last executing test programs: 34m3.197725064s ago: executing program 32 (id=423): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x40202, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='target PCI:0:17:!a.'], 0x15) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) mprotect(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r1 = open(&(0x7f00000003c0)='./file2\x00', 0xb8f01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000003480)={'veth1_macvtap\x00', &(0x7f0000000340)=@ethtool_perm_addr={0x20, 0x62}}) ioctl$BTRFS_IOC_DEFRAG(r1, 0x401070cd, 0x3) ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4001af72, &(0x7f0000000100)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x94022, &(0x7f0000000140)={[{@huge_never}]}) r5 = fcntl$dupfd(r4, 0x406, r4) accept4$vsock_stream(r5, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x20, &(0x7f0000002100)="8f556edd5ffa77bc2fcf6e0b328dc3a926b3d275d2995671", 0x0, 0x18) read$FUSE(r8, &(0x7f00000000c0)={0x2020}, 0x2020) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) 32m12.536383706s ago: executing program 33 (id=2326): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {{@in6=@private1, @in=@rand_addr=0x64010100, 0x4e21, 0xd, 0x4e24, 0x8, 0xa, 0x20, 0x0, 0x73}, 0x6e6bbf, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="fe01377c7e0b379de55e68a33938dd7d33b0a144616932bf4cd5868a7426736bed748ea0b3b5c4b1dce038bd3321a0ab6ca869f40663b2694dd877b52f788e8d78a17099a6ab779d374b1ff66335e9cf574c4ae9bf1869cb3972ff456d0287b1d48030b346b954824fc18e1356c80c3ecaee1244f05373653dd8e18596c190836129575331968ba9c06aa655923e0b5cd8ffb9dc0c2c99b66c686283cbf559", 0x9f, 0x83) r5 = timerfd_create(0x8, 0x80800) setreuid(0xee00, 0xee00) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0220be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) timerfd_settime(r5, 0x0, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000081c09668800000000000109022400010000000f0904000004030000000921faff0890a98b1e09058103ff03c9ff"], 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x40) r9 = openat$incfs(r8, &(0x7f00000002c0)='.pending_reads\x00', 0x0, 0x12) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0x80106725, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) 31m26.169604985s ago: executing program 34 (id=3620): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) (async) r3 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x5b15, 0x100) ppoll(&(0x7f00000001c0)=[{r4, 0x8184}], 0x1, &(0x7f0000000200), 0x0, 0x0) (async) ptrace(0x10, r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSETD(r5, 0x5414, &(0x7f0000000080)=0x15) (async) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="7472796c6f636b20e358d44f305f98"], 0xf) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f0000000040)=0xfffffffe, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x48, &(0x7f0000000080)=0x6, 0x4) (async) waitid(0x1, r3, 0x0, 0x4, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r10 = dup3(r9, r0, 0x0) (async) io_setup(0x1ff, &(0x7f0000000080)=0x0) io_destroy(r11) (async) io_setup(0x2, &(0x7f0000001700)) (async) r12 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000406c256e0000000000000109022400010000000009040008050300020009210000330122050009058103"], 0x0) syz_usb_control_io(r12, 0x0, 0x0) (async) syz_usb_control_io(r12, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x5, {0x5, 0x22, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) io_cancel(r11, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, &(0x7f0000001d40), 0x0, 0x3, 0x0, 0x1}, 0x0) (async) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 29m42.63862623s ago: executing program 35 (id=5585): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x29, 0x1f, 0x0, 0x47) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x800, 0x20) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x3) (async, rerun: 64) mount(&(0x7f00000001c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='bdev\x00', 0x200000, 0x0) (async, rerun: 64) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000001800)=0x9f18, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, 0x0) (async, rerun: 64) write$tcp_congestion(r4, 0x0, 0x0) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, 0x0, 0x0) (async, rerun: 32) connect$inet6(r7, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, 0x0, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x18) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000000000)={{r5}, 0x6, 0x0, 0x8001}) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000480)) link(&(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380)='./cgroup\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000040000e9ff000000000000000400000000000000000000000500000000"], 0x30) readv(r7, &(0x7f0000000200)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1) pread64(r2, &(0x7f0000000100)=""/93, 0x5d, 0x3) 27m51.954167012s ago: executing program 36 (id=7194): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xd0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x21, 0x0) (async) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100000000000000020001000000000000000141"], 0x34}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fbdbdf250100000004000180100002800c0001800800010003000080"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) 27m20.17413041s ago: executing program 37 (id=7677): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, 0x1, 0x2, 0x11e79709bd51445, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="f8000000160001002bbd7000ffdbde25200100000000000000000000000000000a0101010000000000000000000000004e2000074e2400000200000087000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d26c00000000000000000000000000ffffac1414150000000000000000e805000000000000faffffffffffffff06000000000000000800000000000000000100000000000001000000000000000008000000000000d931a06800000000810000000000000001800000000000007cf000000000000002000000ba0b00000100000029bd700000000000020003f20100000000000000f1cab43bfdd6d29b"], 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r3 = syz_io_uring_setup(0x3b43, &(0x7f00000001c0)={0x0, 0xc5f8, 0x0, 0x3, 0x3a4}, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r4 = socket(0x11, 0x5, 0x9) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = signalfd4(r3, &(0x7f0000000040)={[0xfffffffffffffff8]}, 0x8, 0xc0000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r11}, 0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r7, 0x802, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000040) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r12 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r12, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '', 0x3a, '\\x\xfeK9\x18\x9a', 0x3a, './file0'}, 0x2e) ioctl$TUNSETPERSIST(r5, 0x400454cc, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24m32.165337648s ago: executing program 38 (id=9819): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x410102, 0x0) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/111, 0x6f}, {&(0x7f00000000c0)=""/162, 0xa2}, {&(0x7f0000000180)=""/99, 0x63}, {&(0x7f0000000200)=""/228, 0xe4}, {&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000400)=""/88, 0x58}, {&(0x7f0000000480)=""/7, 0x7}, {&(0x7f00000004c0)=""/172, 0xac}], 0x8, 0x7, 0x0, 0x10) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000600)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000680)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r2, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x49}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000840)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x2, 0xa, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x1, 0x3, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000980)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a80)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x5, 0x5, {{0x26, 0x4, 0x3, 0xd, 0x98, 0x65, 0x0, 0x5, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x2c, 0x31, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x9}, {@remote, 0x2}, {@multicast2, 0x571}, {@remote, 0x100}]}, @generic={0x94, 0xf, "9bb71696037ddfe1823b4ccb62"}, @noop, @timestamp_prespec={0x44, 0x44, 0x91, 0x3, 0x5, [{@rand_addr=0x64010100, 0x2}, {@multicast2, 0xc2600}, {@loopback, 0xff}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x3}, {@rand_addr=0x64010101, 0x8001}, {@local, 0xace0}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @end, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000c40)={'gre0\x00', 0x0, 0x1, 0x1, 0x7, 0xfffffff8, {{0x38, 0x4, 0x2, 0x2e, 0xe0, 0x66, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x41, [@local, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @lsrr={0x83, 0x23, 0x5f, [@local, @loopback, @local, @multicast1, @empty, @remote, @remote, @empty]}, @ssrr={0x89, 0x17, 0xd1, [@rand_addr=0x64010101, @multicast2, @remote, @multicast2, @local]}, @rr={0x7, 0x1b, 0x1a, [@empty, @empty, @broadcast, @local, @rand_addr=0x64010100, @loopback]}, @cipso={0x86, 0x17, 0x3, [{0x7, 0x11, "bfafc239b2306d55fa16788ae9b6d5"}]}, @timestamp_prespec={0x44, 0x44, 0x2d, 0x3, 0x9, [{@local, 0x6613}, {@multicast2, 0x7f}, {@rand_addr=0x64010100, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@empty, 0x9}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@private=0xa010102, 0x459b0596}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000e00)={'sit0\x00', &(0x7f0000000d80)={'tunl0\x00', 0x0, 0x40, 0x80, 0x100, 0x9, {{0x14, 0x4, 0x1, 0x20, 0x50, 0x64, 0x0, 0x80, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@generic={0x7, 0x3, "db"}, @cipso={0x86, 0x2c, 0x2, [{0x6, 0x7, "0aac42f0bb"}, {0x5, 0x12, "7dccab29d0ac3acc9b4888163ea4a1d4"}, {0x1, 0xd, "7cc328f5e89f5ddaf0d326"}]}, @cipso={0x86, 0xb, 0x0, [{0x0, 0x5, "cc3773"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000ec0)={'tunl0\x00', &(0x7f0000000e40)={'ip_vti0\x00', 0x0, 0x20, 0x8000, 0x7, 0x2, {{0xa, 0x4, 0x3, 0x3, 0x28, 0x68, 0x0, 0xae, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@ssrr={0x89, 0xf, 0xd9, [@broadcast, @local, @multicast2]}, @generic={0x0, 0x2}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000f40)={'gre0\x00', &(0x7f0000000f00)={'gretap0\x00', 0x0, 0x1, 0x8000, 0x1, 0x3, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x68, 0x0, 0x5, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@end]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f80)={'ip6_vti0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000fc0)={'batadv0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl2\x00', 0x0, 0x4, 0x5, 0xb, 0x1, 0x9, @private0, @empty, 0x700, 0xd9dea53795ccf1cd, 0x5, 0x7fffffff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001840)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001140)={0x68c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8, 0x1, r8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x79ed83c8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x3, 0x8, 0x5, 0x7}, {0x985, 0x68, 0x40, 0x99c5}, {0xfc01, 0xce, 0xfb, 0xac9}, {0x2, 0x3, 0x5, 0x6}, {0x401, 0x1, 0x4, 0x5}, {0xa09f, 0x6, 0x0, 0xa13c}, {0x3db, 0x7, 0x5, 0x8}, {0x9, 0x7, 0x7, 0xfeed}, {0x0, 0x8, 0x9, 0x3}, {0x26, 0xb, 0x8, 0x7}]}}}]}}, {{0x8, 0x1, r11}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xfa72, 0x5, 0xff, 0x7}, {0x0, 0xf, 0x4, 0x8}, {0x2, 0x1, 0x0, 0x3}, {0x7f, 0xe, 0x8, 0x8}, {0x81, 0x3, 0x9, 0x2}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb75b}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x7, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}]}}]}, 0x68c}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001880)=0x0) ptrace(0x4207, r20) r21 = openat$vsock(0xffffffffffffff9c, &(0x7f00000018c0), 0x400, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f00000019c0)={{{@in6=@loopback, @in=@empty, 0xd, 0x9, 0x4e24, 0x9, 0x2, 0xa0, 0x20, 0x62, r16}, {0x80000000, 0x5938bf85, 0x2, 0x3, 0x4, 0xfffffffffffffc00, 0x8000000000000001, 0x9d0}, {0x8, 0x8, 0x3, 0x5}, 0x5, 0x6e6bb1, 0x1, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d6, 0x6c}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x1, 0x2, 0xfffffffe, 0x7ff}}, 0xe8) 23m19.104644053s ago: executing program 39 (id=11049): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f00000001c0)=0x3, 0x4) (async, rerun: 32) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x400400, 0x0) (rerun: 32) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f00000005c0)=0x8000000000000001, 0x8) (async) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async, rerun: 64) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000080)={@rand_addr, @loopback, 0x0}, &(0x7f0000000100)=0xc) (async, rerun: 64) openat$rnullb(0xffffffffffffff9c, 0x0, 0x167342, 0x0) (async, rerun: 32) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000e86000)="002204", 0x3) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./file0\x00') (async, rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) fstat(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r8, r8) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) lseek(r1, 0x8, 0x3) (async, rerun: 64) recvfrom$packet(r0, &(0x7f0000000280)=""/35, 0x23, 0x40000041, &(0x7f0000000140)={0x11, 0xfd, r5, 0x1, 0x1c, 0x6, @local}, 0x14) (rerun: 64) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b"], 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffff5, 0x0, 0x0}) 20m58.938295868s ago: executing program 40 (id=13505): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080)=0x80008, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @private}, &(0x7f0000000040)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast1}, r2}, 0x14) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 19m29.047262432s ago: executing program 1 (id=15185): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x61a301, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x61a301, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x2, 0x8001, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x6, 0x4, 0x3, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x6}, {0x97, 0x5, 0x9, '\x00', 0xfe}, {0x9, 0x0, 0x6, '\x00', 0x10}, {0x7, 0x4, 0x8, '\x00', 0xb3}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x83, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x1b, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xe}, {0xa5, 0x7, 0x0, '\x00', 0x7}, {0x3, 0xc, 0x6, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe2, '\x00', 0x6}, {0xf8, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) ioctl$LOOP_SET_FD(r5, 0x4c00, r0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r8 = syz_clone(0xe0080680, 0x0, 0xffffffffffffff56, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000300)={0x9, {{0xa, 0x4e21, 0x1, @local, 0x8}}, {{0xa, 0x4e24, 0x16c3, @loopback, 0x100}}}, 0x108) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000300)={0x9, {{0xa, 0x4e21, 0x1, @local, 0x8}}, {{0xa, 0x4e24, 0x16c3, @loopback, 0x100}}}, 0x108) utimes(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={{}, {0x0, 0x2710}}) socket(0xa, 0x3, 0xff) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="020809060200000027bd7000fbdbdf25376dba601f93b39bb660b1b8b78a72bf03a6c26fe6f400000000000000f72638bdfa6bc7a6d2c99543fdccfb6b0e3438e30ff883ea50f2bba377a14e0dbc4401b3f4ad"], 0x10}}, 0x14e3912948f0859f) r9 = socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) (async) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'vlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r10, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r10, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f00000005c0)={0x4e, 0x8, '\x00', 0x0, &(0x7f0000000580)=[0x0]}) r12 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x20200, 0x0) copy_file_range(r6, &(0x7f0000000440)=0x8, r12, &(0x7f00000004c0)=0xf4, 0x8, 0x0) (async) copy_file_range(r6, &(0x7f0000000440)=0x8, r12, &(0x7f00000004c0)=0xf4, 0x8, 0x0) 19m28.945182817s ago: executing program 1 (id=15187): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, 0x0) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="450f78e8f2440f218166baf80cb855802789ef66bafc0cb000ee2e400f1c000f07400f73f500c74424000c000000c74424024146db66c7442406000000000f011424c4c111f6c8dd75a40f79f8", 0x4d}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) shutdown(r1, 0x1) recvfrom(r1, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x1c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@nested={0x8, 0x10f, 0x0, 0x1, [@typed={0x4, 0xd8, 0x0, 0x0, @binary}]}]}, 0x1c}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @remote}}}, 0x88) r7 = socket$inet6(0xa, 0x80000, 0x3) recvmmsg(r7, &(0x7f0000002440)=[{{&(0x7f0000000240)=@sco={0x1f, @none}, 0x80, &(0x7f0000000640)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f00000003c0)=""/37, 0x25}, {&(0x7f0000000400)=""/51, 0x33}, {&(0x7f0000000440)=""/210, 0xd2}, {&(0x7f0000000540)=""/239, 0xef}], 0x6, &(0x7f00000006c0)=""/56, 0x38}, 0xb55}, {{&(0x7f0000000700)=@alg, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/118, 0x76}, {&(0x7f0000000800)=""/51, 0x33}, {&(0x7f0000000840)=""/92, 0x5c}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, &(0x7f0000000a00)=""/68, 0x44}, 0x2}, {{&(0x7f0000000a80)=@hci, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/163, 0xa3}, {&(0x7f0000000bc0)=""/7, 0x7}, {&(0x7f0000000c00)=""/113, 0x71}], 0x3, &(0x7f0000000cc0)=""/54, 0x36}, 0x38}, {{&(0x7f0000000d00)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000d80)=""/197, 0xc5}, {&(0x7f0000000e80)=""/64, 0x40}, {&(0x7f0000000ec0)=""/234, 0xea}, {&(0x7f0000000fc0)=""/166, 0xa6}, {&(0x7f0000001080)=""/116, 0x74}], 0x5}, 0xffffffff}, {{&(0x7f0000002200)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001100)=[{&(0x7f0000002280)=""/159, 0x9f}], 0x1, &(0x7f0000002340)=""/218, 0xda}, 0x7}], 0x5, 0x20, &(0x7f0000002580)={0x0, 0x3938700}) sendfile(r0, r0, 0x0, 0x7ffff000) 19m27.598132214s ago: executing program 1 (id=15198): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) (async, rerun: 64) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (rerun: 64) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) (async, rerun: 32) sendmmsg$inet6(r1, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001740)="1fe314f7bc0a6a6fcd057e92f98f51ef291b015636f66fe2a42db9c06a390d07e152c86193da40038f52dccbeccd2d1f745ab9c2d74acafdf9fd362f2fadddcdcee8c539af02a4bd5f1414b3e67f8b2aad97f7eae10070626554130e52df04b1131f44c0da4aefa9f27b10668337f772885179ee15dda016e719bed86af3d41bdcb0d421f248b918f04c819f18e8320c029f", 0x92}], 0x1, &(0x7f0000001680)=[@dstopts_2292={{0x18, 0x29, 0x4, {0xc}}}], 0x18}}], 0x1, 0x4001c00) (rerun: 32) fcntl$setpipe(r0, 0x407, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 19m27.48261335s ago: executing program 1 (id=15201): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xfe) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x0) shutdown(r3, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}}]}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x800) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x60, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={@private1, @rand_addr=' \x01\x00', @mcast1, 0x1000, 0x6, 0x0, 0x0, 0x3, 0x867000c0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@private0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0xfffd, 0x400, 0x5, 0x580107, r7}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf2, 0x9, 0x39, 0x747d5a13, 0xdc3, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4004, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0x800de, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x6, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x101, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x11, 0xfffffff9, 0x0, 0x5, 0x9, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0xc, 0x8, 0x2, 0x401, 0x0, 0xffffffff, 0x379, 0x8000008, 0xe, 0x5, 0x5, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0xc584, 0xffff, 0xcd1, 0x7, 0x3, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xffffffff, 0x3, 0x2, 0x10, 0x1, 0xfffffff9, 0x0, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000006, 0x4, 0x7, 0x0, 0x7, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2007, 0x7, 0x4, 0xea, 0x9, 0x5, 0x8, 0xd9, 0x0, 0x7d, 0x403, 0x5], [0x1e6a, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x2000000, 0x50, 0x2, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x6fd, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x9, 0x5, 0x4, 0x3, 0x4, 0x1ff, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa80e, 0x1, 0x104, 0x8, 0x8a8, 0x11000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x6, 0x7fff, 0x2, 0xffffffff, 0xfffffbff, 0x1, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0x12, 0xf, 0xfffffff9, 0x6]}, 0x45c) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x8000, 0x40024e}, 0x0, 0x0) sendto$inet(r9, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f6", 0x13, 0x0, 0x0, 0x0) recvmsg(r9, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) ioctl$UI_DEV_CREATE(r8, 0x5501) 19m26.559448492s ago: executing program 1 (id=15220): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) (async) mmap$binder(&(0x7f0000aaa000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x8) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) (async) brk(0x400000001000) (async) brk(0x400000ffc000) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) (async) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) open_tree(r5, &(0x7f00000001c0)='./file0/file0\x00', 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r2, r0, 0x0) (async) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000140)=0x0) wait4(r6, &(0x7f0000000240), 0x1, &(0x7f00000002c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r7) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) io_setup(0x401, &(0x7f00000000c0)=0x0) io_submit(r9, 0x3, &(0x7f0000000580)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xc0, r8, 0x0}, 0x0, 0x0]) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x800) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) 19m26.473899397s ago: executing program 1 (id=15221): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder0\x00', 0x802, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3) creat(&(0x7f00000002c0)='./file0\x00', 0x20) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x3, 0xd334, 0x1, 0x0, 0x5, 0xfff, 0x7}, 0x1c) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x18002, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xec}, 0x1c) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) socket(0x1d, 0x3, 0xdce) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7f}, {0x7, 0xe9, 0x2, 0xd}, {0x1c0, 0x0, 0xc}]}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) (async, rerun: 64) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000280)) (async, rerun: 64) sendmsg$can_bcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x1, 0x40, 0x0, {}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "0a20fde243ba535f"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) (async) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xce4ed094098dc6ce}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 19m26.42074238s ago: executing program 41 (id=15221): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder0\x00', 0x802, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3) creat(&(0x7f00000002c0)='./file0\x00', 0x20) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x3, 0xd334, 0x1, 0x0, 0x5, 0xfff, 0x7}, 0x1c) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x18002, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xec}, 0x1c) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) socket(0x1d, 0x3, 0xdce) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7f}, {0x7, 0xe9, 0x2, 0xd}, {0x1c0, 0x0, 0xc}]}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) (async, rerun: 64) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000280)) (async, rerun: 64) sendmsg$can_bcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x1, 0x40, 0x0, {}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "0a20fde243ba535f"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) (async) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xce4ed094098dc6ce}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 17m23.498825162s ago: executing program 3 (id=16449): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x200, &(0x7f0000000340)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000440)={0x18, 0x7000000, 0x1f, 0x1, 0x0, r1, 0x0}]) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none, 0x4}, 0xe) io_destroy(r2) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0001183c0001800c00028005000100000000002c0001801400030afe8800000000000000000000000001011400040000000000000000000000ffff0a0101023c0003800c000280050001000000007f0000000000000000fc000000000000be000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c0001801400030000000000000000000000000000000001140004"], 0xc8}}, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ppoll(&(0x7f0000000240)=[{r1, 0x280}, {r3, 0x1}, {r1, 0x230}, {r1, 0x4}, {r0, 0xc144}, {r3, 0xa400}, {r4, 0x4030}, {r5, 0x210}, {r4, 0x6000}, {r3, 0x8}], 0xa, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)={[0x1]}, 0x8) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendfile(r7, r8, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x1) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x10001) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x4000010, r6, 0x2000) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26005, 0x20010, r6, 0xd3c59000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=@newtaction={0x44, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x3}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 17m23.269184795s ago: executing program 3 (id=16453): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xd]}, 0x8) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000100)={{{0x7}}, 0xa7, 0x5e, &(0x7f0000000040)="764a5ab472236bb820a1941a4518611add713c6934b01fa4d12b093eef51b2a1900e3250545d74e6e503b48bc123499ffaad9755090d9e26cc0739930649ce8ed278c4a85bee2bd572fd4359e9e2ffc811141e1c7fea3a20addfc8f1125a380821c1d666d74f2cdb4187bddc06536cb00e42641c49b1d2554a387dfebb29bf7950dd5b012a5557179eb19a10cf235d14b6700ec6a9afba2133f6f4822351a62ab5b1d31803e3cc"}) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) fcntl$setstatus(r0, 0x4, 0x0) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000140)) (async) ioctl$RTC_AIE_OFF(r0, 0x7002) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) (async) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x119) (async) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000001c0)=0x3, 0x4) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001200)={0x80, 0x17, 0xeb, 0x5, 0x1000, 0x1, &(0x7f0000000200)="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"}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl(r1, 0xa, &(0x7f0000001240)) (async) close(r0) (async) close(r0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001280)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) statx(r0, &(0x7f0000001680)='./file0\x00', 0x100, 0x8, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000017c0)={{{@in=@empty, @in6=@mcast1, 0x4e21, 0x0, 0x4e20, 0x7, 0x2, 0xa0, 0x20, 0x0, 0x0, r3}, {0x6, 0x3, 0x8, 0x9, 0xffff, 0xc, 0xffffffffffffffff}, {0x3ab2, 0xd2a, 0x6, 0x4}, 0x0, 0x6e6bb0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x2b}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3500, 0x1, 0x1, 0x5, 0x4, 0x9, 0xe8}}, 0xe8) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f00000018c0)={0x3, 0x5, 0x4000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0x4, r0}) (async) munlockall() (async) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001980)) (async) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) inotify_init() (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f00000019c0)=0x9ae3) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001a00)={'bond_slave_1\x00'}) mkdirat(r0, &(0x7f0000001a40)='./file0\x00', 0x20) 17m22.877663817s ago: executing program 3 (id=16456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000001000040"]) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) (async) bind$packet(r4, &(0x7f0000000040)={0x11, 0x1c, 0x0, 0x1, 0x9}, 0x14) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, 0x0) (rerun: 64) fstat(0xffffffffffffffff, 0x0) (async, rerun: 32) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [{0x2, 0x6, r3}, {0x2, 0x5, r5}]}, 0x34, 0x2) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 17m22.241970763s ago: executing program 3 (id=16462): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfe}]}, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="a3000000d4fd21"], 0xa8}, 0x1, 0x0, 0x0, 0x801}, 0x2004c0c4) r3 = pidfd_getfd(r1, r2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000a00)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)={@fda={0x66646185, 0x8, 0x2, 0x1}, @fd, @flat=@handle={0x73682a85, 0x0, 0x2}}, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000120001"], 0x20}}, 0x0) setns(r3, 0x66020000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be0402050605fe100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 17m21.991765657s ago: executing program 3 (id=16465): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x60, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x44, 0x12, 0x0, 0x1, [@nested={0x40, 0xf8, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @uid=r3}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0xce}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x786d) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000240)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1802, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc8001, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) (async) socket(0x10, 0x3, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in6, @in6}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) (async) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x60, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x44, 0x12, 0x0, 0x1, [@nested={0x40, 0xf8, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @uid=r3}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0xce}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) (async) ioctl$TIOCGPTPEER(r4, 0x5441, 0x786d) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000240)=0x1) (async) 17m21.725881782s ago: executing program 3 (id=16469): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) sync_file_range(r0, 0x5, 0x7, 0x3) r1 = getpgrp(0x0) syz_pidfd_open(r1, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x0, 0x6, 0x80, r1}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f00000024c0)=""/209, 0xd1, 0x8) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fchmod(r0, 0x100) ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000000)) 17m21.58713554s ago: executing program 42 (id=16469): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) sync_file_range(r0, 0x5, 0x7, 0x3) r1 = getpgrp(0x0) syz_pidfd_open(r1, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x0, 0x6, 0x80, r1}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f00000024c0)=""/209, 0xd1, 0x8) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fchmod(r0, 0x100) ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000000)) 10m34.204393727s ago: executing program 0 (id=23380): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)={0x2e2, 0xffffffff}) socket$inet(0x2, 0x800, 0xffffffff) (async) r1 = socket$inet(0x2, 0x800, 0xffffffff) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x3) (async) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x3) eventfd2(0x8, 0x800) (async) r2 = eventfd2(0x8, 0x800) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x6, 0xffff1000, 0x2, r2, 0xa}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futex(&(0x7f0000000080)=0x1, 0x6, 0x1, &(0x7f0000000100)={r3, r4+60000000}, &(0x7f0000000140), 0x1) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x7}) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000200)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000240)=0x2c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000280)=[@wr_crn={0x46, 0x20, {0xb, 0x5}}, @code={0xa, 0x55, {"2e640f0d2b3e0f01f8450f01346d0a000000f30f09360f01c866baf80cb890b00d8bef66bafc0ced0f79cec4035d4ba1f9ffffff9426660f3880b1000000802e460f2203"}}, @wr_crn={0x46, 0x20, {0x0, 0x7f}}, @uexit={0x0, 0x18, 0x80000000}], 0xad}) (async) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000280)=[@wr_crn={0x46, 0x20, {0xb, 0x5}}, @code={0xa, 0x55, {"2e640f0d2b3e0f01f8450f01346d0a000000f30f09360f01c866baf80cb890b00d8bef66bafc0ced0f79cec4035d4ba1f9ffffff9426660f3880b1000000802e460f2203"}}, @wr_crn={0x46, 0x20, {0x0, 0x7f}}, @uexit={0x0, 0x18, 0x80000000}], 0xad}) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f0000000380)) (async) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f0000000380)) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) getsockname(r1, &(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x80) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf0) ioctl$KVM_GET_CPUID2(r6, 0xc008ae91, &(0x7f00000004c0)={0x9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000002740)='./file0\x00', &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x2080, &(0x7f0000002800)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@aname}, {@access_any}, {@version_u}, {@access_uid={'access', 0x3d, r8}}, {@afid={'afid', 0x3d, 0x5}}, {@access_uid={'access', 0x3d, r9}}], [{@smackfsdef={'smackfsdef', 0x3d, 'syz0\x00'}}]}}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) stat(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000002980)=[{}], &(0x7f00000029c0)=0x8) (async) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000002980)=[{}], &(0x7f00000029c0)=0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000002a00), 0x2, 0x0) epoll_pwait2(r7, &(0x7f0000002a40), 0x0, &(0x7f0000002a80)={0x77359400}, &(0x7f0000002ac0)={[0x2]}, 0x8) ioctl$HIDIOCGREPORT(r7, 0x400c4807, &(0x7f0000002b00)={0x5, 0x0, 0x900000}) brk(0x0) inotify_add_watch(r6, &(0x7f0000002b40)='./file0\x00', 0x40000000) (async) inotify_add_watch(r6, &(0x7f0000002b40)='./file0\x00', 0x40000000) 10m34.083428374s ago: executing program 0 (id=23384): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x1e, 0x9, 0x2, 0x25dfdbfc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 10m33.995542909s ago: executing program 0 (id=23385): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x18000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000240)={'erspan0\x00', @random="254e09bac9ad"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, &(0x7f0000000080)) r4 = dup3(r1, r0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x54, 0x1, 0x400, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) r7 = socket$inet_icmp(0x2, 0x2, 0x1) close(r7) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) r8 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r9 = getpgrp(0xffffffffffffffff) setpgid(r8, r9) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) socket$inet6(0xa, 0xa, 0x9) ioctl$BINDER_FREEZE(r10, 0xc0046209, &(0x7f0000000080)={0x0, 0x0, 0x20}) 10m33.963117772s ago: executing program 0 (id=23386): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) pipe2$9p(&(0x7f00000006c0), 0x0) (async) pipe2$9p(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xe, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xe, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000180)=0xa4) (async) getsockopt$inet6_buf(r3, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000180)=0xa4) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$snapshot(r5, 0x0, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r8 = eventfd2(0x6, 0x800) r9 = getpid() syz_pidfd_open(r9, 0x0) syz_pidfd_open(r9, 0x0) io_getevents(r7, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x3) (async) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xf) (async) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xf) io_submit(r7, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) io_submit(r7, 0x1, &(0x7f0000000680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x4, r1, 0x0, 0x0, 0x3, 0x0, 0x1, r8}]) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) 10m33.777358251s ago: executing program 0 (id=23389): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file3\x00', &(0x7f0000000300)='./file1\x00') r2 = userfaultfd(0x80001) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180)=0x1, 0x100, 0x1, &(0x7f0000000200)={r3, r4+60000000}, &(0x7f0000000380)=0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000340)="0f01c3f30f5d0a660fda2e005865c0aa8f15660fa1b883000f00d8b81e018ed0660f21760f23ef643e3e0f155606", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000000)={0x110003, 0x0, {[0x8, 0x3, 0xfffffffffffffc8d, 0x839, 0x2000000000000, 0x9, 0xb, 0xfffffffffffffffa]}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') r10 = openat$binfmt(0xffffffffffffff9c, r9, 0x41, 0x1ff) fcntl$setlease(r10, 0x400, 0x1) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) 10m32.875480263s ago: executing program 0 (id=23398): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x800000, &(0x7f0000000980)=ANY=[@ANYBLOB='huge=advise']) (async) chdir(&(0x7f0000000080)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0'}, 0xb) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/23, 0x17, 0x2, 0x2f}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) (async) io_setup(0x3a, &(0x7f0000000040)=0x0) io_submit(r3, 0x0, &(0x7f0000000080)) 10m17.682877152s ago: executing program 43 (id=23398): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x800000, &(0x7f0000000980)=ANY=[@ANYBLOB='huge=advise']) (async) chdir(&(0x7f0000000080)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0'}, 0xb) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/23, 0x17, 0x2, 0x2f}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) (async) io_setup(0x3a, &(0x7f0000000040)=0x0) io_submit(r3, 0x0, &(0x7f0000000080)) 6m57.978084648s ago: executing program 9 (id=26751): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000001d00)={'sit0\x00', 0x0}) (async) syz_io_uring_setup(0x0, &(0x7f0000003400)={0x0, 0x6460, 0x200, 0x0, 0x1d3}, &(0x7f0000003480), &(0x7f00000034c0)) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xffffd000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x28011, r2, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0xffffffff, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6m57.930510902s ago: executing program 9 (id=26752): r0 = socket(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x20, 0x0, 0x0, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r2, 0x4, 0xc, 0x81, 0x9, 0x30, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x8, 0xb, 0x6}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x1) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000180)={{0x0, 0x1}, 0x100, './file0\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) 6m57.331497078s ago: executing program 9 (id=26760): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x3e, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$BLKFRAGET(r0, 0x1265, &(0x7f0000000080)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) pwritev2(r3, &(0x7f00000035c0)=[{&(0x7f0000000180)="323c1fac9fcf57cbe40f228cb6cef25f5f2b4fa51439551758b4ad0c43b0cb0955af67be7c92d732d4f20d9511241b9f8c1c99", 0x33}, {0x0}], 0x2, 0x47, 0xf7ab, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 6m56.506247061s ago: executing program 9 (id=26767): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) socketpair$unix(0x1, 0x1, 0x0, 0x0) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, &(0x7f0000000b80)) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d007241301"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "352bc764aef32890"}, 0x10}, 0x2, 0x0, 0x0, 0x4080}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) signalfd4(r4, &(0x7f0000000000)={[0xde04]}, 0x8, 0x80000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 6m55.894710148s ago: executing program 9 (id=26770): r0 = socket(0x1, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x112, 0x1, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000000)="8adc6364", 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pidfd_send_signal(r2, 0x33, &(0x7f0000000000)={0x11, 0x4, 0x2}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0x70002002}) epoll_pwait(r3, &(0x7f0000000040), 0x6, 0x6, 0x0, 0x1e) r4 = socket(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000080)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) copy_file_range(r4, 0x0, r4, 0x0, 0x1bf, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000001300)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000baf000/0x1000)=nil, &(0x7f0000393000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000bd1000/0x1000)=nil, &(0x7f0000944000/0x4000)=nil, &(0x7f0000bfb000/0x2000)=nil, &(0x7f0000104000/0x4000)=nil, &(0x7f0000973000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000034d000/0xa000)=nil, &(0x7f00002c3000/0x3000)=nil, &(0x7f0000000380)="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", 0xff, r0}, 0x68) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r8, 0x0, 0x0, 0x10000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x80c000, &(0x7f0000000540)=ANY=[@ANYBLOB="6769643db734f62edba177de4d4152aef1169d8f097a6e2069c5be28164cc958d65a4b77cf9f64716033281680cb6fddfec77b1b8c4951db931ab143e2ba349737c0a52cac19a0d81112655675a97b911fb31438c50d45961fd6283c54aef288e5c21c223aeb63bbdd5fb48975cf7583f33dce7f429afe2700869d9c0398b2060ef3763743ad04900a057a89d034808d41db69f561067178147c71cb36b5b8e79baf4240f7c617a3288628052058f78aee0cefcbfd19d39fc156eb685e4b1ede010c8c94c3", @ANYRESHEX=r7, @ANYRESOCT=r4]) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') recvfrom$inet6(r9, &(0x7f0000000180)=""/186, 0xba, 0x40000021, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @mcast1, 0x8}, 0x1c) 6m55.535440995s ago: executing program 9 (id=26774): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000108f0e120000000000000109022400010000a000090400000103000100092105000801220500090581031000000007235d990e5dc7cbc10952f31464d3117b17f05590eafaf3681639d4ab2374edc9c028a931093df14a2299f3d59940723a40ddc123992e1355e1a2f60aa65482e24522525d40fdf3a48ec3e4df6a9afe64ec2fcf0dbcb283cfe08fc250037232a00170da725a76c606f82ec5c91fe82a8029325485976e7458f85dc3fc5de190fdf72a69370f1a245af9e90f9bae47c91984a241ed137371e75da022f3dd90779fa17c95d92cb1220d456598bacc5d91d636c2f68b0c9281ec99212e9152c266"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="000b0d0000000d01d00499"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x55, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x700, 0x8000, 0x9, 0x7, {{0x1c, 0x4, 0x1, 0x5, 0x70, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x1c, 0xf5, 0x0, 0x1, [0x8a62, 0x3, 0x4, 0x1000, 0x81, 0x8007]}, @timestamp={0x44, 0x14, 0x11, 0x0, 0xb, [0x9, 0x1, 0x80000000, 0x8]}, @lsrr={0x83, 0x23, 0x7e, [@broadcast, @multicast2, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @empty]}, @ra={0x94, 0x4, 0x9}]}}}}}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000340)=0x14, 0x4) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000100), 0x4) r8 = fcntl$dupfd(r7, 0x406, r7) write$cgroup_pid(r8, 0x0, 0x0) read$FUSE(r8, &(0x7f0000000700)={0x2020}, 0x2020) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 6m40.526641981s ago: executing program 44 (id=26774): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000108f0e120000000000000109022400010000a000090400000103000100092105000801220500090581031000000007235d990e5dc7cbc10952f31464d3117b17f05590eafaf3681639d4ab2374edc9c028a931093df14a2299f3d59940723a40ddc123992e1355e1a2f60aa65482e24522525d40fdf3a48ec3e4df6a9afe64ec2fcf0dbcb283cfe08fc250037232a00170da725a76c606f82ec5c91fe82a8029325485976e7458f85dc3fc5de190fdf72a69370f1a245af9e90f9bae47c91984a241ed137371e75da022f3dd90779fa17c95d92cb1220d456598bacc5d91d636c2f68b0c9281ec99212e9152c266"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="000b0d0000000d01d00499"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x55, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x700, 0x8000, 0x9, 0x7, {{0x1c, 0x4, 0x1, 0x5, 0x70, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x1c, 0xf5, 0x0, 0x1, [0x8a62, 0x3, 0x4, 0x1000, 0x81, 0x8007]}, @timestamp={0x44, 0x14, 0x11, 0x0, 0xb, [0x9, 0x1, 0x80000000, 0x8]}, @lsrr={0x83, 0x23, 0x7e, [@broadcast, @multicast2, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @empty]}, @ra={0x94, 0x4, 0x9}]}}}}}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000340)=0x14, 0x4) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000100), 0x4) r8 = fcntl$dupfd(r7, 0x406, r7) write$cgroup_pid(r8, 0x0, 0x0) read$FUSE(r8, &(0x7f0000000700)={0x2020}, 0x2020) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 5m56.800355511s ago: executing program 2 (id=27643): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000001900)="900000001c001f4d154a817393278bff0a80a578020000000304840014000100ac1414bb0542d6490051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed995a46215be0000766436c0c80cefd285000058ba86c9d2a724d6e7d8f2fb079fc14cfc33ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x90, 0x8090, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x5, 0x4}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x0, 0x3f}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000004c0)=[@increfs], 0x0, 0x0, 0x0}) 5m56.539545061s ago: executing program 2 (id=27647): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x39}, @flat=@weak_binder={0x77622a85, 0x100}, @fda={0x66646185, 0x6, 0x0, 0xd}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x50, 0x0, &(0x7f0000000040)="17c5c08c5a938602c469a7cf9fca74b0a2a908ccf563f2749a89264d02b188da8528934dddb96d2e8bdfaa322cb21eae26f5f1d4edebc14410b56b09bcf696327e6246477445e9e747505dc7a6addeff"}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da3f1872e006c7f8aab8148a0e021b5cf4690a761ba22fd7fca4f6c2d70eccab5995aa7eeb1ca60f45334c9"}) 5m56.506647593s ago: executing program 2 (id=27648): unshare(0x62040200) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pread64(r0, &(0x7f0000000140)=""/4072, 0xfe8, 0xd33) (async) pread64(r0, &(0x7f0000000140)=""/4072, 0xfe8, 0xd33) 5m56.362363314s ago: executing program 2 (id=27649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 5m56.247209643s ago: executing program 2 (id=27652): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) (async) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) (async) syz_usb_connect$cdc_ncm(0x4, 0x90, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0xfe, 0xe0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "e0d414ba"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8000, 0xff5e, 0x3}, {0x6, 0x24, 0x1a, 0xc4, 0x11}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @obex={0x5, 0x24, 0x15, 0x100}, @acm={0x4, 0x24, 0x2, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x0, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xff, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x4, 0x9}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x10, 0x3, 0x4, 0x40, 0xc8}, 0x3b, &(0x7f0000000280)={0x5, 0xf, 0x3b, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0xf, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x7f, 0x3, 0x6, 0x10e00, 0x100, [0x3fcf, 0xc018, 0x3fc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa2, 0x1, 0xb, 0x5, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x1b8, 0xff0f, 0x2}]}, 0x1, [{0xa1, &(0x7f00000002c0)=@string={0xa1, 0x3, "1ee0cf3ffff8a27fc99be42cd61bcbf84a4cea613bb4a23402c3746dbca78466a21085a1120847d44562465f657bfe93d6a144e4e118c5ed9de161ff05dded050b0b5c51f7f71568879ad4422e2647e7d5252e4762039febe8d9627340c4dcb4e5b9bbbcbbfbed615b317a237a7f163ba73df136c97c252a43e0a209c61e6b2fb7e9fc0a6d1b46672429e57ab82ed8656acd6e0dd18b3d577e4e00fede0198"}}]}) 5m55.955639075s ago: executing program 2 (id=27657): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "ed27fbb5d5ba69000e6769b69dc51dc5c32930bc5b6886786c9c975fe54da42154c59a884c54b5ff1e0501c423c33cd3314f79fd035e590fec690ad23ecae1dc", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, 0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 5m40.895407926s ago: executing program 45 (id=27657): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "ed27fbb5d5ba69000e6769b69dc51dc5c32930bc5b6886786c9c975fe54da42154c59a884c54b5ff1e0501c423c33cd3314f79fd035e590fec690ad23ecae1dc", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, 0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 1m35.944982303s ago: executing program 6 (id=32117): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc0100001900010000000000ffdbdf2520010000000000000000000000000000ffffff95b412ba000000000000000000000000030000000002000020"], 0x1bc}}, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={r1, 0x25f5, 0x800, 0x9}) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000200)={0x1, 0xab, "de13ff7b9f43c4c2e352f0f9c6da78184cfca009e5e1749c4193dc15260e19dd05d8dd37f84ec6fc515effd70b8bd0db2e913feec4351fd777973468aaa0d89bbc5629d82792b7839abf65a0f858edda3802e2d6c2bd1b39d73a0d111a7f53c8ec6355b4ae568434d390e4ef7668435b7b6846d55e30eacea2cc8acfb6e4911e625d0252458608571ea781b00929bdf7d9b984f43a681ba7559aa925dce6974899a7a66773f75e976f04e3"}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="91c8d1092511f6134f2c00"]) 1m35.83952943s ago: executing program 6 (id=32119): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x6, 0x9, &(0x7f0000000080)={{0x16, @local, 0x2, 0x45, 'rr\x00', 0x2, 0xffffffff, 0x3a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x1, 0x0, 0xba0, 0x543fbe69}}, 0x44) getsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f0000000040)) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m35.834045881s ago: executing program 6 (id=32121): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0xfffffff1, 0xfff, 0x5, 0x3, 0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x490100, 0xa) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) dup2(r2, r0) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r6, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x1, 0xd, 0x8, 0x0, 0x0, 0x8, 0xcb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0x0, 0x0, {0x5, 0x40000000000000a, 0x0, 0x80000001, 0xd, 0x1, 0x9ec, 0x35741061, 0x10000, 0xa593e9c1ca988eda, 0x9e7, 0xffffffffffffffff, 0x0, 0x10, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_fuse_handle_req(r6, &(0x7f0000007b40)="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", 0x2000, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000137000/0x400000)=nil) 1m35.755709257s ago: executing program 6 (id=32122): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) (async) r0 = syz_io_uring_complete(0x0) listen(r0, 0x7) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000002c0)={0xc, {{0xa, 0x4e20, 0x1, @remote, 0x7ff}}, {{0xa, 0x4e20, 0xfffffffa, @mcast2, 0x7}}}, 0x108) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x8}, 0x8) 1m35.707654951s ago: executing program 6 (id=32123): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)={0x2, 0x4e00, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000000000000000000007000000441206"], 0x28}}], 0x1, 0x46000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msync(&(0x7f0000d5c000/0x2000)=nil, 0xfffffffffffffef1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7786646e6f3deb6a9af50e033bb249e45a8d3a8774665b3870b66db75bfbe07238883f4515cbeb0af93b1027bbe4a4e6f1892a3894167c92083a5ab6da95a45b45249b0a7b9b4c7f80f5cf440bd805000cfaf8e93e142032f9fbbd0d6bf31c29b708d40039d7c553316c01199b2c0ae060b9e8", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 1m35.640428426s ago: executing program 6 (id=32125): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (async) r3 = open(&(0x7f0000000180)='./file1\x00', 0x145142, 0x94) ftruncate(r3, 0x2007ffc) (async) sendfile(r2, r3, 0x0, 0x3) (async) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000280)) syncfs(0xffffffffffffffff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (async) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) (async) r6 = inotify_init1(0x800) read(r6, 0x0, 0x0) (async) ftruncate(r5, 0x2007ffc) (async) sendfile(r4, r5, 0x0, 0x3) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) r8 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r9, 0x1, 0xe5, 0x6, @local}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x139e, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x3, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x562}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x2000c814) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f0000010640)={'team0\x00', &(0x7f00000004c0)=@ethtool_per_queue_op={0x4b, 0x55110f63ea68da54, [0x1, 0xbb5f, 0x1, 0x3, 0x2, 0x80000001, 0x9, 0x4, 0xfffffff9, 0x5, 0x6, 0x7d, 0x7, 0xf, 0xbc9, 0x0, 0x2, 0xfffffffd, 0x2, 0x79a6, 0x5, 0x8, 0x1, 0x3, 0xc, 0x1, 0x6, 0x40, 0x81, 0xb, 0xdba5, 0x6, 0x1000, 0x301, 0x1, 0x800, 0x80000001, 0x1, 0x7fffffff, 0xb8, 0x7ff, 0x8001, 0x7, 0x4, 0xe9, 0x80000000, 0x4, 0x2, 0xfffffffb, 0x2, 0x8, 0xc, 0x1bd18c8, 0x5, 0x9, 0x80, 0xb, 0x7b, 0x4, 0xfffffff9, 0xd, 0x6, 0x80000000, 0x6, 0x4, 0x100, 0xce6, 0x101, 0x0, 0x101, 0x1, 0x7, 0x800, 0xffffff80, 0x7fffffff, 0x3, 0x0, 0x5, 0x4, 0x3, 0x6, 0x4, 0x9, 0x3ff, 0xff, 0x9, 0x8, 0x1ff, 0x0, 0x2f, 0x3, 0x2, 0x40, 0x2, 0x1, 0x6, 0x3ff, 0x9, 0x74, 0x1, 0x9, 0x8001, 0x3, 0x40, 0x10001, 0x7a, 0x10001, 0x68c, 0x9, 0x9, 0x7, 0x0, 0xffffff1e, 0x5, 0x101, 0x413, 0x8, 0x9, 0xffff, 0x4, 0x48, 0xb8, 0x401, 0x80, 0x7, 0x4637, 0x5d, 0x8], "5bafe4f98a0a1699f0c79bae1dc81f7701763c479c0c04016b1a1ec95df90719b0286f37b868cc8b349d3bda146f5a0e18c7fa062b07d334a8dbcb30add9b2683c8b85d77ac720828f5b37a87cfa03c52c0952eb048d1e9e3e03cacb77491e22d360e471a9de1327a290430fa0533dfd3b0a1ca63b3932219027aa0a50b4b4d96a43cd3284055b01e0"}}) (async) openat$cgroup_procs(r5, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 1m20.599689695s ago: executing program 46 (id=32125): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (async) r3 = open(&(0x7f0000000180)='./file1\x00', 0x145142, 0x94) ftruncate(r3, 0x2007ffc) (async) sendfile(r2, r3, 0x0, 0x3) (async) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000280)) syncfs(0xffffffffffffffff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (async) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) (async) r6 = inotify_init1(0x800) read(r6, 0x0, 0x0) (async) ftruncate(r5, 0x2007ffc) (async) sendfile(r4, r5, 0x0, 0x3) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) r8 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r9, 0x1, 0xe5, 0x6, @local}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x139e, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x3, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x562}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x2000c814) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f0000010640)={'team0\x00', &(0x7f00000004c0)=@ethtool_per_queue_op={0x4b, 0x55110f63ea68da54, [0x1, 0xbb5f, 0x1, 0x3, 0x2, 0x80000001, 0x9, 0x4, 0xfffffff9, 0x5, 0x6, 0x7d, 0x7, 0xf, 0xbc9, 0x0, 0x2, 0xfffffffd, 0x2, 0x79a6, 0x5, 0x8, 0x1, 0x3, 0xc, 0x1, 0x6, 0x40, 0x81, 0xb, 0xdba5, 0x6, 0x1000, 0x301, 0x1, 0x800, 0x80000001, 0x1, 0x7fffffff, 0xb8, 0x7ff, 0x8001, 0x7, 0x4, 0xe9, 0x80000000, 0x4, 0x2, 0xfffffffb, 0x2, 0x8, 0xc, 0x1bd18c8, 0x5, 0x9, 0x80, 0xb, 0x7b, 0x4, 0xfffffff9, 0xd, 0x6, 0x80000000, 0x6, 0x4, 0x100, 0xce6, 0x101, 0x0, 0x101, 0x1, 0x7, 0x800, 0xffffff80, 0x7fffffff, 0x3, 0x0, 0x5, 0x4, 0x3, 0x6, 0x4, 0x9, 0x3ff, 0xff, 0x9, 0x8, 0x1ff, 0x0, 0x2f, 0x3, 0x2, 0x40, 0x2, 0x1, 0x6, 0x3ff, 0x9, 0x74, 0x1, 0x9, 0x8001, 0x3, 0x40, 0x10001, 0x7a, 0x10001, 0x68c, 0x9, 0x9, 0x7, 0x0, 0xffffff1e, 0x5, 0x101, 0x413, 0x8, 0x9, 0xffff, 0x4, 0x48, 0xb8, 0x401, 0x80, 0x7, 0x4637, 0x5d, 0x8], "5bafe4f98a0a1699f0c79bae1dc81f7701763c479c0c04016b1a1ec95df90719b0286f37b868cc8b349d3bda146f5a0e18c7fa062b07d334a8dbcb30add9b2683c8b85d77ac720828f5b37a87cfa03c52c0952eb048d1e9e3e03cacb77491e22d360e471a9de1327a290430fa0533dfd3b0a1ca63b3932219027aa0a50b4b4d96a43cd3284055b01e0"}}) (async) openat$cgroup_procs(r5, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 4.475435309s ago: executing program 4 (id=33567): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) mlockall(0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28000, 0x28) read$FUSE(r1, &(0x7f0000002a00)={0x2020}, 0x2020) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x50, r2, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2040400) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') 4.092475278s ago: executing program 4 (id=33573): syz_open_dev$rtc(&(0x7f0000006080), 0xfffffffffffffffa, 0x90f241) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x3000)=nil) write$P9_RVERSION(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030", @ANYRES16=0x0, @ANYBLOB="e1f2f88258f035f516fc43fd129dc6"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/power/wake_unlock', 0x42, 0x80) write$binfmt_register(r4, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'tr6=fdZ', 0x3a, './binderfs/binder1\x00', 0x3a, './file0'}, 0x41) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766779e6f3d", @ANYRESHEX=r3, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000200), 0x0, 0xfffffff8, 0x5, 0x0) write$FUSE_POLL(r5, &(0x7f0000000380)={0x18, 0xfffffffffffffff5, 0x0, {0x1}}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x800, 0x10) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)) 4.004358604s ago: executing program 4 (id=33574): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020, 0x0, 0x0, 0x0}, 0x206e) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2000400, &(0x7f0000000200)={'trans=virtio,', {[{@directio}, {@directio}, {@cache_readahead}, {@version_u}], [{@seclabel}, {@fowner_eq={'fowner', 0x3d, r1}}, {@subj_user={'subj_user', 0x3d, '!%'}}, {@dont_hash}, {@subj_role={'subj_role', 0x3d, '++,}#]$!\xfd)}#'}}]}}) 1.739594247s ago: executing program 8 (id=33589): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') socket$inet(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) syz_open_dev$hiddev(&(0x7f00000001c0), 0x3, 0x10f001) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x8, 0x9, 0x7fff}) r1 = socket(0x11, 0x2, 0x5) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r2]) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async) socket$inet(0x2, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) (async) syz_open_dev$hiddev(&(0x7f00000001c0), 0x3, 0x10f001) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x8, 0x9, 0x7fff}) (async) socket(0x11, 0x2, 0x5) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r2]) (async) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) (async) 1.733275808s ago: executing program 4 (id=33590): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x2, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00), 0x400, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00), 0x400, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) 1.657188763s ago: executing program 8 (id=33593): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000080009000d000000", 0x24) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRES64=r3, @ANYRESDEC=r1, @ANYRES16=r3, @ANYRESHEX=r1], 0x0}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) keyctl$chown(0x4, 0x0, r7, r8) r9 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r10, r10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x40000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, './binderfs/binder0\x00'}}, {@noextend}, {@cache_mmap}, {@access_user}, {@cache_fscache}], [{@obj_role={'obj_role', 0x3d, './binderfs/binder0\x00'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@fowner_lt={'fowner<', r10}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '$]}@{}'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x39, 0x31, 0x31, 0x39, 0x66, 0x66, 0x61], 0x2d, [0x63, 0x39, 0x63, 0x37], 0x2d, [0x64, 0x31, 0x66, 0x36], 0x2d, [0x64, 0x34, 0xb, 0x3e], 0x2d, [0x64, 0x65, 0x39, 0x33, 0x64, 0x38, 0x32, 0x64]}}}]}}) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/62, 0x3e}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000004c0)=[@clear_death], 0x0, 0x0, 0x0}) 1.603573658s ago: executing program 5 (id=33594): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x7, {0x7, 0x22, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYRESHEX=r2], 0x2c}], 0x1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 1.067200719s ago: executing program 8 (id=33595): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) (async) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async, rerun: 64) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async, rerun: 64) close(0x3) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 32) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 997.204974ms ago: executing program 8 (id=33596): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(r2) ptrace(0x4207, r3) ptrace$pokeuser(0x6, r2, 0x358, 0xfffffe7fffffffff) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000001c0)=0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 935.331918ms ago: executing program 5 (id=33597): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x4200031, r0, 0xffffd000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_clone3(&(0x7f0000000340)={0x1000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mlock2(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0x9, 0x0, 0x0, 0x0, @str='%!\xf9[\x00'}]}]}, 0x20}], 0x1}, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x4ce42, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="59bb22bd70000000200011000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r5, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) ioctl$PPPIOCSPASS(r3, 0x4c05, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 934.766828ms ago: executing program 8 (id=33598): r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth0_virt_wifi\x00', {0x2, 0x0, @loopback}}) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1d7bc0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffffc000) 537.937009ms ago: executing program 7 (id=33602): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)=[@enter_looper, @dead_binder_done, @dead_binder_done, @exit_looper, @dead_binder_done, @increfs], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 521.3855ms ago: executing program 7 (id=33603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000000f5000005010040"]) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3c, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d"}) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014"], 0xb8}}, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async) sendmmsg$inet(r8, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79}) 475.116554ms ago: executing program 7 (id=33604): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002e00fdffffffffffffff7d83a8000200", @ANYRES32], 0x2c}], 0x1}, 0xcc000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) shutdown(r2, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0xe, 0x0, 0x0}) 395.47173ms ago: executing program 7 (id=33605): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0xc0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x14, r3, 0x333, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, 0x0}, 0x17f887e6}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x40012020, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e21, @broadcast}}) 395.16389ms ago: executing program 4 (id=33606): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) (async) madvise(&(0x7f0000114000/0x1000)=nil, 0x1000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) write(r0, &(0x7f0000000400)="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", 0x1f000) 371.476862ms ago: executing program 4 (id=33607): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) fstat(0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [{0x2, 0x6, r0}, {0x2, 0x5, r1}]}, 0x34, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 340.985204ms ago: executing program 7 (id=33608): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001640), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)={0x34, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}, @generic='^']}, 0x34}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x2015dc39c67fedeb}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4000c882) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x1c}}, 0x2800) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1f}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 291.338808ms ago: executing program 5 (id=33609): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000140)={0x0, 0x2}) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000001180), 0x802, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) (async) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x80940, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x24, 0x0) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'pim6reg0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x1, 0x6, 0xe, 0xc, 0x1, 0xc0000000, 0x80020003, 0x32, 0x6, 0x7, 0x5, 0x6, 0x5f, 0xffffffff, 0x80000000, 0x2, 0x80000000, 0x80, 0x1ff, 0xfffffffb, 0xa}}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)=@arm64={0x0, 0x7, 0x4, '\x00', 0xd}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file1\x00', 0x1e) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x47, 0x9, 0x8, 0x2, 0x0, 0x70bd25, 0x25dfdbfb}, 0x10}}, 0x0) (async, rerun: 32) mknodat$loop(r1, &(0x7f0000000040)='./file1\x00', 0x2000, 0x1) (rerun: 32) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x80000001, 0x8001, {{0xe, 0x4, 0x0, 0x8, 0x38, 0x64, 0x0, 0x7f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp={0x44, 0x24, 0x5a, 0x0, 0x8, [0xfffff77a, 0x5a74, 0x200, 0x7e, 0xb7fb, 0x6, 0x6, 0x3]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x44, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async, rerun: 32) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}}) 259.94851ms ago: executing program 7 (id=33610): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000200)={{0x2, 0x4e24, @local}, {0x300, @multicast}, 0x0, {0x2, 0x4e21, @empty}, 'caif0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000240)=r6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async, rerun: 64) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 250.015051ms ago: executing program 5 (id=33611): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x3) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001400110200000000fcdbdf65280068fdfa"], 0x28}}, 0x0) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) (async) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 147.607739ms ago: executing program 5 (id=33612): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r1) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010129b47000ffdbdf252a"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4810) write(r0, &(0x7f0000000000)="240000001e005f0214f9f407000904001f0000000000000000000000080004000100000d", 0xfe3d) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) 147.197509ms ago: executing program 5 (id=33613): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ppoll(&(0x7f00000001c0)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 0s ago: executing program 8 (id=33614): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) (async) poll(&(0x7f00000002c0)=[{r1, 0x4040}], 0x1, 0x5) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000400)={0xffffffffffffffff}) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) (async) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0x4e, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x0, 0x3}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x23, &(0x7f0000000000)="31a15332938f7bd53c804648c6af344a7aabaf11bbcc8bdacf09e294161eae3db93a1e635b5007ea868317c1bb202a99e68d4f7ec15a7cc415f8b6db3bc571854d56d2fd80d933417a54ee7702e5ba97728fa002a003afcca3114ea440169f5898800bc8bce40f5260f2e5b10b6b32b120a8e9156672f243d9901235958a5e1df051cfc12569b86a9e89d79399a85394af80ebf77ef1003884df8f06922bbe08321cdd023049d6c5", 0xa8) (async) write(0xffffffffffffffff, &(0x7f0000000200)="eac3cdf483dbfc33c020e6f03eeb4f3c2ba49ef95fd17bb39594ae7eba4d6bfd1482796c6e420ed1a19944877cc30f2671cdeb72673e32356e187f4ce09197b5468a440c309f23776ceefb478aa9ead81d8804c05024a5bb199da44874f9cacf0e5f17067389eb8ed715b610e9a225aa14424814db72c34aa4943672b752390f38b10c981f60910ccbc48acc33312b9bd37de658e8a5a25e42a57b2f34872055be6334c5cf44522d72438af2d5", 0xad) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) kernel console output (not intermixed with test programs): class=anon_inode permissive=1 [ 2009.513905][ T36] audit: type=1400 audit(2016777788.694:323810): avc: denied { read write } for pid=30318 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2009.540012][ T36] audit: type=1400 audit(2016777788.694:323811): avc: denied { read write open } for pid=30318 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2009.575330][ T36] audit: type=1400 audit(2016777788.694:323812): avc: denied { ioctl } for pid=30318 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2009.605957][ T36] audit: type=1400 audit(2016777788.754:323813): avc: denied { read write } for pid=30977 comm="syz.8.32229" name="binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2009.638183][ T36] audit: type=1400 audit(2016777788.754:323814): avc: denied { read write open } for pid=30977 comm="syz.8.32229" path="/dev/binderfs/binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2009.679830][T30981] __vm_enough_memory: pid: 30981, comm: syz.8.32230, bytes: 21200286527488 not enough memory for the allocation [ 2009.707927][T30981] binder: Unknown parameter 'contextÌðÔð[7’' [ 2009.812084][T30994] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2009.814187][T30993] 9pnet_fd: Insufficient options for proto=fd [ 2009.832905][T30993] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 2009.848990][T30993] rust_binder: Write failure EINVAL in pid:107 [ 2009.848989][T30994] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 2009.849021][T30994] rust_binder: Write failure EINVAL in pid:107 [ 2009.929200][T30998] netlink: 8540 bytes leftover after parsing attributes in process `syz.5.32236'. [ 2009.946077][T30998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.32236'. [ 2009.959318][T30998] netlink: 5 bytes leftover after parsing attributes in process `syz.5.32236'. [ 2010.037634][T31007] netlink: 188 bytes leftover after parsing attributes in process `syz.5.32240'. [ 2010.120344][T31012] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31012 comm=syz.7.32239 [ 2010.766506][T31061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2010.781286][T31061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2010.794160][T31061] rust_binder: Error while translating object. [ 2010.794211][T31061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 2010.801957][T31061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:127 [ 2010.908715][T31067] 9pnet_fd: Insufficient options for proto=fd [ 2010.987604][T31071] netlink: 10940 bytes leftover after parsing attributes in process `syz.7.32257'. [ 2011.112245][T31079] netlink: 'syz.7.32259': attribute type 12 has an invalid length. [ 2011.392025][T31098] SELinux: security_context_str_to_sid () failed with errno=-22 [ 2011.532056][T31103] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2011.550451][T31102] rust_binder: Error in use_page_slow: ESRCH [ 2011.550491][T31102] rust_binder: use_range failure ESRCH [ 2011.557425][T31102] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 2011.566680][T31102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2011.576248][T31102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:134 [ 2011.663340][T31110] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2011.673344][T31110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 2011.771352][T31117] /dev/rnullb0: Can't lookup blockdev [ 2012.427342][T31134] /dev/rnullb0: Can't lookup blockdev [ 2012.651866][T31150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2012.660655][T31150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2012.845653][T31156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2012.856278][T31156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2012.868426][T31156] rust_binder: Write failure EFAULT in pid:147 [ 2013.295123][T31174] /dev/rnullb0: Can't lookup blockdev [ 2013.415469][T31176] option changes via remount are deprecated (pid=31175 comm=syz.8.32295) [ 2013.660567][T31189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 2013.705444][T31193] binder: Bad value for 'max' [ 2013.858596][T31199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2013.867752][T31199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2014.008955][ T36] kauditd_printk_skb: 1328 callbacks suppressed [ 2014.008976][ T36] audit: type=1400 audit(2016777793.194:325143): avc: denied { read } for pid=31203 comm="syz.8.32305" name="binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2014.010931][T31204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 2014.015427][ T36] audit: type=1400 audit(2016777793.194:325144): avc: denied { read open } for pid=31203 comm="syz.8.32305" path="/dev/binderfs/binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2014.015466][ T36] audit: type=1400 audit(2016777793.194:325145): avc: denied { ioctl } for pid=31203 comm="syz.8.32305" path="/dev/binderfs/binder1" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2014.101180][ T36] audit: type=1400 audit(2016777793.234:325146): avc: denied { read write } for pid=30318 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2014.138869][ T36] audit: type=1400 audit(2016777793.234:325147): avc: denied { read write open } for pid=30318 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2014.173629][T31206] devpts: called with bogus options [ 2014.173631][ T36] audit: type=1400 audit(2016777793.244:325148): avc: denied { ioctl } for pid=30318 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2014.237243][ T36] audit: type=1400 audit(2016777793.344:325149): avc: denied { create } for pid=31205 comm="syz.8.32306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2014.283266][ T36] audit: type=1400 audit(2016777793.344:325150): avc: denied { setopt } for pid=31205 comm="syz.8.32306" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2014.308426][ T36] audit: type=1400 audit(2016777793.344:325151): avc: denied { create } for pid=31205 comm="syz.8.32306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2014.316420][T31211] netlink: 32 bytes leftover after parsing attributes in process `syz.8.32308'. [ 2014.340280][ T36] audit: type=1400 audit(2016777793.354:325152): avc: denied { setopt } for pid=31205 comm="syz.8.32306" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2014.348688][T31211] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2014.362017][T31211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:175 [ 2014.493855][T31223] netlink: 188 bytes leftover after parsing attributes in process `syz.5.32312'. [ 2015.013126][T31233] bridge0: port 2(bridge_slave_1) entered disabled state [ 2015.176510][T31240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2015.185289][T31240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2015.300153][T31250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=31250 comm=syz.7.32320 [ 2015.562406][T31262] netlink: 4 bytes leftover after parsing attributes in process `syz.7.32324'. [ 2015.630662][T31267] overlayfs: failed to clone upperpath [ 2015.984056][T31297] veth1: entered allmulticast mode [ 2016.213320][T31308] x_tables: unsorted underflow at hook 2 [ 2016.227779][T31308] devpts: called with bogus options [ 2016.318950][T31313] netlink: 124 bytes leftover after parsing attributes in process `syz.8.32341'. [ 2016.364291][T31311] bridge0: port 1(bridge_slave_0) entered blocking state [ 2016.376074][T31311] bridge0: port 1(bridge_slave_0) entered disabled state [ 2016.386435][T31311] bridge_slave_0: entered allmulticast mode [ 2016.395527][T31311] bridge_slave_0: entered promiscuous mode [ 2016.404715][T31311] bridge0: port 2(bridge_slave_1) entered blocking state [ 2016.412826][T31311] bridge0: port 2(bridge_slave_1) entered disabled state [ 2016.425378][T31311] bridge_slave_1: entered allmulticast mode [ 2016.433581][T31311] bridge_slave_1: entered promiscuous mode [ 2016.441265][T31296] veth1: left allmulticast mode [ 2016.562679][T31311] bridge0: port 2(bridge_slave_1) entered blocking state [ 2016.569946][T31311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2016.577265][T31311] bridge0: port 1(bridge_slave_0) entered blocking state [ 2016.585840][T31311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2016.650048][ T8122] bridge0: port 1(bridge_slave_0) entered disabled state [ 2016.657775][ T8122] bridge0: port 2(bridge_slave_1) entered disabled state [ 2016.675885][ T8122] bridge0: port 1(bridge_slave_0) entered blocking state [ 2016.683455][ T8122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2016.694965][ T8123] bridge0: port 2(bridge_slave_1) entered blocking state [ 2016.702226][ T8123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2016.800186][T31311] veth0_vlan: entered promiscuous mode [ 2016.850339][T31311] veth1_macvtap: entered promiscuous mode [ 2017.054048][T31351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32339'. [ 2017.261303][T31362] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 2017.729926][T31392] netlink: 188 bytes leftover after parsing attributes in process `syz.5.32369'. [ 2017.775551][T31394] netlink: 104 bytes leftover after parsing attributes in process `syz.5.32370'. [ 2017.788723][T31394] /dev/rnullb0: Can't lookup blockdev [ 2017.872975][T31401] fuse: blksize only supported for fuseblk [ 2018.256537][T31426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31426 comm=syz.8.32380 [ 2018.407197][T31429] rust_binder: Error while translating object. [ 2018.407262][T31429] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2018.422733][T31429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 2018.729174][T31454] fuse: Bad value for 'fd' [ 2018.890034][T31466] netlink: 'syz.5.32394': attribute type 30 has an invalid length. [ 2019.063895][ T36] kauditd_printk_skb: 1020 callbacks suppressed [ 2019.063917][ T36] audit: type=1400 audit(2016777798.206:326173): avc: denied { create } for pid=31477 comm="syz.5.32397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2019.096594][ T36] audit: type=1400 audit(2016777798.206:326174): avc: denied { create } for pid=31477 comm="syz.5.32397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2019.123433][ T36] audit: type=1400 audit(2016777798.206:326175): avc: denied { write } for pid=31477 comm="syz.5.32397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2019.148691][ T36] audit: type=1400 audit(2016777798.206:326176): avc: denied { read } for pid=31477 comm="syz.5.32397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2019.171648][ T36] audit: type=1400 audit(2016777798.216:326177): avc: denied { write } for pid=31477 comm="syz.5.32397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2019.195068][ T36] audit: type=1400 audit(2016777798.216:326178): avc: denied { create } for pid=31477 comm="syz.5.32397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2019.217487][ T36] audit: type=1400 audit(2016777798.216:326179): avc: denied { write } for pid=31477 comm="syz.5.32397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2019.240034][ T36] audit: type=1400 audit(2016777798.216:326180): avc: denied { read } for pid=31477 comm="syz.5.32397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2019.262040][ T36] audit: type=1400 audit(2016777798.216:326181): avc: denied { read } for pid=31477 comm="syz.5.32397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2019.284047][ T36] audit: type=1400 audit(2016777798.216:326182): avc: denied { create } for pid=31477 comm="syz.5.32397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2019.349516][T31493] overlayfs: failed to clone upperpath [ 2019.577784][T31513] netlink: 'syz.5.32410': attribute type 4 has an invalid length. [ 2019.590002][T31513] netlink: 'syz.5.32410': attribute type 17 has an invalid length. [ 2019.606461][T31514] netlink: 'syz.5.32410': attribute type 4 has an invalid length. [ 2019.679849][T31522] netlink: 24 bytes leftover after parsing attributes in process `syz.5.32413'. [ 2020.101663][ T334] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2020.246608][T31564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31564 comm=syz.5.32428 [ 2020.272164][ T334] usb 5-1: Using ep0 maxpacket: 16 [ 2020.283310][ T334] usb 5-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 64 [ 2020.294552][ T334] usb 5-1: config 1 interface 0 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 32 [ 2020.307167][ T334] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2020.326760][ T334] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2020.337353][ T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.346539][ T334] usb 5-1: Product: syz [ 2020.351308][ T334] usb 5-1: Manufacturer: በ[ 2020.356197][ T334] usb 5-1: SerialNumber: syz [ 2020.365671][T31538] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2020.381882][T31538] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2020.444449][T31575] /dev/rnullb0: Can't lookup blockdev [ 2020.826922][ T334] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 2020.869112][ T334] usb 5-1: USB disconnect, device number 33 [ 2021.030479][T31597] syz.4.32439: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 2021.047823][T31597] CPU: 1 UID: 0 PID: 31597 Comm: syz.4.32439 Not tainted syzkaller #0 274f9aef60e05467e019488b9f7ece6681bb0342 [ 2021.047865][T31597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2021.047884][T31597] Call Trace: [ 2021.047893][T31597] [ 2021.047904][T31597] __dump_stack+0x21/0x30 [ 2021.047945][T31597] dump_stack_lvl+0x10c/0x190 [ 2021.047979][T31597] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2021.048024][T31597] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 2021.048059][T31597] dump_stack+0x19/0x20 [ 2021.048090][T31597] warn_alloc+0x1bc/0x2a0 [ 2021.048124][T31597] ? stack_depot_save_flags+0x38/0x800 [ 2021.048152][T31597] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 2021.048183][T31597] ? __cfi_warn_alloc+0x10/0x10 [ 2021.048215][T31597] ? kasan_save_track+0x4f/0x80 [ 2021.048239][T31597] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 2021.048262][T31597] ? xskq_create+0x68/0x2a0 [ 2021.048294][T31597] ? xsk_init_queue+0xb6/0x120 [ 2021.048327][T31597] ? xsk_setsockopt+0x43f/0x6f0 [ 2021.048358][T31597] ? do_sock_setsockopt+0x26a/0x400 [ 2021.048391][T31597] ? __x64_sys_setsockopt+0x1b8/0x250 [ 2021.048423][T31597] ? x64_sys_call+0x2adc/0x2ee0 [ 2021.048458][T31597] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2021.048497][T31597] __vmalloc_node_range_noprof+0x135/0x1420 [ 2021.048540][T31597] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 2021.048577][T31597] ? avc_has_perm+0x1f2/0x220 [ 2021.048611][T31597] ? kasan_save_alloc_info+0x40/0x50 [ 2021.048646][T31597] ? __kasan_kmalloc+0x96/0xb0 [ 2021.048674][T31597] vmalloc_user_noprof+0x77/0x90 [ 2021.048708][T31597] ? xskq_create+0xdb/0x2a0 [ 2021.048741][T31597] xskq_create+0xdb/0x2a0 [ 2021.048769][T31597] xsk_init_queue+0xb6/0x120 [ 2021.048799][T31597] xsk_setsockopt+0x43f/0x6f0 [ 2021.048830][T31597] ? __cfi_xsk_setsockopt+0x10/0x10 [ 2021.048860][T31597] ? do_futex+0x356/0x500 [ 2021.048887][T31597] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 2021.048920][T31597] ? security_socket_setsockopt+0x33/0xd0 [ 2021.048944][T31597] ? __cfi_xsk_setsockopt+0x10/0x10 [ 2021.048975][T31597] do_sock_setsockopt+0x26a/0x400 [ 2021.049021][T31597] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 2021.049057][T31597] __x64_sys_setsockopt+0x1b8/0x250 [ 2021.049093][T31597] x64_sys_call+0x2adc/0x2ee0 [ 2021.049131][T31597] do_syscall_64+0x58/0xf0 [ 2021.049160][T31597] ? clear_bhb_loop+0x50/0xa0 [ 2021.049186][T31597] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2021.049224][T31597] RIP: 0033:0x7fb91478eec9 [ 2021.049246][T31597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2021.049269][T31597] RSP: 002b:00007fb91558e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2021.049299][T31597] RAX: ffffffffffffffda RBX: 00007fb9149e5fa0 RCX: 00007fb91478eec9 [ 2021.049319][T31597] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 2021.049336][T31597] RBP: 00007fb914811f91 R08: 0000000000000004 R09: 0000000000000000 [ 2021.049353][T31597] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2021.049371][T31597] R13: 00007fb9149e6038 R14: 00007fb9149e5fa0 R15: 00007fff5ebfb5e8 [ 2021.049392][T31597] [ 2021.049403][T31597] Mem-Info: [ 2021.376839][T31597] active_anon:17447 inactive_anon:1917 isolated_anon:0 [ 2021.376839][T31597] active_file:8750 inactive_file:17535 isolated_file:0 [ 2021.376839][T31597] unevictable:16362 dirty:16 writeback:0 [ 2021.376839][T31597] slab_reclaimable:6343 slab_unreclaimable:86357 [ 2021.376839][T31597] mapped:41801 shmem:273 pagetables:1087 [ 2021.376839][T31597] sec_pagetables:0 bounce:0 [ 2021.376839][T31597] kernel_misc_reclaimable:0 [ 2021.376839][T31597] free:1434368 free_pcp:2759 free_cma:0 [ 2021.423939][T31597] Node 0 active_anon:69688kB inactive_anon:7668kB active_file:35000kB inactive_file:70140kB unevictable:65448kB isolated(anon):0kB isolated(file):0kB mapped:167204kB dirty:64kB writeback:0kB shmem:1092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8316kB pagetables:4348kB sec_pagetables:0kB all_unreclaimable? no [ 2021.447168][T31619] veth1: entered allmulticast mode [ 2021.464360][T31597] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:0kB free_cma:0kB [ 2021.470961][T31621] netlink: 260 bytes leftover after parsing attributes in process `syz.5.32447'. [ 2021.497731][T31597] lowmem_reserve[]: 0 3921 3921 [ 2021.511017][T31597] Normal free:2777260kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:69688kB inactive_anon:7668kB active_file:35000kB inactive_file:70140kB unevictable:65448kB writepending:64kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4836kB local_pcp:3064kB free_cma:0kB [ 2021.557138][T31597] lowmem_reserve[]: 0 0 0 [ 2021.563258][T31597] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 2021.580926][T31597] Normal: 0*4kB 722*8kB (ME) 1241*16kB (UME) 1232*32kB (UME) 1079*64kB (UME) 653*128kB (UME) 313*256kB (UME) 133*512kB (UME) 42*1024kB (UM) 18*2048kB (UME) 569*4096kB (UM) = 2776416kB [ 2021.600774][T31597] 45126 total pagecache pages [ 2021.607418][T31597] 2207 pages in swap cache [ 2021.612333][T31597] Free swap = 49980kB [ 2021.617670][T31597] Total swap = 124996kB [ 2021.622143][T31597] 2097051 pages RAM [ 2021.628014][T31597] 0 pages HighMem/MovableOnly [ 2021.634785][T31632] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=31632 comm=syz.5.32447 [ 2021.636418][T31597] 351537 pages reserved [ 2021.653905][T31597] 0 pages cma reserved [ 2021.662905][T31597] Memory allocations: [ 2021.667167][T31597] 0 B 0 init/main.c:1370 func:do_initcalls [ 2021.676417][T31597] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 2021.685972][T31597] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 2021.695020][T31597] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 2021.706012][T31597] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 2021.714759][T31597] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 2021.723727][T31597] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 2021.733482][T31597] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 2021.741983][T31597] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 2021.750345][T31597] 0 B 0 init/initramfs.c:101 func:find_link [ 2021.754920][T31635] overlay: Unknown parameter 'euid<00000000000000000000' [ 2021.924137][T31646] netlink: 104 bytes leftover after parsing attributes in process `syz.4.32453'. [ 2022.275837][ T334] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2022.288853][T31618] veth1: left allmulticast mode [ 2022.368732][T31663] netlink: 4 bytes leftover after parsing attributes in process `syz.7.32460'. [ 2022.416973][ T8123] tipc: Subscription rejected, illegal request [ 2022.438241][ T334] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 159, changing to 11 [ 2022.452585][ T334] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2022.466834][ T334] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2022.492317][ T334] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40 [ 2022.502905][ T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.511291][ T334] usb 5-1: Product: syz [ 2022.515853][ T334] usb 5-1: SerialNumber: syz [ 2022.770755][T31688] netlink: 324 bytes leftover after parsing attributes in process `syz.8.32472'. [ 2022.792282][ T334] usbhid 5-1:1.0: can't add hid device: -71 [ 2022.812445][ T334] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 2022.841793][ T334] usb 5-1: USB disconnect, device number 34 [ 2023.217183][T31721] /dev/rnullb0: Can't lookup blockdev [ 2023.467650][T31737] /dev/rnullb0: Can't lookup blockdev [ 2023.664193][T31753] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2023.664221][T31753] rust_binder: Read failure Err(EFAULT) in pid:51 [ 2023.741645][T31757] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 2023.748967][T31757] rust_binder: Error while translating object. [ 2023.758881][T31757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2023.766587][T31757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 2024.014021][T31772] veth1: entered allmulticast mode [ 2024.096224][T31773] rust_binder: Write failure EFAULT in pid:67 [ 2024.560245][ T36] kauditd_printk_skb: 899 callbacks suppressed [ 2024.560440][ T36] audit: type=1400 audit(2016777803.367:327082): avc: denied { create } for pid=31777 comm="syz.5.32505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.597281][ T36] audit: type=1400 audit(2016777803.367:327083): avc: denied { create } for pid=31777 comm="syz.5.32505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.627588][ T36] audit: type=1400 audit(2016777803.376:327084): avc: denied { write } for pid=31777 comm="syz.5.32505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.650974][ T36] audit: type=1400 audit(2016777803.376:327085): avc: denied { read } for pid=31777 comm="syz.5.32505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.672850][T31780] netlink: 20 bytes leftover after parsing attributes in process `syz.5.32506'. [ 2024.685404][ T36] audit: type=1400 audit(2016777803.376:327086): avc: denied { read } for pid=31777 comm="syz.5.32505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.709881][ T36] audit: type=1400 audit(2016777803.376:327087): avc: denied { write } for pid=31777 comm="syz.5.32505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.733466][ T36] audit: type=1400 audit(2016777803.423:327088): avc: denied { create } for pid=31779 comm="syz.5.32506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.755956][ T36] audit: type=1400 audit(2016777803.451:327089): avc: denied { create } for pid=31779 comm="syz.5.32506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.778932][ T36] audit: type=1400 audit(2016777803.451:327090): avc: denied { write } for pid=31779 comm="syz.5.32506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.802240][ T36] audit: type=1400 audit(2016777803.451:327091): avc: denied { read } for pid=31779 comm="syz.5.32506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.897468][T31772] veth1: left allmulticast mode [ 2025.100728][T31804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:72 [ 2025.101687][T31804] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 2025.198372][T31806] /dev/rnullb0: Can't open blockdev [ 2025.526230][ T609] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 2025.711858][ T609] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2025.760651][ T609] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2025.785926][ T609] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2025.797513][ T609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.812838][ T609] usb 5-1: config 0 descriptor?? [ 2025.833100][T31811] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2025.846780][ T609] usbhid 5-1:0.0: can't add hid device: -22 [ 2025.865232][ T609] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 2026.082265][T29102] usb 5-1: USB disconnect, device number 35 [ 2026.257345][T31847] overlayfs: failed to clone upperpath [ 2026.381787][T31852] netlink: 220 bytes leftover after parsing attributes in process `syz.5.32532'. [ 2027.454017][T31883] overlayfs: missing 'workdir' [ 2027.461788][T31883] veth0: entered promiscuous mode [ 2027.467389][T31883] veth0: left promiscuous mode [ 2027.476595][ T609] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 2027.607215][T31890] 9pnet_fd: Insufficient options for proto=fd [ 2027.639766][ T609] usb 5-1: not running at top speed; connect to a high speed hub [ 2027.649740][ T609] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2027.660727][ T609] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2027.670275][ T609] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2027.688490][ T609] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2027.701201][ T609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.710583][ T609] usb 5-1: Product: 椧æžáˆ™ïœ±à£°å‹²ç›…㤋ј殺섕瀤棸伓䟘暤嘭잸ꨪ嵔⫩ᡸ踷ꂓ볜軺΅䅈åˆà ¤çŽ­ë–雊▂꬘醈臎â³çžî¯´åˆ°ê¹œï¬ºÝ³ëµƒë¯šâ•á¯¿è†µæ¥¡à¬˜ã¸„쨰绀䙮 [ 2027.730876][ T609] usb 5-1: Manufacturer: 烵鴆픣쎊㔦厡₩뙫穩塉漧釄侣忠뒊芉⛫ἱʣ覛éŸî¼†å¥“뫅她ӉÉꂴ㒢ﴴ龜곪쮉୙䜇ë‘−ìží’·á’˜çŠ›ç›€äœ—ã¿æ·´ë‰¦æ¤ºê¬¶à¬•ê¿´à°§æ¸žâ––ᡷ滀샧漣ë¢éˆé¢´ì…—໖﫨âŒá¦ç‹‘㓋㖨៸ [ 2027.755529][ T609] usb 5-1: SerialNumber: 淓仈䭦ﾒï”ã©´ßﶬ [ 2027.755940][T31892] overlayfs: failed to clone upperpath [ 2027.993864][T31906] netlink: 'syz.5.32552': attribute type 15 has an invalid length. [ 2028.007268][ T609] usb 5-1: 0:2 : does not exist [ 2028.025782][ T609] usb 5-1: USB disconnect, device number 36 [ 2028.094481][T27896] udevd[27896]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2028.641538][T31925] rust_binder: Write failure EFAULT in pid:86 [ 2028.660718][T31927] fuse: Bad value for 'group_id' [ 2028.744742][T31927] fuse: Bad value for 'group_id' [ 2028.763054][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.787589][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.799326][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.807134][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.826656][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.836708][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.852714][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.860374][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.868045][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.876124][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.884650][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.892494][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.904591][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.922165][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.932091][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.958363][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.966666][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.974692][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.983137][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2028.991708][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.000736][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.011148][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.018709][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.030150][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.041298][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.050185][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.059042][T31949] 9pnet_fd: Insufficient options for proto=fd [ 2029.060185][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.085123][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.095482][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.109526][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.119627][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.127624][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.145130][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.153031][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.161689][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.171053][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.178585][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.202982][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.211130][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.222045][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.230098][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.242513][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.261973][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.271686][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.281317][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.300095][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.317213][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.326869][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.336228][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.346374][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.356062][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.365927][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.405522][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.413072][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.422052][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.435864][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.444458][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.453446][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.461749][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.484952][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.493603][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.503420][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.511092][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.520560][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.534809][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.542474][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.557360][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.565033][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.573070][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.582486][T31982] Invalid ELF header type: 3 != 1 [ 2029.587939][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.595811][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.603737][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.615278][T31982] Invalid ELF header type: 2 != 1 [ 2029.621710][T31982] Invalid ELF header type: 2 != 1 [ 2029.628046][T31982] Invalid ELF header type: 2 != 1 [ 2029.633574][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.650607][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.660016][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.667700][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.676090][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.684885][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.694098][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.701991][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.712065][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.726004][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.740271][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.755334][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.764850][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.772979][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.781553][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.790162][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.803320][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.813710][T29102] hid-generic 0003:0008:000F.002F: unknown main item tag 0x0 [ 2029.839407][T29102] hid-generic 0003:0008:000F.002F: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 2029.927687][ T36] kauditd_printk_skb: 844 callbacks suppressed [ 2029.927709][ T36] audit: type=1400 audit(2016777808.396:327936): avc: denied { read } for pid=31999 comm="syz.4.32587" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2029.936922][T32000] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2029.965228][T31996] fido_id[31996]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2029.987289][ T36] audit: type=1400 audit(2016777808.396:327937): avc: denied { read open } for pid=31999 comm="syz.4.32587" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2030.014192][ T36] audit: type=1400 audit(2016777808.406:327938): avc: denied { map } for pid=31999 comm="syz.4.32587" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2030.030060][T32001] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 2030.084344][ T36] audit: type=1400 audit(2016777808.406:327939): avc: denied { read } for pid=31999 comm="syz.4.32587" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2030.120920][ T36] audit: type=1400 audit(2016777808.406:327940): avc: denied { ioctl } for pid=31999 comm="syz.4.32587" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2030.150501][ T36] audit: type=1400 audit(2016777808.462:327941): avc: denied { create } for pid=31997 comm="syz.8.32586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2030.172846][ T36] audit: type=1400 audit(2016777808.462:327942): avc: denied { create } for pid=31997 comm="syz.8.32586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2030.195443][ T36] audit: type=1400 audit(2016777808.462:327943): avc: denied { execmem } for pid=31999 comm="syz.4.32587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2030.209600][T31935] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2030.216991][ T36] audit: type=1400 audit(2016777808.462:327944): avc: denied { write } for pid=31997 comm="syz.8.32586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2030.348875][T32010] rust_binder: Write failure EFAULT in pid:99 [ 2030.684139][T32031] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2030.714374][T32031] rust_binder: Failed to allocate buffer. len:1120, is_oneway:true [ 2030.735388][T32031] rust_binder: Read failure Err(EAGAIN) in pid:106 [ 2030.750347][T32034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32034 comm=syz.8.32599 [ 2031.754294][T32123] rust_binder: Write failure EFAULT in pid:131 [ 2031.972401][T32124] netlink: 60 bytes leftover after parsing attributes in process `syz.5.32623'. [ 2032.027156][T29102] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 2032.201740][T29102] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2032.223953][T29102] usb 5-1: not running at top speed; connect to a high speed hub [ 2032.251882][T29102] usb 5-1: config 5 has an invalid interface number: 29 but max is 0 [ 2032.260386][T29102] usb 5-1: config 5 has no interface number 0 [ 2032.273533][T29102] usb 5-1: config 5 interface 29 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2032.287163][T29102] usb 5-1: config 5 interface 29 has no altsetting 0 [ 2032.298161][T29102] usb 5-1: New USB device found, idVendor=05a9, idProduct=2643, bcdDevice=49.45 [ 2032.315153][T29102] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.323429][T29102] usb 5-1: Product: syz [ 2032.327864][T29102] usb 5-1: Manufacturer: syz [ 2032.332833][T29102] usb 5-1: SerialNumber: syz [ 2032.341173][T32122] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2032.575850][T29102] usb 5-1: Found UVC 0.00 device syz (05a9:2643) [ 2032.586675][T29102] usb 5-1: No valid video chain found. [ 2032.597497][T29102] usb 5-1: USB disconnect, device number 37 [ 2032.651007][T32168] overlayfs: failed to clone upperpath [ 2033.142629][T32176] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2033.143524][T32176] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 2033.192438][T32178] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2033.201672][T32178] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 2033.253127][T32180] /dev/rnullb0: Can't lookup blockdev [ 2033.295748][T32181] /dev/rnullb0: Can't lookup blockdev [ 2033.399406][T32194] rust_binder: Write failure EFAULT in pid:141 [ 2033.468434][T32197] overlayfs: failed to clone upperpath [ 2033.524324][T32200] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2033.559075][T32202] netlink: 'syz.7.32655': attribute type 4 has an invalid length. [ 2033.577063][T32202] netlink: 'syz.7.32655': attribute type 4 has an invalid length. [ 2033.589085][T32204] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 2034.960997][T32305] 9pnet_fd: Insufficient options for proto=fd [ 2035.331529][ T36] kauditd_printk_skb: 1046 callbacks suppressed [ 2035.331550][ T36] audit: type=1400 audit(2016777813.482:328839): avc: denied { ioctl } for pid=32334 comm="syz.4.32699" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2035.385414][ T36] audit: type=1400 audit(2016777813.529:328840): avc: denied { create } for pid=32347 comm="syz.8.32703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2035.405858][ T36] audit: type=1400 audit(2016777813.529:328841): avc: denied { connect } for pid=32347 comm="syz.8.32703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2035.426475][ T36] audit: type=1400 audit(2016777813.529:328842): avc: denied { write } for pid=32347 comm="syz.8.32703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2035.447682][ T36] audit: type=1400 audit(2016777813.529:328843): avc: denied { write } for pid=32347 comm="syz.8.32703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2035.469972][ T45] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 2035.478747][ T36] audit: type=1400 audit(2016777813.548:328844): avc: denied { ioctl } for pid=32334 comm="syz.4.32699" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2035.504569][ T36] audit: type=1400 audit(2016777813.604:328845): avc: denied { ioctl } for pid=32334 comm="syz.4.32699" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2035.530560][ T36] audit: type=1400 audit(2016777813.604:328846): avc: denied { ioctl } for pid=32334 comm="syz.4.32699" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2035.558612][ T36] audit: type=1400 audit(2016777813.604:328847): avc: denied { ioctl } for pid=32334 comm="syz.4.32699" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2035.585453][ T36] audit: type=1400 audit(2016777813.604:328848): avc: denied { ioctl } for pid=32334 comm="syz.4.32699" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2035.640011][ T45] usb 5-1: device descriptor read/64, error -71 [ 2035.694223][T32361] netlink: 80 bytes leftover after parsing attributes in process `syz.5.32707'. [ 2035.895765][ T45] usb 5-1: device descriptor read/64, error -71 [ 2036.151544][ T45] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 2036.300742][ T45] usb 5-1: device descriptor read/64, error -71 [ 2036.567255][ T45] usb 5-1: device descriptor read/64, error -71 [ 2036.687690][ T45] usb usb5-port1: attempt power cycle [ 2037.046900][ T45] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 2037.070854][ T45] usb 5-1: device descriptor read/8, error -71 [ 2037.209198][ T45] usb 5-1: device descriptor read/8, error -71 [ 2037.462400][ T45] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 2037.486494][ T45] usb 5-1: device descriptor read/8, error -71 [ 2037.625031][ T45] usb 5-1: device descriptor read/8, error -71 [ 2037.739965][ T45] usb usb5-port1: unable to enumerate USB device [ 2038.554632][T32437] overlayfs: failed to clone upperpath [ 2038.575338][T32437] 9pnet_fd: Insufficient options for proto=fd [ 2038.650687][T32439] netlink: 1351 bytes leftover after parsing attributes in process `syz.8.32732'. [ 2038.929801][T32471] tipc: Started in network mode [ 2038.934823][T32471] tipc: Node identity , cluster identity 4711 [ 2038.941270][T32471] tipc: Failed to obtain node identity [ 2038.948592][T32471] tipc: Enabling of bearer rejected, failed to enable media [ 2039.754161][T32498] can: request_module (can-proto-0) failed. [ 2040.270347][T32533] netlink: 'syz.4.32769': attribute type 27 has an invalid length. [ 2040.346669][T32539] netlink: 224 bytes leftover after parsing attributes in process `syz.8.32772'. [ 2040.379928][T32539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32539 comm=syz.8.32772 [ 2040.422659][T32542] overlayfs: failed to clone upperpath [ 2040.494957][T32550] bpf: Bad value for 'mode' [ 2040.506454][T32550] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2040.671906][ T36] kauditd_printk_skb: 1191 callbacks suppressed [ 2040.671927][ T36] audit: type=1400 audit(2016777818.483:330040): avc: denied { read write } for pid=32561 comm="syz.4.32780" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2040.718764][ T36] audit: type=1400 audit(2016777818.483:330041): avc: denied { read write open } for pid=32561 comm="syz.4.32780" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2040.745771][ T36] audit: type=1400 audit(2016777818.521:330042): avc: denied { ioctl } for pid=32561 comm="syz.4.32780" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2040.772523][ T36] audit: type=1400 audit(2016777818.530:330043): avc: denied { create } for pid=32563 comm="syz.8.32781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2040.794958][ T36] audit: type=1400 audit(2016777818.530:330044): avc: denied { write } for pid=32563 comm="syz.8.32781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2040.817088][ T36] audit: type=1400 audit(2016777818.530:330045): avc: denied { read } for pid=32563 comm="syz.8.32781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2040.838610][ T36] audit: type=1400 audit(2016777818.530:330046): avc: denied { read } for pid=32563 comm="syz.8.32781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2040.860280][ T36] audit: type=1400 audit(2016777818.530:330047): avc: denied { write } for pid=32563 comm="syz.8.32781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2041.275899][ T36] audit: type=1400 audit(2016777819.046:330048): avc: denied { read write } for pid=31311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2041.309668][ T36] audit: type=1400 audit(2016777819.046:330049): avc: denied { read write open } for pid=31311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2041.504252][T32586] netlink: 'syz.4.32787': attribute type 4 has an invalid length. [ 2041.528214][T32587] netlink: 'syz.4.32787': attribute type 4 has an invalid length. [ 2041.668326][T32597] netlink: 'syz.7.32790': attribute type 4 has an invalid length. [ 2041.681833][T32597] netlink: 'syz.7.32790': attribute type 17 has an invalid length. [ 2041.714063][T32599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2041.720051][T32599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32791'. [ 2041.738739][T32600] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false [ 2041.782789][T32603] rust_binder: Failed to allocate buffer. len:64, is_oneway:true [ 2041.916460][T32611] rust_binder: Write failure EFAULT in pid:211 [ 2042.226223][ T609] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 2042.242680][T32622] netlink: 56 bytes leftover after parsing attributes in process `syz.8.32799'. [ 2042.399429][ T609] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2042.411476][ T609] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2042.427574][ T609] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2042.438035][ T609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.448868][T32638] netlink: 28 bytes leftover after parsing attributes in process `syz.8.32806'. [ 2042.456251][ T609] usb 5-1: config 0 descriptor?? [ 2042.465436][T32615] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2042.476708][ T609] usbhid 5-1:0.0: can't add hid device: -22 [ 2042.485107][ T609] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 2042.625468][T32650] IPv6: NLM_F_CREATE should be specified when creating new route [ 2042.646029][T32650] /dev/rnullb0: Can't lookup blockdev [ 2042.679877][T32657] incfs: Options parsing error. -22 [ 2042.685386][T32657] incfs: mount failed -22 [ 2042.692857][ T609] usb 5-1: USB disconnect, device number 42 [ 2042.786083][T32669] netlink: 20 bytes leftover after parsing attributes in process `syz.5.32816'. [ 2043.264593][T32680] rust_binder: 217: no such ref 0 [ 2043.271353][T32680] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2043.279050][T32680] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2043.430186][T32690] incfs: Options parsing error. -22 [ 2043.435956][T32690] incfs: mount failed -22 [ 2043.443742][T32690] /dev/rnullb0: Can't lookup blockdev [ 2043.445794][T32691] /dev/rnullb0: Can't lookup blockdev [ 2043.579820][T15828] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2043.739530][T15828] usb 5-1: Using ep0 maxpacket: 16 [ 2043.747892][T15828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2043.759292][T15828] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 2043.768818][T15828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.779182][T15828] usb 5-1: config 0 descriptor?? [ 2044.219370][T15828] uclogic 0003:28BD:0042.0030: interface is invalid, ignoring [ 2044.436215][T29102] usb 5-1: USB disconnect, device number 43 [ 2044.572567][T32720] 9pnet_fd: Insufficient options for proto=fd [ 2045.185771][T32755] rust_binder: Write failure EFAULT in pid:228 [ 2045.230066][T32760] rust_binder: Write failure EFAULT in pid:233 [ 2045.762464][ T318] netlink: 'syz.8.32858': attribute type 27 has an invalid length. [ 2045.793294][ T321] SELinux: security_context_str_to_sid () failed with errno=-22 [ 2045.818000][ T8119] bridge0: port 2(bridge_slave_1) entered blocking state [ 2045.825269][ T8119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2045.915648][ T330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 2046.022479][ T36] kauditd_printk_skb: 560 callbacks suppressed [ 2046.022502][ T36] audit: type=1400 audit(2016777823.503:330610): avc: denied { read } for pid=337 comm="syz.4.32864" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2046.068803][ T36] audit: type=1400 audit(2016777823.503:330611): avc: denied { read open } for pid=337 comm="syz.4.32864" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2046.096771][ T36] audit: type=1400 audit(2016777823.550:330612): avc: denied { create } for pid=339 comm="syz.8.32865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2046.120436][ T36] audit: type=1400 audit(2016777823.550:330613): avc: denied { create } for pid=337 comm="syz.4.32864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2046.150167][ T36] audit: type=1400 audit(2016777823.579:330614): avc: denied { getopt } for pid=337 comm="syz.4.32864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2046.171652][ T36] audit: type=1400 audit(2016777823.579:330615): avc: denied { ioctl } for pid=337 comm="syz.4.32864" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2046.210261][ T36] audit: type=1400 audit(2016777823.588:330616): avc: denied { read write } for pid=31311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2046.239313][ T36] audit: type=1400 audit(2016777823.588:330617): avc: denied { read write open } for pid=31311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2046.242406][ T346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:248 [ 2046.266803][ T36] audit: type=1400 audit(2016777823.588:330618): avc: denied { ioctl } for pid=31311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2046.304220][ T36] audit: type=1400 audit(2016777823.682:330619): avc: denied { read } for pid=344 comm="syz.4.32867" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2046.410726][ T351] netlink: 'syz.8.32871': attribute type 16 has an invalid length. [ 2046.423080][ T353] 9pnet_fd: Insufficient options for proto=fd [ 2046.426020][ T351] netlink: 'syz.8.32871': attribute type 3 has an invalid length. [ 2046.433440][ T353] __vm_enough_memory: pid: 353, comm: syz.4.32872, bytes: 18014402804453376 not enough memory for the allocation [ 2046.437948][ T351] netlink: 64066 bytes leftover after parsing attributes in process `syz.8.32871'. [ 2046.473883][ T351] overlayfs: failed to clone upperpath [ 2046.512056][ T360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2046.514069][ T360] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 2047.053989][ T10] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 2047.227186][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2047.238636][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2047.251666][ T10] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2047.261023][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.272871][ T10] usb 5-1: config 0 descriptor?? [ 2047.279774][ T384] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2047.290253][ T10] usbhid 5-1:0.0: can't add hid device: -22 [ 2047.296486][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 2047.505348][ T45] usb 5-1: USB disconnect, device number 44 [ 2048.147145][ T433] futex_wake_op: syz.7.32898 tries to shift op by 32; fix this program [ 2048.343542][T15828] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2048.503353][T15828] usb 5-1: Using ep0 maxpacket: 16 [ 2048.515513][T15828] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 2048.526206][T15828] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2048.539674][T15828] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2048.549155][T15828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.557366][T15828] usb 5-1: Product: á¾›ï”泠㲴뱟㛶ï’쎫㙢젯芻䢀ꈿ៷n乓嚤궻ḉ䒭紌觶켊﬷㞼婹 [ 2048.568668][T15828] usb 5-1: Manufacturer: ã Š [ 2048.573331][T15828] usb 5-1: SerialNumber: ꀾ戉櫺벋᠈绤ç¿é¢·â›£å¾¹ä”暦祰鞾峦ᮃ릓〠éˆà©žè²›è‡Žæ¦¸å¢†è¿‚à¿© [ 2048.838161][T15828] cdc_ncm 5-1:1.0: bind() failure [ 2048.851301][T15828] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2048.859343][T15828] cdc_ncm 5-1:1.1: bind() failure [ 2048.865986][T15828] usb 5-1: USB disconnect, device number 45 [ 2048.875694][T27896] udevd[27896]: setting owner of /dev/bus/usb/005/045 to uid=0, gid=0 failed: No such file or directory [ 2049.282726][ T461] netlink: 12 bytes leftover after parsing attributes in process `syz.8.32907'. [ 2049.535957][ T478] fuse: Bad value for 'user_id' [ 2049.540991][ T478] fuse: Bad value for 'user_id' [ 2049.546908][ T480] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2049.607174][ T492] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 2050.516654][ T555] netlink: 'syz.4.32939': attribute type 1 has an invalid length. [ 2050.645966][ T557] 9pnet_fd: Insufficient options for proto=fd [ 2050.826687][ T609] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2050.975893][ T609] usb 5-1: device descriptor read/64, error -71 [ 2051.231697][ T609] usb 5-1: device descriptor read/64, error -71 [ 2051.360198][ T36] kauditd_printk_skb: 553 callbacks suppressed [ 2051.360221][ T36] audit: type=1400 audit(2016777835.514:331173): avc: denied { write } for pid=578 comm="syz.5.32946" name="rnullb0" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 2051.414926][ T36] audit: type=1400 audit(2016777835.570:331174): avc: denied { create } for pid=580 comm="syz.7.32947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2051.436161][ T36] audit: type=1400 audit(2016777835.570:331175): avc: denied { create } for pid=583 comm="syz.5.32948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2051.459794][ T36] audit: type=1400 audit(2016777835.570:331176): avc: denied { write } for pid=583 comm="syz.5.32948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2051.487811][ T36] audit: type=1400 audit(2016777835.570:331177): avc: denied { nlmsg_write } for pid=583 comm="syz.5.32948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2051.511098][ T609] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2051.519324][ T36] audit: type=1400 audit(2016777835.570:331178): avc: denied { read } for pid=583 comm="syz.5.32948" name="rnullb0" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 2051.525734][ T588] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2051.548134][ T36] audit: type=1400 audit(2016777835.570:331179): avc: denied { read open } for pid=583 comm="syz.5.32948" path="/dev/rnullb0" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 2051.558739][ T582] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2051.582272][ T36] audit: type=1400 audit(2016777835.589:331180): avc: denied { ioctl } for pid=554 comm="syz.4.32939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2052.137700][ T609] usb 5-1: device descriptor read/64, error -71 [ 2052.199560][ T611] incfs: Backing dir is not set, filesystem can't be mounted. [ 2052.207436][ T611] incfs: mount failed -2 [ 2052.393574][ T609] usb 5-1: device descriptor read/64, error -71 [ 2052.510918][ T609] usb usb5-port1: attempt power cycle [ 2052.873109][ T609] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2052.898323][ T609] usb 5-1: device descriptor read/8, error -71 [ 2053.048343][ T609] usb 5-1: device descriptor read/8, error -71 [ 2053.310130][ T609] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2053.344732][ T609] usb 5-1: device descriptor read/8, error -71 [ 2053.489180][ T609] usb 5-1: device descriptor read/8, error -71 [ 2053.608915][ T609] usb usb5-port1: unable to enumerate USB device [ 2053.783837][ T639] netlink: 104 bytes leftover after parsing attributes in process `syz.4.32965'. [ 2054.058965][ T652] rust_binder: Write failure EFAULT in pid:284 [ 2054.283580][ T671] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2054.292060][ T671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294 [ 2054.301134][ T673] overlayfs: failed to clone upperpath [ 2054.363340][ T676] netlink: 260 bytes leftover after parsing attributes in process `syz.8.32978'. [ 2054.499044][ T682] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=682 comm=syz.8.32978 [ 2054.631183][ T692] netlink: 'syz.7.32983': attribute type 46 has an invalid length. [ 2054.639458][ T692] netlink: 44 bytes leftover after parsing attributes in process `syz.7.32983'. [ 2054.652338][ T692] netlink: 8540 bytes leftover after parsing attributes in process `syz.7.32983'. [ 2054.663780][ T692] netlink: 4 bytes leftover after parsing attributes in process `syz.7.32983'. [ 2054.674443][ T609] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2054.835185][ T609] usb 5-1: Using ep0 maxpacket: 8 [ 2054.836079][ T700] /dev/rnullb0: Can't lookup blockdev [ 2054.841863][ T699] /dev/rnullb0: Can't lookup blockdev [ 2054.848101][ T700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=700 comm=syz.5.32985 [ 2054.857722][ T609] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2054.874292][ T609] usb 5-1: config 179 has no interface number 0 [ 2054.882613][ T609] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2054.894906][ T609] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2054.907338][ T609] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2054.917939][ T609] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2054.932305][ T609] usb 5-1: config 179 interface 65 has no altsetting 0 [ 2054.940809][ T609] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2054.951523][ T609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2055.188573][ T10] usb 5-1: USB disconnect, device number 50 [ 2055.234535][ T721] /dev/rnullb0: Can't lookup blockdev [ 2056.369889][ T793] No source specified [ 2056.380829][ T795] No source specified [ 2056.422905][ T798] netlink: 'syz.7.33017': attribute type 13 has an invalid length. [ 2056.432361][ T798] erspan0: refused to change device tx_queue_len [ 2056.442660][ T798] netlink: 'syz.7.33017': attribute type 13 has an invalid length. [ 2056.452644][ T798] erspan0: refused to change device tx_queue_len [ 2056.461591][ T798] netlink: 'syz.7.33017': attribute type 13 has an invalid length. [ 2056.471929][ T798] erspan0: refused to change device tx_queue_len [ 2056.480231][ T798] netlink: 'syz.7.33017': attribute type 13 has an invalid length. [ 2056.489587][ T798] erspan0: refused to change device tx_queue_len [ 2056.497084][ T798] netlink: 'syz.7.33017': attribute type 13 has an invalid length. [ 2056.506129][ T798] erspan0: refused to change device tx_queue_len [ 2056.514398][ T798] netlink: 'syz.7.33017': attribute type 13 has an invalid length. [ 2056.537686][ T798] erspan0: refused to change device tx_queue_len [ 2056.563180][ T798] netlink: 'syz.7.33017': attribute type 13 has an invalid length. [ 2056.597327][ T798] erspan0: refused to change device tx_queue_len [ 2056.614844][ T798] netlink: 'syz.7.33017': attribute type 13 has an invalid length. [ 2056.629714][ T798] erspan0: refused to change device tx_queue_len [ 2056.639494][ T798] netlink: 'syz.7.33017': attribute type 13 has an invalid length. [ 2056.651316][ T798] erspan0: refused to change device tx_queue_len [ 2056.679946][ T798] erspan0: refused to change device tx_queue_len [ 2056.700283][ T36] kauditd_printk_skb: 681 callbacks suppressed [ 2056.700303][ T36] audit: type=1400 audit(2000000000.262:331843): avc: denied { mounton } for pid=797 comm="syz.7.33017" path="/434/file0" dev="tmpfs" ino=2335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2056.738707][ T36] audit: type=1400 audit(2000000000.262:331844): avc: denied { read write } for pid=31311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2056.764201][ T36] audit: type=1400 audit(2000000000.262:331845): avc: denied { read write open } for pid=31311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2056.811606][ T36] audit: type=1400 audit(2000000000.262:331846): avc: denied { ioctl } for pid=31311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2056.817002][ T808] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2056.843175][ T36] audit: type=1400 audit(2000000000.290:331847): avc: denied { mounton } for pid=797 comm="syz.7.33017" path="/434/file0" dev="tmpfs" ino=2335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2056.875716][ T798] erspan0: refused to change device tx_queue_len [ 2056.884652][ T36] audit: type=1400 audit(2000000000.337:331848): avc: denied { mounton } for pid=797 comm="syz.7.33017" path="/434/file0" dev="tmpfs" ino=2335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2056.890911][ T808] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 2056.909451][ T36] audit: type=1400 audit(2000000000.347:331849): avc: denied { mounton } for pid=797 comm="syz.7.33017" path="/434/file0" dev="tmpfs" ino=2335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2056.914328][ T807] overlayfs: failed to clone upperpath [ 2056.918342][ T36] audit: type=1400 audit(2000000000.347:331850): avc: denied { mounton } for pid=797 comm="syz.7.33017" path="/434/file0" dev="tmpfs" ino=2335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2056.974147][ T798] erspan0: refused to change device tx_queue_len [ 2057.001396][ T36] audit: type=1400 audit(2000000000.365:331851): avc: denied { read } for pid=805 comm="syz.4.33020" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2057.026186][ T36] audit: type=1400 audit(2000000000.365:331852): avc: denied { read open } for pid=805 comm="syz.4.33020" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2057.064092][ T798] erspan0: refused to change device tx_queue_len [ 2057.074525][ T798] erspan0: refused to change device tx_queue_len [ 2057.082652][ T798] erspan0: refused to change device tx_queue_len [ 2057.101368][ T798] erspan0: refused to change device tx_queue_len [ 2057.108859][ T798] erspan0: refused to change device tx_queue_len [ 2057.116596][ T798] erspan0: refused to change device tx_queue_len [ 2057.124634][ T798] erspan0: refused to change device tx_queue_len [ 2057.132236][ T798] erspan0: refused to change device tx_queue_len [ 2057.139669][ T798] erspan0: refused to change device tx_queue_len [ 2057.146912][ T798] erspan0: refused to change device tx_queue_len [ 2057.154523][ T798] erspan0: refused to change device tx_queue_len [ 2057.161917][ T798] erspan0: refused to change device tx_queue_len [ 2057.169786][ T798] erspan0: refused to change device tx_queue_len [ 2057.177333][ T798] erspan0: refused to change device tx_queue_len [ 2057.184592][ T798] erspan0: refused to change device tx_queue_len [ 2057.192051][ T798] erspan0: refused to change device tx_queue_len [ 2057.199358][ T798] erspan0: refused to change device tx_queue_len [ 2057.207680][ T798] erspan0: refused to change device tx_queue_len [ 2057.215635][ T798] erspan0: refused to change device tx_queue_len [ 2057.225237][ T798] erspan0: refused to change device tx_queue_len [ 2057.233975][ T798] erspan0: refused to change device tx_queue_len [ 2057.241436][ T798] erspan0: refused to change device tx_queue_len [ 2057.250203][ T798] erspan0: refused to change device tx_queue_len [ 2057.259007][ T798] erspan0: refused to change device tx_queue_len [ 2057.267189][ T798] erspan0: refused to change device tx_queue_len [ 2057.274500][ T798] erspan0: refused to change device tx_queue_len [ 2057.436168][ T825] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2057.458419][ T825] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 2057.579644][ T840] netlink: 60 bytes leftover after parsing attributes in process `syz.4.33030'. [ 2057.688928][ T847] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2057.689924][ T847] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 2057.837019][ T864] 9pnet: Could not find request transport: xen [ 2057.931778][ T873] /dev/loop8: Can't lookup blockdev [ 2058.081610][ T883] overlayfs: failed to clone upperpath [ 2059.709298][ T950] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=950 comm=syz.8.33068 [ 2060.373688][ T981] sock: sock_timestamping_bind_phc: sock not bind to device [ 2060.611181][ T982] overlayfs: failed to clone upperpath [ 2060.914269][ T1012] /dev/rnullb0: Can't lookup blockdev [ 2061.151256][ T1028] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false [ 2061.151311][ T1028] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2061.162214][ T1028] rust_binder: Read failure Err(EFAULT) in pid:347 [ 2061.292667][ T1039] fuse: Bad value for 'fd' [ 2061.405948][ T1042] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2061.456305][ T1042] netlink: 57 bytes leftover after parsing attributes in process `syz.4.33098'. [ 2061.482173][ T1042] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 2061.568253][ T1049] fuse: Unknown parameter 'fd?0x0000000000000000' [ 2061.717279][ T1057] binder: Unknown parameter 'contextÌðÔð[7’' [ 2061.848837][ T1065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:361 [ 2062.039602][ T36] kauditd_printk_skb: 2315 callbacks suppressed [ 2062.039624][ T36] audit: type=1326 audit(2000000005.263:334168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1064 comm="syz.4.33107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb914785d67 code=0x7ffc0000 [ 2062.092868][ T36] audit: type=1326 audit(2000000005.272:334169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1064 comm="syz.4.33107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb91472af79 code=0x7ffc0000 [ 2062.118272][ T36] audit: type=1326 audit(2000000005.272:334170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1064 comm="syz.4.33107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb914785d67 code=0x7ffc0000 [ 2062.142904][ T36] audit: type=1326 audit(2000000005.272:334171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1064 comm="syz.4.33107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb91472af79 code=0x7ffc0000 [ 2062.168536][ T36] audit: type=1326 audit(2000000005.272:334172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1064 comm="syz.4.33107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb914785d67 code=0x7ffc0000 [ 2062.193699][ T36] audit: type=1326 audit(2000000005.272:334173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1064 comm="syz.4.33107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb91472af79 code=0x7ffc0000 [ 2062.218311][ T36] audit: type=1326 audit(2000000005.272:334174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1064 comm="syz.4.33107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb914785d67 code=0x7ffc0000 [ 2062.243629][ T36] audit: type=1326 audit(2000000005.272:334175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1064 comm="syz.4.33107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb91472af79 code=0x7ffc0000 [ 2062.268368][ T36] audit: type=1326 audit(2000000005.272:334176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1064 comm="syz.4.33107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb914785d67 code=0x7ffc0000 [ 2062.294269][ T36] audit: type=1326 audit(2000000005.272:334177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1064 comm="syz.4.33107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb91472af79 code=0x7ffc0000 [ 2062.558661][ T1076] netlink: 140 bytes leftover after parsing attributes in process `syz.7.33110'. [ 2062.621832][ T1083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2062.632229][ T1085] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 2062.682480][ T1089] netlink: 20 bytes leftover after parsing attributes in process `syz.8.33116'. [ 2062.717708][ T1091] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2062.722983][ T1091] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 2062.756058][ T1093] netlink: 140 bytes leftover after parsing attributes in process `syz.7.33117'. [ 2062.773916][ T1093] netlink: 48 bytes leftover after parsing attributes in process `syz.7.33117'. [ 2063.355557][ T1112] validate_nla: 29 callbacks suppressed [ 2063.355575][ T1112] netlink: 'syz.8.33123': attribute type 21 has an invalid length. [ 2063.369331][ T1112] netlink: 388 bytes leftover after parsing attributes in process `syz.8.33123'. [ 2063.902103][ T1124] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2064.160699][T29102] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2064.333901][T29102] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 2064.343290][T29102] usb 5-1: config 220 has an invalid descriptor of length 149, skipping remainder of the config [ 2064.354460][T29102] usb 5-1: config 220 has no interface number 2 [ 2064.361280][T29102] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2064.375016][T29102] usb 5-1: config 220 interface 0 has no altsetting 0 [ 2064.382323][T29102] usb 5-1: config 220 interface 76 has no altsetting 0 [ 2064.389705][T29102] usb 5-1: config 220 interface 1 has no altsetting 0 [ 2064.400868][T29102] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2064.410686][T29102] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.420755][T29102] usb 5-1: Product: syz [ 2064.426158][T29102] usb 5-1: Manufacturer: syz [ 2064.432206][T29102] usb 5-1: SerialNumber: syz [ 2064.571114][ T1135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.33129'. [ 2064.582344][ T1135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.33129'. [ 2064.659560][ T1124] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 2064.660593][ T1124] rust_binder: Read failure Err(EAGAIN) in pid:389 [ 2064.674119][T29102] usb 5-1: selecting invalid altsetting 0 [ 2064.695764][T29102] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 2064.702806][T29102] usb 5-1: No valid video chain found. [ 2064.715523][T29102] usb 5-1: USB disconnect, device number 51 [ 2064.768729][ T1144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1144 comm=syz.7.33131 [ 2065.224850][ T1146] overlayfs: failed to clone upperpath [ 2065.546270][ T609] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2065.707150][ T609] usb 5-1: Using ep0 maxpacket: 8 [ 2065.716067][ T609] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2065.724674][ T609] usb 5-1: config 179 has no interface number 0 [ 2065.732055][ T609] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2065.755853][ T609] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2065.769002][ T609] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2065.780429][ T609] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2065.794286][ T609] usb 5-1: config 179 interface 65 has no altsetting 0 [ 2065.801946][ T609] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2065.811802][ T609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.003887][ T1207] overlayfs: failed to clone upperpath [ 2066.042395][T29102] usb 5-1: USB disconnect, device number 52 [ 2066.500128][ T1230] No source specified [ 2066.510483][ T1230] netlink: 188 bytes leftover after parsing attributes in process `syz.7.33165'. [ 2066.543939][ T1232] 9pnet_fd: Insufficient options for proto=fd [ 2066.965048][ T1264] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 2067.017233][T15828] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2067.187709][T15828] usb 5-1: Using ep0 maxpacket: 32 [ 2067.202326][T15828] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2067.212444][T15828] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2067.222549][T15828] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2067.233020][T15828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 2067.247894][T15828] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2067.259500][T15828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2067.270474][T15828] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2067.276011][ T1287] netlink: 28 bytes leftover after parsing attributes in process `syz.8.33186'. [ 2067.282033][T15828] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2067.304028][T15828] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 2067.315853][T15828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.333479][T15828] usb 5-1: config 0 descriptor?? [ 2067.350249][ T1252] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2067.360293][T15828] usblp0: Disabling reads from problematic bidirectional printer [ 2067.392132][ T36] kauditd_printk_skb: 1545 callbacks suppressed [ 2067.392152][ T36] audit: type=1400 audit(2000000010.292:335723): avc: denied { mount } for pid=1290 comm="syz.8.33188" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2067.425371][ T36] audit: type=1400 audit(2000000010.320:335724): avc: denied { create } for pid=1290 comm="syz.8.33188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2067.482736][ T36] audit: type=1400 audit(2000000010.367:335725): avc: denied { mounton } for pid=1294 comm="syz.8.33190" path="/353/file0" dev="tmpfs" ino=1903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2067.551739][ T36] audit: type=1400 audit(2000000010.432:335726): avc: denied { block_suspend } for pid=1296 comm="syz.7.33191" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2067.592470][ T36] audit: type=1400 audit(2000000010.470:335727): avc: denied { read } for pid=1249 comm="syz.4.33174" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2067.626931][T15828] usblp 5-1:0.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 2067.634967][ T36] audit: type=1400 audit(2000000010.470:335728): avc: denied { read open } for pid=1249 comm="syz.4.33174" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2067.647880][T15828] usb 5-1: USB disconnect, device number 53 [ 2067.774079][T15828] usblp0: removed [ 2067.838322][ T36] audit: type=1400 audit(2000000010.695:335729): avc: denied { create } for pid=1312 comm="syz.5.33195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2067.884406][ T36] audit: type=1400 audit(2000000010.695:335730): avc: denied { create } for pid=1312 comm="syz.5.33195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2067.906694][ T36] audit: type=1400 audit(2000000010.695:335731): avc: denied { create } for pid=1312 comm="syz.5.33195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2067.920091][ T1318] 8021q: VLANs not supported on ip_vti0 [ 2067.942569][ T1320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2067.950057][ T1320] IPv6: NLM_F_CREATE should be set when creating new route [ 2067.957629][ T1320] IPv6: NLM_F_CREATE should be set when creating new route [ 2067.966415][ T36] audit: type=1400 audit(2000000010.704:335732): avc: denied { create } for pid=1312 comm="syz.5.33195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2068.049823][ T1328] /dev/rnullb0: Can't lookup blockdev [ 2068.147526][ T1337] netlink: 4 bytes leftover after parsing attributes in process `syz.7.33204'. [ 2068.267761][ T1341] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 2068.387975][ T1346] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2068.397775][ T1346] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 2068.632420][ T1352] netlink: 'syz.4.33210': attribute type 16 has an invalid length. [ 2068.641726][ T1352] netlink: 'syz.4.33210': attribute type 3 has an invalid length. [ 2068.650347][ T1352] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.33210'. [ 2068.722142][ T1366] /dev/rnullb0: Can't lookup blockdev [ 2068.735463][ T1364] can: request_module (can-proto-6) failed. [ 2068.820341][ T1371] netlink: 'syz.8.33218': attribute type 58 has an invalid length. [ 2068.937255][ T1373] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2068.938897][ T1371] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2068.958691][ T1384] No source specified [ 2068.963760][ T1373] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 2069.033312][ T1387] veth1: entered allmulticast mode [ 2069.076699][ T1394] veth1: left allmulticast mode [ 2069.214504][ T1410] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2069.215494][ T1410] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 2069.282268][ T1416] netlink: 'syz.5.33230': attribute type 10 has an invalid length. [ 2069.301633][ T1414] veth1: entered allmulticast mode [ 2069.317387][ T1418] netlink: 'syz.5.33230': attribute type 10 has an invalid length. [ 2069.402296][ T1422] netlink: 68 bytes leftover after parsing attributes in process `syz.5.33231'. [ 2069.438013][ T1423] veth1: left allmulticast mode [ 2070.139350][ T1458] netlink: 316 bytes leftover after parsing attributes in process `syz.7.33244'. [ 2070.150584][ T1458] netlink: 316 bytes leftover after parsing attributes in process `syz.7.33244'. [ 2070.566559][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2070.601057][ T1495] netlink: 180 bytes leftover after parsing attributes in process `syz.5.33255'. [ 2070.739844][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2070.751781][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 2070.763563][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2070.777096][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 2070.786916][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2070.798505][ T10] usb 5-1: config 0 descriptor?? [ 2070.824013][ T1468] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2070.964989][ T1522] 9pnet_fd: Insufficient options for proto=fd [ 2070.996105][ T1522] tmpfs: Unknown parameter 'batadv_slave_1' [ 2071.110329][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 2071.120807][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2071.147983][ T10] usb 5-1: USB disconnect, device number 54 [ 2071.186833][ T1538] netlink: 64 bytes leftover after parsing attributes in process `syz.8.33268'. [ 2071.202385][ T1539] netlink: 64 bytes leftover after parsing attributes in process `syz.8.33268'. [ 2071.215517][ T1539] 9pnet_fd: Insufficient options for proto=fd [ 2071.886416][ T1595] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2072.384737][ T1631] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2072.598186][ T1649] x_tables: duplicate underflow at hook 2 [ 2072.612415][ T1649] overlay: Unknown parameter '/' [ 2072.621022][ T1653] overlay: Unknown parameter '/' [ 2072.732392][ T36] kauditd_printk_skb: 795 callbacks suppressed [ 2072.732413][ T36] audit: type=1400 audit(2000000015.302:336528): avc: denied { create } for pid=1655 comm="syz.8.33308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2072.763872][ T36] audit: type=1400 audit(2000000015.320:336529): avc: denied { create } for pid=1654 comm="syz.7.33306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2072.806733][ T36] audit: type=1400 audit(2000000015.330:336530): avc: denied { ioctl } for pid=1655 comm="syz.8.33308" path="socket:[306939]" dev="sockfs" ino=306939 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2072.834557][ T36] audit: type=1400 audit(2000000015.330:336531): avc: denied { read write } for pid=31311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2072.880662][ T36] audit: type=1400 audit(2000000015.330:336532): avc: denied { read write open } for pid=31311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2072.907618][ T36] audit: type=1400 audit(2000000015.330:336533): avc: denied { ioctl } for pid=31311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2072.936387][ T36] audit: type=1400 audit(2000000015.358:336534): avc: denied { read write } for pid=1660 comm="syz.4.33309" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2072.963024][ T36] audit: type=1400 audit(2000000015.358:336535): avc: denied { read write open } for pid=1660 comm="syz.4.33309" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2073.007809][ T36] audit: type=1400 audit(2000000015.358:336536): avc: denied { ioctl } for pid=1660 comm="syz.4.33309" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2073.035597][ T1676] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 2073.038105][ T36] audit: type=1400 audit(2000000015.358:336537): avc: denied { ioctl } for pid=1660 comm="syz.4.33309" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2074.156550][ T1695] overlayfs: failed to clone upperpath [ 2074.300443][ T1707] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2074.301850][ T1707] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 2074.370988][ T1719] netlink: 'syz.8.33321': attribute type 1 has an invalid length. [ 2074.503663][ T1727] rust_binder: Write failure EFAULT in pid:461 [ 2075.051385][ T1748] netlink: 4 bytes leftover after parsing attributes in process `syz.7.33328'. [ 2075.070058][ T1748] fuse: Bad value for 'group_id' [ 2075.076794][ T1748] fuse: Bad value for 'group_id' [ 2076.070681][ T1773] netlink: 324 bytes leftover after parsing attributes in process `syz.7.33337'. [ 2076.371188][ T1783] rust_binder: Write failure EFAULT in pid:478 [ 2076.502578][ T1791] netlink: 'syz.4.33344': attribute type 4 has an invalid length. [ 2076.517179][ T1791] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.33344'. [ 2076.558245][ T1793] netlink: 28 bytes leftover after parsing attributes in process `syz.7.33345'. [ 2076.678706][ T1799] tipc: Enabling of bearer rejected, failed to enable media [ 2076.830606][ T1807] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2076.832990][ T1807] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2076.896354][ T1807] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 2077.177115][ T1838] netlink: 140 bytes leftover after parsing attributes in process `syz.8.33363'. [ 2077.195949][ T1838] netlink: 48 bytes leftover after parsing attributes in process `syz.8.33363'. [ 2077.377448][ T609] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 2077.516019][ T609] usb 5-1: device descriptor read/64, error -71 [ 2077.771808][ T609] usb 5-1: device descriptor read/64, error -71 [ 2078.027621][ T609] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 2078.113457][ T36] kauditd_printk_skb: 530 callbacks suppressed [ 2078.113478][ T36] audit: type=1400 audit(2000000020.349:337068): avc: denied { ioctl } for pid=1828 comm="syz.4.33360" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2078.146533][ T36] audit: type=1400 audit(2000000020.368:337069): avc: denied { create } for pid=1864 comm="syz.7.33373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2078.168363][ T36] audit: type=1400 audit(2000000020.368:337070): avc: denied { write } for pid=1864 comm="syz.7.33373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2078.189655][ T609] usb 5-1: device descriptor read/64, error -71 [ 2078.197193][ T36] audit: type=1400 audit(2000000020.377:337071): avc: denied { read } for pid=1864 comm="syz.7.33373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2078.219667][ T36] audit: type=1400 audit(2000000020.377:337072): avc: denied { read } for pid=1864 comm="syz.7.33373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2078.244126][ T36] audit: type=1400 audit(2000000020.424:337073): avc: denied { read } for pid=1864 comm="syz.7.33373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2078.265641][ T36] audit: type=1400 audit(2000000020.434:337074): avc: denied { write } for pid=1864 comm="syz.7.33373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2078.287501][ T36] audit: type=1400 audit(2000000020.471:337075): avc: denied { create } for pid=1866 comm="syz.8.33374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2078.308240][ T36] audit: type=1400 audit(2000000020.471:337076): avc: denied { setopt } for pid=1866 comm="syz.8.33374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2078.328856][ T36] audit: type=1400 audit(2000000020.471:337077): avc: denied { bind } for pid=1866 comm="syz.8.33374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2078.443310][ T609] usb 5-1: device descriptor read/64, error -71 [ 2078.561115][ T609] usb usb5-port1: attempt power cycle [ 2078.874780][ T1878] overlayfs: failed to clone upperpath [ 2078.933814][ T609] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 2078.957953][ T609] usb 5-1: device descriptor read/8, error -71 [ 2079.078424][ T1895] overlayfs: failed to clone upperpath [ 2079.099556][ T609] usb 5-1: device descriptor read/8, error -71 [ 2079.297946][ T1919] sock: sock_set_timeout: `syz.5.33392' (pid 1919) tries to set negative timeout [ 2079.359928][ T609] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 2079.395492][ T609] usb 5-1: device descriptor read/8, error -71 [ 2079.443787][ T1930] overlayfs: failed to clone upperpath [ 2079.551990][ T609] usb 5-1: device descriptor read/8, error -71 [ 2079.680194][ T609] usb usb5-port1: unable to enumerate USB device [ 2079.875325][ T1968] overlayfs: failed to clone upperpath [ 2080.033470][ T1970] netlink: 188 bytes leftover after parsing attributes in process `syz.5.33411'. [ 2080.044726][ T1970] /dev/rnullb0: Can't lookup blockdev [ 2080.509515][ T1991] SELinux: security_context_str_to_sid () failed with errno=-22 [ 2080.733878][ T2000] /dev/rnullb0: Can't lookup blockdev [ 2080.996405][ T2015] /dev/rnullb0: Can't lookup blockdev [ 2081.007971][ T2012] /dev/rnullb0: Can't lookup blockdev [ 2081.196424][ T2020] rust_binder: Write failure EFAULT in pid:516 [ 2081.876883][ T2078] tmpfs: Invalid uid '0x00000000ffffffff' [ 2082.137529][ T2086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.33446'. [ 2083.142380][ T2114] binder: Bad value for 'stats' [ 2083.352388][ T2117] fuse: Bad value for 'fd' [ 2083.529948][ T36] kauditd_printk_skb: 446 callbacks suppressed [ 2083.529970][ T36] audit: type=1400 audit(2000000025.434:337524): avc: denied { read } for pid=2119 comm="syz.4.33457" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2083.654285][ T36] audit: type=1400 audit(2000000025.434:337525): avc: denied { read open } for pid=2119 comm="syz.4.33457" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2083.743799][ T2060] syz.5.33440 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2083.757293][ T36] audit: type=1400 audit(2000000025.612:337526): avc: denied { create } for pid=2122 comm="syz.8.33458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2083.784244][ T2060] CPU: 1 UID: 0 PID: 2060 Comm: syz.5.33440 Not tainted syzkaller #0 274f9aef60e05467e019488b9f7ece6681bb0342 [ 2083.784283][ T2060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2083.784299][ T2060] Call Trace: [ 2083.784307][ T2060] [ 2083.784318][ T2060] __dump_stack+0x21/0x30 [ 2083.784353][ T2060] dump_stack_lvl+0x10c/0x190 [ 2083.784384][ T2060] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2083.784415][ T2060] ? ___ratelimit+0x3f7/0x5a0 [ 2083.784446][ T2060] dump_stack+0x19/0x20 [ 2083.784474][ T2060] dump_header+0xd7/0x490 [ 2083.784497][ T2060] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 2083.784541][ T2060] oom_kill_process+0x35d/0x640 [ 2083.784569][ T2060] ? sched_clock_cpu+0x75/0x400 [ 2083.784600][ T2060] out_of_memory+0x659/0xa80 [ 2083.784627][ T2060] ? __cfi_out_of_memory+0x10/0x10 [ 2083.784652][ T2060] ? mutex_lock_killable+0x92/0x1c0 [ 2083.784685][ T2060] ? __cfi_mutex_lock_killable+0x10/0x10 [ 2083.784719][ T2060] mem_cgroup_out_of_memory+0x279/0x350 [ 2083.784742][ T2060] ? drain_obj_stock+0xed0/0xed0 [ 2083.784764][ T2060] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 2083.784786][ T2060] try_charge_memcg+0x8f7/0xde0 [ 2083.784816][ T2060] ? __cfi_try_charge_memcg+0x10/0x10 [ 2083.784845][ T2060] ? __alloc_pages_noprof+0x31f/0x7b0 [ 2083.784876][ T2060] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 2083.784910][ T2060] __mem_cgroup_charge+0xf6/0x410 [ 2083.784941][ T2060] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 2083.784973][ T2060] ? __cfi___switch_to+0x10/0x10 [ 2083.785005][ T2060] shmem_alloc_and_add_folio+0x86d/0x1050 [ 2083.785034][ T2060] ? put_swap_device+0x130/0x130 [ 2083.785060][ T2060] ? shmem_huge_global_enabled+0x2da/0x360 [ 2083.785086][ T2060] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 2083.785110][ T2060] ? __kasan_check_write+0x18/0x20 [ 2083.785143][ T2060] ? _raw_spin_lock+0x8c/0x120 [ 2083.785168][ T2060] shmem_get_folio_gfp+0x5f0/0x1380 [ 2083.785195][ T2060] ? shmem_get_folio+0xc0/0xc0 [ 2083.785218][ T2060] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 2083.785249][ T2060] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 2083.785287][ T2060] ? inode_to_bdi+0x6d/0x100 [ 2083.785317][ T2060] shmem_write_begin+0xf4/0x270 [ 2083.785344][ T2060] generic_perform_write+0x32d/0x960 [ 2083.785380][ T2060] ? __cfi_generic_perform_write+0x10/0x10 [ 2083.785413][ T2060] ? down_write+0xe9/0x2a0 [ 2083.785434][ T2060] ? mnt_get_write_access_file+0x1af/0x3b0 [ 2083.785462][ T2060] ? mnt_put_write_access_file+0xc2/0x100 [ 2083.785491][ T2060] ? file_update_time+0x1ef/0x220 [ 2083.785520][ T2060] shmem_file_write_iter+0x105/0x130 [ 2083.785571][ T2060] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 2083.785600][ T2060] __kernel_write_iter+0x41d/0x8e0 [ 2083.785621][ T2060] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 2083.785651][ T2060] ? __cfi___kernel_write_iter+0x10/0x10 [ 2083.785671][ T2060] ? get_dump_page+0x160/0x220 [ 2083.785699][ T2060] ? __asan_memset+0x39/0x50 [ 2083.785731][ T2060] ? iov_iter_bvec+0xc0/0x180 [ 2083.785759][ T2060] dump_user_range+0xb06/0xdf0 [ 2083.785781][ T2060] ? __cfi_dump_emit+0x10/0x10 [ 2083.785814][ T2060] ? __cfi_dump_user_range+0x10/0x10 [ 2083.785836][ T2060] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 2083.785869][ T2060] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 2083.785902][ T2060] elf_core_dump+0x2ccc/0x3800 [ 2083.785931][ T2060] ? __cfi_elf_core_dump+0x10/0x10 [ 2083.785965][ T2060] ? dump_interrupted+0xf0/0xf0 [ 2083.785996][ T2060] ? filp_open+0x182/0x1d0 [ 2083.786025][ T2060] ? 0xffffffffff600000 [ 2083.786043][ T2060] ? freezing_slow_path+0x12b/0x170 [ 2083.786075][ T2060] do_coredump+0x1bf7/0x2bd0 [ 2083.786110][ T2060] ? __cfi_do_coredump+0x10/0x10 [ 2083.786142][ T2060] ? asm_exc_page_fault+0x2b/0x30 [ 2083.786170][ T2060] ? __kasan_slab_free+0x6a/0x80 [ 2083.786195][ T2060] ? kmem_cache_free+0x1c1/0x510 [ 2083.786216][ T2060] ? get_signal+0xa75/0x14f0 [ 2083.786245][ T2060] get_signal+0x11fd/0x14f0 [ 2083.786276][ T2060] arch_do_signal_or_restart+0x96/0x720 [ 2083.786339][ T2060] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 2083.786376][ T2060] irqentry_exit_to_user_mode+0x4e/0xb0 [ 2083.786398][ T2060] irqentry_exit+0x16/0x60 [ 2083.786418][ T2060] exc_page_fault+0x66/0xc0 [ 2083.786438][ T2060] asm_exc_page_fault+0x2b/0x30 [ 2083.786458][ T2060] RIP: 0033:0x7f9e5fb8eed1 [ 2083.786477][ T2060] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 2083.786498][ T2060] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 2083.786520][ T2060] RAX: 0000000000000000 RBX: 00007f9e5fde6090 RCX: 00007f9e5fb8eec9 [ 2083.786544][ T2060] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 2083.786562][ T2060] RBP: 00007f9e5fc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2083.786579][ T2060] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2083.786594][ T2060] R13: 00007f9e5fde6128 R14: 00007f9e5fde6090 R15: 00007ffc44e1d448 [ 2083.786620][ T2060] [ 2083.786637][ T2060] memory: usage 307200kB, limit 307200kB, failcnt 9106 [ 2083.929967][ T36] audit: type=1400 audit(2000000025.800:337527): avc: denied { ioctl } for pid=2119 comm="syz.4.33457" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2083.933228][ T2060] memory+swap: usage 366568kB, limit 9007199254740988kB, failcnt 0 [ 2083.938178][ T2120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2083.949724][ T2060] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2083.977712][ T36] audit: type=1400 audit(2000000025.847:337528): avc: denied { read } for pid=2119 comm="syz.4.33457" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2083.980019][ T2060] Memory cgroup stats for [ 2083.989305][ T2120] rust_binder: 535: no such ref 2 [ 2083.992252][ T2060] /syz5 [ 2084.001967][ T36] audit: type=1400 audit(2000000025.866:337529): avc: denied { read open } for pid=2119 comm="syz.4.33457" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2084.007118][ T2060] : [ 2084.009233][ T36] audit: type=1400 audit(2000000025.866:337530): avc: denied { ioctl } for pid=2119 comm="syz.4.33457" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2084.013423][ T2060] cache 304754688 [ 2084.021125][ T36] audit: type=1400 audit(2000000025.866:337531): avc: denied { ioctl } for pid=2119 comm="syz.4.33457" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2084.033477][ T2060] rss 9768960 [ 2084.036307][ T36] audit: type=1400 audit(2000000025.866:337532): avc: denied { ioctl } for pid=2119 comm="syz.4.33457" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2084.048427][ T2060] rss_huge 0 [ 2084.053387][ T36] audit: type=1400 audit(2000000025.894:337533): avc: denied { ioctl } for pid=2119 comm="syz.4.33457" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2084.068200][ T2060] shmem 304754688 [ 2084.313608][ T2138] fuse: Bad value for 'user_id' [ 2084.314438][ T2060] mapped_file 0 [ 2084.322758][ T2138] fuse: Bad value for 'user_id' [ 2084.330424][ T2060] dirty 0 [ 2084.490070][ T2146] rust_binder: Write failure EFAULT in pid:539 [ 2084.517188][ T2060] writeback 0 [ 2084.582082][ T2060] workingset_refault_anon 5375 [ 2084.588878][ T2060] workingset_refault_file 0 [ 2084.594147][ T2060] swap 60792832 [ 2084.605077][ T2060] swapcached 69632 [ 2084.608864][ T2060] pgpgin 1909074 [ 2084.612518][ T2060] pgpgout 1839428 [ 2084.616441][ T2060] pgfault 1252094 [ 2084.620153][ T2060] pgmajfault 2595 [ 2084.624414][ T2060] inactive_anon 62095360 [ 2084.628881][ T2060] active_anon 252477440 [ 2084.635955][ T2060] inactive_file 0 [ 2084.639880][ T2060] active_file 0 [ 2084.643805][ T2060] unevictable 0 [ 2084.661401][ T2060] hierarchical_memory_limit 314572800 [ 2084.666849][ T2060] hierarchical_memsw_limit 9223372036854771712 [ 2084.676891][ T2060] total_cache 304754688 [ 2084.681211][ T2060] total_rss 9768960 [ 2084.685512][ T2060] total_rss_huge 0 [ 2084.689352][ T2060] total_shmem 304754688 [ 2084.693540][ T2060] total_mapped_file 0 [ 2084.697740][ T2060] total_dirty 0 [ 2084.701274][ T2060] total_writeback 0 [ 2084.705104][ T2060] total_workingset_refault_anon 5375 [ 2084.711036][ T2060] total_workingset_refault_file 0 [ 2084.716187][ T2060] total_swap 60792832 [ 2084.720540][ T2060] total_swapcached 69632 [ 2084.725223][ T2060] total_pgpgin 1909074 [ 2084.729588][ T2060] total_pgpgout 1839428 [ 2084.733888][ T2060] total_pgfault 1252094 [ 2084.738110][ T2060] total_pgmajfault 2595 [ 2084.742383][ T2060] total_inactive_anon 62095360 [ 2084.748859][ T2060] total_active_anon 252477440 [ 2084.758737][ T2060] total_inactive_file 0 [ 2084.769735][ T2060] total_active_file 0 [ 2084.773925][ T2060] total_unevictable 0 [ 2084.777996][ T2060] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.33440,pid=2067,uid=0 [ 2084.801012][ T2060] Memory cgroup out of memory: Killed process 2067 (syz.5.33440) total-vm:90164kB, anon-rss:1140kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 2084.906615][ T2065] syz.5.33440 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2084.920759][ T2065] CPU: 1 UID: 0 PID: 2065 Comm: syz.5.33440 Not tainted syzkaller #0 274f9aef60e05467e019488b9f7ece6681bb0342 [ 2084.920800][ T2065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2084.920816][ T2065] Call Trace: [ 2084.920825][ T2065] [ 2084.920834][ T2065] __dump_stack+0x21/0x30 [ 2084.920872][ T2065] dump_stack_lvl+0x10c/0x190 [ 2084.920904][ T2065] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2084.920935][ T2065] ? ___ratelimit+0x3f7/0x5a0 [ 2084.920968][ T2065] dump_stack+0x19/0x20 [ 2084.921003][ T2065] dump_header+0xd7/0x490 [ 2084.921027][ T2065] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 2084.921058][ T2065] oom_kill_process+0x35d/0x640 [ 2084.921087][ T2065] ? sched_clock_cpu+0x75/0x400 [ 2084.921120][ T2065] out_of_memory+0x659/0xa80 [ 2084.921149][ T2065] ? __cfi_out_of_memory+0x10/0x10 [ 2084.921178][ T2065] ? mutex_lock_killable+0x92/0x1c0 [ 2084.921212][ T2065] ? __cfi_mutex_lock_killable+0x10/0x10 [ 2084.921249][ T2065] mem_cgroup_out_of_memory+0x279/0x350 [ 2084.921273][ T2065] ? drain_obj_stock+0xed0/0xed0 [ 2084.921297][ T2065] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 2084.921317][ T2065] try_charge_memcg+0x8f7/0xde0 [ 2084.921349][ T2065] ? __cfi_try_charge_memcg+0x10/0x10 [ 2084.921381][ T2065] ? __alloc_pages_noprof+0x31f/0x7b0 [ 2084.921413][ T2065] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 2084.921446][ T2065] ? __folio_batch_add_and_move+0x2ab/0x370 [ 2084.921477][ T2065] __mem_cgroup_charge+0xf6/0x410 [ 2084.921510][ T2065] ? update_curr+0xdc/0xaa0 [ 2084.921530][ T2065] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 2084.921562][ T2065] ? sched_clock+0x44/0x60 [ 2084.921591][ T2065] ? xfd_validate_state+0x68/0x150 [ 2084.921624][ T2065] shmem_alloc_and_add_folio+0x86d/0x1050 [ 2084.921657][ T2065] ? put_swap_device+0x130/0x130 [ 2084.921692][ T2065] ? shmem_huge_global_enabled+0x2da/0x360 [ 2084.921719][ T2065] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 2084.921746][ T2065] ? __schedule+0x132a/0x1df0 [ 2084.921776][ T2065] shmem_get_folio_gfp+0x5f0/0x1380 [ 2084.921805][ T2065] ? shmem_get_folio+0xc0/0xc0 [ 2084.921829][ T2065] ? follow_page_pte+0xa5c/0xb90 [ 2084.921861][ T2065] ? inode_to_bdi+0x6d/0x100 [ 2084.921893][ T2065] shmem_write_begin+0xf4/0x270 [ 2084.921922][ T2065] generic_perform_write+0x32d/0x960 [ 2084.921957][ T2065] ? __cfi_generic_perform_write+0x10/0x10 [ 2084.921989][ T2065] ? file_update_time+0x55/0x220 [ 2084.922020][ T2065] ? __x86_indirect_its_thunk_r15+0x80/0x80 [ 2084.922042][ T2065] ? file_update_time+0xa3/0x220 [ 2084.922072][ T2065] shmem_file_write_iter+0x105/0x130 [ 2084.922103][ T2065] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 2084.922135][ T2065] __kernel_write_iter+0x41d/0x8e0 [ 2084.922157][ T2065] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 2084.922188][ T2065] ? __cfi___kernel_write_iter+0x10/0x10 [ 2084.922207][ T2065] ? get_dump_page+0x160/0x220 [ 2084.922236][ T2065] ? __asan_memset+0x39/0x50 [ 2084.922269][ T2065] ? iov_iter_bvec+0xc0/0x180 [ 2084.922296][ T2065] dump_user_range+0xb06/0xdf0 [ 2084.922318][ T2065] ? __cfi_dump_emit+0x10/0x10 [ 2084.922351][ T2065] ? __cfi_dump_user_range+0x10/0x10 [ 2084.922374][ T2065] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 2084.922408][ T2065] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 2084.922445][ T2065] elf_core_dump+0x2ccc/0x3800 [ 2084.922475][ T2065] ? __cfi_elf_core_dump+0x10/0x10 [ 2084.922510][ T2065] ? dump_interrupted+0xf0/0xf0 [ 2084.922543][ T2065] ? filp_open+0x182/0x1d0 [ 2084.922573][ T2065] ? 0xffffffffff600000 [ 2084.922590][ T2065] ? freezing_slow_path+0x12b/0x170 [ 2084.922624][ T2065] do_coredump+0x1bf7/0x2bd0 [ 2084.922662][ T2065] ? __cfi_do_coredump+0x10/0x10 [ 2084.922703][ T2065] ? asm_exc_page_fault+0x2b/0x30 [ 2084.922734][ T2065] ? __kasan_slab_free+0x6a/0x80 [ 2084.922760][ T2065] ? kmem_cache_free+0x1c1/0x510 [ 2084.922782][ T2065] ? get_signal+0xa75/0x14f0 [ 2084.922812][ T2065] get_signal+0x11fd/0x14f0 [ 2084.922843][ T2065] arch_do_signal_or_restart+0x96/0x720 [ 2084.922879][ T2065] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 2084.922916][ T2065] irqentry_exit_to_user_mode+0x4e/0xb0 [ 2084.922939][ T2065] irqentry_exit+0x16/0x60 [ 2084.922960][ T2065] exc_page_fault+0x66/0xc0 [ 2084.922980][ T2065] asm_exc_page_fault+0x2b/0x30 [ 2084.922999][ T2065] RIP: 0033:0x7f9e5fb8eed1 [ 2084.923019][ T2065] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 2084.923040][ T2065] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 2084.923062][ T2065] RAX: 0000000000000000 RBX: 00007f9e5fde6090 RCX: 00007f9e5fb8eec9 [ 2084.923080][ T2065] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 2084.923097][ T2065] RBP: 00007f9e5fc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2084.923112][ T2065] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2084.923127][ T2065] R13: 00007f9e5fde6128 R14: 00007f9e5fde6090 R15: 00007ffc44e1d448 [ 2084.923148][ T2065] [ 2084.923223][ T2065] memory: usage 307200kB, limit 307200kB, failcnt 10207 [ 2085.425791][ T2065] memory+swap: usage 343432kB, limit 9007199254740988kB, failcnt 0 [ 2085.433716][ T2065] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2085.440737][ T2065] Memory cgroup stats for /syz5: [ 2085.440896][ T2065] cache 281546752 [ 2085.449828][ T2065] rss 9768960 [ 2085.453251][ T2065] rss_huge 0 [ 2085.456570][ T2065] shmem 281546752 [ 2085.460281][ T2065] mapped_file 0 [ 2085.463992][ T2065] dirty 0 [ 2085.467229][ T2065] writeback 0 [ 2085.470734][ T2065] workingset_refault_anon 5375 [ 2085.475746][ T2065] workingset_refault_file 0 [ 2085.481533][ T2065] swap 60801024 [ 2085.485041][ T2065] swapcached 61440 [ 2085.490804][ T2065] pgpgin 1913244 [ 2085.494586][ T2065] pgpgout 1849266 [ 2085.498615][ T2065] pgfault 1252095 [ 2085.503611][ T2065] pgmajfault 2595 [ 2085.507482][ T2065] inactive_anon 264605696 [ 2085.516983][ T2065] active_anon 26734592 [ 2085.533469][ T2065] inactive_file 0 [ 2085.542575][ T2065] active_file 0 [ 2085.546365][ T2065] unevictable 0 [ 2085.550152][ T2065] hierarchical_memory_limit 314572800 [ 2085.560452][ T2065] hierarchical_memsw_limit 9223372036854771712 [ 2085.567809][ T2065] total_cache 281546752 [ 2085.572119][ T2065] total_rss 9768960 [ 2085.577036][ T2065] total_rss_huge 0 [ 2085.580934][ T2065] total_shmem 281546752 [ 2085.586234][ T2065] total_mapped_file 0 [ 2085.590525][ T2065] total_dirty 0 [ 2085.594088][ T2065] total_writeback 0 [ 2085.599260][ T2065] total_workingset_refault_anon 5375 [ 2085.604768][ T2065] total_workingset_refault_file 0 [ 2085.611138][ T2065] total_swap 60801024 [ 2085.615181][ T2065] total_swapcached 61440 [ 2085.620549][ T2065] total_pgpgin 1913244 [ 2085.624771][ T2065] total_pgpgout 1849266 [ 2085.648561][ T2065] total_pgfault 1252095 [ 2085.652880][ T2065] total_pgmajfault 2595 [ 2085.657143][ T2065] total_inactive_anon 264605696 [ 2085.675104][ T2065] total_active_anon 26734592 [ 2085.680045][ T2065] total_inactive_file 0 [ 2085.706358][ T2065] total_active_file 0 [ 2085.710612][ T2065] total_unevictable 0 [ 2085.733807][ T2065] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.33440,pid=2065,uid=0 [ 2085.759264][ T2065] Memory cgroup out of memory: Killed process 2065 (syz.5.33440) total-vm:90164kB, anon-rss:1140kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 2086.333442][ T2198] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 2086.413430][ T2200] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 2086.977806][ T2222] 9pnet_fd: Insufficient options for proto=fd [ 2087.129239][ T2232] EXT4-fs: Ignoring removed check option [ 2087.151472][ T2232] No source specified [ 2087.313851][ T2241] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2087.326637][ T2241] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 2087.586641][ T2253] netlink: 'syz.4.33497': attribute type 2 has an invalid length. [ 2087.602676][ T2253] netlink: 1 bytes leftover after parsing attributes in process `syz.4.33497'. [ 2088.550056][ T2295] futex_wake_op: syz.7.33509 tries to shift op by -1; fix this program [ 2089.082273][ T36] kauditd_printk_skb: 361 callbacks suppressed [ 2089.082293][ T36] audit: type=1400 audit(2000000030.641:337895): avc: denied { read write } for pid=31311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2089.123503][ T36] audit: type=1400 audit(2000000030.641:337896): avc: denied { read write open } for pid=31311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2089.153713][ T2304] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2089.177835][ T36] audit: type=1400 audit(2000000030.641:337897): avc: denied { ioctl } for pid=31311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2089.211568][ T36] audit: type=1400 audit(2000000030.660:337898): avc: denied { read write } for pid=2303 comm="syz.4.33513" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2089.223763][ T2307] 9pnet_fd: Insufficient options for proto=fd [ 2089.250620][ T36] audit: type=1400 audit(2000000030.660:337899): avc: denied { read write open } for pid=2303 comm="syz.4.33513" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2089.282658][ T36] audit: type=1400 audit(2000000030.660:337900): avc: denied { ioctl } for pid=2303 comm="syz.4.33513" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2089.336462][ T36] audit: type=1400 audit(2000000030.660:337901): avc: denied { read } for pid=2303 comm="syz.4.33513" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2089.377402][ T36] audit: type=1400 audit(2000000030.660:337902): avc: denied { read open } for pid=2303 comm="syz.4.33513" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2089.408262][ T36] audit: type=1400 audit(2000000030.660:337903): avc: denied { ioctl } for pid=2303 comm="syz.4.33513" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2089.434076][ T36] audit: type=1400 audit(2000000030.754:337904): avc: denied { ioctl } for pid=2303 comm="syz.4.33513" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2089.762837][T15828] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2089.922707][T15828] usb 5-1: Using ep0 maxpacket: 8 [ 2089.931257][T15828] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2089.941963][T15828] usb 5-1: config 1 has no interface number 1 [ 2089.948858][T15828] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2089.967392][T15828] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2089.977416][T15828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.986633][T15828] usb 5-1: Product: syz [ 2089.990974][T15828] usb 5-1: Manufacturer: syz [ 2089.995744][T15828] usb 5-1: SerialNumber: syz [ 2090.286850][T15828] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 2090.304869][T15828] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 2090.320608][T15828] usb 5-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 2090.328317][T15828] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2090.334693][T15828] usb 5-1: 2:1 : invalid channels 0 [ 2090.344840][T15828] usb 5-1: USB disconnect, device number 59 [ 2090.392928][T27896] udevd[27896]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2090.892649][ T2379] veth0_to_team: entered promiscuous mode [ 2090.900854][ T2379] veth0_to_team: entered allmulticast mode [ 2090.945982][ T2381] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2090.947076][ T2382] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 2091.304050][ T2405] netlink: 220 bytes leftover after parsing attributes in process `syz.5.33551'. [ 2091.587814][ T2417] bridge0: port 3(erspan0) entered blocking state [ 2091.594775][ T2417] bridge0: port 3(erspan0) entered disabled state [ 2091.603062][ T2417] erspan0: entered allmulticast mode [ 2091.609060][ T2417] erspan0: entered promiscuous mode [ 2091.614612][ T2417] bridge0: port 3(erspan0) entered blocking state [ 2091.621488][ T2417] bridge0: port 3(erspan0) entered forwarding state [ 2092.310912][ T2451] netlink: 'syz.8.33569': attribute type 20 has an invalid length. [ 2092.436527][ T2449] sit0: entered promiscuous mode [ 2092.443769][ T2449] netlink: 'syz.4.33567': attribute type 1 has an invalid length. [ 2092.453274][ T2449] netlink: 1 bytes leftover after parsing attributes in process `syz.4.33567'. [ 2092.819080][ T2476] 9pnet_virtio: no channels available for device syz [ 2094.422886][ T36] kauditd_printk_skb: 434 callbacks suppressed [ 2094.422887][ T2511] veth0_virt_wifi: entered allmulticast mode [ 2094.422926][ T36] audit: type=1400 audit(2000000035.651:338339): avc: denied { setopt } for pid=2510 comm="syz.8.33586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2094.457878][ T36] audit: type=1400 audit(2000000035.651:338340): avc: denied { create } for pid=2510 comm="syz.8.33586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2094.479893][ T36] audit: type=1400 audit(2000000035.651:338341): avc: denied { ioctl } for pid=2510 comm="syz.8.33586" path="socket:[309515]" dev="sockfs" ino=309515 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2094.553472][ T36] audit: type=1400 audit(2000000035.773:338342): avc: denied { create } for pid=2510 comm="syz.8.33586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2094.644829][ T2511] veth0_virt_wifi: left allmulticast mode [ 2094.716433][ T36] audit: type=1400 audit(2000000035.923:338343): avc: denied { mounton } for pid=2513 comm="syz.8.33587" path="/482" dev="tmpfs" ino=2607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2094.739767][ T36] audit: type=1400 audit(2000000035.923:338344): avc: denied { mount } for pid=2513 comm="syz.8.33587" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2094.773132][ T36] audit: type=1400 audit(2000000035.980:338345): avc: denied { create } for pid=2513 comm="syz.8.33587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2094.798644][ T36] audit: type=1400 audit(2000000035.998:338346): avc: denied { setopt } for pid=2513 comm="syz.8.33587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2094.821307][ T36] audit: type=1400 audit(2000000035.998:338347): avc: denied { write } for pid=2513 comm="syz.8.33587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2094.844801][ T36] audit: type=1400 audit(2000000035.998:338348): avc: denied { read } for pid=2513 comm="syz.8.33587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2094.880184][ T2517] netlink: 'syz.5.33588': attribute type 1 has an invalid length. [ 2095.040262][ T2533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.33594'. [ 2095.105768][ T2536] 9pnet_fd: Insufficient options for proto=fd [ 2095.220081][ T45] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2095.380262][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 2095.388045][ T45] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2095.397300][ T45] usb 5-1: config 179 has no interface number 0 [ 2095.403901][ T45] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2095.415461][ T45] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2095.427012][ T45] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2095.437271][ T45] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2095.450867][ T45] usb 5-1: config 179 interface 65 has no altsetting 0 [ 2095.458062][ T45] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2095.467278][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2095.701168][T29102] usb 5-1: USB disconnect, device number 60 [ 2095.759745][ T2547] netlink: 20 bytes leftover after parsing attributes in process `syz.5.33597'. [ 2096.156068][ T2565] netlink: 104 bytes leftover after parsing attributes in process `syz.7.33603'. [ 2096.165883][ T2566] netlink: 104 bytes leftover after parsing attributes in process `syz.7.33603'. [ 2096.200946][ T2570] netlink: 8 bytes leftover after parsing attributes in process `syz.7.33604'. [ 2096.373223][ T2584] netlink: 4 bytes leftover after parsing attributes in process `syz.7.33608'. [ 2238.127665][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 153s! [syz.4.33607:2577] [ 2238.127692][ C0] CPU#0 Utilization every 22s during lockup: [ 2238.127702][ C0] #1: 100% system, 1% softirq, 1% hardirq, 0% idle [ 2238.127716][ C0] #2: 100% system, 1% softirq, 1% hardirq, 0% idle [ 2238.127729][ C0] #3: 100% system, 0% softirq, 1% hardirq, 0% idle [ 2238.127742][ C0] #4: 100% system, 1% softirq, 1% hardirq, 0% idle [ 2238.127755][ C0] #5: 100% system, 1% softirq, 1% hardirq, 0% idle [ 2238.127768][ C0] Modules linked in: [ 2238.127780][ C0] CPU: 0 UID: 0 PID: 2577 Comm: syz.4.33607 Not tainted syzkaller #0 274f9aef60e05467e019488b9f7ece6681bb0342 [ 2238.127801][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2238.127817][ C0] RIP: 0010:change_mnt_propagation+0x112/0xb00 [ 2238.127845][ C0] Code: 24 20 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 77 4e e7 ff 4d 39 2e 0f 84 8f 00 00 00 <49> 81 c4 d8 00 00 00 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc [ 2238.127858][ C0] RSP: 0018:ffffc900059879c0 EFLAGS: 00000202 [ 2238.127872][ C0] RAX: 1ffff1102ab95404 RBX: ffffffffffffff28 RCX: dffffc0000000000 [ 2238.127885][ C0] RDX: ffffc900095ca000 RSI: 000000000007ffff RDI: 0000000000080000 [ 2238.127896][ C0] RBP: ffffc90005987a10 R08: ffff8881367a212f R09: 0000000000000000 [ 2238.127907][ C0] R10: ffff8881367a2120 R11: ffffed1026cf4426 R12: ffff888155caa000 [ 2238.127925][ C0] R13: ffff8881111b1550 R14: ffff888155caa020 R15: ffff888151e65880 [ 2238.127938][ C0] FS: 00007fb91558e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2238.127952][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2238.127963][ C0] CR2: 00007f3555de7dac CR3: 000000015140c000 CR4: 00000000003526b0 [ 2238.127977][ C0] Call Trace: [ 2238.127984][ C0] [ 2238.127995][ C0] umount_tree+0xdfd/0xf70 [ 2238.128017][ C0] ? irqentry_exit+0x4a/0x60 [ 2238.128032][ C0] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 2238.128056][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 2238.128072][ C0] ? __detach_mounts+0x610/0x610 [ 2238.128094][ C0] attach_recursive_mnt+0x6df/0x21e0 [ 2238.128113][ C0] ? __asan_memset+0x39/0x50 [ 2238.128136][ C0] ? graft_tree+0x1c0/0x1c0 [ 2238.128153][ C0] ? clone_mnt+0xa27/0xc80 [ 2238.128173][ C0] graft_tree+0x157/0x1c0 [ 2238.128190][ C0] do_loopback+0x364/0x4b0 [ 2238.128213][ C0] ? path_mount+0x1050/0x1050 [ 2238.128234][ C0] ? security_capable+0xcf/0xf0 [ 2238.128255][ C0] ? ns_capable+0x91/0xf0 [ 2238.128277][ C0] path_mount+0x582/0x1050 [ 2238.128299][ C0] ? putname+0x113/0x150 [ 2238.128315][ C0] __se_sys_mount+0x2bd/0x480 [ 2238.128329][ C0] ? __x64_sys_mount+0xf0/0xf0 [ 2238.128343][ C0] ? __kasan_check_write+0x18/0x20 [ 2238.128366][ C0] ? fpregs_restore_userregs+0x11d/0x260 [ 2238.128384][ C0] __x64_sys_mount+0xc3/0xf0 [ 2238.128398][ C0] x64_sys_call+0x2021/0x2ee0 [ 2238.128422][ C0] do_syscall_64+0x58/0xf0 [ 2238.128440][ C0] ? clear_bhb_loop+0x50/0xa0 [ 2238.128455][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2238.128478][ C0] RIP: 0033:0x7fb91478eec9 [ 2238.128493][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2238.128505][ C0] RSP: 002b:00007fb91558e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2238.128520][ C0] RAX: ffffffffffffffda RBX: 00007fb9149e5fa0 RCX: 00007fb91478eec9 [ 2238.128532][ C0] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00002000000002c0 [ 2238.128542][ C0] RBP: 00007fb914811f91 R08: 0000000000000000 R09: 0000000000000000 [ 2238.128558][ C0] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000000 [ 2238.128568][ C0] R13: 00007fb9149e6038 R14: 00007fb9149e5fa0 R15: 00007fff5ebfb5e8 [ 2238.128581][ C0] [ 2238.128588][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2238.556582][ C1] NMI backtrace for cpu 1 [ 2238.556599][ C1] CPU: 1 UID: 0 PID: 2598 Comm: syz.5.33613 Not tainted syzkaller #0 274f9aef60e05467e019488b9f7ece6681bb0342 [ 2238.556625][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2238.556636][ C1] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 2238.556660][ C1] Code: cc cc cc b8 df 24 2c 29 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 32 3a 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 2238.556674][ C1] RSP: 0018:ffffc90004cbf710 EFLAGS: 000002d3 [ 2238.556693][ C1] RAX: ffffffff81439535 RBX: 0000000000000003 RCX: ffff8881328ba600 [ 2238.556706][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 2238.556717][ C1] RBP: ffffc90004cbf710 R08: ffffffff8720d604 R09: 1ffffffff0e41ac0 [ 2238.556731][ C1] R10: dffffc0000000000 R11: fffffbfff0e41ac1 R12: dffffc0000000000 [ 2238.556744][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92000997ee4 [ 2238.556757][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2238.556771][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2238.556783][ C1] CR2: 000000110c2d1dc6 CR3: 000000012df74000 CR4: 00000000003526b0 [ 2238.556799][ C1] Call Trace: [ 2238.556808][ C1] [ 2238.556817][ C1] kvm_wait+0x1ba/0x220 [ 2238.556841][ C1] ? __cfi_kvm_wait+0x10/0x10 [ 2238.556866][ C1] __pv_queued_spin_lock_slowpath+0x78d/0xcc0 [ 2238.556890][ C1] ? syscall_exit_to_user_mode+0x58/0xb0 [ 2238.556908][ C1] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 2238.556934][ C1] _raw_spin_lock+0x109/0x120 [ 2238.556953][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 2238.556973][ C1] mntput_no_expire+0x147/0x6c0 [ 2238.556995][ C1] ? __kasan_check_write+0x18/0x20 [ 2238.557021][ C1] ? lockref_put_return+0x156/0x1d0 [ 2238.557045][ C1] ? mntput+0xd0/0xd0 [ 2238.557066][ C1] ? __kasan_check_write+0x18/0x20 [ 2238.557090][ C1] ? _raw_spin_lock+0x8c/0x120 [ 2238.557117][ C1] mntput+0x63/0xd0 [ 2238.557138][ C1] path_put+0x5b/0x70 [ 2238.557154][ C1] exit_fs+0xe8/0x160 [ 2238.557168][ C1] do_exit+0x98d/0x2630 [ 2238.557190][ C1] ? __cfi_do_exit+0x10/0x10 [ 2238.557209][ C1] ? futex_wake+0x63a/0x900 [ 2238.557229][ C1] ? futex_setup_timer+0xb4/0xd0 [ 2238.557246][ C1] ? cgroup_freezing+0x8a/0xb0 [ 2238.557263][ C1] do_group_exit+0x22a/0x300 [ 2238.557287][ C1] ? __kasan_check_write+0x18/0x20 [ 2238.557312][ C1] get_signal+0x139d/0x14f0 [ 2238.557336][ C1] arch_do_signal_or_restart+0x96/0x720 [ 2238.557363][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 2238.557391][ C1] syscall_exit_to_user_mode+0x58/0xb0 [ 2238.557407][ C1] do_syscall_64+0x64/0xf0 [ 2238.557426][ C1] ? clear_bhb_loop+0x50/0xa0 [ 2238.557453][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2238.557486][ C1] RIP: 0033:0x7f9e5fb8eec9 [ 2238.557499][ C1] Code: Unable to access opcode bytes at 0x7f9e5fb8ee9f. [ 2238.557509][ C1] RSP: 002b:00007f9e60af70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2238.557526][ C1] RAX: fffffffffffffe00 RBX: 00007f9e5fde5fa8 RCX: 00007f9e5fb8eec9 [ 2238.557539][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e5fde5fa8 [ 2238.557550][ C1] RBP: 00007f9e5fde5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2238.557560][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2238.557571][ C1] R13: 00007f9e5fde6038 R14: 00007ffc44e1d360 R15: 00007ffc44e1d448 [ 2238.557586][ C1]