7a63b994205167ea17f8bacbce53a2d6fca6de28e4fb80f73025cc58e1b0c93ccd"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x1c00, 0x40, [0xff0f]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000900)={0x40, 0xb, 0x2, "d401"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000980)={0x40, 0x13, 0x6, @remote}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, 'rS'}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xa}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0xe}}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0xca1}]}) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) read(r0, &(0x7f0000000000)=""/175, 0xfffffe14) 700.373289ms ago: executing program 3 (id=3107): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2000, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = syz_clone(0x40000000, &(0x7f00000003c0)="7a6a2f139a05945310ca954df0ada51d779792861ea11510467bba41f550ffea60a7513c6fad12fea9eae356d217c1761b97e35229db2d70485f0adf099044158814c64b82a0d03e68a188ddf2021525ea780f69fc247ea1c77ed7b9e72191116690e029c68711f2589de4fd5e0ca84582802ee0b7b5871df1af6125d22227f0d3c662f8635d5db2e120d3b67ce6337210e3adeb77f8d620cf14b4d1de2c1524473968481b27007e8e309a52ee1ae4e8e80700c77e0955ebc457fcd91783cd745d0600253b668eb524", 0xc9, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="26cbda79cbc8fabdc8239501ef3d7008f5b025d0254fe1a29fb3f2eb47aa4b487742b9bbf81abf30bc045fe15d19ef62ae0a5c41f2912699bdb9d6ccf23c8e0dda339f2bfcd6ef5ddba8b128ddcbb8ff3dd3d7657229466fd118d92ec3f37aac104195de13919542b14e44275c302e2f361a8858decff3123effe9ffe136eac5") (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (rerun: 64) fstat(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r8, r8) (async) getgroups(0x8, &(0x7f00000005c0)=[0xee01, 0xee01, 0x0, 0xee01, 0xee00, 0x0, 0xee00, 0x0]) (async) r10 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000600)={r1, 0x1, 0x5, 0x1}) (async) r13 = syz_pidfd_open(0xffffffffffffffff, 0x0) (async) r14 = timerfd_create(0x0, 0x80800) (async) r15 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r16 = accept$inet6(0xffffffffffffffff, &(0x7f0000000a00)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000a40)=0x1c) (async) r17 = syz_open_dev$loop(&(0x7f0000000a80), 0x20c, 0x833e72e941fba94d) (async, rerun: 32) r18 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000005480)={0x0, 0x0}) (async) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r21) (async) ioprio_set$uid(0x3, r21, 0x0) sendmmsg$unix(r2, &(0x7f0000005d00)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)="8bd657ac052539dacddccda1bce54e487f36d2081d75ad27e2080caacf902d00715a892314ee3434ac011d1e18be662c209db51557a9531eb1618cb4e8ad17afc1a4b1f4be462f3427c6b4dd6a8ef6a1948b8fc5431298c04e10b807fbc4", 0x5e}], 0x1, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, r11}}}, @rights={{0x34, 0x1, 0x1, [r1, r0, r1, r1, r12, r0, r0, r0, r0]}}], 0x98, 0x10}}, {{&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)="50fd13caba5a5d69bf21b19ac65634af07", 0x11}, {&(0x7f00000007c0)="23bb4510", 0x4}, {&(0x7f0000000800)="286d85503d0114ebc69966ef0bb99ea15658fa6a5baef9610bca820561895a08a21df4ca94800609bec547993ca88b60bf6aff0437d48e95d70cfcb1867783cee67070366372eb8915c3966f5df0d287c8d207903c45de50861c87da1d84e5d3dccbeafb474611", 0x67}], 0x3, &(0x7f00000008c0)=[@rights={{0x28, 0x1, 0x1, [r0, r1, r1, r1, r0, r13]}}], 0x28, 0x40040c0}}, {{&(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000980)="f079147410637cc07fc8723c97b92d4917669969af3ae0f70f744c6c8a63ce8d448df35b83f2056dd274a9a3959c121bdcb64b95842e3c0c8bc7bf4858", 0x3d}], 0x1, &(0x7f0000000b00)=[@rights={{0x28, 0x1, 0x1, [r1, r1, r14, r1, r1, r1]}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r1, r15, r16, r0, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [r1, r17, r1, r1, r1, r18, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xe8, 0x6008810}}, {{&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000c80)="6d37990aec6e976fd21275cbc87fefdcd769ab2b29e895a20b351b3f3ff03473f498129ecfe3a35f4b08ee41f2c0c02a5820", 0x32}, {&(0x7f0000000cc0)="50eb037cae4888b556c3702d7c31b72e120f04fb298999c405bd4fded4b88fc5de4712c5ff74781af30c3dfabaadf302fc5a6f0bc01f8502caf5c3062a84e14a03960fb456cfaa4f66a261e36d8fd0dd48b1b172b4d3db9be51828e159e759ee248d137ac5c6bc8c6d4a0f445e74bdbae817f5cc163d8e67e9c5b5c0", 0x7c}, {&(0x7f0000000d40)="b319826331d65e781d0678add85863c7cb18380ee96004eba235430b50d2f1bcceda80bb1602330e27e27ce661d8", 0x2e}, {&(0x7f0000000d80)="f33a78fbbf4f24cb86e73042ce82b0797ccda14dd7ad310a701f614968a24ec53ffa994950b3107e9288790153a7094050e182f8e7d60c3a2570c163a03bb2bc662e73f29251a31a5c751946d064fd991729b5bcade6c1ba1cabb8aa325b930a5eb7a1e1453b73e51c4751fcc9f77dff3537d675b9f5", 0x76}, {&(0x7f0000000e00)="13cd313b629b8604abd0bfec0692101c8beea6577da2233fedd4847fd182", 0x1e}, {&(0x7f00000031c0)="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", 0x1000}, {&(0x7f0000000e40)="1477830428767e1003ad634025c205116b0502f724f7972d85d6754c4fb230c9da5f692327c8e49bea92d8b96f21363871d6ace90e", 0x35}], 0x7, 0x0, 0x0, 0x64001}}, {{&(0x7f0000000f00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000005400)=[{&(0x7f0000000f80)="059bc453da9254d516d8473a85022244c9e325995efbca40728efe9103eadc382aeebe48ea71171ab98812ea6082c2b9d045c85cf90943865c52c612cce5828445d86cbe6e73b41c708b8de4260e921ecfc936f63e2ffeeef8fc6ea0af1adc6a06158abbd2d5b71f73e7f427b5d5c640078bc67936137ef7ffd9341dd833a45472836dea67969057dd79a28ad1b40045dfad53dc", 0x94}, {&(0x7f0000001040)="3daaf9cb92d175ac719345fbb356acd9caf80c2356b9dafbabfc15c56d0f583243de98431e0f46befa595cef4fa1a0e4e93a5f7c86f709918cc3ecfde90bab127aa32d2c111f161d83eddfa7d46f6f3d16b4bfafd090ab42221993442986dfb6def907e967b0b506ce581947f99aeeb1e691096b0fc7dc96f96e5c3333a1855490ac522aba5c1f9d7a0403d6575e08f73d0ffe060c62e3fa3a48d5fd3d4650f3f0cb4f12732d84675628edc656480431fe", 0xb1}, {&(0x7f00000041c0)="8e56984da2b9ea648aa9f6ab0ed78d2917e85f3a79f4435c66c27086cbeac143ed61dcc365a231a61948d5781095d386a37b68ed280fcb4a205a1acaf254b49a8516492d6deabcc8c93af5233c6c63de3a366acec105ffd15a5eb37fa655d175c5d943764a91f34e067b14125f55aaddb3f1d0ff966deeaaee23b1588bb8b06abeebc134f3e6bab4e81625171300d9773084a6f97f6156354e7a051d497ab07ca4956083", 0xa4}, {&(0x7f0000004280)="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", 0x1000}, {&(0x7f0000005280)="2c8b173e9171c8b4b09dd47f6a8cf2ca277617230af85a65cbca1668d0319ba5ea7233b29cbabfe1d08e901c6b87da0c0e0d538f496648ae6aa7293a9b91482a97214381f8293bbbfabb18bee3fbee31819753c5d2af211f3911f7cfa2cd2f", 0x5f}, {&(0x7f0000005300)="74dc88c229b7494dfc377000314af9a5d81a5366535164f6109cf633aa120b71b640c56d98482f83dce8afc038d5e3b037e762c96d371d6f913021095b29f79f3cc62d5de27b3d48b4835a724678164ccdf0707cf8c62793e4f29d8b02d1b8f4fcfe5181", 0x64}, {&(0x7f0000005380)="89be874f216c2e4d9648d104a7773a768c4ed23992da7cb0a54bdd7ea63a436ea5c5d3e323ed0f4d9a37ad8b96aeb4d4eec4ec77575ffae041fc4da776c9772c55e2f56c88d84fe6d667391a9956f123", 0x50}], 0x7, &(0x7f0000001100)=[@cred={{0x1c, 0x1, 0x2, {r19, r21, 0xffffffffffffffff}}}], 0x20, 0x4000}}, {{&(0x7f0000005500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005880)=[{&(0x7f0000005580)="02b71211fad5c70182fe9070bf65c352926fffa6abad0ba5a1aebf30e6f9b5fa4e8b2b787319e9232acb854d1944254b04a8c1964f830eb18ef01e4cf0ec2968235d43e45f88cba391d8a8e940b7a830a9a3a2a965f63985d9238a47cc66973965f1572522a2e9aba9849380750e4154a615224a8c4bf4bf41865c901242196562583ba7bf3768e150e44c131d6921b7c46c9ffe0b8f18b8ef82487dbd154904bc721676fe27695b8b859a410fafca265208a96e40da279388c84a815084", 0xbe}, {&(0x7f0000005640)="76b4eba026f7893f292ca007bd5aabe9", 0x10}, {&(0x7f0000005680)="03596342143a9af858077213aea41393610fcb0d59617257aaa9cbf5a01340e580cefdbd", 0x24}, {&(0x7f00000056c0)}, {&(0x7f0000005700)="469387fec6ba5c7e284eef57caf6316151788feabbd3325e0fcdf35b7e993804b6a0844096725e1cd3c2a0576a6c3859665be4b3d5449ee8940ef223a11f1b33a6fec53cdaa051993ca9484567ed115c0e647294e08e6dd303848884bafa76d8e0163dff6cf6a1e51cfbf7c8b408755fa6653d5225a490703877186da6e488f2ebb5d000", 0x84}, {&(0x7f00000057c0)="77bc0d89f5c1f02303d20519338009420213f2cee2e99a81d51ced1467eb5f043fe607bb28ab33ad57427016fcca4a14d6a0caccde1b89bb5cc6743260f1a9bea38deeeffe7afb8c90a316f9a1", 0x4d}, {&(0x7f0000005840)="88acc2e8b4f2a1efb3bc5bcf6bd895f3af8424a621f6d885f025912ac3697a59ec0910cb78d9968285", 0x29}], 0x7, 0x0, 0x0, 0x4000}}, {{&(0x7f0000005900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000005980)="f16c8db4f7e930efd6817cbb4daaeb068cef63cada09474b0c685c7704d152a7c3246a27b6bcfb43e84c5b00c89bbb36f3ec29922fa5538d105eb47d34781acd80c930a385c0cb1dbb9c1a111c84a5db6335d5868319f579603a2a73853ca617a4ac8abda9", 0x65}, {&(0x7f0000005a00)="022a59f5f168ca98bd799463429dbbbf29ae3def5d9297bbda5c284bfea841b1dc4d6bf6625c18df920da6a5cb76cb29522a05c591b61150553ec4c02a456f77994491a8626d22edecfe81494f5f5e9198fdb06d8954ab7df5b362cf754b8f8d3da5f6056e3549f4fb9169fda635c7100b116a81c76e69e4250b6773a6ef9fb4edcff5e103403a67a2c248959566b9e9454dac7ae205a03807f63a", 0x9b}, {&(0x7f0000005ac0)="b7700cdc57ab8bcf351f8ce8f6ccde248937ad312d667e40cfef5fef3277057402a0527f7b0a1c1765b3b78f31c4882914a6edb441fb1409813b05f0a9133c6dd96e1156f23b7bfa33764ca81720fa4fb6fd7e0c14aafbd858d8397303c8e202b32d7e16dbafb31cae0434776f2b15142431f568863da8c6ad698051888787e4bdd7f3d0ac032b3733e854160670916696520debb2de8a43ea85b395922e2985714202334042c5feadb2357239bc88df4ee5d63faacffa8711b25e25769ab7f544e78483b2816df6abf9f5b2c0ecc4373cb29010ab0f38ee3f8bf70e8438", 0xde}, {&(0x7f0000005bc0)="49e527ff7fe9b3ce6e230b13239b51224d0c30400bdece8a4f3d428d1474b0ef74450cc1dedad4af5fdc95e5297ea9d94301aff2514dc1935fa738abdf81d0c679ea6a8cfcd257d6c29ee314d999fc4d88907811a6ce8592be9fc09ffd3c61bf972c158d9d2e0c3650e3fc573d495bf56fc1ad6c0c86fa5f24e3d95d0f092b3f8d7efbc86255e6dee5c89c3dddd2294dc096da8edf8005c372299e9f26e810570d7d50694fd963fda055aae4b72cda72ce35a74de17c4605b3b285b98b315c8351ef28fcce63301e4dbb881b15481f", 0xcf}], 0x4, 0x0, 0x0, 0x854}}], 0x7, 0x40040) 642.922359ms ago: executing program 3 (id=3108): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0xd90) r1 = epoll_create(0x80000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000010}) (async) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xe0000000}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x7) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000180)={0x10000000}) (async) getpid() (async) close_range(r0, r0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000005c0)) (async) ioctl$BLKGETZONESZ(r1, 0x80041284, &(0x7f0000000600)=0xff) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) (async, rerun: 64) r2 = socket$inet(0x2, 0x80000, 0xffffffff) (rerun: 64) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000700)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}}, 0xc) fcntl$notify(r0, 0x402, 0x1) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x2c, 0x0, &(0x7f0000000740)=[@increfs_done, @increfs_done={0x40106308, 0x2}, @exit_looper], 0xfe, 0x0, &(0x7f0000000780)="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"}) (async, rerun: 64) getdents64(0xffffffffffffff9c, &(0x7f00000008c0)=""/232, 0xe8) (rerun: 64) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000009c0)={0x1, 0x4, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) syz_open_dev$usbfs(&(0x7f0000000a00), 0x80000001, 0x8200) (async, rerun: 64) fsopen(&(0x7f0000000a40)='msdos\x00', 0x0) (rerun: 64) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000a80)=0x5b61, 0x4) (async) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000ac0)=0x1, 0x4) (async) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000b00)=0x0) waitid(0x2, r3, &(0x7f0000000b40), 0x1, &(0x7f0000000bc0)) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2, 0x12, 0xc1, 0xa, 0x8, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_address={0x5, 0x17, 0x2b, 0x100, 0x0, @in6={0xa, 0x4e21, 0x7fffffff, @rand_addr=' \x01\x00', 0x8}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}]}, 0x40}}, 0x20040010) accept4(r4, &(0x7f0000000d40)=@ieee802154={0x24, @long}, &(0x7f0000000dc0)=0x80, 0x80000) 642.478129ms ago: executing program 3 (id=3109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, 0x0, 0x44) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x400000f3}]}) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) 144.949297ms ago: executing program 1 (id=3118): socketpair(0x10, 0x800, 0x1, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death={0x400c630e}], 0x0, 0x0, 0x0}) 144.351907ms ago: executing program 1 (id=3119): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfd9ff}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0xc000000) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) rt_sigpending(0x0, 0x0) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x8}}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x1068) recvfrom$unix(r3, &(0x7f0000000140)=""/246, 0xf6, 0xf6, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) 144.101397ms ago: executing program 1 (id=3120): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4d21740f2b192440, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x1, 0x7, 0x7fc, 0xfffe}, 0x20) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'veth0_vlan\x00', &(0x7f00000001c0)=@ethtool_gfeatures={0x3a, 0x8, [{}, {}, {}, {}, {}, {}, {}, {}]}}) r3 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r5, 0x2f, 0xd9, 0x5, 0x711, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x1, 0xe22, 0xf}}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000002a80)={0x28810000, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, &(0x7f0000002a40)=[0x0, 0x0], 0x2}, 0x58) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) 143.661627ms ago: executing program 1 (id=3121): r0 = userfaultfd(0x801) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000785000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4000, 0x3}) mmap(&(0x7f0000157000/0x4000)=nil, 0x4000, 0x100000c, 0x30, 0xffffffffffffffff, 0x807ba000) r1 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r2, 0x10000001003, 0x9, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000440)={'\x00', 0xa, 0x8, 0x3, 0x0, 0x3, 0xf000, 0x100000, '\x00', 0xe7d}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x1000002, 0x202812, r2, 0xfc4d3000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x801) 87.013218ms ago: executing program 1 (id=3122): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x2da4, 0xc8}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f00000000c0)) (async) r1 = openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x48000, 0x80) (async) r2 = gettid() capget(&(0x7f0000000280)={0x20071026, r2}, &(0x7f00000000c0)={0x401, 0xa, 0x8, 0x8, 0x7, 0xfffffffc}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom0\x00', 0xc00, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x200}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') read$FUSE(r5, 0x0, 0x7c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_script(r7, &(0x7f0000020240), 0x10010) splice(r6, 0x0, r8, 0x0, 0x100000004, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) r12 = dup3(r9, r3, 0x0) getdents64(r7, &(0x7f0000000440)=""/249, 0xf9) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000540)={0xc, 0x0, &(0x7f0000000240)=[@exit_looper, @decrefs], 0x0, 0x0, 0x0}) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)=0x4) 73.624499ms ago: executing program 9 (id=3123): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pwritev(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)="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", 0xfa}, {&(0x7f0000000000)="dcac76c06538dc1fee9eef65fafdf21117a112ea9c67d998211e1fd0cef00763b921d161c47c490f47ae3afde75357a6d8b853b863caa2adbfc69a5cededff", 0x3f}, {&(0x7f00000003c0)="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", 0x1bc}, {&(0x7f0000000280)="d098fc8f947182586ac9a2d1be2e97740cf2a7329d38af54bafaa5859045d633b0b7eae1abc40652a60e0e78723b796968ff4c228d2155da176f069c739dc939ab35fa18ff7763f31684aa5e3e2a576ee02f21c8791d253266e96186bea614c408ef0fbe5f94bd5c1ce6c488bc588bd896", 0x71}, {&(0x7f0000000300)="2f88574c594dc119da178a1a6af30ce686d9162f6043928d2013b97984760667fcf85b6444f8712f15068ed7f604db1e7c013a4fca5c26217b5df0c07e580124fe64098f13b7e4db1c93857490d9aec96924b564f883946ee425ecc3357372e1847ccbe2ea251d95794f9066db1f49a88eb648821c3ab3d1c24b0efd1d0586aa20568761bf645b40784ef47011fcada7b4de99c584ce1616cc42e3f55099916357bc486b90fcd0720dbdb0", 0xab}, {&(0x7f0000001440)="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", 0xcd4}], 0x6, 0xff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}]}) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000002400)={0x2020}, 0xf58f921fe9c4881b) 63.494469ms ago: executing program 9 (id=3124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0xc0000103, 0x0, 0x80000000002}]}) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x151040, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) 15.085579ms ago: executing program 1 (id=3125): syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100090c10000000000000000000", 0x58}], 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc286, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000040), 0xaa, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000000c0)={0x2, 0x3, 0x200, 0x9, 0x5, 0x8}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) 13.203069ms ago: executing program 43 (id=3125): syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100090c10000000000000000000", 0x58}], 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc286, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000040), 0xaa, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000000c0)={0x2, 0x3, 0x200, 0x9, 0x5, 0x8}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) 11.308489ms ago: executing program 3 (id=3127): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x4000000000000c1, 0x3a, '\x00', 0x3a, ']\xff\xff\xff\x7f^{', 0x3a, './file0'}, 0x2f) (async) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x4000000000000c1, 0x3a, '\x00', 0x3a, ']\xff\xff\xff\x7f^{', 0x3a, './file0'}, 0x2f) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x81, @any, 0x1d2, 0x2}, 0xe) (async) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x81, @any, 0x1d2, 0x2}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000002c0)=0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r2, 0x147a5000) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040), 0x4) 0s ago: executing program 3 (id=3128): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x100}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x1001}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x2c0d6fefbd5eead1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x4, 0x0, 0x23}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): sing dummy_hcd [ 198.583127][ T368] usb 10-1: device descriptor read/8, error -71 [ 198.713628][ T368] usb 10-1: device descriptor read/8, error -71 [ 198.763245][ T7574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 198.763271][ T7574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 198.773072][ T7575] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.791526][ T7579] rust_binder: Write failure EINVAL in pid:185 [ 198.822181][ T368] usb usb10-port1: unable to enumerate USB device [ 199.042080][ T3870] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 199.086961][ T7584] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 199.086979][ T7584] rust_binder: Error while translating object. [ 199.099254][ T7584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 199.105498][ T7584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 199.134101][ T36] audit: type=1326 audit(2000000060.212:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.2.2481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d1db8e929 code=0x0 [ 199.172200][ T3870] usb 9-1: device descriptor read/64, error -71 [ 199.275191][ T7589] kvm: pic: non byte write [ 199.412087][ T3870] usb 9-1: device descriptor read/64, error -71 [ 199.611067][ T7609] kvm: pic: non byte write [ 199.672090][ T3870] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 199.802073][ T3870] usb 9-1: device descriptor read/64, error -71 [ 199.843772][ T36] audit: type=1400 audit(2000000060.922:846): avc: denied { watch_reads } for pid=7624 comm="syz.9.2496" path="/70/file0" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.867630][ T7625] exFAT-fs (rnullb0): invalid boot record signature [ 199.874438][ T7625] exFAT-fs (rnullb0): failed to read boot sector [ 199.880826][ T7625] exFAT-fs (rnullb0): failed to recognize exfat type [ 199.898730][ T7629] overlay: ./file0 is not a directory [ 200.042076][ T3870] usb 9-1: device descriptor read/64, error -71 [ 200.092090][ T368] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 200.152217][ T3870] usb usb9-port1: attempt power cycle [ 200.253546][ T368] usb 2-1: not running at top speed; connect to a high speed hub [ 200.261950][ T368] usb 2-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 200.272929][ T368] usb 2-1: config 1 interface 0 has no altsetting 0 [ 200.280889][ T368] usb 2-1: New USB device found, idVendor=056a, idProduct=00f6, bcdDevice= 0.40 [ 200.290289][ T368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.298316][ T368] usb 2-1: Product: 뺬ﰨ큷溨쎍뷈│ᱥ㧔쥇 [ 200.305138][ T368] usb 2-1: Manufacturer: 䆳劧㯚欑ᯗ쒽ꀼ蚯鼵ࣕꆡ䗅䲚탩샲畴橅㷾㭎Ṇ鸏嵝묄໘覒톉Ӭ㲈ᗾᶐ㝎ᨱ큎䄇㭎魃룿୵씭Ⓓ곜說ꒈ႕ᑍ䄊㻨葭됺贮흹승ꎞ㹉೘쮆혩놻趈䦖疖䋽틤鮮㞁⨦靷됅ꞽ擜๢닙ᣒꘈꟐ逸ಀ໫ᅯ겸⺁㎳듶⤻᪯뭎썍럁屲嬶뙊⏬遃 [ 200.336631][ T368] usb 2-1: SerialNumber: 뮓햻挭ҫ蹀톂楔釛蠢獊姿㕒㲫݀踸蕀쫼ꓚ脩祢洉 [ 200.347804][ T7627] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 200.492094][ T3870] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 200.513086][ T3870] usb 9-1: device descriptor read/8, error -71 [ 200.643096][ T3870] usb 9-1: device descriptor read/8, error -71 [ 200.757183][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.765746][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.882087][ T3870] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 200.903089][ T3870] usb 9-1: device descriptor read/8, error -71 [ 200.976963][ T368] usbhid 2-1:1.0: can't add hid device: -71 [ 200.983048][ T368] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 200.993044][ T368] usb 2-1: USB disconnect, device number 89 [ 201.033097][ T3870] usb 9-1: device descriptor read/8, error -71 [ 201.142163][ T3870] usb usb9-port1: unable to enumerate USB device [ 201.164436][ T7653] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 201.494663][ T7664] netlink: 1603 bytes leftover after parsing attributes in process `syz.2.2509'. [ 201.505220][ T7667] netlink: 'syz.1.2511': attribute type 4 has an invalid length. [ 201.514403][ T7667] netlink: 'syz.1.2511': attribute type 4 has an invalid length. [ 201.682083][ T3870] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 201.742079][ T368] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 201.821724][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2514'. [ 201.832284][ T3870] usb 10-1: Using ep0 maxpacket: 8 [ 201.839045][ T3870] usb 10-1: unable to get BOS descriptor or descriptor too short [ 201.852158][ T3870] usb 10-1: config 5 has an invalid interface number: 56 but max is 0 [ 201.865206][ T3870] usb 10-1: config 5 has no interface number 0 [ 201.871395][ T3870] usb 10-1: config 5 interface 56 has no altsetting 0 [ 201.880101][ T3870] usb 10-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=19.f7 [ 201.889528][ T3870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.899207][ T3870] usb 10-1: Product: syz [ 201.899253][ T7686] futex_wake_op: syz.8.2518 tries to shift op by -1; fix this program [ 201.903670][ T3870] usb 10-1: Manufacturer: syz [ 201.912078][ T368] usb 3-1: Using ep0 maxpacket: 16 [ 201.916547][ T3870] usb 10-1: SerialNumber: syz [ 201.927401][ T368] usb 3-1: config 0 has no interfaces? [ 201.938179][ T368] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.947308][ T368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.949271][ T7688] 9pnet_fd: Insufficient options for proto=fd [ 201.955334][ T368] usb 3-1: Product: syz [ 201.964916][ T7688] 9pnet_virtio: no channels available for device syz [ 201.965590][ T368] usb 3-1: Manufacturer: syz [ 201.976777][ T368] usb 3-1: SerialNumber: syz [ 201.982083][ T368] usb 3-1: config 0 descriptor?? [ 202.193282][ T368] usb 3-1: USB disconnect, device number 29 [ 202.212092][ T349] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 202.321855][ T7691] batadv_slave_1: entered promiscuous mode [ 202.327793][ T7691] batadv_slave_1: left promiscuous mode [ 202.372095][ T349] usb 9-1: Using ep0 maxpacket: 8 [ 202.380317][ T349] usb 9-1: config 6 has an invalid interface number: 247 but max is 2 [ 202.388555][ T349] usb 9-1: config 6 has an invalid interface number: 6 but max is 2 [ 202.396623][ T349] usb 9-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 202.405600][ T349] usb 9-1: config 6 has an invalid interface number: 100 but max is 2 [ 202.413791][ T349] usb 9-1: config 6 has an invalid interface number: 254 but max is 2 [ 202.421948][ T349] usb 9-1: config 6 has 4 interfaces, different from the descriptor's value: 3 [ 202.430917][ T349] usb 9-1: config 6 has no interface number 0 [ 202.437034][ T349] usb 9-1: config 6 has no interface number 1 [ 202.443166][ T349] usb 9-1: config 6 has no interface number 2 [ 202.449253][ T349] usb 9-1: config 6 has no interface number 3 [ 202.455375][ T349] usb 9-1: config 6 interface 247 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 202.457306][ T7705] input: syz1 as /devices/virtual/input/input29 [ 202.468564][ T349] usb 9-1: config 6 interface 6 altsetting 235 endpoint 0xD has invalid maxpacket 88, setting to 64 [ 202.484160][ T7705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 202.485566][ T349] usb 9-1: config 6 interface 6 altsetting 235 has a duplicate endpoint with address 0xD, skipping [ 202.485694][ T7705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1475 [ 202.494980][ T349] usb 9-1: config 6 interface 6 altsetting 235 has an invalid descriptor for endpoint zero, skipping [ 202.495007][ T349] usb 9-1: config 6 interface 6 altsetting 235 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 202.495044][ T349] usb 9-1: config 6 interface 6 altsetting 235 has a duplicate endpoint with address 0x6, skipping [ 202.547581][ T349] usb 9-1: config 6 interface 6 altsetting 235 has a duplicate endpoint with address 0x6, skipping [ 202.558302][ T349] usb 9-1: config 6 interface 6 altsetting 235 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 202.569272][ T349] usb 9-1: config 6 interface 6 altsetting 235 has an invalid descriptor for endpoint zero, skipping [ 202.580161][ T349] usb 9-1: config 6 interface 100 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 202.591027][ T349] usb 9-1: config 6 interface 100 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 202.601799][ T349] usb 9-1: config 6 interface 254 altsetting 6 bulk endpoint 0x8 has invalid maxpacket 16 [ 202.611721][ T349] usb 9-1: config 6 interface 254 altsetting 6 has a duplicate endpoint with address 0x81, skipping [ 202.622691][ T349] usb 9-1: config 6 interface 254 altsetting 6 has a duplicate endpoint with address 0x84, skipping [ 202.633471][ T349] usb 9-1: config 6 interface 254 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 202.644177][ T349] usb 9-1: config 6 interface 254 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 202.654861][ T349] usb 9-1: config 6 interface 254 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 202.666219][ T349] usb 9-1: config 6 interface 254 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 202.676954][ T349] usb 9-1: config 6 interface 254 altsetting 6 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.686826][ T349] usb 9-1: config 6 interface 254 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 202.697684][ T349] usb 9-1: config 6 interface 254 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 202.708572][ T349] usb 9-1: config 6 interface 254 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 202.719292][ T349] usb 9-1: config 6 interface 247 has no altsetting 0 [ 202.726091][ T349] usb 9-1: config 6 interface 6 has no altsetting 0 [ 202.732713][ T349] usb 9-1: config 6 interface 100 has no altsetting 0 [ 202.739488][ T349] usb 9-1: config 6 interface 254 has no altsetting 0 [ 202.747714][ T349] usb 9-1: New USB device found, idVendor=083a, idProduct=b522, bcdDevice=c0.d5 [ 202.755477][ T7707] sel_write_load: 23 callbacks suppressed [ 202.755494][ T7707] SELinux: failed to load policy [ 202.756860][ T349] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.775426][ T349] usb 9-1: Product: syz [ 202.779585][ T349] usb 9-1: Manufacturer: 畳悂튫來跗쉙肼ꇧӰ낦姉ₑ軱孯轘ㅲﴈ錄 [ 202.788524][ T349] usb 9-1: SerialNumber: syz [ 203.002507][ T349] usb 9-1: USB disconnect, device number 13 [ 203.002680][ T368] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 203.165304][ T368] usb 3-1: Using ep0 maxpacket: 16 [ 203.171510][ T368] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 203.181852][ T368] usb 3-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 203.195042][ T368] usb 3-1: config 1 interface 0 has no altsetting 0 [ 203.202961][ T368] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.212090][ T368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 203.220075][ T368] usb 3-1: SerialNumber: syz [ 203.225681][ T7707] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 203.258248][ T7716] SELinux: policydb version -845211227 does not match my version range 15-33 [ 203.267241][ T7716] SELinux: failed to load policy [ 203.433635][ T7707] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 203.529060][ T7718] /dev/rnullb0: Can't open blockdev [ 203.841635][ T368] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 204.066493][ T7742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1492 [ 204.157443][ T7754] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.157809][ T7754] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 204.362108][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 204.505396][ T3870] usb 10-1: USB disconnect, device number 12 [ 204.522433][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 204.528694][ T10] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 204.537987][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.546466][ T349] usb 3-1: USB disconnect, device number 30 [ 204.555111][ T10] usb 9-1: config 0 descriptor?? [ 204.647654][ T7773] binder: Bad value for 'max' [ 204.653561][ T7772] binder: Bad value for 'max' [ 204.746538][ T7783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 204.746921][ T7783] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 152, size: 48) [ 204.756125][ T7783] rust_binder: Error while translating object. [ 204.766564][ T7783] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 204.772808][ T7783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 204.796840][ T7785] __vm_enough_memory: pid: 7785, comm: syz.2.2550, bytes: 70373039144960 not enough memory for the allocation [ 204.831265][ T36] audit: type=1400 audit(2000000065.902:847): avc: denied { append } for pid=7786 comm="syz.2.2551" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 204.922091][ T290] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 204.952590][ T7797] /dev/rnullb0: Can't open blockdev [ 204.959693][ T36] audit: type=1400 audit(2000000066.032:848): avc: denied { name_bind } for pid=7796 comm="syz.2.2553" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 205.083171][ T290] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.094325][ T290] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 205.105103][ T290] usb 10-1: config 0 interface 0 has no altsetting 0 [ 205.111883][ T290] usb 10-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 205.121071][ T290] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.131302][ T290] usb 10-1: config 0 descriptor?? [ 205.138413][ T7781] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 205.180916][ T7802] rust_binder: 7801 RLIMIT_NICE not set [ 205.534822][ T7812] rust_binder: Write failure EFAULT in pid:1527 [ 205.547632][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.552950][ T36] audit: type=1400 audit(2000000066.632:849): avc: denied { mounton } for pid=7816 comm="syz.1.2558" path="/521/file3" dev="tmpfs" ino=2902 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 205.554061][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.597041][ T290] logitech 0003:046D:C286.0022: unknown main item tag 0x6 [ 205.605134][ T290] logitech 0003:046D:C286.0022: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.9-1/input0 [ 205.616467][ T290] logitech 0003:046D:C286.0022: no inputs found [ 205.812491][ T3870] usb 10-1: USB disconnect, device number 13 [ 206.142085][ T290] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 206.272107][ T290] usb 3-1: device descriptor read/64, error -71 [ 206.331604][ T7823] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 206.395437][ T10] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 206.409016][ T10] asix 9-1:0.0: probe with driver asix failed with error -71 [ 206.422878][ T10] usb 9-1: USB disconnect, device number 14 [ 206.512166][ T290] usb 3-1: device descriptor read/64, error -71 [ 206.702140][ T368] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 206.742267][ T45] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 206.752102][ T290] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 206.852091][ T368] usb 10-1: Using ep0 maxpacket: 16 [ 206.858340][ T368] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.866428][ T368] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.876642][ T368] usb 10-1: config 0 has no interface number 0 [ 206.882852][ T290] usb 3-1: device descriptor read/64, error -71 [ 206.889128][ T368] usb 10-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.902392][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 206.907625][ T368] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 206.916803][ T368] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.925875][ T368] usb 10-1: config 0 descriptor?? [ 206.931331][ T45] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.944719][ T368] usbhid 10-1:0.1: couldn't find an input interrupt endpoint [ 206.952778][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 206.960729][ T45] usb 2-1: New USB device found, idVendor=04e7, idProduct=0050, bcdDevice= 0.40 [ 206.969813][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.977807][ T45] usb 2-1: Product: ⪚碂짐쩹鿮臿拋囻悠簂ᅒ䙐뛕⪙띡鑬痫⼀ⳬ躲㋩齤柅㙎禸墷☍䶃ᙔꧦ夺需䟢᪊滟侉⯸΁啜Ớ馔柞ꖳ洑쌉嗤ᘔ殗亄叒茶䐒࢞뼝⦔噳샛셫뷎畔〶껒∴ꄞ䞸䠣㉮䇐⎛ꪹ斟ぉ廆翙㫅ⶆ췈株끍ꀥ鐵浙鞒革騈䲛ᨩ䉼❊豺똱撢ᄈ隺■䵘 [ 207.008235][ T45] usb 2-1: Manufacturer: ᶁ䋎᥸쌎㺢稲⿮ﱊ䯪⮮ꠡ酪䀇ᆶ找➆쟧ģ⦾鼣ṙ䣟ǧ龆똵닑镗䆔ꏜꦯ맓匮ᣚ멣꣕赠폯৶ᙴ屻ࣞᵝ獳⁂鎷꺞䵑凱썎嚐㴩䗯ꋠ액ޫﲻ棃㋩ᤙ릵瀪হ易烳ࢬ䪠댖摖幪৾䝘⾬曽⣇罋伂嘎봏餀⍒ꛐ羱쎓ﬖ눊볆덕拈붶쾒ꍴӇꬖ။캍ᬇᆨ혻膊佐윮턻 [ 207.041174][ T45] usb 2-1: SerialNumber: ࠐ [ 207.161983][ T36] audit: type=1400 audit(2000000068.232:850): avc: denied { read } for pid=7841 comm="syz.8.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 207.172093][ T290] usb 3-1: device descriptor read/64, error -71 [ 207.292163][ T290] usb usb3-port1: attempt power cycle [ 207.448178][ T7838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.456719][ T7838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.465392][ T7838] overlayfs: failed to resolve './file1': -2 [ 207.475196][ T45] usbhid 2-1:1.0: can't add hid device: -71 [ 207.481110][ T45] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 207.489930][ T45] usb 2-1: USB disconnect, device number 90 [ 207.632146][ T290] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 207.653170][ T290] usb 3-1: device descriptor read/8, error -71 [ 207.783112][ T290] usb 3-1: device descriptor read/8, error -71 [ 207.981203][ T36] audit: type=1400 audit(2000000069.052:851): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 208.022150][ T290] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 208.037305][ T7854] netlink: 'syz.8.2570': attribute type 4 has an invalid length. [ 208.046151][ T290] usb 3-1: device descriptor read/8, error -71 [ 208.060637][ T7854] netlink: 'syz.8.2570': attribute type 4 has an invalid length. [ 208.185245][ T290] usb 3-1: device descriptor read/8, error -71 [ 208.292321][ T290] usb usb3-port1: unable to enumerate USB device [ 208.326037][ T3870] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 208.432088][ T10] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 208.583080][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 6: 254, using maximum allowed: 30 [ 208.593961][ T10] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.604942][ T10] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 208.615554][ T10] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 208.628504][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 208.635126][ T10] usb 2-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 208.644161][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.652609][ T10] usb 2-1: config 0 descriptor?? [ 208.657795][ T7869] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 208.851678][ T7871] FAT-fs (rnullb0): bogus number of reserved sectors [ 208.858433][ T7871] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 208.921903][ T36] audit: type=1400 audit(2000000000.730:852): avc: denied { shutdown } for pid=7874 comm="syz.8.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.962622][ T7879] 9pnet_fd: Insufficient options for proto=fd [ 209.068180][ T10] cypress 0003:04B4:ED81.0023: unknown main item tag 0x0 [ 209.075263][ T10] cypress 0003:04B4:ED81.0023: unknown main item tag 0x0 [ 209.082304][ T10] cypress 0003:04B4:ED81.0023: unknown main item tag 0x0 [ 209.089327][ T10] cypress 0003:04B4:ED81.0023: unknown main item tag 0x0 [ 209.096359][ T10] cypress 0003:04B4:ED81.0023: unknown main item tag 0x0 [ 209.103446][ T10] cypress 0003:04B4:ED81.0023: unknown main item tag 0x0 [ 209.111186][ T10] cypress 0003:04B4:ED81.0023: hidraw0: USB HID v0.00 Device [HID 04b4:ed81] on usb-dummy_hcd.1-1/input0 [ 209.273978][ T7869] tmpfs: Unknown parameter 'hugw' [ 209.302126][ T368] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 209.314120][ T45] usb 2-1: USB disconnect, device number 91 [ 209.459373][ T368] usb 3-1: Using ep0 maxpacket: 16 [ 209.473596][ T7881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.498170][ T7881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.506145][ T3870] usb 10-1: USB disconnect, device number 14 [ 209.513384][ T7893] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2584'. [ 209.526883][ T368] usb 3-1: unable to get BOS descriptor or descriptor too short [ 209.536464][ T7893] gretap0: entered promiscuous mode [ 209.543966][ T7893] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2584'. [ 209.553219][ T7893] 0{X: renamed from gretap0 [ 209.558291][ T7897] binder: Bad value for 'max' [ 209.563028][ T368] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 209.570829][ T368] usb 3-1: can't read configurations, error -71 [ 209.578078][ T7893] 0{X: left promiscuous mode [ 209.583630][ T7893] 0{X: entered allmulticast mode [ 209.589714][ T7893] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 209.832095][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 209.860223][ T7924] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.992083][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 210.004508][ T10] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 210.012593][ T10] usb 9-1: config 0 has no interface number 0 [ 210.020038][ T10] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 210.029810][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.041762][ T7927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 210.042233][ T7927] rust_binder: Error while translating object. [ 210.043185][ T10] usb 9-1: Product: syz [ 210.051767][ T7927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 210.057567][ T10] usb 9-1: Manufacturer: syz [ 210.062173][ T7927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 210.071067][ T10] usb 9-1: SerialNumber: syz [ 210.091522][ T36] audit: type=1400 audit(2000000001.900:853): avc: granted { setsecparam } for pid=7929 comm="syz.2.2594" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 210.100155][ T10] usb 9-1: config 0 descriptor?? [ 210.317135][ T7897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.325687][ T7897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.334773][ T10] usb 9-1: Found UVC 0.04 device syz (046d:08c3) [ 210.341258][ T10] uvcvideo 9-1:0.31: Entity type for entity Output 6 was not initialized! [ 210.350058][ T10] usb 9-1: Failed to create links for entity 5 [ 210.356259][ T10] usb 9-1: Failed to register entities (-22). [ 210.365158][ T10] usb 9-1: USB disconnect, device number 16 [ 210.432128][ T368] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 210.532131][ T3870] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 210.583830][ T368] usb 3-1: not running at top speed; connect to a high speed hub [ 210.592787][ T368] usb 3-1: config 14 has an invalid interface number: 15 but max is 2 [ 210.600984][ T368] usb 3-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 210.609776][ T368] usb 3-1: config 14 has an invalid interface descriptor of length 2, skipping [ 210.618774][ T368] usb 3-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 210.627552][ T368] usb 3-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 210.636415][ T368] usb 3-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 210.645190][ T368] usb 3-1: config 14 has an invalid interface number: 81 but max is 2 [ 210.653367][ T368] usb 3-1: config 14 has an invalid interface number: 14 but max is 2 [ 210.661522][ T368] usb 3-1: config 14 has no interface number 0 [ 210.667686][ T368] usb 3-1: config 14 has no interface number 1 [ 210.672093][ T3870] usb 10-1: device descriptor read/64, error -71 [ 210.673855][ T368] usb 3-1: config 14 has no interface number 2 [ 210.686326][ T368] usb 3-1: config 14 interface 15 altsetting 194 has an invalid endpoint descriptor of length 4, skipping [ 210.697658][ T368] usb 3-1: config 14 interface 15 altsetting 194 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 210.712660][ T368] usb 3-1: config 14 interface 81 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 210.724026][ T368] usb 3-1: config 14 interface 81 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 210.737241][ T368] usb 3-1: too many endpoints for config 14 interface 14 altsetting 15: 247, using maximum allowed: 30 [ 210.749523][ T368] usb 3-1: config 14 interface 14 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 210.751173][ T7934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 210.760621][ T368] usb 3-1: config 14 interface 14 altsetting 15 endpoint 0x5 has invalid maxpacket 511, setting to 64 [ 210.760655][ T368] usb 3-1: config 14 interface 14 altsetting 15 endpoint 0x4 has invalid maxpacket 511, setting to 64 [ 210.760682][ T368] usb 3-1: config 14 interface 14 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 247 [ 210.767378][ T7934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 210.778319][ T368] usb 3-1: config 14 interface 15 has no altsetting 0 [ 210.789215][ T7934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1570 [ 210.802471][ T368] usb 3-1: config 14 interface 81 has no altsetting 0 [ 210.834351][ T368] usb 3-1: config 14 interface 14 has no altsetting 0 [ 210.842476][ T368] usb 3-1: New USB device found, idVendor=1e0e, idProduct=9200, bcdDevice=d4.aa [ 210.853221][ T368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.861202][ T368] usb 3-1: Manufacturer: ꌋئ자㶰ﳅ覡嗶郜퐰鮴᭕쉦鋟続큊運֢봭ꋓ谰궜躮쁩⭇欬⾴ꒃ犎퇇瘳 [ 210.915934][ T7940] overlay: Unknown parameter 'dont_hash' [ 210.932087][ T3870] usb 10-1: device descriptor read/64, error -71 [ 210.949766][ T7952] vcan0: entered allmulticast mode [ 211.042798][ T36] audit: type=1400 audit(2000000002.860:854): avc: denied { execute } for pid=7961 comm="syz.8.2602" name="file0" dev="ramfs" ino=61881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 211.092213][ T36] audit: type=1400 audit(2000000002.860:855): avc: denied { execute_no_trans } for pid=7961 comm="syz.8.2602" path="/file0" dev="ramfs" ino=61881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 211.192077][ T3870] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 211.202074][ T290] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 211.296675][ T368] usb 3-1: USB disconnect, device number 36 [ 211.322087][ T3870] usb 10-1: device descriptor read/64, error -71 [ 211.373088][ T290] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 211.392162][ T290] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 211.402953][ T290] usb 2-1: config 0 interface 0 has no altsetting 0 [ 211.409561][ T290] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 211.418674][ T290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.432539][ T290] usb 2-1: config 0 descriptor?? [ 211.437951][ T7949] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.492096][ T370] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 211.562094][ T3870] usb 10-1: device descriptor read/64, error -71 [ 211.642440][ T370] usb 9-1: too many configurations: 78, using maximum allowed: 8 [ 211.650747][ T7950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.652815][ T370] usb 9-1: config 0 has no interfaces? [ 211.659297][ T7949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.665671][ T7950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.673414][ T7949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.680795][ T370] usb 9-1: config 0 has no interfaces? [ 211.688440][ T3870] usb usb10-port1: attempt power cycle [ 211.694793][ T370] usb 9-1: config 0 has no interfaces? [ 211.705585][ T370] usb 9-1: config 0 has no interfaces? [ 211.711681][ T370] usb 9-1: config 0 has no interfaces? [ 211.717839][ T370] usb 9-1: config 0 has no interfaces? [ 211.723979][ T370] usb 9-1: config 0 has no interfaces? [ 211.730128][ T370] usb 9-1: config 0 has no interfaces? [ 211.737048][ T370] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 211.746149][ T370] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.754148][ T370] usb 9-1: Product: syz [ 211.758318][ T370] usb 9-1: Manufacturer: syz [ 211.762922][ T370] usb 9-1: SerialNumber: syz [ 211.768988][ T370] usb 9-1: config 0 descriptor?? [ 211.858649][ T290] usbhid 2-1:0.0: can't add hid device: -71 [ 211.864641][ T290] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 211.873600][ T290] usb 2-1: USB disconnect, device number 92 [ 211.924243][ T36] audit: type=1400 audit(2000000003.740:856): avc: denied { ioctl } for pid=7971 comm="syz.2.2606" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 211.964651][ T7976] rust_binder: Error while translating object. [ 211.964680][ T7976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 211.970900][ T7976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 212.025004][ T10] usb 9-1: USB disconnect, device number 17 [ 212.040024][ T3870] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 212.063548][ T3870] usb 10-1: device descriptor read/8, error -71 [ 212.186682][ T7992] fuse: Unknown parameter 'grgup_id' [ 212.203146][ T3870] usb 10-1: device descriptor read/8, error -71 [ 212.234155][ T7999] input: syz0 as /devices/virtual/input/input31 [ 212.247848][ T7999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.248304][ T7999] rust_binder: Error while translating object. [ 212.254979][ T7999] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 212.261143][ T7999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:166 [ 212.283220][ T8003] rust_binder: Write failure EFAULT in pid:170 [ 212.301320][ T36] audit: type=1400 audit(2000000004.110:857): avc: denied { relabelfrom } for pid=8002 comm="syz.2.2617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 212.337939][ T36] audit: type=1400 audit(2000000004.110:858): avc: denied { relabelto } for pid=8002 comm="syz.2.2617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 212.434338][ T8019] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.436699][ T8019] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.462129][ T3870] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 212.493106][ T3870] usb 10-1: device descriptor read/8, error -71 [ 212.560528][ T8024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.581871][ T8032] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2623'. [ 212.623084][ T3870] usb 10-1: device descriptor read/8, error -71 [ 212.682112][ T10] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 212.732141][ T3870] usb usb10-port1: unable to enumerate USB device [ 212.833278][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 212.841558][ T10] usb 2-1: config 179 has no interface number 0 [ 212.847870][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 8 [ 212.859048][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 212.870370][ T10] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 212.883696][ T10] usb 2-1: config 179 interface 65 has no altsetting 0 [ 212.890539][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 212.899591][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.908296][ T8019] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 212.917327][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input32 [ 213.118992][ T8019] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2621'. [ 213.128717][ T290] usb 2-1: USB disconnect, device number 93 [ 213.128865][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 213.142950][ T290] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 213.285476][ T36] audit: type=1400 audit(2000000005.100:859): avc: denied { accept } for pid=8044 comm="syz.2.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 213.433439][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2627'. [ 213.442956][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2627'. [ 213.452491][ T8048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:269 [ 213.683496][ T8058] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 160, limit: 216, size: 122) [ 213.702080][ T36] audit: type=1400 audit(2000000005.510:860): avc: denied { execmod } for pid=8060 comm="syz.1.2631" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 213.711687][ T8058] rust_binder: Error while translating object. [ 213.740177][ T8058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 213.749856][ T8058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:276 [ 214.283443][ T8085] overlayfs: missing 'lowerdir' [ 214.552096][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 214.564465][ T8090] kvm: kvm [8089]: vcpu0, guest rIP: 0x94f Unhandled WRMSR(0xc1) = 0xb86600a000000000 [ 214.574418][ T8090] kvm: kvm [8089]: vcpu0, guest rIP: 0x96f Unhandled WRMSR(0xc2) = 0xb86600a000000000 [ 214.588572][ T8090] kvm: kvm [8089]: vcpu0, guest rIP: 0x94f Unhandled WRMSR(0xc2) = 0xb86600a000000000 [ 214.635404][ T8101] netlink: 'syz.9.2645': attribute type 4 has an invalid length. [ 214.643199][ T8101] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.2645'. [ 214.664779][ T8106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:293 [ 214.702100][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 214.718152][ T10] usb 3-1: config 1 has an invalid interface number: 5 but max is 2 [ 214.726597][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 214.735468][ T10] usb 3-1: config 1 has an invalid descriptor of length 74, skipping remainder of the config [ 214.741896][ T8110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.745799][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 214.761514][ T10] usb 3-1: config 1 has no interface number 1 [ 214.767656][ T10] usb 3-1: too many endpoints for config 1 interface 5 altsetting 6: 176, using maximum allowed: 30 [ 214.778501][ T10] usb 3-1: config 1 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 176 [ 214.791568][ T10] usb 3-1: config 1 interface 5 has no altsetting 0 [ 214.799396][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.808481][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.816502][ T10] usb 3-1: Product: syz [ 214.820687][ T10] usb 3-1: Manufacturer: syz [ 214.825300][ T10] usb 3-1: SerialNumber: syz [ 214.837324][ T8110] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 214.837346][ T8110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1614 [ 214.963613][ T36] audit: type=1107 audit(2000000006.780:861): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='4`' [ 215.262101][ T290] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 215.412102][ T290] usb 2-1: Using ep0 maxpacket: 8 [ 215.418295][ T290] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.428542][ T290] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 215.437455][ T290] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.450345][ T290] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 215.459393][ T290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.469083][ T290] hub 2-1:1.0: bad descriptor, ignoring hub [ 215.475024][ T290] hub 2-1:1.0: probe with driver hub failed with error -5 [ 215.482080][ T349] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 215.482266][ T290] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 215.542649][ T10] usb 3-1: 0:2 : does not exist [ 215.552203][ T10] usb 3-1: USB disconnect, device number 37 [ 215.563875][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.632077][ T349] usb 10-1: Using ep0 maxpacket: 8 [ 215.638261][ T349] usb 10-1: config 5 has an invalid interface number: 143 but max is 2 [ 215.646600][ T349] usb 10-1: config 5 has an invalid interface number: 6 but max is 2 [ 215.654704][ T349] usb 10-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 215.663464][ T349] usb 10-1: config 5 has an invalid descriptor of length 166, skipping remainder of the config [ 215.673937][ T349] usb 10-1: config 5 has no interface number 1 [ 215.680089][ T349] usb 10-1: config 5 has no interface number 2 [ 215.686254][ T349] usb 10-1: config 5 interface 143 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 215.699605][ T349] usb 10-1: too many endpoints for config 5 interface 6 altsetting 7: 122, using maximum allowed: 30 [ 215.710454][ T349] usb 10-1: config 5 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 215.723576][ T349] usb 10-1: too many endpoints for config 5 interface 0 altsetting 5: 36, using maximum allowed: 30 [ 215.734527][ T349] usb 10-1: config 5 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 215.747548][ T349] usb 10-1: config 5 interface 143 has no altsetting 0 [ 215.754409][ T349] usb 10-1: config 5 interface 6 has no altsetting 0 [ 215.761062][ T349] usb 10-1: config 5 interface 0 has no altsetting 0 [ 215.769080][ T349] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3 [ 215.778217][ T349] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.786283][ T349] usb 10-1: Product: syz [ 215.790523][ T349] usb 10-1: Manufacturer: syz [ 215.792143][ T290] usb 2-1: USB disconnect, device number 94 [ 215.795199][ T349] usb 10-1: SerialNumber: syz [ 216.013003][ T349] usb 10-1: MIDIStreaming interface descriptor not found [ 216.027546][ T349] usb 10-1: USB disconnect, device number 19 [ 216.072707][ T8157] cgroup: Invalid name [ 216.335022][ T306] bridge_slave_1: left allmulticast mode [ 216.340739][ T306] bridge_slave_1: left promiscuous mode [ 216.346579][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.355028][ T306] bridge_slave_0: left allmulticast mode [ 216.364449][ T306] bridge_slave_0: left promiscuous mode [ 216.370055][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.442085][ T290] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 216.479011][ T8164] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.486111][ T8164] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.493252][ T8164] bridge_slave_0: entered allmulticast mode [ 216.499413][ T8164] bridge_slave_0: entered promiscuous mode [ 216.505725][ T8164] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.513153][ T8164] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.520516][ T8164] bridge_slave_1: entered allmulticast mode [ 216.527130][ T8164] bridge_slave_1: entered promiscuous mode [ 216.534837][ T306] veth0_vlan: left promiscuous mode [ 216.535280][ T8170] overlay: filesystem on ./bus not supported as upperdir [ 216.599946][ T8174] tipc: Failed to remove unknown binding: 66,1,1/0:609504771/609504773 [ 216.608295][ T290] usb 2-1: Invalid ep0 maxpacket: 32 [ 216.639851][ T8164] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.646888][ T8164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.654163][ T8164] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.661176][ T8164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.680453][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.687981][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.699213][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.706259][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.716200][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.723261][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.742102][ T290] usb 2-1: new low-speed USB device number 96 using dummy_hcd [ 216.759198][ T8164] veth0_vlan: entered promiscuous mode [ 216.771575][ T8164] veth1_macvtap: entered promiscuous mode [ 216.805218][ T8180] sock: sock_timestamping_bind_phc: sock not bind to device [ 216.902066][ T290] usb 2-1: Invalid ep0 maxpacket: 32 [ 216.911209][ T290] usb usb2-port1: attempt power cycle [ 216.916797][ T36] audit: type=1326 audit(2000000008.739:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8156 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1db8e929 code=0x7fc00000 [ 217.026816][ T8197] netlink: 'syz.3.2678': attribute type 4 has an invalid length. [ 217.036055][ T8197] netlink: 'syz.3.2678': attribute type 4 has an invalid length. [ 217.282081][ T290] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 217.302402][ T290] usb 2-1: Invalid ep0 maxpacket: 32 [ 217.432082][ T290] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 217.452435][ T290] usb 2-1: Invalid ep0 maxpacket: 32 [ 217.457801][ T290] usb usb2-port1: unable to enumerate USB device [ 217.464324][ T370] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 217.623675][ T370] usb 4-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 217.634078][ T370] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.643651][ T370] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 217.652740][ T370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 217.660704][ T370] usb 4-1: SerialNumber: syz [ 217.801724][ T8217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.819072][ T8221] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2686'. [ 217.920660][ T370] usb 4-1: 0:2 : does not exist [ 217.925652][ T370] usb 4-1: unit 5: unexpected type 0x09 [ 217.932980][ T370] usb 4-1: USB disconnect, device number 23 [ 217.949617][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 218.047923][ T8250] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.047950][ T8250] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.060705][ T8256] binder: Unknown parameter 'fscontext?}' [ 218.332082][ T290] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 218.352781][ T349] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 218.445474][ T8278] exFAT-fs (rnullb0): invalid boot record signature [ 218.452382][ T8278] exFAT-fs (rnullb0): failed to read boot sector [ 218.458693][ T8278] exFAT-fs (rnullb0): failed to recognize exfat type [ 218.483374][ T290] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.495323][ T290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.506292][ T290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 218.507203][ T349] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 218.516040][ T290] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.537087][ T349] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.547315][ T290] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.548164][ T349] usb 10-1: config 0 has no interface number 0 [ 218.559708][ T290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.572213][ T349] usb 10-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.582164][ T290] usb 3-1: config 0 descriptor?? [ 218.590127][ T349] usb 10-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 218.599575][ T349] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.609808][ T349] usb 10-1: config 0 descriptor?? [ 218.704362][ T8286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 218.755353][ T8287] rust_binder: Write failure EINVAL in pid:43 [ 218.792578][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.807222][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.815252][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.824063][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.824829][ T349] usb 10-1: USB disconnect, device number 20 [ 218.833646][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.846207][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.854187][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.862661][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.870589][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.879183][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.090242][ T290] plantronics 0003:047F:FFFF.0024: ignoring exceeding usage max [ 219.099548][ T290] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 219.107231][ T290] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 219.114986][ T290] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 219.122863][ T290] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 219.130328][ T290] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 219.137912][ T290] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 219.149478][ T290] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 219.159373][ T8299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.166368][ T8300] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 239) [ 219.168427][ T290] usb 3-1: USB disconnect, device number 38 [ 219.182304][ T8300] rust_binder: Error while translating object. [ 219.188030][ T8302] fido_id[8302]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 219.189362][ T8300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 219.209831][ T8300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 219.351036][ T36] audit: type=1326 audit(2000000011.169:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bb58e929 code=0x7ffc0000 [ 219.351696][ T8314] SELinux: security_context_str_to_sid () failed with errno=-22 [ 219.360270][ T36] audit: type=1326 audit(2000000011.169:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bb58e929 code=0x7ffc0000 [ 219.414748][ T36] audit: type=1326 audit(2000000011.169:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f04bb58e929 code=0x7ffc0000 [ 219.438108][ T36] audit: type=1326 audit(2000000011.169:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bb58e929 code=0x7ffc0000 [ 219.461497][ T36] audit: type=1326 audit(2000000011.169:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bb58e929 code=0x7ffc0000 [ 219.485084][ T36] audit: type=1326 audit(2000000011.169:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bb58e929 code=0x7ffc0000 [ 219.508534][ T36] audit: type=1326 audit(2000000011.169:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f04bb58e929 code=0x7ffc0000 [ 219.531951][ T36] audit: type=1326 audit(2000000011.209:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bb58e929 code=0x7ffc0000 [ 219.555589][ T36] audit: type=1326 audit(2000000011.209:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bb58e929 code=0x7ffc0000 [ 219.623675][ T8320] netlink: 'syz.3.2721': attribute type 4 has an invalid length. [ 219.682074][ T370] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 219.702331][ T290] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 219.811029][ T8333] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 219.812094][ T370] usb 2-1: device descriptor read/64, error -71 [ 219.831172][ T8336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 219.831193][ T8336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:364 [ 219.853175][ T290] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.873742][ T290] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 219.884427][ T290] usb 3-1: config 0 interface 0 has no altsetting 0 [ 219.891028][ T290] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 219.900056][ T290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.908481][ T290] usb 3-1: config 0 descriptor?? [ 219.913732][ T8312] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 220.062076][ T370] usb 2-1: device descriptor read/64, error -71 [ 220.102093][ T10] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 220.125787][ T290] logitech 0003:046D:C286.0025: unknown main item tag 0x7 [ 220.133412][ T290] logitech 0003:046D:C286.0025: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.2-1/input0 [ 220.144779][ T290] logitech 0003:046D:C286.0025: no inputs found [ 220.253132][ T10] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 220.262332][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.270888][ T10] usb 10-1: config 0 descriptor?? [ 220.302087][ T370] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 220.365178][ T290] usb 3-1: USB disconnect, device number 39 [ 220.432102][ T370] usb 2-1: device descriptor read/64, error -71 [ 220.433584][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2730'. [ 220.448732][ T8352] kvm: kvm [8351]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 220.672109][ T370] usb 2-1: device descriptor read/64, error -71 [ 220.782165][ T370] usb usb2-port1: attempt power cycle [ 220.877222][ T8357] /dev/nbd2: Can't lookup blockdev [ 220.890039][ T8360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.902470][ T10] usb 10-1: Cannot set autoneg [ 220.913723][ T10] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 221.122121][ T370] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 221.143285][ T370] usb 2-1: device descriptor read/8, error -71 [ 221.257251][ T1620] usb 10-1: USB disconnect, device number 21 [ 221.275355][ T370] usb 2-1: device descriptor read/8, error -71 [ 221.512078][ T370] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 221.533086][ T370] usb 2-1: device descriptor read/8, error -71 [ 221.558496][ T8385] tipc: Enabled bearer , priority 0 [ 221.565907][ T8385] tipc: Disabling bearer [ 221.602103][ T6682] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 221.753932][ T6682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 221.763730][ T6682] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 221.773806][ T6682] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.788648][ T6682] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 221.797924][ T6682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.806042][ T6682] usb 4-1: Product: 郀龏ㅣ듌蘃ꡠ蛻ᏌJѮ꿧༸䈚毻祋铄禅➺㽙鱲䞨茖嗫ঋዪ濅ꃅ둷坿씱᳆㓌똷鼦ϸѪ傮᠕㠚鵝㄰乬굥ﵔ츺㌬纮亾었⍿㝕䥯ᆈ뭵솴麿沞㰈沘蝆授ꅻ剗錎迌灔浿ﮘቺ颵扛ଇ겸䍶퓛謐䉢ꀣ妿狹ӻጟ荌ॻ≐ờ鐮ބ窲᱉Ⓑ萉ꥀឧᮃ⭻㦐ᬄ瑄槪덁擇ꊴ螀횸䊗艡걡頀吣 [ 221.841556][ T6682] usb 4-1: Manufacturer: 핯礴⑩쎨퇗ꎋ麸怫ᱍ萈ᮉ䥬엇ꇀ읊럕⫁惩妍૴㌗쀁႖⌆ᴅᠨ☋烧嗮䨶譴檠屼᣺꼰㩗褼欅拱㴖巯毖풥煼⠀⨈ꄹ全䩺फ़됍魄敥ൗ涇ꉼ更橾㖟쀅賅勘⦆⑧ꋉ뭇抗蔋湑䇳ⲧ繥봾퀴麋ꪨ埊景㵺橚靖利듺⌍復㇟ꍱ䩀 [ 221.874171][ T6682] usb 4-1: SerialNumber: 㐁 [ 221.882228][ T8377] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 221.932204][ T10] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 222.082714][ T8392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2744'. [ 222.092121][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 222.123322][ T6682] usb 4-1: USB disconnect, device number 24 [ 222.142090][ T10] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 222.172210][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.200313][ T10] usb 10-1: config 0 descriptor?? [ 222.220570][ T8388] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 222.238723][ T8397] syzkaller0: entered promiscuous mode [ 222.244340][ T8397] syzkaller0: entered allmulticast mode [ 222.296447][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.296477][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.323018][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.336631][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.352112][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.365842][ T8402] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 222.378661][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.396559][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.403243][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.409736][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.416479][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.423851][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.430395][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.437584][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.452289][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.458835][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.465553][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.472429][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.478918][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.485652][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.492290][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.498814][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.506549][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.513202][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.519689][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.526626][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.533242][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.539765][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.546449][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.553498][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.560082][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.566821][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.573439][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.579960][ T8403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.638972][ T10] hid-generic 0003:04F3:0755.0026: unknown main item tag 0x0 [ 222.654784][ T10] hid-generic 0003:04F3:0755.0026: unknown main item tag 0x0 [ 222.662610][ T10] hid-generic 0003:04F3:0755.0026: unknown main item tag 0x0 [ 222.670149][ T10] hid-generic 0003:04F3:0755.0026: unknown main item tag 0x0 [ 222.677753][ T10] hid-generic 0003:04F3:0755.0026: unknown main item tag 0x0 [ 222.697656][ T10] hid-generic 0003:04F3:0755.0026: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 222.856702][ T8419] 9pnet_fd: Insufficient options for proto=fd [ 222.876517][ T8421] cgroup: Bad value for 'name' [ 223.722392][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 223.722409][ T36] audit: type=1326 audit(2000000015.549:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.3.2753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7d4d8e929 code=0x0 [ 223.922088][ T6682] usb 10-1: reset full-speed USB device number 22 using dummy_hcd [ 224.570668][ T8429] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 224.801053][ T370] usb 2-1: device descriptor read/8, error -71 [ 224.879683][ T36] audit: type=1326 audit(2000000016.699:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.9.2759" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04bb58e929 code=0x0 [ 224.932565][ T370] usb usb2-port1: unable to enumerate USB device [ 224.981583][ T8450] tipc: Enabling of bearer rejected, failed to enable media [ 225.222076][ T370] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 225.342052][ T36] audit: type=1400 audit(2000000017.159:877): avc: denied { remount } for pid=8467 comm="syz.1.2766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 225.602296][ T10] usb 10-1: USB disconnect, device number 22 [ 225.782092][ T370] usb 2-1: device not accepting address 103, error -71 [ 225.922228][ T8483] netlink: 'syz.3.2770': attribute type 12 has an invalid length. [ 225.937639][ T8485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:99 [ 226.122112][ T370] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 226.283047][ T370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.293969][ T370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.303732][ T370] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.316621][ T370] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.325686][ T370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.334969][ T370] usb 2-1: config 0 descriptor?? [ 226.341105][ T8505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 226.341503][ T36] audit: type=1400 audit(2000000018.159:878): avc: denied { map } for pid=8504 comm="syz.3.2779" path="/proc/119/task/120/mounts" dev="proc" ino=67492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 226.341780][ T8505] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.388487][ T8510] netlink: 'syz.3.2780': attribute type 21 has an invalid length. [ 226.402860][ T8510] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2780'. [ 226.672078][ T290] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 226.742527][ T370] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 226.751157][ T370] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 226.823157][ T290] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 226.834152][ T290] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 226.844785][ T290] usb 4-1: config 0 interface 0 has no altsetting 0 [ 226.851380][ T290] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 226.860438][ T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.868926][ T290] usb 4-1: config 0 descriptor?? [ 226.874149][ T8512] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 227.283006][ T290] logitech 0003:046D:C286.0028: item fetching failed at offset 5/8 [ 227.291081][ T290] logitech 0003:046D:C286.0028: parse failed [ 227.297118][ T290] logitech 0003:046D:C286.0028: probe with driver logitech failed with error -22 [ 227.484348][ T3870] usb 4-1: USB disconnect, device number 25 [ 227.782098][ T353] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 227.782138][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 227.857751][ T8516] SELinux: security_context_str_to_sid () failed with errno=-22 [ 227.878169][ T8519] binder: Bad value for 'max' [ 227.881935][ T8520] binder: Bad value for 'max' [ 227.888258][ T8519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.896833][ T8519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.052193][ C1] plantronics 0003:047F:FFFF.0027: usb_submit_urb(ctrl) failed: -1 [ 228.120494][ T36] audit: type=1400 audit(2000000019.939:879): avc: denied { map } for pid=8543 comm="syz.3.2792" path="/53" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 228.141998][ T3870] usb 10-1: new low-speed USB device number 23 using dummy_hcd [ 228.168177][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 228.292523][ T3870] usb 10-1: too many configurations: 87, using maximum allowed: 8 [ 228.301019][ T3870] usb 10-1: config index 0 descriptor too short (expected 2084, got 36) [ 228.309366][ T3870] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.319546][ T3870] usb 10-1: config 0 has no interfaces? [ 228.325776][ T3870] usb 10-1: config index 1 descriptor too short (expected 2084, got 36) [ 228.334143][ T3870] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.344298][ T3870] usb 10-1: config 0 has no interfaces? [ 228.350498][ T3870] usb 10-1: config index 2 descriptor too short (expected 2084, got 36) [ 228.358879][ T3870] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.369038][ T3870] usb 10-1: config 0 has no interfaces? [ 228.375245][ T3870] usb 10-1: config index 3 descriptor too short (expected 2084, got 36) [ 228.383594][ T3870] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.393743][ T3870] usb 10-1: config 0 has no interfaces? [ 228.399935][ T3870] usb 10-1: config index 4 descriptor too short (expected 2084, got 36) [ 228.408289][ T3870] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.418455][ T3870] usb 10-1: config 0 has no interfaces? [ 228.424648][ T3870] usb 10-1: config index 5 descriptor too short (expected 2084, got 36) [ 228.433001][ T3870] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.443161][ T3870] usb 10-1: config 0 has no interfaces? [ 228.449368][ T3870] usb 10-1: config index 6 descriptor too short (expected 2084, got 36) [ 228.457740][ T3870] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.467902][ T3870] usb 10-1: config 0 has no interfaces? [ 228.474126][ T3870] usb 10-1: config index 7 descriptor too short (expected 2084, got 36) [ 228.482482][ T3870] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.492636][ T3870] usb 10-1: config 0 has no interfaces? [ 228.571171][ T8555] netlink: 'syz.1.2796': attribute type 4 has an invalid length. [ 228.605824][ T8557] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 228.852527][ T370] usb 2-1: USB disconnect, device number 104 [ 230.017987][ T8580] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 230.045770][ T8582] rust_binder: Write failure EFAULT in pid:1698 [ 230.100377][ T36] audit: type=1400 audit(2000000000.150:880): avc: denied { execute } for pid=8590 comm="syz.1.2807" path="/proc/1707/pagemap" dev="proc" ino=67939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 230.182085][ T353] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 230.198505][ T36] audit: type=1400 audit(2000000000.250:881): avc: denied { remount } for pid=8601 comm="syz.1.2811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 230.198536][ T8602] sysfs: Unknown parameter 'f 21thύs{<ހ!| OܙOw:8Gn?E@zhzBDnL9rF^QnUn#ǠtWI# }#߃f [ 230.198536][ T8602] 665TT [ 230.198536][ T8602] oV6YG 0b 66 0f 1f 44 00 00 b8 0c a2 82 82 90 90 90 90 90 90 90 90 90 [ 257.209312][ T36] audit: type=1400 audit(2000000027.200:913): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.228454][ T9563] RSP: 0018:ffffc90001205a90 EFLAGS: 00010246 [ 257.228488][ T9563] RAX: 0000000000000061 RBX: 1ffff92000240b54 RCX: ba2d9cb13d72dc00 [ 257.228506][ T9563] RDX: ffffc9000efb9000 RSI: 0000000000005ed2 RDI: 0000000000005ed3 [ 257.228523][ T9563] RBP: ffffc90001205a90 R08: ffffc90001205787 R09: 1ffff92000240af0 [ 257.250744][ T36] audit: type=1400 audit(2000000027.200:914): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.255801][ T9563] R10: dffffc0000000000 R11: fffff52000240af1 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 257.255821][ T9563] R13: dffffc0000000000 R14: ffffc90001205ac0 R15: ffffc90001205af0 [ 257.263843][ T36] audit: type=1400 audit(2000000027.200:915): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.271733][ T9563] FS: 00007ff7d5bde6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 257.279755][ T36] audit: type=1400 audit(2000000027.200:916): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 257.300844][ T9563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.300862][ T9563] CR2: 00007f04bc48ef98 CR3: 0000000129a82000 CR4: 00000000003526b0 [ 257.300879][ T9563] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.300892][ T9563] DR3: 3a810b1eb6134bdc DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.300908][ T9563] Call Trace: [ 257.300916][ T9563] [ 257.320756][ T36] audit: type=1400 audit(2000000027.200:917): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 257.337263][ T9563] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 257.337300][ T9563] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 257.337328][ T9563] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 257.380791][ T36] audit: type=1400 audit(2000000027.200:918): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 257.381125][ T9563] ? __cfi__RNvMNtCshgDM7dBCdno_11rust_binder11transactionNtB2_11Transaction6submit+0x10/0x10 [ 257.389292][ T36] audit: type=1400 audit(2000000027.370:919): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1992]" dev="pipefs" ino=1992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 257.397037][ T9563] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 257.397069][ T9563] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 257.525141][ T9563] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 257.533024][ T9563] ? __kasan_check_write+0x18/0x20 [ 257.538122][ T9563] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 257.547991][ T9563] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 257.558564][ T9563] ? __kasan_check_write+0x18/0x20 [ 257.563673][ T9563] ? _RINvNtCs9jEwPDbx20M_4core3ptr13drop_in_placeINtNtNtCs43vyB533jt3_6kernel4sync3arc3ArcINtCshgDM7dBCdno_11rust_binder7DTRWrapNtB1o_11DeliverCodeEEEB1o_+0xb3/0xf0 [ 257.580153][ T9563] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 257.589883][ T9563] ? __cfi__RINvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10 [ 257.602363][ T9563] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 257.612415][ T9563] ? __kasan_check_write+0x18/0x20 [ 257.617521][ T9563] ? _raw_spin_lock+0x8c/0x120 [ 257.622270][ T9563] ? __cfi__raw_spin_lock+0x10/0x10 [ 257.627470][ T9563] ? __kasan_check_write+0x18/0x20 [ 257.632577][ T9563] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 257.642135][ T9563] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 257.652056][ T9563] ? is_bpf_text_address+0x17b/0x1a0 [ 257.657334][ T9563] ? kernel_text_address+0xa9/0xe0 [ 257.662429][ T9563] ? __kernel_text_address+0x11/0x40 [ 257.667710][ T9563] ? unwind_get_return_address+0x51/0x90 [ 257.673332][ T9563] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 257.679467][ T9563] ? arch_stack_walk+0x10b/0x170 [ 257.684386][ T9563] ? stack_trace_save+0x9d/0xe0 [ 257.689224][ T9563] ? stack_depot_save_flags+0x38/0x800 [ 257.694664][ T9563] ? kasan_save_stack+0x4d/0x60 [ 257.699500][ T9563] ? kasan_save_stack+0x3e/0x60 [ 257.704337][ T9563] ? __kasan_record_aux_stack+0xb2/0xd0 [ 257.709877][ T9563] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 257.715849][ T9563] ? __call_rcu_common+0xcc/0x6f0 [ 257.720852][ T9563] ? call_rcu+0x14/0x20 [ 257.724988][ T9563] ? __kasan_check_write+0x18/0x20 [ 257.730083][ T9563] ? _raw_spin_trylock+0xaf/0x130 [ 257.735110][ T9563] ? __cfi__raw_spin_trylock+0x10/0x10 [ 257.740568][ T9563] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 257.746615][ T9563] ? _raw_spin_unlock+0x45/0x60 [ 257.751444][ T9563] ? call_rcu_nocb+0x6bd/0xc10 [ 257.756187][ T9563] ? swake_up_one_online_ipi+0x30/0x30 [ 257.761625][ T9563] ? is_bpf_text_address+0x17b/0x1a0 [ 257.766909][ T9563] ? kernel_text_address+0xa9/0xe0 [ 257.772020][ T9563] ? __kernel_text_address+0x11/0x40 [ 257.777300][ T9563] ? unwind_get_return_address+0x51/0x90 [ 257.782923][ T9563] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 257.789056][ T9563] ? arch_stack_walk+0x10b/0x170 [ 257.793992][ T9563] ? stack_depot_save_flags+0x38/0x800 [ 257.799430][ T9563] ? unwind_get_return_address+0x51/0x90 [ 257.805039][ T9563] ? kasan_save_track+0x4f/0x80 [ 257.809888][ T9563] ? kasan_save_track+0x3e/0x80 [ 257.814732][ T9563] ? kasan_save_alloc_info+0x40/0x50 [ 257.820003][ T9563] ? __kasan_kmalloc+0x96/0xb0 [ 257.824751][ T9563] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 257.831346][ T9563] ? krealloc_noprof+0x8d/0x130 [ 257.836198][ T9563] ? rust_helper_krealloc+0x33/0xd0 [ 257.841394][ T9563] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xb1/0x100 [ 257.850926][ T9563] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process8get_node+0x8b1/0x12e0 [ 257.860474][ T9563] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process14set_as_manager+0x1c2/0xa60 [ 257.870529][ T9563] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x134e/0x2cd0 [ 257.879887][ T9563] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 257.888566][ T9563] ? __se_sys_ioctl+0x132/0x1b0 [ 257.893403][ T9563] ? __x64_sys_ioctl+0x7f/0xa0 [ 257.898148][ T9563] ? x64_sys_call+0x1878/0x2ee0 [ 257.902989][ T9563] ? do_syscall_64+0x58/0xf0 [ 257.907571][ T9563] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 257.913620][ T9563] ? __kasan_check_write+0x18/0x20 [ 257.918726][ T9563] ? rust_helper_refcount_inc+0x55/0x80 [ 257.924258][ T9563] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node28incr_refcount_allow_zero2one+0x55c/0xe30 [ 257.935114][ T9563] ? __kasan_check_write+0x18/0x20 [ 257.940239][ T9563] ? _raw_spin_lock+0x8c/0x120 [ 257.944988][ T9563] ? cgroup_rstat_updated+0x132/0x7f0 [ 257.950342][ T9563] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 257.956054][ T9563] ? _raw_spin_unlock+0x45/0x60 [ 257.960895][ T9563] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 257.966335][ T9563] ? update_curr_dl_se+0x10c/0xb20 [ 257.971525][ T9563] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 257.977587][ T9563] ? update_curr+0x60d/0xc60 [ 257.982158][ T9563] ? _raw_spin_unlock+0x45/0x60 [ 257.986983][ T9563] ? rust_helper_spin_unlock+0x19/0x30 [ 257.992421][ T9563] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 258.002902][ T9563] ? unwind_get_return_address+0x51/0x90 [ 258.008535][ T9563] ? tg_unthrottle_up+0x980/0x980 [ 258.013540][ T9563] ? update_cfs_group+0x260/0x260 [ 258.018544][ T9563] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 258.029284][ T9563] ? kvm_sched_clock_read+0x15/0x30 [ 258.034482][ T9563] ? sched_clock_noinstr+0xd/0x30 [ 258.039483][ T9563] ? sched_clock+0x44/0x60 [ 258.043879][ T9563] ? sched_clock_cpu+0x75/0x400 [ 258.048709][ T9563] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 258.054761][ T9563] ? xfd_validate_state+0x68/0x150 [ 258.059854][ T9563] ? save_fpregs_to_fpstate+0x196/0x230 [ 258.065386][ T9563] ? __cfi___switch_to+0x10/0x10 [ 258.070304][ T9563] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0 [ 258.079413][ T9563] ? _raw_spin_unlock+0x45/0x60 [ 258.084260][ T9563] ? __switch_to_asm+0x3d/0x70 [ 258.089028][ T9563] ? avc_has_extended_perms+0x7c7/0xdd0 [ 258.094553][ T9563] ? __asan_memcpy+0x5a/0x80 [ 258.099134][ T9563] ? avc_has_extended_perms+0x921/0xdd0 [ 258.104660][ T9563] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 258.114205][ T9563] ? do_vfs_ioctl+0xeda/0x1e30 [ 258.118968][ T9563] ? __futex_queue+0x19a/0x340 [ 258.123730][ T9563] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 258.129346][ T9563] ? __cfi___futex_queue+0x10/0x10 [ 258.134456][ T9563] ? futex_wait_setup+0x1bc/0x260 [ 258.139459][ T9563] ? __futex_wait+0x218/0x2a0 [ 258.144118][ T9563] ? ioctl_has_perm+0x384/0x4d0 [ 258.148971][ T9563] ? has_cap_mac_admin+0xd0/0xd0 [ 258.153913][ T9563] ? futex_wake+0x5fb/0x900 [ 258.158400][ T9563] ? futex_setup_timer+0xb4/0xd0 [ 258.163337][ T9563] ? futex_wait+0x288/0x540 [ 258.167826][ T9563] ? __cfi_futex_wait+0x10/0x10 [ 258.172672][ T9563] ? selinux_file_ioctl+0x6e0/0x1360 [ 258.177962][ T9563] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 258.183516][ T9563] ? do_futex+0x309/0x500 [ 258.187831][ T9563] ? __fput+0x6ea/0xa00 [ 258.191967][ T9563] ? __cfi_do_futex+0x10/0x10 [ 258.196637][ T9563] ? __fget_files+0x2c5/0x340 [ 258.201324][ T9563] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 258.209815][ T9563] ? __se_sys_ioctl+0x114/0x1b0 [ 258.214677][ T9563] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 258.223795][ T9563] __se_sys_ioctl+0x132/0x1b0 [ 258.228472][ T9563] __x64_sys_ioctl+0x7f/0xa0 [ 258.233048][ T9563] x64_sys_call+0x1878/0x2ee0 [ 258.237716][ T9563] do_syscall_64+0x58/0xf0 [ 258.242109][ T9563] ? clear_bhb_loop+0x50/0xa0 [ 258.246784][ T9563] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 258.252676][ T9563] RIP: 0033:0x7ff7d4d8e929 [ 258.257079][ T9563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.276675][ T9563] RSP: 002b:00007ff7d5bde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.285096][ T9563] RAX: ffffffffffffffda RBX: 00007ff7d4fb5fa0 RCX: 00007ff7d4d8e929 [ 258.293054][ T9563] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 258.301016][ T9563] RBP: 00007ff7d4e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 258.308980][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.316947][ T9563] R13: 0000000000000000 R14: 00007ff7d4fb5fa0 R15: 00007ffda2707ba8 [ 258.324900][ T9563] [ 258.327918][ T9563] Modules linked in: [ 258.332134][ T9563] ---[ end trace 0000000000000000 ]--- [ 258.337733][ T9563] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 258.344846][ T9563] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 46 66 cb 0e 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 0c a2 82 82 90 90 90 90 90 90 90 90 90 [ 258.364825][ T9563] RSP: 0018:ffffc90001205a90 EFLAGS: 00010246 [ 258.370911][ T9563] RAX: 0000000000000061 RBX: 1ffff92000240b54 RCX: ba2d9cb13d72dc00 [ 258.378926][ T9563] RDX: ffffc9000efb9000 RSI: 0000000000005ed2 RDI: 0000000000005ed3 [ 258.386952][ T9563] RBP: ffffc90001205a90 R08: ffffc90001205787 R09: 1ffff92000240af0 [ 258.398379][ T9563] R10: dffffc0000000000 R11: fffff52000240af1 R12: 0000000000000000 [ 258.407291][ T9563] R13: dffffc0000000000 R14: ffffc90001205ac0 R15: ffffc90001205af0 [ 258.415400][ T9563] FS: 00007ff7d5bde6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 258.452063][ T9563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.458661][ T9563] CR2: 00007f04bc48ef98 CR3: 0000000129a82000 CR4: 00000000003526b0 [ 258.469775][ T9563] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.477842][ T9563] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 258.485878][ T9563] Kernel panic - not syncing: Fatal exception [ 258.492151][ T9563] Kernel Offset: disabled [ 258.496457][ T9563] Rebooting in 86400 seconds..