last executing test programs: 27m11.221542539s ago: executing program 32 (id=894): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x40) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x0, 0xbbb, 0x7}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000100}, 0xc000) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x10401, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x100, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000080), &(0x7f0000000140)=ANY=[@ANYBLOB="00fb150507cae86efd2074b45ad59d0ecb68643e63"], 0x15, 0x3) syz_open_procfs(0x0, 0x0) (async) fcntl$addseals(r2, 0x409, 0x9) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) (async) r9 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f00000001c0)=0x1) (async) close_range(r2, 0xffffffffffffffff, 0x0) 25m44.102334061s ago: executing program 33 (id=2386): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={r0, 0x40000000000, 0x5, 0x5}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000500)={0x0, 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0xfffffffffffffe9a, {0xd000, 0x80a0000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r3) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) chmod(&(0x7f0000000140)='./file0\x00', 0x61) r8 = socket(0xa, 0x3, 0x2) sendmmsg(r8, &(0x7f0000001b80)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x362, @loopback, 0x9, 0x1000000}, 0x80, 0x0}}, {{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000029"], 0x18}}], 0x2, 0x2c04c884) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r10, 0xae03, 0x7) r11 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) pwritev2(r11, &(0x7f0000000440)=[{&(0x7f0000000180)="8c", 0x1}], 0x1, 0x8, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r11, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYBLOB="010025bd7000ffdbdf252500000008000300", @ANYRES32=0x0, @ANYRES8], 0x28}}, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10201, 0x1, 0xd000, 0x2000, &(0x7f0000007000/0x2000)=nil}) 25m41.703896727s ago: executing program 34 (id=2434): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) 25m21.995579368s ago: executing program 35 (id=2821): r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) shutdown(r0, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) socketpair(0x11, 0xa, 0x1, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x2b, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 25m16.1617474s ago: executing program 36 (id=2880): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) fsync(r0) 25m15.533892612s ago: executing program 37 (id=2884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 25m10.268284024s ago: executing program 38 (id=2936): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ptrace(0x4207, r2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000) 24m52.172168373s ago: executing program 39 (id=3199): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x801, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x48, 0x0, &(0x7f0000000340)=[@register_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x101, 0x1}, @flat=@weak_binder={0x77622a85, 0x110a, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 24m32.274432888s ago: executing program 40 (id=3487): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x5e1041) ioctl$USBDEVFS_IOCTL(r1, 0xc00c5512, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 24m28.576301389s ago: executing program 41 (id=3556): r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e22, @broadcast}, 0xffffffffffffffea) openat$kvm(0xffffffffffffff9c, &(0x7f000000bf40), 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) connect$can_bcm(r2, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x48}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) sendmmsg$inet(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c80)="6321a1780e3fe8d9098f1f", 0xb}], 0x1}}], 0x1, 0x4085) (async, rerun: 64) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000100)={0x10, {0x20, 0x2, 0x1, 0x0, 0x400}}) read$FUSE(r1, &(0x7f0000003000)={0x2020}, 0x2020) (async) recvfrom$inet(r1, &(0x7f0000000180)=""/37, 0x25, 0x0, 0x0, 0xff04) (async) socket(0x5, 0x2, 0x9) (async) ppoll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x0, 0x0) 22m22.377480046s ago: executing program 42 (id=5834): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f00000002c0)={0xa3, 0x0, &(0x7f0000000040)}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB='u']) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x375143, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r5, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@val={0x8, 0x12b, 0xffffffff}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x13}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) write(r3, &(0x7f0000000400)="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", 0x1f000) 22m13.030468736s ago: executing program 43 (id=5921): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) mkdir(&(0x7f0000000100)='./file0\x00', 0x97) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@rnullb, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') setresgid(r1, r1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xfc, r9, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc37f}, {0x6}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x7f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0xcb3f}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xff}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7fff}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x189}, {0x8, 0xb, 0x3}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6}, 0x10) (async) close_range(r4, 0xffffffffffffffff, 0x0) 18m17.559435382s ago: executing program 47 (id=9227): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x16}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000180)) (async) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000200)=0x10001) (async) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="280000005e000d0025bd7000000000000800000001"], 0x28}], 0x1, 0x0, 0x0, 0x24040001}, 0x40000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000080)={0x3, 0x180000000, 0x1, 0x7, 0x2, 0xf1f1}) 17m1.448576131s ago: executing program 48 (id=10322): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bond_slave_1\x00', @random="f7ff3a711070"}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f00002e8000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x7ae6000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f00000002c0)={0xd1100400, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1e}, &(0x7f0000000140)=""/174, 0xae, &(0x7f0000000200)=""/123, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) ptrace$getregset(0x4204, r4, 0x6, &(0x7f0000000380)={&(0x7f0000000340)=""/25, 0x19}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r7 = socket(0x11, 0x3, 0x0) r8 = signalfd(r0, &(0x7f0000000580)={[0x77d]}, 0x8) copy_file_range(r8, 0x0, r3, &(0x7f0000000600)=0x80, 0xfffffffffffffff7, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x7, 0x9c4a20ea0828f42e, @private2, @loopback, 0x80, 0x7, 0x7, 0x8}}) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) write$P9_RVERSION(r13, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r14 = dup(r13) write$FUSE_BMAP(r14, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r14, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="48020000", @ANYRES16=r2, @ANYBLOB="080025bd7000fbdbdf25010000004c0001801400020076657468305f766972745f77696669000800030003000000140002006e657464657673696d3000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000300010000008c0002800c000180080001000000000044000180080001000600000008000100010000000800010001000000080001000400000008000100020000000800010007000000080001000000000008000100000000000c00018008000100060000002c00018008000100080000000800010008000000080001000000000008000100060000000800010000000000400002803c000180080001000400000008000100000000000800010000000000080001000800000008000100060000005f0001000100000008000100070000001800018014000200776c616e3100000000000000000000005c0002802400018008000100080000000800010000000000080001000400000008000100080000003400018008000100010000000800010000000000080001000000000008000100040000000800010002000000080001000600000068000180080003000000000014000200687372300000000000000000000000001400020076657468315f766c616e00000000000008000100", @ANYRES32=r6, @ANYBLOB="080003000100000008000100", @ANYRES32=r10, @ANYBLOB="140002007665748bdba50b31e43f8456fa5fa33e5868315f746f08000000000000000800030003000000040003003c00018008000100", @ANYRES32=r11, @ANYBLOB="1400020070696d3672656700000000000000000008000300030000001400020076657468315f746f5f62726964676500"], 0x248}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r15, &(0x7f00000bd000), 0x318, 0x0) 14m43.780860839s ago: executing program 49 (id=12864): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x6, 0x0, 0x8, "edf958e7e942"}}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async, rerun: 64) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000000)=0x5, 0x4) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b080003"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x4}) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 14m15.630094293s ago: executing program 50 (id=13405): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) close(r1) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x5) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)='F', 0x1, 0x20048080, &(0x7f0000000200)={0x11, 0xc, r5, 0x1, 0x5, 0x6, @multicast}, 0x14) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r2, 0x22e7c000) 13m22.624501736s ago: executing program 51 (id=14101): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x800) creat(0x0, 0x182) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r2, &(0x7f0000007100)={0x2020}, 0x941f) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000280)='./control\x00') mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 11m59.132997439s ago: executing program 52 (id=15641): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f00000000c0)={[{@size={'size', 0x3d, [0x25, 0x38]}}]}) ftruncate(0xffffffffffffffff, 0x51a9497) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000600)={0x40, 0x31, 0x6, 'Jgq2KT'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x20, 0x16, 0x9, "3741e4cb859af1b8b0"}, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0), 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x10, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ee, 0xf83, 0x8}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000040)="68b4", 0x2, 0x10000000, &(0x7f0000000100)={0x11, 0x8100, r7, 0x1, 0xe0}, 0x14) setuid(0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m47.07972386s ago: executing program 53 (id=16740): creat(0x0, 0x182) clock_nanosleep(0xa, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="130000006bffff"], 0x13) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r3, &(0x7f0000007100)={0x2020}, 0x941f) 10m36.777876888s ago: executing program 54 (id=16896): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x89e0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10m5.911551264s ago: executing program 55 (id=17394): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x800000001fe, 0x800000) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x5, 0x2004, 0x0, 0x4, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendto$inet(r3, &(0x7f00000000c0)='|', 0x1, 0x101, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000080)=[{0x6, 0xfc, 0x1}]}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000040)=0x2) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r6, 0x0, 0x7ffff000, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000) 9m47.205325045s ago: executing program 56 (id=17438): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000280)={0x77, 0x1}) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002e7be0103b735081da13010203010902240001000000000904c60702cc60040309050b550002030022090503000002050905"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) readv(r1, &(0x7f0000000d80)=[{&(0x7f00000000c0)=""/59, 0x3b}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz0\x00', 0x1ff) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) r2 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose}, [@remote, @rose, @remote, @remote, @rose, @null, @null, @null]}, &(0x7f0000000080)=0x80, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r3, 0x2, r0, 0x7f, 0x80000}) close_range(r2, r1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x1c) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x20, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x24202, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) readv(r4, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/243, 0xf3}, {&(0x7f00000006c0)=""/164, 0xa4}], 0x2) syz_clone(0x4000000, &(0x7f00000002c0)="6efeb2bca9a17abde764ceffd9942256a757f8865a5096350524adf24bf95f4781570271c977d44e5cce4807105322c3002ff60c2aabf8310159a5d32927dec4fbea64e0e66dd8a94280424635af484902b51ac6a053f6ea94bc9f89c6a24757c4538538c467c82229f3bffc9183d90a05595ec2e6725a457cc47228630dd8e33c923e27d6402cd90319a6de85705103d819e34089bf963458e512e2f1085330ace2a471f440a5df51e9cdd3d68f06", 0xaf, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="e57234c692299ef9fffe7c4e4a5b9cc32478ef13019d8fc9a37aff70a99e5043784af152255f0518ff20efa5c8822d238637052a5767f4ee19ebd191e9581e9beb4b410ede992b63741bcc43c0a241183cd559ec4024f1c4eb36ee7b571113267490fc17566b02c8b9909ada25adfde79cb3320ed0027bc046d47e283ffe8fbe6591ffd5cee95d34e4fbd5b4716fadd87e7a0cdeb140144a7070b761f4c03cdb99fae86bf8a12abec439021c0cbacaf62e26b75e0caf5ec471b485c5ea8a6ce8362a6e102f8fffec5ad504de1b9be602d00497582f1cbfb1eae29f047caf7f652472eebb1c") 8m50.48600826s ago: executing program 57 (id=18562): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Di', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 8m34.845731122s ago: executing program 58 (id=18897): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1ffffe23, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x5f}]) pipe2$watch_queue(0x0, 0x80) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r2 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000480)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x4040, r4, &(0x7f00000004c0)='2', 0x1, 0x0, 0x0, 0x2}]) io_destroy(r3) ppoll(&(0x7f00000001c0)=[{r2, 0x20}], 0x1, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0xfffffd8a, 0x0, 0xfffffffffffffe0e}, 0x2) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000001) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) munmap(&(0x7f0000886000/0x3000)=nil, 0x3000) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x48}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) 8m19.831028342s ago: executing program 59 (id=19142): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'vlan0\x00', 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x100, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb802}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8e67}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb0}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x7}}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x6}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5m14.610747457s ago: executing program 60 (id=22371): socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffecd) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2800006, 0x10, 0xffffffffffffffff, 0x80740000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80)="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", 0x43a, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280), 0x0, 0x4008000) syz_open_dev$loop(0x0, 0xb3, 0x82403) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x40000) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="402132000000321b2a33d02075a560f2fd36178f366b4d051afe495953f943392968fdcbec"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) 4m58.861679571s ago: executing program 1 (id=22651): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0x14, 0x0, &(0x7f0000000840)=[@increfs_done={0x40106308, 0x2}], 0x1e, 0x0, &(0x7f0000000880)="00d4b33ea745e8683bfe95460f24dd59dcf2dcbf004491b0cb54365b2f44"}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000100)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x100a}) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) (rerun: 32) sendto$packet(r7, &(0x7f0000000000)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x1a, 0x4008000, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x77, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x20, 0x700, 0xda2, 0xff, {{0x1c, 0x4, 0x2, 0x1b, 0x70, 0x68, 0x0, 0x6, 0x29, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0x17, 0xf1, [@loopback, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2]}, @rr={0x7, 0x17, 0xeb, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102, @empty]}, @lsrr={0x83, 0xf, 0x71, [@loopback, @empty, @private=0xa010100]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xd, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x88, 0xd, "b5be8cd52241cc98bd171a"}]}}}}}) (async) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000440)=0xc) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') (async) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) (async) setuid(0xee01) (async) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x7800, 0x7, 0x7, 0x1, {{0x8, 0x4, 0x2, 0x1, 0x20, 0x66, 0x0, 0x2, 0x2f, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xb, 0xe0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000800)={&(0x7f0000000200), 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf25090000002000018008000100", @ANYRES32=r4, @ANYBLOB="14000200766c616e3000000000000000000000004400018008000100", @ANYRES32=r5, @ANYBLOB="080003000000000014000200767863616e310000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="1400020077673000000000000000000000000000400001800800030000000000080003000000000008000100", @ANYRES32=r9, @ANYBLOB="08480100", @ANYRES32=r10, @ANYBLOB="14000200726f736530000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="440001801400020064766d727031000000000000000000000800030000000000140002006d616376746170300000000000000000080003000100000008000300020000000c0001800800030001000000"], 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) setresgid(0x0, 0x0, 0xee01) (rerun: 64) stat(&(0x7f0000000c40)='./file0\x00', 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 4m58.723832214s ago: executing program 1 (id=22652): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r1, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10, 0x0}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6}, 0x10) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) sendmmsg$sock(r0, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="c61ad024d5b290cd1ede5d0213eb4f907b6a9bcbdc3d51aa7c93006976535cb2194355a1c139e6102dcea8d64b876f67ce86a163ab803cdd130eb2e7076ffef351a09afda55f19305626309d8fd4a898c4e43704441f935406f43cd0b6a44e67884252783602a2c97baa27002264243449919bda15881ad94087001e3bf5b995675ed706b6ec432677e5bcdff34b410791c351e9f0d34cbe14cbd492582f3b9b6a02fa515392d9aa970d21e385560a5db2f1686d7b72eca54e1623b11997a1d9e9e129fc464767015ea8f90b8372269358f8046666ff328877cd340f11f32cfaa7b0c2b3c678d92d6f88f2e29ae2b3ec", 0xf0}], 0x1, &(0x7f0000000400)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}], 0xa8}}, {{&(0x7f0000000240)=@can={0x1d, r7}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)="85b141a717e51ad64f0b7fde0cf4deac72585683eed5356edb9afee154cabde2a3b4f13584c475f2ea4152a51155ad00ddd8a1d4c34d70", 0x37}, {&(0x7f0000000500)="7df7b5d48c0fa9ecaa5e7ef47902db6c828fee631e6e7710cc4a16a6df212987c78bce37e3e19beb8f2c9cb7be9e5c5bf0eb3e00e033606ab06cc37d972650a5cf67151d09722fca2f7c0d4f3257780b5f91517526cfa258a8ca1ad2e7f69b2ca61986994afc57c7cb8063ac5fcb6aee585cb79f6200dc5451dafb5273d69a510e7dcaf5c0d0d1ab42f4a42b5ef2a081d104", 0x92}, {&(0x7f00000005c0)="09bb98198c065d4273b21e7575a19e33025fa89e6b347adc53bac08a8c7d050ccf74df7fc065f5735d1ae9a2e0c599b500cdd61375b6a055e08f00b407c220f71afdbf06370f7cfe7e691eaf6c013ca9491e96277b8bc5ea280fe9364f71c94a79564191fbb19725dd490d39fcdf5591c98fb1780d08907f2bb2729e32fa226e139244ec824b81d2fe02f074d8c6877e8fc6", 0x92}, {&(0x7f0000000680)="666cb7e84b1cc54fcbe63b9ff0fd9d4547be0da04a62e719b70456dce8608d9b6f351f2a49e7481df7b9ff0a043b80a4b2b3d84d29ab6e9eee149c5ebe848501351ec31cc25f3bfc1cfa38509d9bb4d40f2fd1853ea4e7f77f910d004ec613fcabbcf2fcf8eaf8b551fe64ec1267cd56da3ed676bfc138a46a12aed91e5abd4c6c813e1deb8ae9dc3f5e65", 0x8b}], 0x4, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0x640b}}, @txtime={{0x18, 0x1, 0x3d, 0x77f}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0xecf}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000840)="b8f7f7e3bb30fcf8e12daac510fc464fc454e30b50dc1ee3138ff2d2486d8fb211f1015fc8cd971ee45ddb4757d6a5f1989b775af3c4d3ec04686557210a81ce80cda434f0e71c9fa2619bda92834afe191988c8df53e2332109bdb0f8e19c08f96e650433b5893451e8df1d5fbcc6defdf284c9a9f6ae99ff992cb5b3b9ac3b5d010c83146e8bcf9ba71440eca489eb093300dcd43b2dc8508bcece2de12f9025f760c56d6bfe33d67942e243a2c7520dd25a7094b742e4daa50d954e821e538a1a90e15131c725d71f5377da4a91a47076895abc4778d65fe7dd92da8192526e1347dd1846700a309511", 0xeb}, {&(0x7f0000000940)="6c732d0260937b6e5e543001c07f710464fca47ca44a718bbc08e6a055aa731fa1948d572bfa4363cf672d5b09fd80d087d3ccca60b27f305cdf4909034fed32106f78aaa6022c9ee00cd4", 0x4b}, {&(0x7f00000009c0)="d7588badb4b9929157b3cb0bfc8067e4c140b9eecfbd76ee53860e982a674bc3e97cb9996fe263021f20e5dee4b92e9afa051b99e74f002f94e42e973ce2670bd0d25bf8d92060985bede231e5806b2bb8a32e8501e5809c492f221735085ffd8b086ad9b6ef6f9fcdd2d872100e996f1890c848482a4d3dadcef999a20c996d2b2aeae549c7d26474cf38e6978e7d5bbffaf1bd429fb6eea0d6b7c85af5e2703a39858ec16bafdaf758fb4ce68fb863d17f698ad20020482cdf596c", 0xbc}], 0x3, &(0x7f0000000ac0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000b00)="3bb42e6ed8363e333c0966b62b7d69cc48097467df7395fe097dd4ebbcaaa7995f0ae6f3cb9c377687fbb7aa0651d0b0659e7d1645fcade2951d0f3c536a1e8c2ab76e6255354fcfbaf9bff56e8534d3920e1e3341670fe02c72e6c7a1321f507ff0c5d42d5cc030cb7eed52eeb4df3e04f86dd68c77088ab82c8ae9aec8fc2b0312f4182abfe275c3f394507b535c2fdae6994bd88d353a71af52a61a708466cec478d0e3f180d50683f33fb84ff3af05fa7ccdbf9250b598c2b7ad2f80f237024a828129f829f209e8d7ce907b5a22693780c34431156b354ebe4f22cb5c2ba55270", 0xe3}, {&(0x7f0000000c00)="14c4248fc2c147841525204bd8b45de644000f8f8132c58eb32a1230e6f9cfcbb0631351f51e9bfb05e7c7165a3c0426b95d86c723f6987daf31f12028c8deb9be27a379f45d4578f21f6fbff1c486a61ecac8f60fff871f9840bb95348eb91d471a56c21f70cfcfd97ce05ab82fe1c739b4cb5e766440e010f1db78ae73ddb487b075b9c911c1e496efb7ac4ccfd2ad2d480498494d056de53b1d4d02702679aa18f930d631ecdb67dd38d897a7d401176d2378ac26e2d206283ad667012f9acdef29416cc9956df792fef82cc4", 0xce}, {&(0x7f0000000d00)="3a6f76665641d76fd88deab3ab68ba976b4e7f11b7ddc36520ce3f2ce98df9ca84ebe2093866ec693d544eb8ebeffcd443f137343feb6cfa7f42db5bcf6cc1d77f9ddb7e32611457ee98315a722376760d4957bacf70725cacc4b53c7f66fbf69b495d18c78310cb3dce5fa4d897", 0x6e}, {&(0x7f0000000d80)="1ac866dae5395366fa4c160a3819f344b564e4a4373dd0ed6c554eaa28572587549af62f47b3fff2ad7182bc9c55de8b3d1aee87be75b315310fc9906620fa76bd3215a2e1aaac58fa50df8de772b2912e49a485bc687df6f99ea0176b0a24b543bb424f9fd51e4ada9b63486cd45c3f36096c2a9b0a689194a73aecdc23d1d167e36e1bab16a699365809a8693f7bfa610f080dfcb4bd7782c4cd592055fd39b95cc9540b201673d1fa", 0xaa}, {&(0x7f0000000e40)="71454f98d868c080d9ef6833c35857a96f6f8e787f33848cc31b4324ee9991782536", 0x22}, {&(0x7f0000000e80)="de4eaf6fd3c843bbac3ec1ed97dd03901b368154c35de914ff1a04742b0ed00005e95062a95ef7473766778fedff84202ba943de3334754e23e909ac2f56f9d91789a5", 0x43}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="0468fbfd20e32ff873f7aa239975038c141c25c145cfdf94ea9250b0c46fc02ada0aacb7706296fa20d2e0c542eeca04b9491bfc37a0bb3ae0b823cf3f54d664ab8c80e425cad9de5238f3a69792325cc9e62f5f863f419cf195f994bbaaa9be306fd7e68967953bba19e41ebb9ca2dfdeacf98de603022ac0fb676d5f1299382478e1916e60181fa3bf26a00dc6290c5ccdb0bf063ca5bf389f1e326ac69f25421be15a6db558f3ea25b04f10d9e88ac321ca0d8a005139df77e2b3ebbda80f70d4419179ad79bc7674cb53a8ef7f86e3d9cdec79c709c9b5c2bfa7d09bdcb4429ec4791c5ea138ab398027f3ad", 0xee}], 0x8, &(0x7f0000002080)}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000020c0)="24b73d101409f24528f50f4db2beb2150d74816c17a51c9e37b1c7e16f50614867be6e9625176472f4405c96f81c4ab9d9b40a5482b1c3574e4548d1129440be395b67dbd0968e8e7613e15bc9d9abbacd4294c3acdb8d20086c86a8db5c157e7413234735d36f9e2c8cef33949c2e0a84c71aced2a6d27bd155cccd30174083b1b7760ad01ef4078b36a3a4864a5a097307774a689d2b1e59f33b", 0x9b}, {&(0x7f0000002180)="96c749dcdec6aafc73d0fd9c145e4f4f146e0c509ea25b032082c06ab61b8b870c565d2c3a7be6598415489c4c110824157bb8a327d775fe00ee6470d82e554b5f87f33879b96ff2f303502b15f35d2fa0d7c6adcb8eacb1a26a0a1300230f27216a29356dd6a734cc352dd0fbd83a7f38fb371e4c6c1fc35080b69987ee92642eb09c49b917646d802a0fb6c10825fa6361efdaaf280373c130227c1229084de749f897a11c2dc197bdea458f6993564ec05dac7b1e87e22e24ab2f9976df76cb3bb9e4132fff008c7c25716884c8bf8b0ef16bbe46e0abd6fbb349b2b079647c", 0xe1}, {&(0x7f0000002280)="17ca934266fd56db02843e92ae3aa384973c4dbfe8f9", 0x16}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="74750c3da32f817997e3e096eedc51432cbf029fe30e129a455460ada817e63ee8429174c4edef601ffe65bb3d5172ef072e6e3d774edc4fe963de29853cdcdd3c136c8254448a720269058d04b62ec099ed8c6d5cc56b1e6d7c3f591f47e4844e94534ad07233d07efc4eb136a2f862ffcf8731902df5cd272a2a102c87e115eef788ecbafcf07ea8c834595756c567aabbc05e1a5abc1b19970cf63f2bc0deb732790af8191490ed6d514528318959fe217824e80aa8c5a030bf21240135d3ec3aca6feafb91410e6f62cc31bc72d2df4fbca1c12da8adb2ea1e794d1eae6f476db02b62dfda4375160bfaff0a9fe6e92a5797", 0xf4}, {&(0x7f0000003400)="bff88d7c6db746376baa5401865952b254c4eba60d09a0d44229dbeeba53aaf755556402b3e8766d9c1a33229cdca4c8b0606fcca11a2c767f9ed62c3988171f7cccb5597ded3da0193a6de995ad47b41755f1b8dcb6bc3b543addce85db60f900abe7647b4049b0bf900ef8669c545c2cae8d3e2741993fc97882187b26f162ae7943341b9f8caa3b32488c4396241042eb9e1e7ee494e36e0de6fc41c3b13c79bef5ba997f70e6ba01b50354330f87f435fb0e1f04de5efb93c429f4b385ea005a24a06693db894d0b2f9405e81710295632c9f6e298bd4b8469fd9e80e41c470de370f1700dc44886c216", 0xec}], 0x6, &(0x7f0000003580)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18}}], 0x48}}], 0x5, 0x40000) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) fcntl$F_SET_RW_HINT(r8, 0x40c, 0x0) close_range(r2, r5, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000140)=0x28) 4m58.643988205s ago: executing program 1 (id=22655): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1281, 0x3}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000300)={0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x2, 0x7ff, 0xe, 0x7fffffffffffffff, 0x4, 0x777}) 4m58.635983696s ago: executing program 1 (id=22657): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2121091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/135, 0x87, 0x0, 0x0}, &(0x7f00000002c0)=0x40) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000080)='minix\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0\x00', 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x2010004, &(0x7f0000000300)={[{@name={'name', 0x3d, './binderfs/binder0\x00'}}]}) rmdir(&(0x7f00000002c0)='./file0/../file0\x00') mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x500020, 0x0) 4m58.564846937s ago: executing program 1 (id=22659): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004300)=ANY=[@ANYBLOB="1c0000001c000100000000000200000007"], 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x4000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000540)="381b0b28cd3f5b150245525385296417a8e3ada7554d3381ae5f44727b637520a74aa3f28c8976ed95f54b308851de225fe21760ed78a654291a0a078611497e0feeb3bd06ba74ef0f3def486f2af4906b99cb253b8be0c521ea2cb4c70e10060bab0f06fd887b8adffd651fda6a5b6422ffdc15a000a25bf26dbdb1e2d029d166e8cc392f0e5e442af6d611ef5f0ad8141a", 0x92}], 0x1, 0x1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) (async) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) r4 = dup3(r2, r0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)=[@request_death], 0x42, 0x1000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)=[@request_death], 0x42, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)=[@register_looper, @clear_death], 0x50, 0x0, &(0x7f0000000240)="d81e15c3b9703b627c6f69f27e8fda212411223bed3eb544eea0bb85b9db7e9aa8f4f153246efaf2a8d8f8cf1ae69729c805005f7cf44d476fa4d69887ad7b73ec4b8475b312ee27f07411c59fbffc81"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)=[@register_looper, @clear_death], 0x50, 0x0, &(0x7f0000000240)="d81e15c3b9703b627c6f69f27e8fda212411223bed3eb544eea0bb85b9db7e9aa8f4f153246efaf2a8d8f8cf1ae69729c805005f7cf44d476fa4d69887ad7b73ec4b8475b312ee27f07411c59fbffc81"}) 4m58.504020638s ago: executing program 1 (id=22663): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) (async) 4m58.488991808s ago: executing program 61 (id=22663): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) (async) 4m25.77184356s ago: executing program 7 (id=23220): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000a80)=""/211, 0xd3}, {&(0x7f00000035c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000000)=""/92, 0x5c}], 0x9}, 0x81}], 0x3, 0x2100, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010325bd7000000000000000000000007ffd00"/56, @ANYRES32=0x0, @ANYBLOB="0000000080000000fffffff000000000080003001100001e"], 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) socket$netlink(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in=@multicast1}}, 0xe8) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, 0x0, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m25.211891911s ago: executing program 7 (id=23239): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') futex(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x3) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xfa) read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="00042cbd7000fcdbdf251f0000000400cc0008009a00020000005c0022804c00008008000700040000000800010004000000080004000300000008000400000000000800010001000000080007000400000008000500040000303232d8f21b551c0008310300080000000c000080080004000200000008009a0000000000600022801400008008000400ffffffff08000700f5ffffff2400008008000300020000000800040059a700000800002400008008000500040000000800040006000000080002000b0000000800010007000000"], 0xe4}, 0x1, 0x0, 0x0, 0x15}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000980)={{r3}, "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"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1213c2, 0x0) sendfile(r4, r4, 0x0, 0x3) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x203f00, 0x0) (async, rerun: 32) r5 = socket$key(0xf, 0x3, 0x2) (rerun: 32) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) (async) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020509000e00000026bd70000000000005000600000000000a004e2300000003fc000000000000000000000000000001c4bb00000000000002000100ffffff7db00001000000000005000500000000000a00000000000000fe8000000000000000000000000000aa00000000000000002c105fe4a914cebe399c4663a5c578a11d396972297f08733ef9eb0224ec747e85f25a01ddccf6b2dfe85a57423476f1d232be50d6f886efd4e6301d0ddaa537335281d74319bb0eb57964"], 0x70}}, 0x84) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) 4m24.320584828s ago: executing program 7 (id=23253): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0xb, 0x7, 0x4, 0x0, 0x0, [{{r0}}, {{r0}, 0x5}, {{r0}, 0x576c}, {{r0}, 0x7}]}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)) 4m24.251750179s ago: executing program 7 (id=23255): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x10000, 0x6, 0xeee4b000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = eventfd(0x1008c69) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x5, 0x0, 0x4, r4, 0x19}) close_range(r0, 0xffffffffffffffff, 0x0) 4m24.21449763s ago: executing program 7 (id=23258): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000028000100800000000000000000000000050021"], 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000000)=ANY=[@ANYBLOB="646972b44a7cb205f49fb52ee1a973bbd52bc4b4d9ee3b87e8713fbf3f84c3814021e5fba7aa1949f88587dbcb5a270ca76ea8c53b012fe6e4a0050e8ff2766ea0852dc748192e2b018dd9c5aeb8"]) 4m24.139255901s ago: executing program 7 (id=23259): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0x9, 0x6, 0x1f28, 0x48da}) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x20, 0xf, 0xd4, {0xd4, 0x31, "588ea3e7222410473b21de327c771f52f7b5d1db4f425337056646657821639c9cf47a07e8b965861037b255b15b7541be1c82873b72d77c7135a94945018c52bcb03958dad3088d1312621055062de0a6ad5af139f09024660a83030a962582876af1319e2417bf303b8df06519d639a7155604d292e7eba56e0664e9bf739c60b1cd61307e92abec03dc842eaff8034282c403696fc8fc7334976f1ba468e745e35dd828dfebbfbfb22a99c1d3883932c9b1198bee407f252236c9aacbff05aef905bda86b611ac69df7ff48dcadc37607"}}, &(0x7f0000000180)={0x0, 0x3, 0x40, @string={0x40, 0x3, "bdf974934651789b3e6f6c78aebbd7ad87809b3065deb30a66fad1bca07c68ca6fcc61eb36186267abfb47253380e15e84482e34b31ed4b0d4d86152991d"}}, &(0x7f0000000200)={0x0, 0x22, 0x1c, {[@global=@item_4={0x3, 0x1, 0x1, "957e26d2"}, @local=@item_012={0x1, 0x2, 0xa, "86"}, @global=@item_4={0x3, 0x1, 0x0, "9e758163"}, @global=@item_012={0x1, 0x1, 0x4, '/'}, @local=@item_4={0x3, 0x2, 0x0, "8874a4f4"}, @local=@item_012={0x2, 0x2, 0x2, "39e7"}, @global=@item_012={0x2, 0x1, 0x2, "ed29"}, @local=@item_012={0x2, 0x2, 0x2, 'n\x00'}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc, 0x3, 0x1, {0x22, 0x396}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x20, 0x14, 0xe7, "452894650c7f1549c7623cf044967b3e5c9ec8cf501df372ec97b848b6b524543155b99120c9a5b30dfbc338f2959b8969c34aab89e591bf5fd8c01e0bd71edb98cf8ccb15efe83adfc2993f6424191316c433333c451aff40909aeec562071976964adb797f10dbbb8fb9065170d17fa517f8b64b545118450d1444c7d17d1f7bcadb1f4f0ac7320684eb899fb310053c742b81ffc6fa2c9010e9a085fdf35c82a910b840c1d522fefcb875f2adbf9a721e5d25fc137970e328d49e04044cb4e67a529cbaf393ef9931d9baab99b53ce2de4694ca43847efaefb892ddef18371b1f8b55654a73"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x1, 0x60, "39caf319c9f7b6bced193c248719d5a011e9d442ae56d72dede58658588ba4ba12acf6f075bd2d2a34269fa56621ccdae74275fa5689e9e6dbcde3856ce2aaf7399fde5b2251c70a857c872ed8c9af9549592e1f10a5214f8969c9c89bac10f9"}, &(0x7f00000004c0)={0x20, 0x3, 0x1}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000540)={r0, 0xc, 0x1, 0x3}) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000580)=0xe0, 0x4) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f00000005c0)=0x1) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000600)='mand\x00', 0x0, 0x0) (async) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x0) r3 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f00000008c0)={0x14, &(0x7f00000006c0)={0x60, 0x9, 0xfc, {0xfc, 0x29, "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"}}, &(0x7f0000000800)={0x0, 0x3, 0xb9, @string={0xb9, 0x3, "fc0ec1bba3932f377c3baf6753b71cb898943f06ded406dc4e338f9e51d9708f51bce04ba261da4080646ec13a30689fb09ebec869b2648ceabde2d0e164315f7680354f719b8d6410d5953ae1580c6167006eebb9964fb08dd285370af0df49ed28900657f9c89cae164b4160ba23075c551190d4eaf6eb1105a17692abe4cd27077d01bbcb3b05ff240be87cff59c3b8b0d61bf69402b74df023e75280f5207eebfe3db11a4d215b389799c8b9e3b5f8f2dd9f082001"}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000900)={0x20, 0x6, 0x61, "de9bb23be4f8d3dff66d7a7812daeed5332465efbcc6b8a902f24829504ad20c95a0fcf1de0c0da9674a7a1580e59423ec6b3ce53efe46535c480c33ebf65cb39b2ac80d6bb9201bcc9a9db5c0ad16348f1cf568d378c448c3b0639796b66eb49d"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000009c0)={0x0, 0x8, 0x1}, &(0x7f0000000a00)={0xc0, 0xa1, 0x4, 0x15}, &(0x7f0000000a40)={0x40, 0xa0, 0x4, 0x8a97}, &(0x7f0000000a80)={0xc0, 0xa2, 0x2f, "c483f856cb55e54155a89c24ccf5b02402847b88b82bd7a44f623d6ef790b59e811c73e68687b632b1e8ffcf7dcc13"}}) (async) syz_usb_disconnect(r3) (async) syz_usb_control_io$lan78xx(r3, &(0x7f0000000c40)={0x14, &(0x7f0000000b00)={0x0, 0x22, 0xd0, {0xd0, 0xd, "e2aed50aa2e021e2a62774dba64a39a74e0522f8ed80137761ad8319a75cd5019af4be3b5aaf9a75e6dc64a393f1b1adb326b6ac1ff0596c942892a8f377c2c73469cc11eeaa618a9e4a9d121b80c42c61f69c947577ff89b9325ed23fecc745e304b3b9d8a01137afca40109514942970586ccbe041ef14c65b64fc6757d89a5ddb337eec915e5aae07b8a82e252b47f2925aeb7d93983309641342262785a8bdafc2a944a1280ed1f3f7b255866ee757b11b5d18789c312d1bc7507b2570d475fa4bd405b901b7096a647b905c"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f0000000e00)={0x34, &(0x7f0000000c80)={0x0, 0xb, 0x2, "bb7c"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000d40)={0xc0, 0xa1, 0x4, 0x3ff}, &(0x7f0000000d80)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000000dc0)={0xc0, 0xa2, 0x2f, "35e532516d82c6fe2741d7f71dd02514b608f1321f719807f1f778e009cce807b1391539beb8479d0ee6fd99b874f8"}}) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000f00)={0xa0, &(0x7f0000000e40)="4e07bf43fba1a30a025e0d0bba3e8dc19eca453524974df3a9869587c79d6cde3975027dec30962dc5f0aca185dec85f6ab34420b6ce07f9fc49cf4993faf44b0c860610618dcd0137b2e96f070c0f3c2f40addfbace302876572d8dfe2623a6370536c7c67f516c505febb366058b5077cf7aca4562a53680351b7b5b422c6a06547c7b9d8799feb69b788078105cae1067302996769c1324bbd7"}) utimensat(r1, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)={{}, {0x77359400}}, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000fc0)=0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001000)={"2df4b69af95132c99cc843463bdf9867", 0x0, 0x0, {0x0, 0xd}, {0x4, 0xfffffffe}, 0x4, [0x10001, 0x1, 0x100000000, 0x9, 0x3, 0x4, 0x4, 0x9, 0xffffffffffff8cbf, 0x80000000, 0x9, 0x1e8, 0x81, 0x7, 0x5, 0x45c9741e]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000001100)={"4b53a700e530dcfa86470022e7721c40", r4, r5, {0xfffffffffffffffb, 0xb}, {0x200, 0xa}, 0x4, [0x3, 0x1c0, 0x8, 0x10, 0x8, 0x8000000000000000, 0x80000000, 0x197254c3, 0x8, 0x3, 0x90e, 0x2, 0x100, 0x2, 0x2, 0x2]}) (async) syz_usb_control_io$lan78xx(r3, &(0x7f0000001340)={0x14, &(0x7f0000001200)={0x40, 0x1, 0xe9, {0xe9, 0x5, "6a4dfe450d0894cfc13b426c692254ec7883d5883d199d39db4764af6cbb3db049da6770d3c185e24974d7f4412779136c6b0468d721b8492383351d6fb3978cd8cf6a674f31b7d64b7599e09bc139ddbd77bf8fa2c056a3b31f869bf2a5f3bb5f07dc53300a6451b3c339adb903a85e618b7f847cd795baa5bc229b4a98ce113f9c2218479c69680cf7e05ed616e803f269bc42a1ab17284d055d07db7a8afc8b17fe013d799456803d62479b870e76147fff3bfcecfee88c1d9675f74dfd32d8aa7f529b60c1b6f10c5c49c3d727ca29e4c8833b4248d1f17a47bf3813b21fd4d471559097a3"}}, &(0x7f0000001300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}}, &(0x7f0000001540)={0x34, &(0x7f0000001380)={0x40, 0x15, 0x61, "dc1503288bf566ed45972181aee6c17533e3bcaccdda1686d37cfe300b3d3ad7c7ff67ee7ba4e3dece29303dffcd15d5cdacaf8fa3afcd8aee2a8bef332d1e47fdd22737fcdfecfebf12ea04c1723e148d9c4b646a32862a0133031774fd112b0e"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x5d}, &(0x7f0000001440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001480)={0xc0, 0xa1, 0x4, 0x10000}, &(0x7f00000014c0)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000001500)={0xc0, 0xa2, 0x2f, "c2d210b949a9153c888ba91ff5d50439bb3aa31465d99589ae7272c650ffd750b27d67d8fb8cc1b49c0ee3e0d16644"}}) (async) fsetxattr$security_capability(r2, &(0x7f0000001580), &(0x7f00000015c0)=@v2={0x2000000, [{0x1, 0xede}, {0xed0a, 0x3}]}, 0x14, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001600)={0x73622a85, 0x114, 0x1}) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000028c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002880)={&(0x7f0000001680)={0x11c8, 0xd, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5d0, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8}]}}}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x740}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x2fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x148, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcc, 0x1, "a602d6ffc8471c89d2adf28853e04e6f41eed47f846f0f3b98e73639539778230d1f8fef5214da9e458a1d554cd84a9fa514f64171d709ccd64cd862cbb61437335c158140f062cbd73ff8876fd9aa57abf2b264f316c2a37d274a4cea93182912d94939742cb0a337751964ea865807a29935a35680b7ec8cc2197e7bd4f0269db6a61b73bf6aa2ab32aab68efa6c92ec827e42cd83a3315ed00ed23d38b60b2d9926cc7dbd7c7e2cad16f3204cec1c1e6323e8208d801ae943a4d29ae7d4bc5abdb4946cdf0c09"}, @NFTA_DATA_VALUE={0x77, 0x1, "dc975699a9b87cb4f6781a694120674fc61a6dd1ac291bbe11a5a69c88af54e9ce251f43f2ed0758e28214afcfe043ff15053a6f2aa03ad9e7f2626025bcd6e11d24539b69c4455f699e37b96e67bc379dfa3d1b055b52016d4046d5210d0153fe679fb1036ebd7c44189e139ff323f887d943"}]}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @objref={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_ELEM_DATA={0x11c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe2, 0x1, "6078af6c65f1320ed16c820c2db53f49f4303620c14fa511b297ef4dc3da609e4de47111015983fbcaf3b9de506f02b4f080a585cb0abcdc2d01e9b1ee8238f5840e431b2a78eb924dd6fd45141411aa5e7af5c71b015d945c4ed0922704eed4966d9560cdc0f67d35bdf0657e30a8adcfa6aae76f19784b5ca54edbcdb15824ae319bbb24a1203a85f56199cb1f5db91cee4cc5746aff7ca47e826e4032b55f37d77be34ba312c02284b84706c0a8ed1309d99800aacf9c53e9e6ee677d60a7d05521fd373b5c66844e0b13125b5ddcae147fd2d1ee637b65fd975cfd4b"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x4}, {0x294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x480}, @NFTA_SET_ELEM_KEY_END={0x1a8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x65, 0x1, "6d5efef2ad987eb7901f9e19168016d5d4862f6c2dc33119e9762bab8aff435a05d35f2b38357138e06677a54e5ea32b02c3d8b9dbffc0d4d6c21386294164520a317bded4185880ba1fb8cf5872c5fb146783e78e088b5db88002f3afffb9b6a9"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x39, 0x1, "97a3486bbb6975748d2f34b22bd7d5ab438c4c5350231debdc33b6ea01dc83f451e0ad723f4f4917aa646a01b14438787183ce5173"}, @NFTA_DATA_VALUE={0x7b, 0x1, "075577314989c0a0443d9815873e321b368ecc486580a2426fb17a296b992acb8e8d64b22e272a7450c94d4a6e8a588e68ba0952af78d3dac89b342ceb2eb2a6f5d0cbf6d6f70c73d1acaa47d3544a1c79259ee13881651384a6ed9f80f452dd751bb983efb52be1e9602cf7528e842fdb3aef4325645e"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3d}]}}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_RESULT={0x8}]}}}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x574, 0x3, 0x0, 0x1, [{0x3f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x3e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x28, 0x1, "b54698424e3fd6aa520186baa4861c292b9ec289f037d307e68df6e3d37182989a37feac"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xa, 0x1, "e6794269bf63"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "f80d1c49abd6a43aff7b3396f5a4acc209ecb1018e1d3db1cc78870c42e6746bfb09e9f0f1186ed211f1f5f98d36d60c768c49c7ac8fd391ee26a5420a43d4e7bf33b285b803370424bd2fea1edea1503d34892ad897d9c1ec8f6073b18f601b8103ce5ae3f6e844a7b8e3bdbd53d527e5b6d3d7d6b43f36839fae921e469600820703ab7767c2c82a94dd73f222a9fd0190f4ccc815d08abbfe384774d107b95a0f49a4b708f3dbc227ffe11e32b06ad0ddbf7e041b6d662f385284ebab043461c93b7161c664f62e7adbc9b4633be313111028af5996f2154388fff91a3bd21616f552602de197df16d1c1aff29bf6767fdb39554356"}, @NFTA_DATA_VALUE={0xca, 0x1, "4ab07479e7905dcd3cc2f790fab6d83c0130ef7b28e85738eefc0998f009580124a3746337ac1652031c12c40d4a96d36e8801a9ef5881c70ac2492cb92147a49ce671936b8d4db09fe2a4f497ac9c15f9b0834a88dc957af34afb8e33cf78e100dc53533553683b65368813caa64f297ae805548a42ba4d0230ff0af36da457a85ab078d6826b36e1a8f563c58c721a1da21e6670820c94532e2efcd25eca354cc029768986d6a7cf3dd300138f8790c6de9c480dea7957640b6354c47bdd42b8e8328b7cdd"}, @NFTA_DATA_VALUE={0xc5, 0x1, "72337b2f10fa544c0b641f3ed7104c60621db45b070061d72e96ed80c891c6d8ea62d423ae60d4146556ccfcb22e6751839cedeadb915d7f66b6ae413bd04c65939335a46181af205de4a4929c40c7829061cfa596bcb497eaceef3db23165c8fcb6f6a8a5881374e4cce321f2d6bf12d912f55e7599ea63bea7ba9fc865d0779192cc7624c3f08bd47f4520f104fb716ca7b57b77f0a99066d2886c1e2e4977c1cac41c8dc3e5400437e185791703009ad7e9359de5e30e3d7b33d2bbd442f100"}, @NFTA_DATA_VALUE={0xd4, 0x1, "3cc29d2efa0973971b080896b6ee04625218f53b10cb5752eb2cbd7ca9d69cfe5d00b35f6e8090296361874117f1e260a01667ce703fa8b21c3881383017dfcde85f53b352522d955e6f0551c1c6107c5b50b6db86009f3be03dd510d6040402f1cbfb5e0351534cc51031d7a62b67bae35e0a0dd4ef8ef18f5065ba1f9a45613b3fe5bbcaafa20085b8187fe1a895e3785bce456bf7936f425d5a1632e17acfc5a8137d49d4a446a950fbaf11e4779f2969362c110389b6d5e49bc1e8f96c106a3ef7fcfdf64a25f2299d591627983d"}]}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x14c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6b, 0x1, "6cd279bd0a776927c63a8019cce9c001261ded1b89e5a18bdc104b30ab57be9f8fd367be423e950501fb12479297c19f483cc9104dcddcae682fc8a51e8f67724feb2eae6f2f5ac7e585baa49e7d852af034b068efc4a509a3f409b1b0bb00f636eae3d1b5d0a1"}, @NFTA_DATA_VALUE={0xdc, 0x1, "e18ac758a46aca8a95fb47915beae21f6f64e577ecde5c4a2fb42f9c0e3e080a5c972d7b8b78a2a22e402454605498c29d84c8afc8cdd86171df53e2b50a2ea77308cdd0de18ddf8b2dd6e6373b933488fdbfce2eedd7b0c1d7b43f4d15f12b51d334251fe5b959346db9b7c300c251f5d71b88b05803533df3f6bdb3971d1859c7957eb7621ed3938ce42afb8855f41ba97d6b89abcc0c4e9c2aa6b2556f6eb7a7360ff56a069fbbca8ceefc3f077c27171d3750be9d03d7cbb609eb622418e20f0a9024d7a215e0aa3657c938edebeb65bb12a1cbb0f30"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x664, 0x3, 0x0, 0x1, [{0x4f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x40}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_TTL={0x5, 0x2, 0xa0}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY={0x23c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcc, 0x1, "67d10440e9507a4f1469022bbc7c32ecc97f6d29ccf44226a7691eb2cf61ef7840be9f88a6e811fddf4216e2400571358251e329888d01134144771e5454c858a630e7f5e64e9988464d0891132866cc471ab935ccfdebe37c72c82e84b524debfc11c68812d67895811f5788ff5b8b9556e7749a5ee30b76c32a8553976a6de42fc261d77a6de97cd2b8f66a14270c22b3f82100080c2b2663f5249c7de6c8cd56d6a39380ceaca3be32f9db62c615e91679851b0abb6d04b97e56ce9e0ce39f9f71024e886ab7a"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf2, 0x1, "88b5262581501274f469c271ffea7550e6055a469ff9edb2b9ab09548e95573e42819a19941ce633682c8f761fa7ff70034bdb358b5c0f4640823dfd658d6bde1f8466defdfa5e73167d1575f522ace0aba754d680a3df7978342e7eb0ed970481de0572a28cbc0734450712f154bd948c233e0534a82cfc4283e66e85d753a5e7cf37838dda55a27272294e7133f0936edb96fd983a4ef07d328e91b3f89ef23a6d21bbdd7928d0fa53dd5ccf3879624598a95f18901183786f1e5ae1a66b1d13dc552f957aa477df36ced198795f369f2a844ee7f394b02a36623b5611cd1082cd7fae17ba438bc7bcb9be5069"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x168, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xd0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_IMMEDIATE_DATA={0x84, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x29, 0x1, "bd99db59f24c1f6093da801f49b44a4f27b0d293e67a9ac4e3dc492d91fb58259fb0e1aefc"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x839e0308f84d8f50}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x84, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x74, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x42, 0x3, "8091a7e9823c371b631f970a090db339ac6790733fe513381dad299f7cbfc9ffe1066c776243277038ac1366dacede8af639411cc4e16e2cd5e1a90726a9"}, @NFTA_MATCH_NAME={0xd, 0x1, 'addrtype\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0x9, 0x1, 'dscp\x00'}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xa8, 0x6, 0x1, 0x0, "3347f71f5b4cc32e8d2b69e86486875911be78e659bd24323bb219145885980765539ff83f9d7a5121a0f4220b3a0842c6a17eabee92b013bff219753ad1164e8e942e364f1b58d9f51f18c9a9ccda61ab2942b1415b412f01ef2582c191d2c9168f177dcec99ce821a7cda65af0901a35e13c2a0e6083c1046a845e114427e41765057d9bf9422224e8071617fbf4074af3e1c8f3023e03185ab5a6caef4d5b4b645676"}]}, {0x16c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x38, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, ']\x00'}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x339}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8e}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_USERDATA={0xb3, 0x6, 0x1, 0x0, "89a5bf14f71f9f7f6aa7d5e15755ac147aff21f20c7adec41e407254b4f6e58042c42f58ce00adb56f744ec5b465523e1be2822d3b6d57ea79fb3701c1bf7058519dfb8c1ca24332bb616622a4d9deda5b63b7e61a4d45ecb0fff08ffd3cf96187997f81d597a09fb768ee06a1bf7f4449db1e9e0b3cd2838361c02105584dd2cd6c4af8ec5ac1a210737eb3f68ffa847aed85577a5e7a5e9039420a15ac16f73c376978f51af5c210a100ea65fbe7"}]}]}]}, 0x11c8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000002940), r2) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x14, r6, 0x10, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44805}, 0x4814) (async) wait4(0x0, &(0x7f0000002a40), 0x2, &(0x7f0000002a80)) r7 = syz_usb_connect$cdc_ecm(0x6, 0x69, &(0x7f0000002b40)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x8, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0xc, {{0xb, 0x24, 0x6, 0x0, 0x0, "2f513567a27d"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x0, 0x1cea, 0x7}, [@obex={0x5, 0x24, 0x15, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0xa2, 0x4, 0x400}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x7, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x9b, 0x3, 0xc0}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x9, 0x7}}}}}]}}]}}, &(0x7f0000002f40)={0xa, &(0x7f0000002bc0)={0xa, 0x6, 0x110, 0x2, 0xc, 0x1, 0x8, 0x4}, 0x30, &(0x7f0000002c00)={0x5, 0xf, 0x30, 0x2, [@ptm_cap={0x3}, @generic={0x28, 0x10, 0x2, "4081e4a04f664a2f204999dc744fdaa4825536166190b4c58d5984d71a9fa1daa980e91206"}]}, 0x6, [{0xae, &(0x7f0000002c40)=@string={0xae, 0x3, "1bc7a09f5cd3a110bfe18ff45ef9b2cfa9b25108c23684bb0c56014804a1458bf45801493b873532774d6782edf522bb25b5b169931e79e3968f3da9b061c5cf91081f9586b18b0e963b5fa904685033d4bc496dad6e8ec1178bd5d79a4dfa603a2cccc94a65aac3b0686952cb0f60071d39202d0c5fdcc3cc25306346d6b5c1c4201a0f85da4fda89276c53d9f69729802918982d79211b852caf091582943794e5ade38157497d0bf62272"}}, {0x61, &(0x7f0000002d00)=@string={0x61, 0x3, "229f934bd1adfa2413afbfe763c464789aba64b6f61853e841cbb919209cab5a4aa7eb76896b76916ceef4c21c6a7b9e37fc42f94a42c231332c64b814a1ed9f4cca23f161f6467e4ddb4359298994b1d39bec31bd405c41950bb84744e0a1"}}, {0x4, &(0x7f0000002d80)=@lang_id={0x4, 0x3, 0x500a}}, {0xd5, &(0x7f0000002dc0)=@string={0xd5, 0x3, "4265129960ce3f54c69ef84706ba73dd618e4953f0b8823cc659883b7aab7ffa6a4db654240f7faa9f15e4df5da9ec0c51ceb392d76ff5b8ec35e1994f8e4769cf767ae023735d20f47d39dafa03528ceec41e6bc4c9d3c685853f5359a052516b1e5e3fd507ca6de3a575e9fbda7c6cdf84ca174b50497d6e06f3d4b5132ec70ada5dd4f6575bde23282220d3b075ca6e308b8fab8c43c5cc5c6f521decb614ead2a58f8f1704e7e52e07194abb1ebd9c91db495738d885a11b42020c6f1ae0d514cf1810a9666c85dc33a51861a7c622d7f8"}}, {0x4, &(0x7f0000002ec0)=@lang_id={0x4, 0x3, 0x1007}}, {0xa, &(0x7f0000002f00)=@string={0xa, 0x3, "f5f5814c09ad81ac"}}]}) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000003080)={0x14, &(0x7f0000002fc0)={0x20, 0x6, 0x64, {0x64, 0x11, "9315d47e7c586ead45ef9135353afddd1ba7a78333c53aae8e075536edc28632d926a74c332015463c577db0f4938310021c183aa963dffc00b610ccde6b1ab1690382b9b585ba0629d51f58aac2e52688107f8dd43e6df19f074b5e6ad8dad54207"}}, &(0x7f0000003040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003200)={0x1c, &(0x7f00000030c0)={0x0, 0x7, 0x9c, "7ada8ed2ca9fd2a04b34f8c3ef22940e090774be12fc1d2e7a79111fda868e9c79854122c4026983613c468a309a6c96d08f62728c56430826dca5ed7ef29826b9b7c7af667c5425719fef1e2121065b1479267eeae2ccf4211f0df99ca6bc2bc7dc5c49a3074267a90fa7d3e6969d74601e397d2df2d2e00ebd18090ee438dcfa993e728d422b1fc34f13c8d7b9483077eeeb26a3b779c4276fa9bb"}, &(0x7f0000003180)={0x0, 0xa, 0x1, 0xf5}, &(0x7f00000031c0)={0x0, 0x8, 0x1, 0x2}}) (async) write$P9_RXATTRWALK(r2, &(0x7f0000003240)={0xf, 0x1f, 0x2, 0x65bfd190}, 0xf) (async) syz_open_dev$usbmon(&(0x7f0000003280), 0x8, 0x820940) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000003480)={0x14, &(0x7f00000032c0)={0x40, 0xb, 0xcf, {0xcf, 0xe, "192a09a5cb8e8cb6845b20ec2b44fddc90471b21a8c249255a883c175627c55ab3a2620507736bb2f3810fe1afaf06ea6ec90c0f6727eb08cdabf13b7c49a6d49a667eaed44790d3e1ee615175aecdefb06c730331eb7f590a191a85da93fa79695d01c697ef56eff5935e6face44072688a68a39990e1da0a23537e64165d006b85f60fb8be48119404eb5d7e618c9b00ded56b538afae650525d5fe8bbaeda53fbae05c1617a320ca8c33493c21c60472e5d49123b41e28aa16b9b8a645fff3d14bd428138121ed87763d2ee"}}, &(0x7f00000033c0)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "5c0a9c2c3a74e424811c058d6ea6e98b65338c7d1d0de82f352b56ff6a4a87c537bb1bc659200b06d9f516129ccbbe2d8a02549a7307ae7368175a207efe8040d255d9eca3d3f2dbd8d1e1bfc70ddfad6056ca0ba24626109908f5c14176c4b6241cba8d2e72dcc9a0688b71942c727f4999e4a594dda7d4f64fa655237c16a239c434d0580f9340d1525e98bcd744788cfad2abc60d2bd4b8ed2526c7f23c588095d5a0f7cbad08"}}}, &(0x7f0000003780)={0x44, &(0x7f00000034c0)={0x0, 0xe, 0xf2, "22fccf26bd01c653a48b9b2063a6884daa83205b2e65a43e31887fd06e910d42c195b6cfb284595a9ef9751cb460d6dba1b1f78b8f29b4e22959e4d41974da179d2c2ea9ae03337306d224aa5ab6e2564b9c056a36b3fc4296e5b7e594e796c679e77167ad3bc9dd826fc045ad63036b08338ce7aeef7d6e1306b59570f08e371ab692c125446cea4403247b1cfc11cb2448aa69b210644d7fd09163bd9b584f7c4c615fba3aebf338bd2e949c82d664c8c174a2ee2efdb5f1da005693072d5345ba9baa780779151a10f2a01fd23dc501f08941544771fb3da620480553c186dd6ab32cfc965b744c1f5f9934bc1bd12096"}, &(0x7f00000035c0)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000003600)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000003640)={0x20, 0x81, 0x3, "3e2aa3"}, &(0x7f0000003680)={0x20, 0x82, 0x1, 'R'}, &(0x7f00000036c0)={0x20, 0x83, 0x2, "e4ce"}, &(0x7f0000003700)={0x20, 0x84, 0x4, "a89aed0b"}, &(0x7f0000003740)={0x20, 0x85, 0x3, '7\\/'}}) 4m24.103946812s ago: executing program 62 (id=23259): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0x9, 0x6, 0x1f28, 0x48da}) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x20, 0xf, 0xd4, {0xd4, 0x31, "588ea3e7222410473b21de327c771f52f7b5d1db4f425337056646657821639c9cf47a07e8b965861037b255b15b7541be1c82873b72d77c7135a94945018c52bcb03958dad3088d1312621055062de0a6ad5af139f09024660a83030a962582876af1319e2417bf303b8df06519d639a7155604d292e7eba56e0664e9bf739c60b1cd61307e92abec03dc842eaff8034282c403696fc8fc7334976f1ba468e745e35dd828dfebbfbfb22a99c1d3883932c9b1198bee407f252236c9aacbff05aef905bda86b611ac69df7ff48dcadc37607"}}, &(0x7f0000000180)={0x0, 0x3, 0x40, @string={0x40, 0x3, "bdf974934651789b3e6f6c78aebbd7ad87809b3065deb30a66fad1bca07c68ca6fcc61eb36186267abfb47253380e15e84482e34b31ed4b0d4d86152991d"}}, &(0x7f0000000200)={0x0, 0x22, 0x1c, {[@global=@item_4={0x3, 0x1, 0x1, "957e26d2"}, @local=@item_012={0x1, 0x2, 0xa, "86"}, @global=@item_4={0x3, 0x1, 0x0, "9e758163"}, @global=@item_012={0x1, 0x1, 0x4, '/'}, @local=@item_4={0x3, 0x2, 0x0, "8874a4f4"}, @local=@item_012={0x2, 0x2, 0x2, "39e7"}, @global=@item_012={0x2, 0x1, 0x2, "ed29"}, @local=@item_012={0x2, 0x2, 0x2, 'n\x00'}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc, 0x3, 0x1, {0x22, 0x396}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x20, 0x14, 0xe7, "452894650c7f1549c7623cf044967b3e5c9ec8cf501df372ec97b848b6b524543155b99120c9a5b30dfbc338f2959b8969c34aab89e591bf5fd8c01e0bd71edb98cf8ccb15efe83adfc2993f6424191316c433333c451aff40909aeec562071976964adb797f10dbbb8fb9065170d17fa517f8b64b545118450d1444c7d17d1f7bcadb1f4f0ac7320684eb899fb310053c742b81ffc6fa2c9010e9a085fdf35c82a910b840c1d522fefcb875f2adbf9a721e5d25fc137970e328d49e04044cb4e67a529cbaf393ef9931d9baab99b53ce2de4694ca43847efaefb892ddef18371b1f8b55654a73"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x1, 0x60, "39caf319c9f7b6bced193c248719d5a011e9d442ae56d72dede58658588ba4ba12acf6f075bd2d2a34269fa56621ccdae74275fa5689e9e6dbcde3856ce2aaf7399fde5b2251c70a857c872ed8c9af9549592e1f10a5214f8969c9c89bac10f9"}, &(0x7f00000004c0)={0x20, 0x3, 0x1}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000540)={r0, 0xc, 0x1, 0x3}) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000580)=0xe0, 0x4) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f00000005c0)=0x1) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000600)='mand\x00', 0x0, 0x0) (async) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x0) r3 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f00000008c0)={0x14, &(0x7f00000006c0)={0x60, 0x9, 0xfc, {0xfc, 0x29, "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"}}, &(0x7f0000000800)={0x0, 0x3, 0xb9, @string={0xb9, 0x3, "fc0ec1bba3932f377c3baf6753b71cb898943f06ded406dc4e338f9e51d9708f51bce04ba261da4080646ec13a30689fb09ebec869b2648ceabde2d0e164315f7680354f719b8d6410d5953ae1580c6167006eebb9964fb08dd285370af0df49ed28900657f9c89cae164b4160ba23075c551190d4eaf6eb1105a17692abe4cd27077d01bbcb3b05ff240be87cff59c3b8b0d61bf69402b74df023e75280f5207eebfe3db11a4d215b389799c8b9e3b5f8f2dd9f082001"}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000900)={0x20, 0x6, 0x61, "de9bb23be4f8d3dff66d7a7812daeed5332465efbcc6b8a902f24829504ad20c95a0fcf1de0c0da9674a7a1580e59423ec6b3ce53efe46535c480c33ebf65cb39b2ac80d6bb9201bcc9a9db5c0ad16348f1cf568d378c448c3b0639796b66eb49d"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000009c0)={0x0, 0x8, 0x1}, &(0x7f0000000a00)={0xc0, 0xa1, 0x4, 0x15}, &(0x7f0000000a40)={0x40, 0xa0, 0x4, 0x8a97}, &(0x7f0000000a80)={0xc0, 0xa2, 0x2f, "c483f856cb55e54155a89c24ccf5b02402847b88b82bd7a44f623d6ef790b59e811c73e68687b632b1e8ffcf7dcc13"}}) (async) syz_usb_disconnect(r3) (async) syz_usb_control_io$lan78xx(r3, &(0x7f0000000c40)={0x14, &(0x7f0000000b00)={0x0, 0x22, 0xd0, {0xd0, 0xd, "e2aed50aa2e021e2a62774dba64a39a74e0522f8ed80137761ad8319a75cd5019af4be3b5aaf9a75e6dc64a393f1b1adb326b6ac1ff0596c942892a8f377c2c73469cc11eeaa618a9e4a9d121b80c42c61f69c947577ff89b9325ed23fecc745e304b3b9d8a01137afca40109514942970586ccbe041ef14c65b64fc6757d89a5ddb337eec915e5aae07b8a82e252b47f2925aeb7d93983309641342262785a8bdafc2a944a1280ed1f3f7b255866ee757b11b5d18789c312d1bc7507b2570d475fa4bd405b901b7096a647b905c"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f0000000e00)={0x34, &(0x7f0000000c80)={0x0, 0xb, 0x2, "bb7c"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000d40)={0xc0, 0xa1, 0x4, 0x3ff}, &(0x7f0000000d80)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000000dc0)={0xc0, 0xa2, 0x2f, "35e532516d82c6fe2741d7f71dd02514b608f1321f719807f1f778e009cce807b1391539beb8479d0ee6fd99b874f8"}}) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000f00)={0xa0, &(0x7f0000000e40)="4e07bf43fba1a30a025e0d0bba3e8dc19eca453524974df3a9869587c79d6cde3975027dec30962dc5f0aca185dec85f6ab34420b6ce07f9fc49cf4993faf44b0c860610618dcd0137b2e96f070c0f3c2f40addfbace302876572d8dfe2623a6370536c7c67f516c505febb366058b5077cf7aca4562a53680351b7b5b422c6a06547c7b9d8799feb69b788078105cae1067302996769c1324bbd7"}) utimensat(r1, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)={{}, {0x77359400}}, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000fc0)=0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001000)={"2df4b69af95132c99cc843463bdf9867", 0x0, 0x0, {0x0, 0xd}, {0x4, 0xfffffffe}, 0x4, [0x10001, 0x1, 0x100000000, 0x9, 0x3, 0x4, 0x4, 0x9, 0xffffffffffff8cbf, 0x80000000, 0x9, 0x1e8, 0x81, 0x7, 0x5, 0x45c9741e]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000001100)={"4b53a700e530dcfa86470022e7721c40", r4, r5, {0xfffffffffffffffb, 0xb}, {0x200, 0xa}, 0x4, [0x3, 0x1c0, 0x8, 0x10, 0x8, 0x8000000000000000, 0x80000000, 0x197254c3, 0x8, 0x3, 0x90e, 0x2, 0x100, 0x2, 0x2, 0x2]}) (async) syz_usb_control_io$lan78xx(r3, &(0x7f0000001340)={0x14, &(0x7f0000001200)={0x40, 0x1, 0xe9, {0xe9, 0x5, "6a4dfe450d0894cfc13b426c692254ec7883d5883d199d39db4764af6cbb3db049da6770d3c185e24974d7f4412779136c6b0468d721b8492383351d6fb3978cd8cf6a674f31b7d64b7599e09bc139ddbd77bf8fa2c056a3b31f869bf2a5f3bb5f07dc53300a6451b3c339adb903a85e618b7f847cd795baa5bc229b4a98ce113f9c2218479c69680cf7e05ed616e803f269bc42a1ab17284d055d07db7a8afc8b17fe013d799456803d62479b870e76147fff3bfcecfee88c1d9675f74dfd32d8aa7f529b60c1b6f10c5c49c3d727ca29e4c8833b4248d1f17a47bf3813b21fd4d471559097a3"}}, &(0x7f0000001300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}}, &(0x7f0000001540)={0x34, &(0x7f0000001380)={0x40, 0x15, 0x61, "dc1503288bf566ed45972181aee6c17533e3bcaccdda1686d37cfe300b3d3ad7c7ff67ee7ba4e3dece29303dffcd15d5cdacaf8fa3afcd8aee2a8bef332d1e47fdd22737fcdfecfebf12ea04c1723e148d9c4b646a32862a0133031774fd112b0e"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x5d}, &(0x7f0000001440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001480)={0xc0, 0xa1, 0x4, 0x10000}, &(0x7f00000014c0)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000001500)={0xc0, 0xa2, 0x2f, "c2d210b949a9153c888ba91ff5d50439bb3aa31465d99589ae7272c650ffd750b27d67d8fb8cc1b49c0ee3e0d16644"}}) (async) fsetxattr$security_capability(r2, &(0x7f0000001580), &(0x7f00000015c0)=@v2={0x2000000, [{0x1, 0xede}, {0xed0a, 0x3}]}, 0x14, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001600)={0x73622a85, 0x114, 0x1}) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000028c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002880)={&(0x7f0000001680)={0x11c8, 0xd, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5d0, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8}]}}}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x740}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x2fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x148, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcc, 0x1, "a602d6ffc8471c89d2adf28853e04e6f41eed47f846f0f3b98e73639539778230d1f8fef5214da9e458a1d554cd84a9fa514f64171d709ccd64cd862cbb61437335c158140f062cbd73ff8876fd9aa57abf2b264f316c2a37d274a4cea93182912d94939742cb0a337751964ea865807a29935a35680b7ec8cc2197e7bd4f0269db6a61b73bf6aa2ab32aab68efa6c92ec827e42cd83a3315ed00ed23d38b60b2d9926cc7dbd7c7e2cad16f3204cec1c1e6323e8208d801ae943a4d29ae7d4bc5abdb4946cdf0c09"}, @NFTA_DATA_VALUE={0x77, 0x1, "dc975699a9b87cb4f6781a694120674fc61a6dd1ac291bbe11a5a69c88af54e9ce251f43f2ed0758e28214afcfe043ff15053a6f2aa03ad9e7f2626025bcd6e11d24539b69c4455f699e37b96e67bc379dfa3d1b055b52016d4046d5210d0153fe679fb1036ebd7c44189e139ff323f887d943"}]}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @objref={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_ELEM_DATA={0x11c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe2, 0x1, "6078af6c65f1320ed16c820c2db53f49f4303620c14fa511b297ef4dc3da609e4de47111015983fbcaf3b9de506f02b4f080a585cb0abcdc2d01e9b1ee8238f5840e431b2a78eb924dd6fd45141411aa5e7af5c71b015d945c4ed0922704eed4966d9560cdc0f67d35bdf0657e30a8adcfa6aae76f19784b5ca54edbcdb15824ae319bbb24a1203a85f56199cb1f5db91cee4cc5746aff7ca47e826e4032b55f37d77be34ba312c02284b84706c0a8ed1309d99800aacf9c53e9e6ee677d60a7d05521fd373b5c66844e0b13125b5ddcae147fd2d1ee637b65fd975cfd4b"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x4}, {0x294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x480}, @NFTA_SET_ELEM_KEY_END={0x1a8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x65, 0x1, "6d5efef2ad987eb7901f9e19168016d5d4862f6c2dc33119e9762bab8aff435a05d35f2b38357138e06677a54e5ea32b02c3d8b9dbffc0d4d6c21386294164520a317bded4185880ba1fb8cf5872c5fb146783e78e088b5db88002f3afffb9b6a9"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x39, 0x1, "97a3486bbb6975748d2f34b22bd7d5ab438c4c5350231debdc33b6ea01dc83f451e0ad723f4f4917aa646a01b14438787183ce5173"}, @NFTA_DATA_VALUE={0x7b, 0x1, "075577314989c0a0443d9815873e321b368ecc486580a2426fb17a296b992acb8e8d64b22e272a7450c94d4a6e8a588e68ba0952af78d3dac89b342ceb2eb2a6f5d0cbf6d6f70c73d1acaa47d3544a1c79259ee13881651384a6ed9f80f452dd751bb983efb52be1e9602cf7528e842fdb3aef4325645e"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3d}]}}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_RESULT={0x8}]}}}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x574, 0x3, 0x0, 0x1, [{0x3f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x3e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x28, 0x1, "b54698424e3fd6aa520186baa4861c292b9ec289f037d307e68df6e3d37182989a37feac"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xa, 0x1, "e6794269bf63"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "f80d1c49abd6a43aff7b3396f5a4acc209ecb1018e1d3db1cc78870c42e6746bfb09e9f0f1186ed211f1f5f98d36d60c768c49c7ac8fd391ee26a5420a43d4e7bf33b285b803370424bd2fea1edea1503d34892ad897d9c1ec8f6073b18f601b8103ce5ae3f6e844a7b8e3bdbd53d527e5b6d3d7d6b43f36839fae921e469600820703ab7767c2c82a94dd73f222a9fd0190f4ccc815d08abbfe384774d107b95a0f49a4b708f3dbc227ffe11e32b06ad0ddbf7e041b6d662f385284ebab043461c93b7161c664f62e7adbc9b4633be313111028af5996f2154388fff91a3bd21616f552602de197df16d1c1aff29bf6767fdb39554356"}, @NFTA_DATA_VALUE={0xca, 0x1, "4ab07479e7905dcd3cc2f790fab6d83c0130ef7b28e85738eefc0998f009580124a3746337ac1652031c12c40d4a96d36e8801a9ef5881c70ac2492cb92147a49ce671936b8d4db09fe2a4f497ac9c15f9b0834a88dc957af34afb8e33cf78e100dc53533553683b65368813caa64f297ae805548a42ba4d0230ff0af36da457a85ab078d6826b36e1a8f563c58c721a1da21e6670820c94532e2efcd25eca354cc029768986d6a7cf3dd300138f8790c6de9c480dea7957640b6354c47bdd42b8e8328b7cdd"}, @NFTA_DATA_VALUE={0xc5, 0x1, "72337b2f10fa544c0b641f3ed7104c60621db45b070061d72e96ed80c891c6d8ea62d423ae60d4146556ccfcb22e6751839cedeadb915d7f66b6ae413bd04c65939335a46181af205de4a4929c40c7829061cfa596bcb497eaceef3db23165c8fcb6f6a8a5881374e4cce321f2d6bf12d912f55e7599ea63bea7ba9fc865d0779192cc7624c3f08bd47f4520f104fb716ca7b57b77f0a99066d2886c1e2e4977c1cac41c8dc3e5400437e185791703009ad7e9359de5e30e3d7b33d2bbd442f100"}, @NFTA_DATA_VALUE={0xd4, 0x1, "3cc29d2efa0973971b080896b6ee04625218f53b10cb5752eb2cbd7ca9d69cfe5d00b35f6e8090296361874117f1e260a01667ce703fa8b21c3881383017dfcde85f53b352522d955e6f0551c1c6107c5b50b6db86009f3be03dd510d6040402f1cbfb5e0351534cc51031d7a62b67bae35e0a0dd4ef8ef18f5065ba1f9a45613b3fe5bbcaafa20085b8187fe1a895e3785bce456bf7936f425d5a1632e17acfc5a8137d49d4a446a950fbaf11e4779f2969362c110389b6d5e49bc1e8f96c106a3ef7fcfdf64a25f2299d591627983d"}]}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x14c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6b, 0x1, "6cd279bd0a776927c63a8019cce9c001261ded1b89e5a18bdc104b30ab57be9f8fd367be423e950501fb12479297c19f483cc9104dcddcae682fc8a51e8f67724feb2eae6f2f5ac7e585baa49e7d852af034b068efc4a509a3f409b1b0bb00f636eae3d1b5d0a1"}, @NFTA_DATA_VALUE={0xdc, 0x1, "e18ac758a46aca8a95fb47915beae21f6f64e577ecde5c4a2fb42f9c0e3e080a5c972d7b8b78a2a22e402454605498c29d84c8afc8cdd86171df53e2b50a2ea77308cdd0de18ddf8b2dd6e6373b933488fdbfce2eedd7b0c1d7b43f4d15f12b51d334251fe5b959346db9b7c300c251f5d71b88b05803533df3f6bdb3971d1859c7957eb7621ed3938ce42afb8855f41ba97d6b89abcc0c4e9c2aa6b2556f6eb7a7360ff56a069fbbca8ceefc3f077c27171d3750be9d03d7cbb609eb622418e20f0a9024d7a215e0aa3657c938edebeb65bb12a1cbb0f30"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x664, 0x3, 0x0, 0x1, [{0x4f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x40}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_TTL={0x5, 0x2, 0xa0}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY={0x23c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcc, 0x1, "67d10440e9507a4f1469022bbc7c32ecc97f6d29ccf44226a7691eb2cf61ef7840be9f88a6e811fddf4216e2400571358251e329888d01134144771e5454c858a630e7f5e64e9988464d0891132866cc471ab935ccfdebe37c72c82e84b524debfc11c68812d67895811f5788ff5b8b9556e7749a5ee30b76c32a8553976a6de42fc261d77a6de97cd2b8f66a14270c22b3f82100080c2b2663f5249c7de6c8cd56d6a39380ceaca3be32f9db62c615e91679851b0abb6d04b97e56ce9e0ce39f9f71024e886ab7a"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf2, 0x1, "88b5262581501274f469c271ffea7550e6055a469ff9edb2b9ab09548e95573e42819a19941ce633682c8f761fa7ff70034bdb358b5c0f4640823dfd658d6bde1f8466defdfa5e73167d1575f522ace0aba754d680a3df7978342e7eb0ed970481de0572a28cbc0734450712f154bd948c233e0534a82cfc4283e66e85d753a5e7cf37838dda55a27272294e7133f0936edb96fd983a4ef07d328e91b3f89ef23a6d21bbdd7928d0fa53dd5ccf3879624598a95f18901183786f1e5ae1a66b1d13dc552f957aa477df36ced198795f369f2a844ee7f394b02a36623b5611cd1082cd7fae17ba438bc7bcb9be5069"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x168, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xd0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_IMMEDIATE_DATA={0x84, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x29, 0x1, "bd99db59f24c1f6093da801f49b44a4f27b0d293e67a9ac4e3dc492d91fb58259fb0e1aefc"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x839e0308f84d8f50}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x84, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x74, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x42, 0x3, "8091a7e9823c371b631f970a090db339ac6790733fe513381dad299f7cbfc9ffe1066c776243277038ac1366dacede8af639411cc4e16e2cd5e1a90726a9"}, @NFTA_MATCH_NAME={0xd, 0x1, 'addrtype\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0x9, 0x1, 'dscp\x00'}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xa8, 0x6, 0x1, 0x0, "3347f71f5b4cc32e8d2b69e86486875911be78e659bd24323bb219145885980765539ff83f9d7a5121a0f4220b3a0842c6a17eabee92b013bff219753ad1164e8e942e364f1b58d9f51f18c9a9ccda61ab2942b1415b412f01ef2582c191d2c9168f177dcec99ce821a7cda65af0901a35e13c2a0e6083c1046a845e114427e41765057d9bf9422224e8071617fbf4074af3e1c8f3023e03185ab5a6caef4d5b4b645676"}]}, {0x16c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x38, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, ']\x00'}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x339}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8e}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_USERDATA={0xb3, 0x6, 0x1, 0x0, "89a5bf14f71f9f7f6aa7d5e15755ac147aff21f20c7adec41e407254b4f6e58042c42f58ce00adb56f744ec5b465523e1be2822d3b6d57ea79fb3701c1bf7058519dfb8c1ca24332bb616622a4d9deda5b63b7e61a4d45ecb0fff08ffd3cf96187997f81d597a09fb768ee06a1bf7f4449db1e9e0b3cd2838361c02105584dd2cd6c4af8ec5ac1a210737eb3f68ffa847aed85577a5e7a5e9039420a15ac16f73c376978f51af5c210a100ea65fbe7"}]}]}]}, 0x11c8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000002940), r2) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x14, r6, 0x10, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44805}, 0x4814) (async) wait4(0x0, &(0x7f0000002a40), 0x2, &(0x7f0000002a80)) r7 = syz_usb_connect$cdc_ecm(0x6, 0x69, &(0x7f0000002b40)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x8, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0xc, {{0xb, 0x24, 0x6, 0x0, 0x0, "2f513567a27d"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x0, 0x1cea, 0x7}, [@obex={0x5, 0x24, 0x15, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0xa2, 0x4, 0x400}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x7, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x9b, 0x3, 0xc0}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x9, 0x7}}}}}]}}]}}, &(0x7f0000002f40)={0xa, &(0x7f0000002bc0)={0xa, 0x6, 0x110, 0x2, 0xc, 0x1, 0x8, 0x4}, 0x30, &(0x7f0000002c00)={0x5, 0xf, 0x30, 0x2, [@ptm_cap={0x3}, @generic={0x28, 0x10, 0x2, "4081e4a04f664a2f204999dc744fdaa4825536166190b4c58d5984d71a9fa1daa980e91206"}]}, 0x6, [{0xae, &(0x7f0000002c40)=@string={0xae, 0x3, "1bc7a09f5cd3a110bfe18ff45ef9b2cfa9b25108c23684bb0c56014804a1458bf45801493b873532774d6782edf522bb25b5b169931e79e3968f3da9b061c5cf91081f9586b18b0e963b5fa904685033d4bc496dad6e8ec1178bd5d79a4dfa603a2cccc94a65aac3b0686952cb0f60071d39202d0c5fdcc3cc25306346d6b5c1c4201a0f85da4fda89276c53d9f69729802918982d79211b852caf091582943794e5ade38157497d0bf62272"}}, {0x61, &(0x7f0000002d00)=@string={0x61, 0x3, "229f934bd1adfa2413afbfe763c464789aba64b6f61853e841cbb919209cab5a4aa7eb76896b76916ceef4c21c6a7b9e37fc42f94a42c231332c64b814a1ed9f4cca23f161f6467e4ddb4359298994b1d39bec31bd405c41950bb84744e0a1"}}, {0x4, &(0x7f0000002d80)=@lang_id={0x4, 0x3, 0x500a}}, {0xd5, &(0x7f0000002dc0)=@string={0xd5, 0x3, "4265129960ce3f54c69ef84706ba73dd618e4953f0b8823cc659883b7aab7ffa6a4db654240f7faa9f15e4df5da9ec0c51ceb392d76ff5b8ec35e1994f8e4769cf767ae023735d20f47d39dafa03528ceec41e6bc4c9d3c685853f5359a052516b1e5e3fd507ca6de3a575e9fbda7c6cdf84ca174b50497d6e06f3d4b5132ec70ada5dd4f6575bde23282220d3b075ca6e308b8fab8c43c5cc5c6f521decb614ead2a58f8f1704e7e52e07194abb1ebd9c91db495738d885a11b42020c6f1ae0d514cf1810a9666c85dc33a51861a7c622d7f8"}}, {0x4, &(0x7f0000002ec0)=@lang_id={0x4, 0x3, 0x1007}}, {0xa, &(0x7f0000002f00)=@string={0xa, 0x3, "f5f5814c09ad81ac"}}]}) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000003080)={0x14, &(0x7f0000002fc0)={0x20, 0x6, 0x64, {0x64, 0x11, "9315d47e7c586ead45ef9135353afddd1ba7a78333c53aae8e075536edc28632d926a74c332015463c577db0f4938310021c183aa963dffc00b610ccde6b1ab1690382b9b585ba0629d51f58aac2e52688107f8dd43e6df19f074b5e6ad8dad54207"}}, &(0x7f0000003040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003200)={0x1c, &(0x7f00000030c0)={0x0, 0x7, 0x9c, "7ada8ed2ca9fd2a04b34f8c3ef22940e090774be12fc1d2e7a79111fda868e9c79854122c4026983613c468a309a6c96d08f62728c56430826dca5ed7ef29826b9b7c7af667c5425719fef1e2121065b1479267eeae2ccf4211f0df99ca6bc2bc7dc5c49a3074267a90fa7d3e6969d74601e397d2df2d2e00ebd18090ee438dcfa993e728d422b1fc34f13c8d7b9483077eeeb26a3b779c4276fa9bb"}, &(0x7f0000003180)={0x0, 0xa, 0x1, 0xf5}, &(0x7f00000031c0)={0x0, 0x8, 0x1, 0x2}}) (async) write$P9_RXATTRWALK(r2, &(0x7f0000003240)={0xf, 0x1f, 0x2, 0x65bfd190}, 0xf) (async) syz_open_dev$usbmon(&(0x7f0000003280), 0x8, 0x820940) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000003480)={0x14, &(0x7f00000032c0)={0x40, 0xb, 0xcf, {0xcf, 0xe, "192a09a5cb8e8cb6845b20ec2b44fddc90471b21a8c249255a883c175627c55ab3a2620507736bb2f3810fe1afaf06ea6ec90c0f6727eb08cdabf13b7c49a6d49a667eaed44790d3e1ee615175aecdefb06c730331eb7f590a191a85da93fa79695d01c697ef56eff5935e6face44072688a68a39990e1da0a23537e64165d006b85f60fb8be48119404eb5d7e618c9b00ded56b538afae650525d5fe8bbaeda53fbae05c1617a320ca8c33493c21c60472e5d49123b41e28aa16b9b8a645fff3d14bd428138121ed87763d2ee"}}, &(0x7f00000033c0)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "5c0a9c2c3a74e424811c058d6ea6e98b65338c7d1d0de82f352b56ff6a4a87c537bb1bc659200b06d9f516129ccbbe2d8a02549a7307ae7368175a207efe8040d255d9eca3d3f2dbd8d1e1bfc70ddfad6056ca0ba24626109908f5c14176c4b6241cba8d2e72dcc9a0688b71942c727f4999e4a594dda7d4f64fa655237c16a239c434d0580f9340d1525e98bcd744788cfad2abc60d2bd4b8ed2526c7f23c588095d5a0f7cbad08"}}}, &(0x7f0000003780)={0x44, &(0x7f00000034c0)={0x0, 0xe, 0xf2, "22fccf26bd01c653a48b9b2063a6884daa83205b2e65a43e31887fd06e910d42c195b6cfb284595a9ef9751cb460d6dba1b1f78b8f29b4e22959e4d41974da179d2c2ea9ae03337306d224aa5ab6e2564b9c056a36b3fc4296e5b7e594e796c679e77167ad3bc9dd826fc045ad63036b08338ce7aeef7d6e1306b59570f08e371ab692c125446cea4403247b1cfc11cb2448aa69b210644d7fd09163bd9b584f7c4c615fba3aebf338bd2e949c82d664c8c174a2ee2efdb5f1da005693072d5345ba9baa780779151a10f2a01fd23dc501f08941544771fb3da620480553c186dd6ab32cfc965b744c1f5f9934bc1bd12096"}, &(0x7f00000035c0)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000003600)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000003640)={0x20, 0x81, 0x3, "3e2aa3"}, &(0x7f0000003680)={0x20, 0x82, 0x1, 'R'}, &(0x7f00000036c0)={0x20, 0x83, 0x2, "e4ce"}, &(0x7f0000003700)={0x20, 0x84, 0x4, "a89aed0b"}, &(0x7f0000003740)={0x20, 0x85, 0x3, '7\\/'}}) 4m3.595287648s ago: executing program 9 (id=23551): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x84, 0x100000, 0x9, 0x2004c8, 0x8000000, 0x0, 0xfffffffffffffffb, 0x7, 0x0, 0x5, 0x20000000d51, 0x2, 0xffffffffffffffff], 0xdddd1000, 0x84a92}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x100000000000006, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r6, 0xae80, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x4000, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0x4}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 4m3.382174612s ago: executing program 9 (id=23558): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) dup2(0xffffffffffffffff, r0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) r2 = socket(0x18, 0x1, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000001010100000000000000000200de0104001640240001801483d68008000100e009000108000200e00000010c00028005000100657f84beca878907a09b319f"], 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) getsockopt$inet_int(r2, 0x111, 0x32, 0x0, &(0x7f0000000040)=0x2d) ioctl$TUNGETFEATURES(r1, 0x5452, &(0x7f0000001740)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000000000000050000008602000000000000"], 0x18}}], 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x490420, 0xffff}}, 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b0001000000000904"], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m0.41174803s ago: executing program 9 (id=23605): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x140008c2) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x140008c2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x54, r6, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x54, r6, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r4, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r8 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f00000000000100", @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) 4m0.219885053s ago: executing program 9 (id=23611): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x40000, 0x0) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) 4m0.199103164s ago: executing program 9 (id=23613): arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00\x000'}, @local=@item_4={0x3, 0x2, 0x0, "0500"}, @global=@item_4={0x3, 0x1, 0x6, "05986f89"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) openat$incfs(0xffffffffffffffff, 0x0, 0x1, 0x130) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4008800) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m0.052721117s ago: executing program 9 (id=23617): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xa8000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x9, 0x2, 0xff}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) 4m0.012198857s ago: executing program 63 (id=23617): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xa8000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x9, 0x2, 0xff}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) 3m26.857957608s ago: executing program 5 (id=24267): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, 0x0) 3m26.856213798s ago: executing program 5 (id=24268): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) ftruncate(r5, 0x2000009) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000100)) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00\x000'}, @local=@item_4={0x3, 0x2, 0x0, "0500"}, @global=@item_4={0x3, 0x1, 0x6, "05986f89"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x130) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f"], 0x0) setuid(0xee00) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'tunl0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40008}, 0x8080) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4008800) readv(0xffffffffffffffff, 0x0, 0x0) 3m26.307970928s ago: executing program 5 (id=24276): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000380)="355b409b35c1dc9d9a1ee0bd4bf6a273cf2bfb3fcf9403f8957033750767992dac0d658a2cdddb8d44bd14ec6950d4fd569ac43cdac30ca5381d877d7a03ef68583026a07a8a546ff591fa628c8a3370ef2f1345af0b6a41bb8efca050578c2b662fa8f10d773f72dfc14de822c4401fcb90b4c379e2c0c529e397da583744f0153c78fbce3882e01f") ptrace$cont(0x18, r0, 0x2, 0xb2204) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000040), 0x4800, &(0x7f0000000300)=ANY=[@ANYRES16=r0]) 3m26.307756738s ago: executing program 5 (id=24277): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0xf7, "27a7e24a2a56a7e5154d745608f670fd4ef96e3ce45590200156d647b56f9d0a57827d57c8a27ea6e47e78a542a7029e622fd69d239ca3ccccd953b6d6eacfcc59136de7a46fd3510dd07cfae2ec8558f79f4eca46fbecb2fb76ad5c02ace1b6749adfe0d6d18abae799caf3af127c27577fef5b579d638411b6e917241ff531684daa61a535847b3221c8970cea2f245af51a9f66d1dbbe9720f1a50a9614d6d0ef30d96cb162deafa63c3f0ec6d4383fdb9d7f43dae8dfbc5dec80ecf16516290b526399182d499a24d3517424a285608b26a243320a5534254fca648071ae8b710c3404a1dd3fd03c9f4cca66efb6ef8b5c169c24d63cef8687b10646595fc750be8ecfa4bafa3d7046758e84b88c220dff29af24e120956cb8b0dc91c592f4239dd3b23c1b49b805848b5bc6e2d0181843cb232a4761979b54978f21bf4ba20dce9b301cf4a5fd33e42ff492d00bf77e0807e49695734081fccdf71370be87e6941d8e0cf5486c390a4d79bd5ed55a17f32b9a74e6c64af12f3a21baf5257123ba85bdcbc1b2bbafc79f3bb9d217a33b9be992d3c5304f23145f071400f3e37a419b3eeea43c806ab73f97358e90cac660326c9ab35854bae5055f84cb106878e7da15258917169babc9a01b36bf7c9c7bc757407bc4f2a441d59077324ac1c3e11d602574e004e51ee8d51f75e424e2ac950f969769ae9a37d4eb3e15b9"}) 3m26.305171418s ago: executing program 5 (id=24278): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') pread64(r1, 0x0, 0x0, 0xffffffff) ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000000040)) close_range(r0, r0, 0x0) r2 = syz_clone3(&(0x7f0000000380)={0x1820000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180), {0x8}, &(0x7f0000000540)=""/167, 0xa7, &(0x7f0000000600)=""/148, &(0x7f0000000200)=[0x0], 0x1, {r1}}, 0x58) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r3, 0x5421, &(0x7f0000001200)=0x8) accept4$vsock_stream(r3, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000240)='net/bnep\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 3m26.283820248s ago: executing program 5 (id=24279): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r2], 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sendfile(r1, r0, 0x0, 0xffffffff) 3m26.239759909s ago: executing program 64 (id=24279): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r2], 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sendfile(r1, r0, 0x0, 0xffffffff) 3m20.383986482s ago: executing program 2 (id=24359): clock_adjtime(0x4, &(0x7f00000001c0)={0x6, 0x7, 0x3, 0x6, 0x1, 0x0, 0x84fa, 0x401, 0x7ff, 0x7, 0x2, 0x1ff, 0x699, 0x2, 0xffffffffffffff03, 0x81, 0x3, 0x174, 0xffff, 0x2, 0x7, 0x8001, 0xd9, 0xa60, 0x80000000, 0x5}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) syz_io_uring_setup(0x7a61, &(0x7f00000001c0)={0x0, 0xa9a, 0x40, 0x2, 0x9}, &(0x7f0000000240), &(0x7f0000000280)) (async) r4 = syz_io_uring_setup(0x7a61, &(0x7f00000001c0)={0x0, 0xa9a, 0x40, 0x2, 0x9}, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x5bc8, &(0x7f00000002c0)={0x0, 0xa5c7, 0x20000, 0x3, 0x2c5, 0x0, r4}, &(0x7f0000000340), &(0x7f0000000380)) (async) syz_io_uring_setup(0x5bc8, &(0x7f00000002c0)={0x0, 0xa5c7, 0x20000, 0x3, 0x2c5, 0x0, r4}, &(0x7f0000000340), &(0x7f0000000380)) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x6, 0x200000) ioctl$USBDEVFS_RESET(r5, 0x5514) close_range(r0, 0xffffffffffffffff, 0x0) 3m20.379335652s ago: executing program 2 (id=24360): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newae={0x64, 0x1e, 0x301, 0x70bd2d, 0x25dfdbfd, {{@in=@multicast2, 0x4d4, 0x2, 0x2b}, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x8, 0x3507}, [@lifetime_val={0x24, 0x9, {0xffffffffffff8001, 0x10000, 0xeb1d, 0x101}}]}, 0x64}}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8561, 0x0, 0xfffffffffffffeff, 0x3acc0ff9, 0x3, 0x2, 0x7, 0x401}, &(0x7f0000000100)={0x8001, 0x29, 0x5, 0x80000000, 0x0, 0x7, 0x401, 0x9}, &(0x7f0000000140)={0x3, 0x6, 0x4, 0xf6, 0x7fff, 0x9, 0x8000000000000001, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x8]}, 0x8}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x220800, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x1f0, 0x0, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xda8c}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x4a48, {0xd}}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff, 0x9, 0xa, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x7f, 0x90, 0xfff, 0x6, 0x5, 0x2162, 'pimreg\x00', 'vlan0\x00', {0xff}, {}, 0x0, 0x201}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @multicast1, @loopback, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x1f0, 0x0, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xda8c}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x4a48, {0xd}}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff, 0x9, 0xa, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x7f, 0x90, 0xfff, 0x6, 0x5, 0x2162, 'pimreg\x00', 'vlan0\x00', {0xff}, {}, 0x0, 0x201}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @multicast1, @loopback, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2c726f6f74636f6e746578741d"]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) 3m20.368018063s ago: executing program 2 (id=24361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100004000000000000014000000180001801400020073797a5f74756e00000000000000000008000900070000000500190001000000080011000900000008000600f7ffffff08001600"], 0x54}}, 0x0) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x80000006}, {0x6, 0xfa, 0x0, 0x4}]}, 0x10) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0xfdef) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000000)={0x2, 0x1, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 3m20.266860954s ago: executing program 2 (id=24363): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x800, 0x0) (async) syz_clone3(&(0x7f0000000500)={0x20000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280), {0xd}, &(0x7f00000002c0)=""/184, 0xb8, &(0x7f0000000400)=""/200, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x8}, 0x58) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000002780)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002740)={&(0x7f0000002640)={0xe8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_LABELS_MASK={0x28, 0x17, [0xff, 0x3, 0x29, 0x5, 0xf, 0x5, 0x36, 0x800, 0x52e2]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}, @CTA_FILTER={0x54, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4e0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x120}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x401}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xf185c373363b0bc}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1000}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x11) (async) copy_file_range(r0, &(0x7f0000000180)=0x4, r1, &(0x7f0000000580)=0x5, 0x6, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) unshare(0x22020600) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mount$cgroup2(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x40000, 0x0) (async, rerun: 64) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) (rerun: 64) 3m20.237322075s ago: executing program 2 (id=24364): unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cgroup\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) read$watch_queue(r3, &(0x7f0000000340)=""/133, 0x85) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x40305839, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r8, 0x5147f000) fdatasync(r8) write$binfmt_script(r7, &(0x7f00000001c0)={'#! ', './file0/../file0'}, 0x14) sendfile(r6, r7, &(0x7f0000000100)=0x10, 0x10001) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r9, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x87, 0x1}, 0x47, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x4, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0xfffffffd, 0x4, 0x1, 0x3, 0x0, 0x1, 0x5de82a4e, 0x0, 0x0, 0x9, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x6, 0x2, 0x0, 0x9, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x5, 0x4, 0x1, 0x8, 0x5, 0x3, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x35, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0xfffff303, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0xa, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238c7, 0x0, 0x3, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x20, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0xdb, 0x40, 0x0, 0x21, 0x24000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x200000, 0x200, 0xcc0, 0x3fd, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0x80, 0x921, 0x2f, 0x0, 0x0, 0xfffffffd, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x8, 0x0, 0x80000001, 0x3, 0x0, 0x400, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x10800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x6, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r9, 0x0) 3m20.119978107s ago: executing program 2 (id=24365): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @flat=@binder={0x73622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x400}, @release], 0x0, 0x0, 0x0}) 3m20.119604187s ago: executing program 65 (id=24365): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @flat=@binder={0x73622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x400}, @release], 0x0, 0x0, 0x0}) 47.565306342s ago: executing program 0 (id=27147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x3a) mkdir(&(0x7f0000000080)='./file0\x00', 0x4a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000380)={@local, 0x80000000, 0x2, 0x3, 0x1, 0x0, 0x8}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0) socket$inet6(0xa, 0x1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x20, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10000080) fcntl$setstatus(r5, 0x4, 0x46100) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f0000000280)=r8, 0x12) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xff, 0x9}) close(r5) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1281}) 47.418308645s ago: executing program 0 (id=27150): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0xb, 0xd) (async) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0xb, 0xd) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x8}], 0x1, 0x40001041, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) (async) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) syz_open_dev$mouse(0x0, 0x0, 0x0) (async) r4 = syz_open_dev$mouse(0x0, 0x0, 0x0) pidfd_getfd(r4, r1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) lsm_get_self_attr(0x65, &(0x7f0000000340)={0x0, 0x0, 0xc6, 0xa6, ""/166}, &(0x7f0000000240)=0xc6, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000080)) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000080)) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r4, @ANYRES64=r7], 0x28) sendto(r7, &(0x7f0000000000)="5d6008343da1b44346197cba076e71c4a6dde90fe9cdc0c76e3d6763852f68519a3bc6246c12b35a1e365f677492de57ba77fbe3a156774ee81b1f5d", 0x3c, 0x40, 0x0, 0x0) 47.408571955s ago: executing program 0 (id=27151): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/nfsfs\x00') (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 47.385333446s ago: executing program 0 (id=27152): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000340)={'\x00', 0x0, 0x5, 0x68, 0x0, 0x7ff, 0x1, 0x6000, '\x00', 0x1}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$cont(0x11, r6, 0x0, 0xffffffff) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) creat(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 44.57995979s ago: executing program 0 (id=27179): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) wait4(r0, 0x0, 0xa, &(0x7f00000000c0)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) 44.354488584s ago: executing program 0 (id=27180): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x2000c010) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) (async) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x2000c010) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) 44.326486475s ago: executing program 66 (id=27180): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x2000c010) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) (async) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x2000c010) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) 8.657714113s ago: executing program 3 (id=27852): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0x20180) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002100010002000000000000020a20000000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x2404c844) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) syz_clone3(&(0x7f0000003440)={0x88000000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff], 0x1}, 0x58) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xa583, 0x7f, 0x7ff, 0xc94d}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, 0x0, &(0x7f0000000180)=0x2c) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{&(0x7f0000000100)={0xa, 0x4e1e, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000001400)=ANY=[], 0x18}}], 0x1, 0x4000084) setreuid(0x0, r3) setresgid(0x0, 0x0, 0xee01) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000100)=0x119) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x16}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 8.555959725s ago: executing program 3 (id=27853): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002004e21e000000200000000000000000000020000000000001b5633bb9732e700"/155], 0x90) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000380)={0x30, 0x30, 0x30}}, 0x1040}], 0x5a, 0x0, &(0x7f0000000400)="cb2a499fc52c7a386ad917877700d052ef62983aca8ff936fca29e7bc7ec2ca216262dae1f7f32ff497c006ba3cd35c832d7b0320be1eecb3c8ab2ac50bae16cdedcd164b2862c43a8745bafdd94c96182643b70efd41186dc9d"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7fa962bfffff, 0x13012, r2, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 8.547807455s ago: executing program 3 (id=27854): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x64000600) unshare(0x20040800) r1 = socket$inet6(0x10, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000001c0)={0xbf, 0x0, [{0x40000104, 0x0, 0x3}]}) write(r1, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x20, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x24a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x4, 0xb, 0x1, {0x22, 0xb1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0x8, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x5d7, 0xcb, 0x7a, 0xb}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xd, 0x2, 0xfe, 0x8}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "9feaa061fcd70d8517893fc7ca5244c9"}]}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x61, &(0x7f0000000200)=@string={0x61, 0x3, "32ae9a8c5110271fa93360026b6fb131978d7185a43146135c8f27d512da1d21ef07b772660f523c3bbb3d3f3b1c9f61df5d1b08626e2d390af14b5c920274ab6e44e1296974197214c51853986b3a5af2f9223977dc7143aa0a5e3ab2389b"}}, {0xe0, &(0x7f0000000280)=@string={0xe0, 0x3, "4de2f66ddac502c038785371b6e91f06014169c69bb3eee37565eb6d6bba3c9ea25ffd243eaf6d17213143d8af496b9f307f5823e344310e25846d205e240b149179906d8d48a4ff52321e2902efbe2b34973a59964303090a01086ddfeacc6b45a01fa0a7be4d3cbe080b3dddc43196e1becd64055192abe9dd65c33df7fb5927aab07c21242c2678fed956592145ac353406691f66dc8f2487d5a5a075de7da9e48bc331e98c284e63baf74fca978a143e0fd4fe1bfd3ca1b6cbc8d0f329772d7e0bb47db00e9b876a0118eb063ae41ca7a6f8c32826db52eeb7a3ad14"}}, {0x91, &(0x7f0000000580)=@string={0x91, 0x3, "a5f7f27cc435521f295f23a3cb864e0902e4d6efe4237a6293687de46c7b1388424a8f75a2448b280025efaa2f3adce3ee62046a6fc1a096b6e6f1b66fafb346ad2ddedc637109d92f59e254892eb5011972d720cdad2c37c19c8aefe2bdf1953e761fcf3cce6c2925f39d3a4b5ad6f99911f39bca72a358240965f5f731a8e0545dcc88f9a1edc937e8ed02f902f4"}}]}) 7.878068098s ago: executing program 3 (id=27868): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x5) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f00000004c0), 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x41) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x149) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) 7.876128908s ago: executing program 3 (id=27869): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) fchown(r1, 0xee00, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000001a00)={{&(0x7f0000978000/0x3000)=nil, 0x3000}, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)=0x1, 0x4) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000300000000000000b4000000000000020080b10dbbf393760da4d6a75e000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a00000000861c6e3800000a0002"], 0x104}}, 0x0) gettid() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 7.850326159s ago: executing program 3 (id=27870): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) 7.79892271s ago: executing program 67 (id=27870): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) 4.636804631s ago: executing program 4 (id=27884): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x2, 0xb, 0x5, 0x1a, 0x1f, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd2c, 0x3505}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_x_filter={0x5, 0x1a, @in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x1, 0x14, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}, @sadb_key={0xe, 0x9, 0x338, 0x0, "67355ed51ec3737bbe60a57f4788c3eb9471ed2db3e9588acae56e3c8934915e58077f675b86d1b85f749b76d65bcfb3280381097eed0ebefcddabfde8e33b3be1038288ee86eafc641320e229120f944c66cb15d711758afa10bbe36cfa70485f496c3ae3ce3e"}, @sadb_key={0x2, 0x1, 0x8, 0x0, "10"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d4}]}, 0xf8}}, 0x40000) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="150315fc0300d60000c8ce1800000000e69d04d2997836f193104c"], 0x15) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = dup(r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x8011) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a59ac3fab5a3b30692619d523a7eb0167d4f100fd8bcb"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB="2c784efc7766646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000018c0)=@known='trusted.overlay.impure\x00') mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x55, 0x0, &(0x7f0000000500)="bcbc648bc9c07baf3789df6d877eac314ecc82d9c71ab1ecebefe99af20b4ab3cb820245a3692f3ac6a588df8de17d26b23105f63a0eeca6f09a8fe84b267ea7bd0e06c1f342a81542e35e27b0431c30a12ff4db2b"}) 3.686508629s ago: executing program 8 (id=27886): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) socket$packet(0x11, 0x3, 0x300) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = socket$inet6(0xa, 0xa, 0x86) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x40) getsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x2000000, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRESHEX=r4, @ANYBLOB="40c04af87daef1565f853cf6d0ebaafe43a600df5b239b2a09f8e56aa413f4fcab52b4eec43cc499b821a5865987ad22714b680917", @ANYRESOCT=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) link(0x0, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r5, 0x400, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x3e, 0x0, &(0x7f00007d0000)=0xfffffffffffffd42) fcntl$setlease(r6, 0x400, 0x2) r8 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000007c0)='*/\x00', &(0x7f0000000800)='`\'-/[)\x00', 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r9, 0x4188aec6, &(0x7f0000000480)={0x0, [{0x2, 0x0, 0x106, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x7ef, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0xfff7fffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xe7, 0x0}, {0x60cf6ba5a5e36039, 0x0, 0x0, 0x0}, {0x1, 0x0, 0xfffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x42, 0x0}]}) close_range(r0, r6, 0x0) 3.686260489s ago: executing program 4 (id=27887): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.698137838s ago: executing program 6 (id=27888): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000080)={0x20, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) r3 = dup(r2) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000000)=0x2) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 2.694926288s ago: executing program 8 (id=27889): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 2.694563988s ago: executing program 4 (id=27890): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x4, 0x8000}) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) clock_gettime(0x6, &(0x7f0000000040)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x4, 0x8000}) (async) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) (async) clock_gettime(0x6, &(0x7f0000000040)) (async) 1.591395329s ago: executing program 6 (id=27891): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) (async) syz_usb_connect(0x5, 0x164, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007af28810d30bf4055b000000000109025201010000000009044000000e0100008c2406", @ANYBLOB="c9df7a64f62985bcc0ccc9f6d34781766ea4d7370fb649014b12aa963a8159038c0f75396ac25ba7d9e90ce5df53255cda5ef0a2a856e959f9b5d3614a1767c0a31482c789f4e6663d3f3f71a0840b4bccc70352a11f19699f99aa79e299f3a103f95ee161f36976e667baf51149d1b8c5d88806f643d428422cc7ef9f7752ae83b1c9b84be0d82d33ab"], 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf4e) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000280)="913efcb4d678", 0x6}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 1.590974379s ago: executing program 8 (id=27892): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) pipe2$watch_queue(0x0, 0x80) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x240, 0x108, 0x27}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x58) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002ac0), 0x40080, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000001300)=@x86={0x8, 0x3, 0x3, 0x0, 0x18, 0x8, 0x2, 0x7, 0x9, 0xff, 0x0, 0x4, 0x0, 0x6, 0x4, 0x9, 0xfd, 0xa8, 0x8, '\x00', 0x6, 0x5}) ioctl$BLKBSZSET(r2, 0x40081271, 0x0) unshare(0x62040200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000280)) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000001) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) getpeername$packet(r4, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001340)=0x14) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth0\x00'}) sendmmsg(r4, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r5}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)="a3e892272d", 0x5}], 0xfffffffffffffd8}}], 0x1, 0x200400c1) r7 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r7, 0x40187542, 0x0) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001040)=""/164, 0xa4}, {&(0x7f0000001100)=""/138, 0x8a}, {&(0x7f00000011c0)=""/203, 0xcb}], 0x3) 1.59075305s ago: executing program 4 (id=27893): lsetxattr$security_capability(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', 'clear_refs\x00'}, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x400000a, 0xfffffefc, 0x6}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000160071827efde4be701161000a04"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffff3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') (async) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x1, 0x1) fchdir(r4) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) (async, rerun: 32) umount2(&(0x7f0000001180)='./file0\x00', 0x0) (rerun: 32) ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 358.131473ms ago: executing program 6 (id=27894): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x4000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r2, &(0x7f0000000100)=@other={'trylock', ' ', 'io+mem'}, 0xf) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) write(r1, &(0x7f00000002c0)="1ec8f960b9faed9d918df9cff3632f2502b730ec60ae0f4df45aced51f665058b8c179d3e032f9e62fd3275a84f53d48e8fea1d9840d113d74065e21b9ddade7ee58d608a99a17aba35dbcb9fd4e3de65bf3a9b9f42d6d39a8f54540f942fdcd6baec96c0030c84615cf42793c9ef8ea7fdd5b7d226381a0ee14ea18df6d79fc5c97aa470d597144656d516426409a99f465f6f6264930b387c8a8f6607fac258245c9390b99e197bd2c87e5e7d74d18e63a9e1616acfa91fcb2a0376339c536a6bfc0c2d99138734f161af176", 0xcd) socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)={0x44, 0x33, 0x100, 0x70bd26, 0x25dfdbfb, "", [@nested={0x32, 0x149, 0x0, 0x1, [@generic="a6351f7a2da1202628c49a8918fd37745b3b1470a5100e936f821ada5d0eeb8aa6ea44004e699e817483c3fd1542"]}]}, 0x44}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='G', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r4, 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000180)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) 357.657893ms ago: executing program 8 (id=27895): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) r1 = socket(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xf, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x7f778000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x5f, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x80000000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01006e7abd26000c5e337a6485626ca6b0b8130f446375a203bf5924d04f11350000000000"]) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x400000a, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000160071827efde4be701161000a04"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/profiling', 0x141a82, 0x100) write$cgroup_int(r5, &(0x7f0000000040)=0xb, 0x12) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) clock_gettime(0x6, &(0x7f0000000040)) 356.929313ms ago: executing program 4 (id=27896): openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) r1 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x5) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/udp6\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) write$cgroup_pid(r2, &(0x7f0000000100)=r1, 0x12) 69.336939ms ago: executing program 6 (id=27897): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r2, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x3ffd, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) 68.524329ms ago: executing program 8 (id=27898): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x3000000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_getres(0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000004740)={0x40, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}]}]}]}, 0x40}}, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) write$UHID_CREATE2(r0, 0x0, 0x3000000) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) clock_getres(0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000004740)={0x40, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}]}]}]}, 0x40}}, 0x0) (async) ioctl$TIOCGISO7816(r1, 0x80285442, 0x0) (async) 68.147329ms ago: executing program 4 (id=27899): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000002100010027bd7000fbdbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000000)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000280)=""/141, 0x8d}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000500)=""/138, 0x8a}, {&(0x7f00000003c0)=""/275, 0x113}, {&(0x7f0000000140)=""/88, 0x58}, {&(0x7f0000000880)=""/4096}, {&(0x7f00000005c0)=""/239}, {&(0x7f0000000100)=""/56}], 0x9}, 0xb}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3b}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1b}, 0xffffffff}, {{0x0, 0x0, 0x0, 0xffffffffffffff64}, 0x411}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40010040, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c6313, 0x1}], 0x0, 0x0, 0x0}) 67.340269ms ago: executing program 68 (id=27899): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000002100010027bd7000fbdbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000000)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000280)=""/141, 0x8d}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000500)=""/138, 0x8a}, {&(0x7f00000003c0)=""/275, 0x113}, {&(0x7f0000000140)=""/88, 0x58}, {&(0x7f0000000880)=""/4096}, {&(0x7f00000005c0)=""/239}, {&(0x7f0000000100)=""/56}], 0x9}, 0xb}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3b}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1b}, 0xffffffff}, {{0x0, 0x0, 0x0, 0xffffffffffffff64}, 0x411}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40010040, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c6313, 0x1}], 0x0, 0x0, 0x0}) 67.236339ms ago: executing program 6 (id=27901): getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/66, 0x42, 0x0, &(0x7f0000000080)=""/111, 0x6f}, &(0x7f0000000140)=0x40) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/83, 0x53, 0x0, &(0x7f0000000240)=""/167, 0xa7}, &(0x7f0000000340)=0x40) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r1 = socket$inet(0x2, 0x800, 0x36) close(r0) r2 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000440)=0x800) sendto$inet(r1, &(0x7f0000000480)="44a25d5ce5da12be7f99b9d9a7f120a9780daf74ec6021e2db0720ab0add462b97e5778d4f391966ea60ec9a2965dc56c9741c5bf72ab6efa68776afe326daa13e968c0973971f7a358d421fc7f45e4a9577bbc643a2de3d0786fd7b7b09c48a905a257aa61f60f2d38b297e7a8c2f69fcc8b23e1d8d8da3109935657d336e96a9e8796b2dfa34cc91ca23539968535021fb6aff23801301859cf56a66c5c298254ce58714c781d34bd9a34646f1b5e5d46ad72cc401dd7399b93d12b6749099fbdde8128c324a80d045", 0xca, 0x0, &(0x7f0000000580)={0x2, 0x4e20, @loopback}, 0x10) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f00000005c0)='net/mcfilter\x00') ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000600)=0x4) tee(r2, r4, 0x1, 0xb6318577eecb55a1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000640)=0x4) write$9p(r4, &(0x7f0000000680)="f64ddf1f9ece76ab02bafafe2249932f27240ef1412fe4ebe684f2030fce9ddfd687d56c5afaeeb5d2203e135cc91484e6d693c0d1905df8c94a4620efb8c9f9d7e4ce27beb615416a8d1b6f7de8d920a7a4d593a343ee59881d570e207dd69916dfc16a2988acacd0b27f14b3bc33d0a0366ef6396110387ca3fa847f7841d81492501b14c7f60908f85c16bd54f6583b677b0bb543373c3c8bcfbb9c8801", 0x9f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000780)={0x2020}, 0x2020) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000027c0)={'mangle\x00', 0xfc, "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"}, &(0x7f0000002900)=0x120) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002940)='/sys/power/pm_test', 0x80000, 0x80) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000002980), 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f00000029c0)={'filter\x00', 0x4}, 0x68) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r7, 0xf501, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000002a40)) pipe2$watch_queue(&(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGUNIQ(r8, 0x80404508, &(0x7f0000002ac0)=""/235) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r5) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) write(r5, &(0x7f0000002bc0)="a65bebc72121d164e87fa221e357b5a4b1a4138b123613ff1c34d4b1745ead7690510de778531f67a271db0e47cfb29e73bd46e2c680b0551186e589171fdaa2c34ca3260fe9d9da663e13e9b34909ad9f97aea8cfe946da3aff18dd2a8113442dd9f46fc1e7881029d2c7aede68c60345657ceba93feabb18242de58198a94a1483839f257a0ef1cbac84082a0a529116425f2a3e8b174214ec4eeecca7b06c38b06a8dd81010806a4c51eedabeedfd328daf", 0xb3) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000002c80)={{0x5, 0xfffffffa}, 0x100, './file0\x00'}) 67.065579ms ago: executing program 8 (id=27902): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xffffdfffffffffff, 0x1000}, 0x20) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x40) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}}) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5, 0x401}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r6 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r8 = getpgrp(0x0) r9 = socket(0x10, 0x3, 0x0) syz_open_procfs(r8, &(0x7f0000000140)='fd/3\x00') r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r9, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00042bbd7000fedbdf25870000000c009900080000001d00000030002a008c10e90824ebdd5b70a4510875180000030000ff0b0069461dd79fd48ff6eb36bd479ecff9e60600480058000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x10004804) syz_pidfd_open(r8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x3}, @free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 0s ago: executing program 6 (id=27903): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x22020600) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000001c0)=0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010002000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="080029004101"], 0x28}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010002000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="080029004101"], 0x28}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22300, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r7, 0x4068aea3, &(0x7f0000002000)={0xc1, 0x0, 0x5}) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r7, 0x4068aea3, &(0x7f0000002000)={0xc1, 0x0, 0x5}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$SIOCSIFHWADDR(r4, 0x89b1, &(0x7f0000000900)={'wg1\x00', @remote}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 2 comm="syz.3.22714" name="NETLINK" dev="sockfs" ino=330792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1429.796598][ T36] audit: type=1400 audit(2000000049.312:77107): avc: denied { relabelto } for pid=6222 comm="syz.3.22714" name="NETLINK" dev="sockfs" ino=330792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:apt_var_cache_t:s0" [ 1430.146701][ T6266] kvm: kvm [6265]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 1430.155611][ T6266] kvm: kvm [6265]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 1430.683021][ T6287] overlayfs: failed to clone upperpath [ 1430.705023][ T6291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1430.705048][ T6291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1430.716022][ T6291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1430.718100][ T6291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1430.725075][ T6291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1430.738213][ T6291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1430.738264][ T6291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1430.747388][ T6291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1430.751767][ T6291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1430.758353][ T6291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1430.769126][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22734'. [ 1430.791576][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22734'. [ 1430.897857][ T6315] overlayfs: failed to resolve './file1': -2 [ 1430.906520][ T6318] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 1430.906551][ T6318] rust_binder: Error while translating object. [ 1430.932737][ T6318] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1430.946143][ T6318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 1431.014841][ T6324] veth0_virt_wifi: entered allmulticast mode [ 1431.031362][ T6324] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=6324 comm=syz.6.22743 [ 1431.070271][ T330] rust_binder: 6321: removing orphan mapping 0:1048 [ 1431.084267][ T6324] veth0_virt_wifi: left allmulticast mode [ 1431.184196][ T6330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 1431.210259][ T6333] rust_binder: 6333 RLIMIT_NICE not set [ 1431.917181][ T36] audit: type=1326 audit(2000000051.462:77108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.7.22744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae398eba9 code=0x7fc00000 [ 1431.951646][T26421] rust_binder: 6325: removing orphan mapping 0:1024 [ 1431.974061][ T6345] rust_binder: Error while translating object. [ 1431.974102][ T6345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 1431.980473][ T6345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:16 [ 1432.004026][ T6347] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 1432.013193][ T6347] rust_binder: Error while translating object. [ 1432.024021][ T6347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1432.030220][ T6347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 1432.838827][ T6359] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 1432.855074][ T6359] rust_binder: 25: no such ref 1 [ 1432.860056][ T6359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 1432.913588][ T6360] 9pnet_fd: Insufficient options for proto=fd [ 1432.970295][ T6362] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 1433.258154][ T6388] /dev/loop3: Can't lookup blockdev [ 1433.350359][ T6391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6391 comm=syz.3.22767 [ 1433.493812][ T6416] 9pnet_fd: Insufficient options for proto=fd [ 1434.250455][ T6447] rust_binder: validate_parent_fixup: new_min_offset=21, sg_entry.length=0 [ 1434.250478][ T6447] rust_binder: Error while translating object. [ 1434.262798][ T6447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1434.274672][ T6447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:184 [ 1434.395284][ T6469] kvm: pic: level sensitive irq not supported [ 1434.404828][ T6469] kvm: pic: non byte read [ 1434.415682][ T6469] kvm: pic: level sensitive irq not supported [ 1434.415753][ T6469] kvm: pic: non byte read [ 1434.426653][ T6469] kvm: pic: level sensitive irq not supported [ 1434.426707][ T6469] kvm: pic: non byte read [ 1434.437482][ T6469] kvm: pic: level sensitive irq not supported [ 1434.437550][ T6469] kvm: pic: non byte read [ 1434.448311][ T6469] kvm: pic: level sensitive irq not supported [ 1434.448381][ T6469] kvm: pic: non byte read [ 1434.450687][ T6471] option changes via remount are deprecated (pid=6468 comm=syz.6.22792) [ 1434.454925][ T6469] kvm: pic: level sensitive irq not supported [ 1434.459074][ T6471] cgroup: option or name mismatch, new: 0x0 "memory", old: 0x0 "" [ 1434.467876][ T6469] kvm: pic: non byte read [ 1434.484925][ T6471] /dev/rnullb0: Can't lookup blockdev [ 1434.486291][ T6469] kvm: pic: non byte read [ 1434.616540][ T36] audit: type=1400 audit(2000000054.162:77109): avc: denied { read } for pid=6472 comm="syz.6.22793" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1435.337689][ T6482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1435.449973][ T6495] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1435.460540][ T6495] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1435.467543][ T6495] rust_binder: Error in use_page_slow: ESRCH [ 1435.474087][ T6495] rust_binder: use_range failure ESRCH [ 1435.480123][ T6495] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 1435.486061][ T6495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1435.494038][ T6495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:79 [ 1435.517244][ T36] audit: type=1400 audit(2000000055.062:77110): avc: denied { append } for pid=6497 comm="syz.6.22799" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1435.560940][ T6502] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1435.560969][ T6502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:86 [ 1435.571313][ T6504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1435.722035][ T36] audit: type=1326 audit(2000000055.262:77111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6510 comm="syz.3.22802" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbe9b8eba9 code=0x0 [ 1436.476797][ T6514] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1436.477190][ T6514] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1436.483794][ T6514] rust_binder: Read failure Err(EFAULT) in pid:95 [ 1436.493639][ T6514] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1436.586327][ T6516] rust_binder: Read failure Err(EAGAIN) in pid:97 [ 1436.609148][ T6521] binder: Unknown parameter 'defcontext01777777777777777777777' [ 1436.651816][ T6523] rust_binder: Write failure EFAULT in pid:54 [ 1437.448335][ T6551] fuse: Unknown parameter '0x0000000000000005' [ 1438.045296][ T6564] veth0_to_team: mtu greater than device maximum [ 1438.051847][ T6565] veth0_to_team: mtu greater than device maximum [ 1438.060809][ T6565] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65280 sclass=netlink_xfrm_socket pid=6565 comm=syz.3.22820 [ 1438.965344][ T6605] overlayfs: failed to clone upperpath [ 1439.337694][ T6624] netlink: 'syz.3.22840': attribute type 1 has an invalid length. [ 1439.867773][ T36] audit: type=1400 audit(2000000059.412:77112): avc: denied { append } for pid=6643 comm="syz.7.22848" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 1439.954842][ T6651] netlink: 'syz.6.22851': attribute type 1 has an invalid length. [ 1439.963883][ T6652] netlink: 'syz.6.22851': attribute type 1 has an invalid length. [ 1440.057887][ T6659] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 1440.057924][ T6659] rust_binder: Error in use_page_slow: EFAULT [ 1440.077856][ T6659] rust_binder: use_range failure EFAULT [ 1440.084479][ T6659] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 1440.091699][ T6659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1440.102090][ T6659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:109 [ 1440.109794][ T6665] rust_binder: 73: no such ref 3 [ 1440.126896][ T6665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 1440.130837][ T6666] netlink: 'syz.7.22856': attribute type 13 has an invalid length. [ 1440.152852][ T6667] rust_binder: Error in use_page_slow: ESRCH [ 1440.152874][ T6667] rust_binder: use_range failure ESRCH [ 1440.162665][ T6667] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 1440.168204][ T6667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1440.181910][ T6667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:73 [ 1440.216574][ T6677] fuse: Bad value for 'fd' [ 1440.261713][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22863'. [ 1440.310701][ T6696] overlayfs: failed to clone upperpath [ 1440.317432][ T6696] fuse: Bad value for 'fd' [ 1440.324464][ T6696] tipc: Enabling of bearer rejected, failed to enable media [ 1440.884263][ T6705] netlink: 196 bytes leftover after parsing attributes in process `syz.0.22870'. [ 1440.985600][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.6.22875'. [ 1440.994759][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz.6.22875'. [ 1441.025277][ T6723] rust_binder: Error while translating object. [ 1441.025315][ T6723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1441.031578][ T6723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:77 [ 1441.042798][ T6723] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1441.057391][ T6723] rust_binder: Read failure Err(EFAULT) in pid:77 [ 1441.066578][ T6732] cgroup: Unknown subsys name 'dont_appraise' [ 1441.108696][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.108729][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.115815][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.122442][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.128987][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.135723][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.142555][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.149405][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.156047][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.162592][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.169149][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.175790][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.182802][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.189257][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.196069][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.202691][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.209153][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.215912][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.222383][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.229122][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.235793][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.242429][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.248968][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.255656][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.262160][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.268687][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.275216][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.281862][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.288577][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.295224][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.301764][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.308284][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.314892][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.321347][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.327886][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.334423][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.340962][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.347622][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.354238][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.360806][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.367306][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.373968][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.380405][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.386894][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.393361][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.399875][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.406344][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.412820][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.419252][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.425728][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.432716][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.439523][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.446120][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.454136][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.460704][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.467586][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.474161][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.480687][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.487229][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.493781][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.500232][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.506737][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.513257][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.519713][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.671969][ T6759] netlink: 'syz.0.22890': attribute type 13 has an invalid length. [ 1441.734090][ T6761] netlink: 72 bytes leftover after parsing attributes in process `syz.0.22891'. [ 1441.753394][ T36] audit: type=1326 audit(2000000061.292:77113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6760 comm="syz.0.22891" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f888078eba9 code=0x0 [ 1441.777305][ T6766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1441.780876][ T36] audit: type=1326 audit(2000000061.302:77114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6760 comm="syz.0.22891" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f888078eba9 code=0x0 [ 1441.820889][ T6766] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2048 [ 1441.832725][ T6766] rust_binder: Write failure EINVAL in pid:130 [ 1441.885597][ T6780] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22896'. [ 1441.994378][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22904'. [ 1442.121216][ T6814] IPv6: NLM_F_CREATE should be specified when creating new route [ 1442.214744][ T6816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1442.214778][ T6816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:139 [ 1442.216703][ T6821] rust_binder: Write failure EFAULT in pid:86 [ 1442.899879][ T6877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22931'. [ 1442.984989][ T6889] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6889 comm=syz.0.22937 [ 1443.858667][ T6904] netlink: 80 bytes leftover after parsing attributes in process `syz.0.22942'. [ 1443.891049][ T6908] fuse: Bad value for 'fd' [ 1444.049053][ T6925] fuseblk: Unknown parameter 'rootmSde' [ 1444.055621][ T6925] pim6reg1: entered promiscuous mode [ 1444.060953][ T6925] pim6reg1: entered allmulticast mode [ 1444.113466][ T6930] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1444.113807][ T6930] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 1444.146211][ T6932] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1444.548257][ T6946] netlink: 'syz.0.22958': attribute type 12 has an invalid length. [ 1444.744306][ T36] audit: type=1400 audit(2000000065.289:77115): avc: denied { mount } for pid=6949 comm="syz.3.22960" name="/" dev="pstore" ino=1447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1445.393458][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22974'. [ 1445.966307][ T7024] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 1446.030953][ T7028] netlink: 'syz.3.22978': attribute type 1 has an invalid length. [ 1446.038929][ T7028] netlink: 'syz.3.22978': attribute type 2 has an invalid length. [ 1446.079288][ T7032] fuse: Unknown parameter '0x0000000000000004' [ 1446.309181][ T7053] rust_binder: Write failure EFAULT in pid:177 [ 1446.312775][ T7053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1446.319677][ T7053] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 1446.419388][ T7055] incfs: iterate_incfs_dir / -22 [ 1446.424692][ T7055] incfs: iterate_incfs_dir / -22 [ 1446.553852][ T7062] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1446.553882][ T7062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 1446.760736][ T7075] netlink: 'syz.0.22995': attribute type 4 has an invalid length. [ 1446.861601][ T7093] 9pnet_fd: Insufficient options for proto=fd [ 1446.904387][ T7099] fuse: Bad value for 'user_id' [ 1446.909299][ T7099] fuse: Bad value for 'user_id' [ 1447.134630][ T7106] overlayfs: failed to clone upperpath [ 1447.140628][ T7106] SELinux: Context system_u:object_r:ld_so_cache_t:s0 is not valid (left unmapped). [ 1447.150479][ T36] audit: type=1400 audit(2000000067.699:77116): avc: denied { relabelto } for pid=7105 comm="syz.0.23006" name="file1" dev="tmpfs" ino=883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ld_so_cache_t:s0" [ 1447.177923][ T36] audit: type=1400 audit(2000000067.699:77117): avc: denied { associate } for pid=7105 comm="syz.0.23006" name="file1" dev="tmpfs" ino=883 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ld_so_cache_t:s0" [ 1447.246841][ T36] audit: type=1107 audit(2000000067.789:77118): pid=7120 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1447.466665][ T7129] tipc: Cannot configure node identity twice [ 1447.963391][ T36] audit: type=1400 audit(2000000068.509:77119): avc: denied { create } for pid=7145 comm="syz.0.23020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1448.047809][ T7158] /dev/rnullb0: Can't lookup blockdev [ 1448.065171][ T7160] /dev/rnullb0: Can't lookup blockdev [ 1448.084817][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23026'. [ 1448.097194][ T7162] netlink: 328 bytes leftover after parsing attributes in process `syz.3.23026'. [ 1448.255836][T20799] bridge_slave_1: left allmulticast mode [ 1448.261593][T20799] bridge_slave_1: left promiscuous mode [ 1448.271517][T20799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.279907][T20799] bridge_slave_0: left allmulticast mode [ 1448.285767][T20799] bridge_slave_0: left promiscuous mode [ 1448.291501][T20799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.422960][T20799] tipc: Left network mode [ 1448.497149][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23030'. [ 1448.507709][T20799] veth1_macvtap: left promiscuous mode [ 1448.513691][T20799] veth0_vlan: left promiscuous mode [ 1448.573268][T20799] vcan0 (unregistering): left allmulticast mode [ 1448.693480][ T7185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103 [ 1449.194932][ T7235] rust_binder: Error while translating object. [ 1449.204273][ T7235] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1449.210470][ T7235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 1449.472835][ T7241] rust_binder: Error while translating object. [ 1449.482081][ T7241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 1449.497084][ T7241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:121 [ 1450.586617][ T7320] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1450.595772][ T7320] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1450.602235][ T7320] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1451.736635][ T7394] rust_binder: 7394 RLIMIT_NICE not set [ 1451.798343][T26421] rust_binder: 7393: removing orphan mapping 0:1168 [ 1452.136214][ T7407] 9pnet_fd: Insufficient options for proto=fd [ 1452.154184][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23110'. [ 1452.404465][ T36] audit: type=1400 audit(2000000072.949:77120): avc: denied { read } for pid=7420 comm="syz.6.23114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1452.423363][ T7421] rust_binder: Write failure EINVAL in pid:213 [ 1452.423992][ T36] audit: type=1400 audit(2000000072.959:77121): avc: denied { write } for pid=7420 comm="syz.6.23114" path="socket:[334639]" dev="sockfs" ino=334639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1452.464271][ T7423] batadv_slave_1: entered promiscuous mode [ 1452.732199][ T7442] overlayfs: failed to resolve './file1': -2 [ 1452.828343][ T7469] overlayfs: failed to clone upperpath [ 1453.625403][ T36] audit: type=1400 audit(2000000074.169:77122): avc: denied { read } for pid=7525 comm="syz.3.23146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1455.539628][ T7602] rust_binder: Error while translating object. [ 1455.539666][ T7602] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1455.545999][ T7602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:193 [ 1455.559009][ T36] audit: type=1400 audit(2000000076.099:77123): avc: denied { lock } for pid=7601 comm="syz.7.23171" path="/dev/binderfs/binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1455.693252][ T7422] batadv_slave_1: left promiscuous mode [ 1455.818648][ T7615] sockfs: Unknown parameter 'gid' [ 1455.893102][ T7618] fuse: Bad value for 'rootmode' [ 1456.686154][ T7620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 1456.686191][ T7620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:225 [ 1456.848325][ T7632] overlay: filesystem on ./bus is read-only [ 1456.941602][ T7643] overlayfs: failed to clone upperpath [ 1457.072498][ T7651] overlayfs: failed to clone upperpath [ 1458.168670][ T7676] overlay: Unknown parameter 'obj_role' [ 1458.345427][ T7688] netlink: 'syz.3.23203': attribute type 4 has an invalid length. [ 1458.443169][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23207'. [ 1458.817657][ T7722] rust_binder: 7720 RLIMIT_NICE not set [ 1458.818053][ T7720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1458.823786][ T7720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:204 [ 1458.840184][ T441] rust_binder: 7719: removing orphan mapping 0:4248 [ 1458.906739][ T7729] netlink: 'syz.0.23216': attribute type 4 has an invalid length. [ 1458.937572][ T7732] fuse: Unknown parameter 'root400000(S100000' [ 1459.145109][ T7755] overlayfs: failed to clone upperpath [ 1459.150918][ T7756] overlayfs: failed to clone upperpath [ 1459.182267][ T7760] overlayfs: failed to clone upperpath [ 1460.257477][ T7825] rust_binder: Failed to allocate buffer. len:4192, is_oneway:true [ 1460.257513][ T7825] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 1460.265852][ T7825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:245 [ 1460.322538][ T7829] netlink: 104 bytes leftover after parsing attributes in process `syz.0.23251'. [ 1460.803360][T30199] bridge_slave_1: left allmulticast mode [ 1460.809174][T30199] bridge_slave_1: left promiscuous mode [ 1460.814990][T30199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.822827][T30199] bridge_slave_0: left allmulticast mode [ 1460.828488][T30199] bridge_slave_0: left promiscuous mode [ 1460.834153][T30199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.961895][ T7847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.969032][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.976201][ T7847] bridge_slave_0: entered allmulticast mode [ 1460.982739][ T7847] bridge_slave_0: entered promiscuous mode [ 1460.989231][ T7847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.996558][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.003742][ T7847] bridge_slave_1: entered allmulticast mode [ 1461.010050][ T7847] bridge_slave_1: entered promiscuous mode [ 1461.017292][T30199] veth1_macvtap: left promiscuous mode [ 1461.023015][T30199] veth0_vlan: left promiscuous mode [ 1461.087953][ T36] audit: type=1400 audit(2000000081.632:77124): avc: denied { unmount } for pid=6186 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1461.166779][ T7878] netlink: 288 bytes leftover after parsing attributes in process `syz.0.23270'. [ 1461.252110][ T7847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.259385][ T7847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.266752][ T7847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.273847][ T7847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.314840][T20799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.322209][T20799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.330421][ T7903] netlink: 'syz.0.23276': attribute type 4 has an invalid length. [ 1461.338914][ T7903] netlink: 'syz.0.23276': attribute type 2 has an invalid length. [ 1461.350132][T13110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.357240][T13110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.370992][T13110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.378199][T13110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.414615][ T7847] veth0_vlan: entered promiscuous mode [ 1461.426525][ T7847] veth1_macvtap: entered promiscuous mode [ 1461.470336][ T7911] tmpfs: Unknown parameter '01777777777777777777777000000000000000000000000x0000000000000000' [ 1461.542049][ T7915] rust_binder: Write failure EFAULT in pid:2 [ 1461.557947][ T7918] batadv_slave_1: entered promiscuous mode [ 1461.573642][ T7918] rust_binder: 7918 RLIMIT_NICE not set [ 1461.693911][ T7917] batadv_slave_1: left promiscuous mode [ 1461.788698][ T9] rust_binder: 7917: removing orphan mapping 0:1024 [ 1461.883343][ T7929] rust_binder: Error in use_page_slow: ESRCH [ 1461.883366][ T7929] rust_binder: use_range failure ESRCH [ 1461.889399][ T7929] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 1461.895164][ T7929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1461.903354][ T7929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:9 [ 1462.225687][ T7935] /dev/rnullb0: Can't lookup blockdev [ 1462.266840][ T7942] netlink: 'syz.0.23291': attribute type 2 has an invalid length. [ 1462.274747][ T7942] netlink: 1 bytes leftover after parsing attributes in process `syz.0.23291'. [ 1462.522526][ T7957] futex_wake_op: syz.0.23296 tries to shift op by -1; fix this program [ 1462.531014][ T7959] futex_wake_op: syz.0.23296 tries to shift op by -1; fix this program [ 1462.574957][ T7967] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1462.584498][ T7967] overlayfs: conflicting lowerdir path [ 1462.737209][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23306'. [ 1463.485294][ T36] audit: type=1400 audit(2000000084.042:77125): avc: denied { ioctl } for pid=8004 comm="syz.9.23313" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1463.646188][ T8018] batadv_slave_0: mtu less than device minimum [ 1463.653226][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23317'. [ 1463.664434][ T8018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23317'. [ 1463.922716][ T331] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1464.072673][ T331] usb 10-1: Using ep0 maxpacket: 16 [ 1464.083428][ T331] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1464.095461][ T331] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1464.105899][ T331] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1464.115737][ T331] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1464.127610][ T331] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1464.137174][ T331] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.145407][ T331] usb 10-1: Product: syz [ 1464.149778][ T331] usb 10-1: Manufacturer: syz [ 1464.154749][ T331] usb 10-1: SerialNumber: syz [ 1464.168259][ T8038] can: request_module (can-proto-0) failed. [ 1464.209084][ T8038] can: request_module (can-proto-0) failed. [ 1464.237033][ T8050] pim6reg1: entered promiscuous mode [ 1464.242537][ T8050] pim6reg1: entered allmulticast mode [ 1464.328193][ T8057] pim6reg1: entered promiscuous mode [ 1464.333665][ T8057] pim6reg1: entered allmulticast mode [ 1464.365774][ T331] cdc_ncm 10-1:1.0: bind() failure [ 1464.372237][ T331] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1464.379213][ T331] cdc_ncm 10-1:1.1: bind() failure [ 1464.386290][ T331] usb 10-1: USB disconnect, device number 48 [ 1464.443813][ T8061] fuse: Bad value for 'group_id' [ 1464.448819][ T8061] fuse: Bad value for 'group_id' [ 1464.975280][ T8098] netlink: 'syz.0.23343': attribute type 4 has an invalid length. [ 1464.983985][ T8098] netlink: 'syz.0.23343': attribute type 4 has an invalid length. [ 1465.093833][ T8109] overlayfs: failed to clone upperpath [ 1465.162693][ T331] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1465.332730][ T331] usb 10-1: Using ep0 maxpacket: 8 [ 1465.339481][ T331] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1465.348101][ T331] usb 10-1: config 1 has an invalid interface number: 84 but max is 0 [ 1465.356417][ T331] usb 10-1: config 1 has no interface number 0 [ 1465.366873][ T331] usb 10-1: config 1 interface 84 has no altsetting 0 [ 1465.379403][ T331] usb 10-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=3f.09 [ 1465.388818][ T331] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.409353][ T331] usb 10-1: Product: syz [ 1465.422673][ T331] usb 10-1: Manufacturer: syz [ 1465.427503][ T331] usb 10-1: SerialNumber: syz [ 1465.634024][ T8094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1465.634063][ T8094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 1467.017602][ T8182] /dev/rnullb0: Can't lookup blockdev [ 1467.066192][ T8187] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1467.281548][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23377'. [ 1467.324960][ T36] audit: type=1400 audit(2000000087.882:77126): avc: denied { create } for pid=8206 comm="syz.0.23379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1467.649231][ T8221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.656803][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.664140][ T8221] bridge_slave_0: entered allmulticast mode [ 1467.670784][ T8221] bridge_slave_0: entered promiscuous mode [ 1467.678521][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.685786][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.693180][ T8221] bridge_slave_1: entered allmulticast mode [ 1467.699600][ T8221] bridge_slave_1: entered promiscuous mode [ 1467.771216][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.778333][ T8221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1467.785677][ T8221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.792757][ T8221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.819847][T30199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.827352][T30199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.838798][T30194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.845921][T30194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.855676][T30199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.862760][T30199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1467.896154][ T8221] veth0_vlan: entered promiscuous mode [ 1467.908574][ T331] ums-cypress 10-1:1.84: USB Mass Storage device detected [ 1467.911314][ T8221] veth1_macvtap: entered promiscuous mode [ 1467.986415][ T331] usb 10-1: USB disconnect, device number 49 [ 1468.033940][ T8248] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1839287298 (7357149192 ns) > initial count (1015835928 ns). Using initial count to start timer. [ 1468.130116][ T8249] fuse: Unknown parameter 'm' [ 1468.668527][ T36] audit: type=1400 audit(2000000089.222:77127): avc: denied { read } for pid=8256 comm="syz.6.23390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1468.689260][ T8257] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8257 comm=syz.6.23390 [ 1468.703110][ T8257] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8257 comm=syz.6.23390 [ 1468.792229][ T8264] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 134217728 [ 1468.800505][ T8264] rust_binder: Write failure EINVAL in pid:302 [ 1468.825047][ T36] audit: type=1400 audit(2000000089.382:77128): avc: denied { shutdown } for pid=8268 comm="syz.9.23394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1468.860411][ T36] audit: type=1400 audit(2000000089.392:77129): avc: denied { read } for pid=8268 comm="syz.9.23394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1468.885166][ T8278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1468.885206][ T8278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:36 [ 1468.929975][ T36] audit: type=1400 audit(2000000089.482:77130): avc: denied { nlmsg_read } for pid=8283 comm="syz.9.23400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1468.977273][ T36] audit: type=1400 audit(2000000089.522:77131): avc: denied { execheap } for pid=8285 comm="syz.9.23401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1469.014516][ T36] audit: type=1326 audit(2000000089.572:77132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.6.23398" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf0a98eba9 code=0x0 [ 1469.135046][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23402'. [ 1469.214776][ T8301] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 1469.223191][ T8301] rust_binder: Write failure EINVAL in pid:51 [ 1469.770325][ T8307] fuse: Bad value for 'fd' [ 1469.846618][ T8314] fuse: Bad value for 'fd' [ 1470.313952][T26420] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 1470.332827][T26420] hid-generic 0000:0000:0000.0094: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1470.391934][ T8330] netlink: 24 bytes leftover after parsing attributes in process `syz.9.23412'. [ 1470.505610][ T8335] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 1471.331378][ T8346] binfmt_misc: register: failed to install interpreter file ./cgroup [ 1471.433942][ T8355] loop7: detected capacity change from 0 to 7 [ 1471.674003][ T36] audit: type=1400 audit(2000000092.232:77133): avc: denied { setattr } for pid=8366 comm="syz.9.23424" name="XDP" dev="sockfs" ino=339767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1472.573850][ T8389] pim6reg1: entered promiscuous mode [ 1472.579251][ T8389] pim6reg1: entered allmulticast mode [ 1472.595294][ T8389] kvm_intel: kvm [8388]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2 [ 1472.842686][ T9] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1472.993810][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.006446][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1473.015666][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.023807][ T9] usb 10-1: Product: syz [ 1473.028106][ T9] usb 10-1: Manufacturer: syz [ 1473.032856][ T9] usb 10-1: SerialNumber: syz [ 1473.551133][ T8394] support for the xor transformation has been removed. [ 1473.574270][ T8394] support for the xor transformation has been removed. [ 1474.042885][ T9] cdc_ncm 10-1:1.0: failed to get mac address [ 1474.052709][ T9] cdc_ncm 10-1:1.0: bind() failure [ 1474.059215][ T9] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1474.067862][ T9] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1474.077781][ T9] usb 10-1: USB disconnect, device number 50 [ 1474.747483][ T8421] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 1474.858665][ T331] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 1474.885655][ T331] hid-generic 0000:0000:0000.0095: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1475.101772][ T8439] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1475.237134][ T8443] rust_binder: 118: no such ref 4294967292 [ 1475.270869][ T8445] rust_binder: Write failure EFAULT in pid:120 [ 1475.628437][T30194] Bluetooth: hci0: Frame reassembly failed (-84) [ 1475.641663][T30194] Bluetooth: hci0: Frame reassembly failed (-84) [ 1475.648417][T30194] Bluetooth: hci0: Frame reassembly failed (-84) [ 1475.672713][ T8456] rust_binder: Error in use_page_slow: ESRCH [ 1475.672735][ T8456] rust_binder: use_range failure ESRCH [ 1475.678808][ T8456] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 1475.684317][ T8456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1475.692360][ T8456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:15 [ 1476.013310][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23457'. [ 1476.269333][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23464'. [ 1476.654469][ T36] audit: type=1326 audit(2000000097.212:77134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.23471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x0 [ 1476.852665][ T9] usb 10-1: new full-speed USB device number 51 using dummy_hcd [ 1477.014201][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1477.022676][ T9] usb 10-1: not running at top speed; connect to a high speed hub [ 1477.031237][ T9] usb 10-1: config 5 has an invalid interface number: 29 but max is 0 [ 1477.039724][ T9] usb 10-1: config 5 has no interface number 0 [ 1477.046057][ T9] usb 10-1: config 5 interface 29 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1477.056987][ T9] usb 10-1: config 5 interface 29 has no altsetting 0 [ 1477.065422][ T9] usb 10-1: New USB device found, idVendor=05a9, idProduct=2643, bcdDevice=49.45 [ 1477.074648][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.082783][ T9] usb 10-1: Product: syz [ 1477.087046][ T9] usb 10-1: Manufacturer: syz [ 1477.091756][ T9] usb 10-1: SerialNumber: syz [ 1477.098048][ T8514] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1477.689733][T30194] tipc: Subscription rejected, illegal request [ 1477.692681][T19865] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1477.696075][ T2470] Bluetooth: hci0: command 0x1003 tx timeout [ 1477.752184][ T8536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1477.754392][ T36] audit: type=1400 audit(2000000098.312:77135): avc: denied { accept } for pid=8535 comm="syz.6.23478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1477.808388][ T8541] rust_binder: Error while translating object. [ 1477.808429][ T8541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 1477.822357][ T8541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:17 [ 1478.299808][ T8548] rust_binder: 23: no such ref 3 [ 1478.314510][ T8548] rust_binder: Write failure EINVAL in pid:23 [ 1478.344357][ T8554] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1478.352788][ T8554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 1478.415506][ T8556] /dev/rnullb0: Can't lookup blockdev [ 1478.556848][ T8562] netlink: 'syz.0.23487': attribute type 1 has an invalid length. [ 1479.260958][ T8595] kvm: kvm [8591]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 1479.269749][ T8595] kvm: kvm [8591]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 1479.443114][ T8605] rust_binder: Write failure EFAULT in pid:43 [ 1479.444964][ T8605] rust_binder: Write failure EFAULT in pid:43 [ 1479.613136][ T36] audit: type=1400 audit(2000000100.172:77136): avc: denied { map } for pid=8619 comm="syz.3.23505" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1479.648328][ T9] usb 10-1: Found UVC 0.00 device syz (05a9:2643) [ 1479.652318][ T36] audit: type=1400 audit(2000000100.172:77137): avc: denied { execute } for pid=8619 comm="syz.3.23505" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1479.668030][ T9] usb 10-1: No valid video chain found. [ 1479.693471][ T9] usb 10-1: USB disconnect, device number 51 [ 1479.803393][ T8627] rust_binder: Error while translating object. [ 1479.803427][ T8627] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1479.813178][ T8627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 1479.858829][ T8634] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 1479.868272][ T8634] rust_binder: Error while translating object. [ 1479.880708][ T8634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1479.887174][ T8634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 1479.897224][ T8632] overlayfs: failed to clone upperpath [ 1479.931835][ T8636] rust_binder: Error while translating object. [ 1479.931909][ T8636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1479.938406][ T8636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:66 [ 1479.948355][ T8636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:66 [ 1480.711249][ T8646] cgroup: Unknown subsys name 'devices' [ 1480.841875][ T8655] netlink: 'syz.0.23520': attribute type 4 has an invalid length. [ 1480.850826][ T8656] netlink: 'syz.0.23520': attribute type 4 has an invalid length. [ 1481.101047][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.9.23543'. [ 1481.177453][ T8716] netlink: 120 bytes leftover after parsing attributes in process `syz.9.23549'. [ 1481.225403][ T8727] netlink: 'syz.0.23553': attribute type 12 has an invalid length. [ 1481.401575][ T36] audit: type=1401 audit(2000000101.952:77138): op=setxattr invalid_context="" [ 1481.504531][ T8752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8752 comm=syz.0.23563 [ 1481.529304][ T8755] /dev/loop0: Can't lookup blockdev [ 1481.578024][ T8765] overlayfs: failed to clone lowerpath [ 1481.612664][ T331] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1481.628604][ T8772] netlink: 36 bytes leftover after parsing attributes in process `syz.0.23571'. [ 1481.649758][ T36] audit: type=1326 audit(2000000102.202:77139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.23572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888078eba9 code=0x7ffc0000 [ 1481.674015][ T36] audit: type=1326 audit(2000000102.202:77140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.23572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888078eba9 code=0x7ffc0000 [ 1481.698487][ T36] audit: type=1326 audit(2000000102.232:77141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.23572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888078eba9 code=0x7ffc0000 [ 1481.722248][ T36] audit: type=1326 audit(2000000102.232:77142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.23572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888078eba9 code=0x7ffc0000 [ 1481.745873][ T36] audit: type=1326 audit(2000000102.232:77143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.23572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f888078eba9 code=0x7ffc0000 [ 1481.769403][ T331] usb 10-1: device descriptor read/64, error -71 [ 1481.775885][ T36] audit: type=1326 audit(2000000102.232:77144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.23572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888078eba9 code=0x7ffc0000 [ 1481.799489][ T36] audit: type=1326 audit(2000000102.232:77145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.23572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888078eba9 code=0x7ffc0000 [ 1481.823358][ T36] audit: type=1326 audit(2000000102.252:77146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.23572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888078eba9 code=0x7ffc0000 [ 1481.847061][ T36] audit: type=1326 audit(2000000102.252:77147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.23572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888078eba9 code=0x7ffc0000 [ 1481.870828][ T36] audit: type=1326 audit(2000000102.252:77148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.23572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f888078eba9 code=0x7ffc0000 [ 1481.895026][ T36] audit: type=1326 audit(2000000102.252:77149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.23572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888078eba9 code=0x7ffc0000 [ 1481.942238][ T8776] veth0_to_team: entered promiscuous mode [ 1481.948190][ T8776] veth0_to_team: entered allmulticast mode [ 1482.042760][ T331] usb 10-1: device descriptor read/64, error -71 [ 1482.282747][ T331] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1482.412813][ T331] usb 10-1: device descriptor read/64, error -71 [ 1482.653797][ T331] usb 10-1: device descriptor read/64, error -71 [ 1482.762783][ T331] usb usb10-port1: attempt power cycle [ 1483.102694][ T331] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1483.112035][ T8791] sit0: entered promiscuous mode [ 1483.122314][ T8791] netlink: 'syz.3.23576': attribute type 1 has an invalid length. [ 1483.130243][ T8791] netlink: 1 bytes leftover after parsing attributes in process `syz.3.23576'. [ 1483.142841][ T8791] rust_binder: Error while translating object. [ 1483.142878][ T8791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1483.149175][ T8791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70 [ 1483.159443][ T331] usb 10-1: device descriptor read/8, error -71 [ 1483.186933][ T8801] overlayfs: failed to clone upperpath [ 1483.303923][ T331] usb 10-1: device descriptor read/8, error -71 [ 1483.542716][ T331] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1483.563930][ T331] usb 10-1: device descriptor read/8, error -71 [ 1483.693754][ T331] usb 10-1: device descriptor read/8, error -71 [ 1483.805100][ T331] usb usb10-port1: unable to enumerate USB device [ 1484.180128][ T8849] rust_binder: Error in use_page_slow: ESRCH [ 1484.180149][ T8849] rust_binder: use_range failure ESRCH [ 1484.186402][ T8849] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 1484.191901][ T8849] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1484.200198][ T8849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:90 [ 1484.246112][ T8855] overlayfs: workdir and upperdir must be separate subtrees [ 1484.388940][ T8861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1484.394313][ T8858] input: syz1 as /devices/virtual/input/input94 [ 1484.442862][ T8866] rust_binder: Error while translating object. [ 1484.442918][ T8866] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 1484.462792][ T8866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:184 [ 1484.520633][ T8878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:107 [ 1484.549241][ T8881] netlink: 'syz.9.23611': attribute type 4 has an invalid length. [ 1484.569340][ T8881] netlink: 'syz.9.23611': attribute type 4 has an invalid length. [ 1484.586309][ T8883] pim6reg1: entered promiscuous mode [ 1484.591681][ T8883] pim6reg1: entered allmulticast mode [ 1484.993652][T13110] bridge_slave_1: left allmulticast mode [ 1484.999455][T13110] bridge_slave_1: left promiscuous mode [ 1485.009396][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.017364][T13110] bridge_slave_0: left allmulticast mode [ 1485.023215][T13110] bridge_slave_0: left promiscuous mode [ 1485.028979][T13110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.119048][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.126569][ T8897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.133988][ T8897] bridge_slave_0: entered allmulticast mode [ 1485.140254][ T8897] bridge_slave_0: entered promiscuous mode [ 1485.147053][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.154262][ T8897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.161395][ T8897] bridge_slave_1: entered allmulticast mode [ 1485.168138][ T8897] bridge_slave_1: entered promiscuous mode [ 1485.175231][T13110] veth1_macvtap: left promiscuous mode [ 1485.180743][T13110] veth0_vlan: left promiscuous mode [ 1485.281935][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.289069][ T8897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.296497][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.303621][ T8897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.326364][T30194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.334020][T30194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.344872][T20799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.351931][T20799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.361253][T30194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.368358][T30194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.396043][ T8897] veth0_vlan: entered promiscuous mode [ 1485.408305][ T8897] veth1_macvtap: entered promiscuous mode [ 1486.053490][ T8929] kvm: kvm [8928]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 1486.062118][ T8929] kvm: kvm [8928]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 1486.073032][ T8929] kvm: kvm [8928]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 1486.084704][ T8929] kvm: kvm [8928]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 1486.093368][ T8929] kvm: kvm [8928]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 1486.106054][ T8929] kvm_intel: kvm [8928]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 1486.149248][ T8932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 1486.149303][ T8932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:8 [ 1486.362411][ T8941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=8941 comm=syz.5.23629 [ 1486.386939][ T8947] fuseblk: Unknown parameter 'f-0x0000000000000004' [ 1486.395240][ T8941] rust_binder: Write failure EFAULT in pid:20 [ 1486.427492][ T8947] incfs: Error accessing: ./file0. [ 1486.438918][ T8947] incfs: mount failed -20 [ 1486.901942][ T8968] kvm: kvm [8967]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 1486.910812][ T8968] kvm: kvm [8967]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 1487.028934][ T8974] binder: Unknown parameter '0x0000000000000004' [ 1487.049376][ T8977] netlink: 104 bytes leftover after parsing attributes in process `syz.5.23640'. [ 1487.058971][ T8976] netlink: 104 bytes leftover after parsing attributes in process `syz.5.23640'. [ 1487.072878][ T8977] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 1487.082635][ T8977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1487.148225][ T8980] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 1487.214352][ T8981] fuse: Unknown parameter ''~n{T Ib2tptP . fiwّ{Z' [ 1487.226019][ T8981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 1487.710790][ T9045] overlayfs: failed to clone upperpath [ 1487.788140][ T9050] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1487.797658][ T9050] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1488.458035][ T9065] rust_binder: Write failure EINVAL in pid:75 [ 1488.805067][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 1488.805088][ T36] audit: type=1400 audit(2000000109.362:77234): avc: denied { create } for pid=9078 comm="syz.3.23669" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 1488.815688][ T9079] rust_binder: Error while translating object. [ 1488.817710][ T36] audit: type=1400 audit(2000000109.372:77235): avc: denied { create } for pid=9078 comm="syz.3.23669" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 1488.837809][ T9079] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1488.844050][ T36] audit: type=1400 audit(2000000109.372:77236): avc: denied { connect } for pid=9078 comm="syz.3.23669" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 1488.864458][ T9079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:136 [ 1488.874035][ T36] audit: type=1400 audit(2000000109.372:77237): avc: denied { name_connect } for pid=9078 comm="syz.3.23669" dest=4420 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1488.894571][ T9080] rust_binder: Error while translating object. [ 1488.926118][ T9080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1488.932320][ T9080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:136 [ 1489.642700][ T8244] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1489.802706][ T8244] usb 6-1: Using ep0 maxpacket: 32 [ 1489.808941][ T8244] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1489.817113][ T8244] usb 6-1: config 0 has no interface number 0 [ 1489.823262][ T8244] usb 6-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 1489.835303][ T8244] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1489.844432][ T8244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.852431][ T8244] usb 6-1: Product: syz [ 1489.856629][ T8244] usb 6-1: Manufacturer: syz [ 1489.861241][ T8244] usb 6-1: SerialNumber: syz [ 1489.866602][ T8244] usb 6-1: config 0 descriptor?? [ 1489.872376][ T8244] smsc95xx v2.0.0 [ 1489.876114][ T8244] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1489.886198][ T8244] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 1490.218684][ T9107] 9pnet_fd: Insufficient options for proto=fd [ 1490.410002][ T9125] /dev/rnullb0: Can't lookup blockdev [ 1490.476334][ T9131] rust_binder: 9131 RLIMIT_NICE not set [ 1490.612357][ T9143] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 1490.618298][ T9143] rust_binder: Error while translating object. [ 1490.618412][ T9144] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 1490.630788][ T9143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1490.649218][ T9143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:379 [ 1490.653293][ T9144] rust_binder: Error while translating object. [ 1490.672702][ T9144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1490.679041][ T9144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:379 [ 1490.812445][ T8244] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 1490.832827][ T8244] hid-generic 0000:0000:0000.0096: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1490.861373][ T9164] rust_binder: 390: no such ref 3 [ 1490.861608][ T9162] fido_id[9162]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1490.866658][ T9164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:390 [ 1490.882729][ T9164] rust_binder: 390: no such ref 1 [ 1490.897269][ T9164] rust_binder: 390: no such ref 3 [ 1490.902343][ T9164] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 1490.909990][ T9164] rust_binder: Error while translating object. [ 1490.910037][ T9164] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1490.916448][ T9164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:390 [ 1490.977586][ T9166] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1490.987890][ T9166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:392 [ 1491.134056][ T36] audit: type=1326 audit(2000000111.692:77238): auid=4294967295 uid=16832 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9172 comm="syz.6.23702" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf0a98eba9 code=0x0 [ 1492.242375][ T9212] /dev/rnullb0: Can't lookup blockdev [ 1492.295607][ T9220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23717'. [ 1492.427839][T26421] usb 6-1: USB disconnect, device number 65 [ 1492.437888][T26420] rust_binder: 9093: removing orphan mapping 0:1144 [ 1493.084456][ T9252] netlink: 'syz.0.23729': attribute type 4 has an invalid length. [ 1493.094503][ T9252] netlink: 'syz.0.23729': attribute type 4 has an invalid length. [ 1493.125798][ T9256] netlink: 'syz.0.23731': attribute type 1 has an invalid length. [ 1493.133944][ T9256] netlink: 164 bytes leftover after parsing attributes in process `syz.0.23731'. [ 1493.828692][ T9327] overlayfs: failed to clone upperpath [ 1493.835131][ T9327] overlayfs: failed to clone upperpath [ 1494.147693][ T9338] fuse: Unknown parameter 'fd}0x0000000000000005' [ 1494.155949][ T9338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9338 comm=syz.0.23756 [ 1494.559688][ T36] audit: type=1326 audit(2000000115.112:77239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9325 comm="syz.5.23752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f9f8eba9 code=0x7fc00000 [ 1494.650851][ T9361] fuseblk: Bad value for 'user_id' [ 1494.656305][ T9361] fuseblk: Bad value for 'user_id' [ 1494.661724][ T9361] fuseblk: Bad value for 'user_id' [ 1494.667413][ T9361] fuseblk: Bad value for 'user_id' [ 1494.672712][ T9361] fuseblk: Bad value for 'user_id' [ 1494.677908][ T9361] fuseblk: Bad value for 'user_id' [ 1494.683261][ T9361] fuseblk: Bad value for 'user_id' [ 1494.688450][ T9361] fuseblk: Bad value for 'user_id' [ 1494.693772][ T9361] fuseblk: Bad value for 'user_id' [ 1494.698899][ T9361] fuseblk: Bad value for 'user_id' [ 1494.704209][ T9361] fuseblk: Bad value for 'user_id' [ 1494.709345][ T9361] fuseblk: Bad value for 'user_id' [ 1494.714701][ T9361] fuseblk: Bad value for 'user_id' [ 1494.719875][ T9361] fuseblk: Bad value for 'user_id' [ 1494.725184][ T9361] fuseblk: Bad value for 'user_id' [ 1494.730405][ T9361] fuseblk: Bad value for 'user_id' [ 1494.735732][ T9361] fuseblk: Bad value for 'user_id' [ 1494.740980][ T9361] fuseblk: Bad value for 'user_id' [ 1494.746504][ T9361] fuseblk: Bad value for 'user_id' [ 1494.751708][ T9361] fuseblk: Bad value for 'user_id' [ 1494.757078][ T9361] fuseblk: Bad value for 'user_id' [ 1494.762221][ T9361] fuseblk: Bad value for 'user_id' [ 1494.767511][ T9361] fuseblk: Bad value for 'user_id' [ 1494.772722][ T9361] fuseblk: Bad value for 'user_id' [ 1494.778056][ T9361] fuseblk: Bad value for 'user_id' [ 1494.783403][ T9361] fuseblk: Bad value for 'user_id' [ 1494.788731][ T9361] fuseblk: Bad value for 'user_id' [ 1494.794166][ T9361] fuseblk: Bad value for 'user_id' [ 1494.799436][ T9361] fuseblk: Bad value for 'user_id' [ 1494.804651][ T9361] fuseblk: Bad value for 'user_id' [ 1494.810006][ T9361] fuseblk: Bad value for 'user_id' [ 1494.816079][ T9361] fuseblk: Bad value for 'user_id' [ 1494.821332][ T9361] fuseblk: Bad value for 'user_id' [ 1494.826559][ T9361] fuseblk: Bad value for 'user_id' [ 1494.831845][ T9361] fuseblk: Bad value for 'user_id' [ 1494.837111][ T9361] fuseblk: Bad value for 'user_id' [ 1494.842430][ T9361] fuseblk: Bad value for 'user_id' [ 1494.847632][ T9361] fuseblk: Bad value for 'user_id' [ 1494.853194][ T9361] fuseblk: Bad value for 'user_id' [ 1494.858427][ T9361] fuseblk: Bad value for 'user_id' [ 1494.863921][ T9361] fuseblk: Bad value for 'user_id' [ 1494.869157][ T9361] fuseblk: Bad value for 'user_id' [ 1494.874632][ T9361] fuseblk: Bad value for 'user_id' [ 1494.879838][ T9361] fuseblk: Bad value for 'user_id' [ 1494.885148][ T9361] fuseblk: Bad value for 'user_id' [ 1494.890294][ T9361] fuseblk: Bad value for 'user_id' [ 1494.895602][ T9361] fuseblk: Bad value for 'user_id' [ 1494.900733][ T9361] fuseblk: Bad value for 'user_id' [ 1494.906032][ T9361] fuseblk: Bad value for 'user_id' [ 1494.911258][ T9361] fuseblk: Bad value for 'user_id' [ 1494.916580][ T9361] fuseblk: Bad value for 'user_id' [ 1494.921740][ T9361] fuseblk: Bad value for 'user_id' [ 1494.927030][ T9361] fuseblk: Bad value for 'user_id' [ 1494.932167][ T9361] fuseblk: Bad value for 'user_id' [ 1494.937478][ T9361] fuseblk: Bad value for 'user_id' [ 1494.942658][ T9361] fuseblk: Bad value for 'user_id' [ 1494.947980][ T9361] fuseblk: Bad value for 'user_id' [ 1494.953127][ T9361] fuseblk: Bad value for 'user_id' [ 1494.958355][ T9361] fuseblk: Bad value for 'user_id' [ 1494.963521][ T9361] fuseblk: Bad value for 'user_id' [ 1494.968779][ T9361] fuseblk: Bad value for 'user_id' [ 1494.974148][ T9361] fuseblk: Bad value for 'user_id' [ 1494.979388][ T9361] fuseblk: Bad value for 'user_id' [ 1494.984726][ T9361] fuseblk: Bad value for 'user_id' [ 1494.989966][ T9361] fuseblk: Bad value for 'user_id' [ 1494.995144][ T9361] fuseblk: Bad value for 'user_id' [ 1495.000408][ T9361] fuseblk: Bad value for 'user_id' [ 1495.005571][ T9361] fuseblk: Bad value for 'user_id' [ 1495.010837][ T9361] fuseblk: Bad value for 'user_id' [ 1495.016023][ T9361] fuseblk: Bad value for 'user_id' [ 1495.021260][ T9361] fuseblk: Bad value for 'user_id' [ 1495.026507][ T9361] fuseblk: Bad value for 'user_id' [ 1495.031837][ T9361] fuseblk: Bad value for 'user_id' [ 1495.037112][ T9361] fuseblk: Bad value for 'user_id' [ 1495.047754][ T9361] fuseblk: Bad value for 'user_id' [ 1495.057331][ T9361] fuseblk: Bad value for 'user_id' [ 1495.063935][ T9361] fuseblk: Bad value for 'user_id' [ 1495.069115][ T9361] fuseblk: Bad value for 'user_id' [ 1495.074420][ T9361] fuseblk: Bad value for 'user_id' [ 1495.075633][ T9364] netlink: 'syz.6.23765': attribute type 10 has an invalid length. [ 1495.079584][ T9361] fuseblk: Bad value for 'user_id' [ 1495.079762][ T9361] fuseblk: Bad value for 'user_id' [ 1495.097949][ T9361] fuseblk: Bad value for 'user_id' [ 1495.103668][ T9361] fuseblk: Bad value for 'user_id' [ 1495.110194][ T9361] fuseblk: Bad value for 'user_id' [ 1495.115513][ T9361] fuseblk: Bad value for 'user_id' [ 1495.120658][ T9361] fuseblk: Bad value for 'user_id' [ 1495.123965][ T36] audit: type=1400 audit(2000000115.672:77240): avc: denied { map } for pid=9365 comm="syz.6.23766" path="socket:[346701]" dev="sockfs" ino=346701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1495.126321][ T9361] fuseblk: Bad value for 'user_id' [ 1495.154551][ T9361] fuseblk: Bad value for 'user_id' [ 1495.159853][ T9361] fuseblk: Bad value for 'user_id' [ 1495.170355][ T9361] fuseblk: Bad value for 'user_id' [ 1495.175663][ T9361] fuseblk: Bad value for 'user_id' [ 1495.180791][ T9361] fuseblk: Bad value for 'user_id' [ 1495.186262][ T9361] fuseblk: Bad value for 'user_id' [ 1495.191408][ T9361] fuseblk: Bad value for 'user_id' [ 1495.196802][ T9361] fuseblk: Bad value for 'user_id' [ 1495.201965][ T9361] fuseblk: Bad value for 'user_id' [ 1495.207247][ T9361] fuseblk: Bad value for 'user_id' [ 1495.212410][ T9361] fuseblk: Bad value for 'user_id' [ 1495.217909][ T9361] fuseblk: Bad value for 'user_id' [ 1495.223270][ T9361] fuseblk: Bad value for 'user_id' [ 1495.228680][ T9361] fuseblk: Bad value for 'user_id' [ 1495.233881][ T9361] fuseblk: Bad value for 'user_id' [ 1495.239182][ T9361] fuseblk: Bad value for 'user_id' [ 1495.244388][ T9361] fuseblk: Bad value for 'user_id' [ 1495.249650][ T9361] fuseblk: Bad value for 'user_id' [ 1495.254820][ T9361] fuseblk: Bad value for 'user_id' [ 1495.260077][ T9361] fuseblk: Bad value for 'user_id' [ 1495.265253][ T9361] fuseblk: Bad value for 'user_id' [ 1495.270498][ T9361] fuseblk: Bad value for 'user_id' [ 1495.275659][ T9361] fuseblk: Bad value for 'user_id' [ 1495.280920][ T9361] fuseblk: Bad value for 'user_id' [ 1495.286125][ T9361] fuseblk: Bad value for 'user_id' [ 1495.291439][ T9361] fuseblk: Bad value for 'user_id' [ 1495.296654][ T9361] fuseblk: Bad value for 'user_id' [ 1495.301906][ T9361] fuseblk: Bad value for 'user_id' [ 1495.307130][ T9361] fuseblk: Bad value for 'user_id' [ 1495.312431][ T9361] fuseblk: Bad value for 'user_id' [ 1495.317588][ T9361] fuseblk: Bad value for 'user_id' [ 1495.322844][ T9361] fuseblk: Bad value for 'user_id' [ 1495.327957][ T9361] fuseblk: Bad value for 'user_id' [ 1495.333313][ T9361] fuseblk: Bad value for 'user_id' [ 1495.338469][ T9361] fuseblk: Bad value for 'user_id' [ 1495.343768][ T9361] fuseblk: Bad value for 'user_id' [ 1495.348897][ T9361] fuseblk: Bad value for 'user_id' [ 1495.359340][ T9361] fuseblk: Bad value for 'user_id' [ 1495.364569][ T9361] fuseblk: Bad value for 'user_id' [ 1495.369845][ T9361] fuseblk: Bad value for 'user_id' [ 1495.375286][ T9361] fuseblk: Bad value for 'user_id' [ 1495.380824][ T9361] fuseblk: Bad value for 'user_id' [ 1495.386003][ T9361] fuseblk: Bad value for 'user_id' [ 1495.464821][ T9387] netlink: 44 bytes leftover after parsing attributes in process `syz.5.23774'. [ 1495.509742][ T9400] overlay: filesystem on ./bus is read-only [ 1495.715347][ T9403] rust_binder: Error while translating object. [ 1495.715380][ T9403] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1495.721829][ T9403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176 [ 1495.847541][ T36] audit: type=1400 audit(2000000116.402:77241): avc: denied { append } for pid=9404 comm="syz.3.23781" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1495.884314][ T9405] tipc: Started in network mode [ 1495.889306][ T9405] tipc: Node identity ac14140f, cluster identity 4711 [ 1495.896424][ T9405] tipc: New replicast peer: 255.255.255.255 [ 1495.902746][ T9405] tipc: Enabled bearer , priority 10 [ 1495.909374][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23781'. [ 1495.918501][ T9405] tipc: Disabling bearer [ 1496.097907][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23784'. [ 1496.430214][ T9456] tipc: Started in network mode [ 1496.435267][ T9456] tipc: Node identity ac14140f, cluster identity 4711 [ 1496.442477][ T9456] tipc: New replicast peer: 255.255.255.255 [ 1496.450047][ T9456] tipc: Enabled bearer , priority 10 [ 1496.457395][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23800'. [ 1496.467031][ T9456] tipc: Disabling bearer [ 1496.474262][ T9456] overlayfs: failed to clone upperpath [ 1497.200807][ T9493] fuse: Unknown parameter 'roQtmode' [ 1497.914149][ T9544] netlink: 32 bytes leftover after parsing attributes in process `syz.5.23828'. [ 1498.073306][ T9558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23835'. [ 1498.427086][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23837'. [ 1498.977899][ T9604] netlink: 188 bytes leftover after parsing attributes in process `syz.0.23852'. [ 1498.993801][ T9604] overlayfs: failed to clone upperpath [ 1499.018095][ T9607] /dev/sr0: Can't lookup blockdev [ 1499.272701][ T9617] netlink: 'syz.5.23856': attribute type 14 has an invalid length. [ 1499.304125][ T9622] netlink: 'syz.5.23857': attribute type 4 has an invalid length. [ 1499.632983][ T9650] 9pnet_fd: Insufficient options for proto=fd [ 1500.256533][ T9688] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 1500.263992][ T9688] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 1500.345195][ T9696] overlayfs: failed to clone lowerpath [ 1500.430106][ T9710] tipc: Enabling of bearer rejected, failed to enable media [ 1500.594556][ T9749] netlink: 'syz.3.23898': attribute type 4 has an invalid length. [ 1500.633129][ T9760] lo: entered allmulticast mode [ 1500.639819][ T9760] lo: left allmulticast mode [ 1500.719901][ T36] audit: type=1400 audit(2000000377.265:77242): avc: denied { lock } for pid=9763 comm="syz.0.23903" path="socket:[348522]" dev="sockfs" ino=348522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1501.028681][ T9793] overlayfs: failed to clone upperpath [ 1501.699214][ T9846] veth0_virt_wifi: entered allmulticast mode [ 1501.814026][ T9861] netlink: 44 bytes leftover after parsing attributes in process `syz.0.23935'. [ 1501.815829][ T9845] veth0_virt_wifi: left allmulticast mode [ 1501.823398][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23935'. [ 1501.838299][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23935'. [ 1501.863971][ T9864] tmpfs: Bad value for 'uid' [ 1501.868725][ T9864] tmpfs: Bad value for 'uid' [ 1501.888919][ T9864] overlay: ./file0 is not a directory [ 1501.912562][ T9869] overlayfs: failed to clone upperpath [ 1503.131211][ T9919] netlink: 'syz.5.23955': attribute type 33 has an invalid length. [ 1503.139399][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23955'. [ 1503.641626][ T9925] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1503.808945][ T9959] IPv6: NLM_F_CREATE should be specified when creating new route [ 1503.832131][ T9963] netlink: 'syz.6.23966': attribute type 1 has an invalid length. [ 1503.840287][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23966'. [ 1503.862277][ T9963] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1504.027351][T30199] tipc: Subscription rejected, illegal request [ 1504.034301][ T9982] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 1504.034327][ T9982] rust_binder: Error while translating object. [ 1504.043350][ T9982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1504.049669][ T9982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:467 [ 1504.679752][T26420] rust_binder: 9997: removing orphan mapping 0:24 [ 1504.707401][T10001] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1504.770506][T10005] netlink: 72 bytes leftover after parsing attributes in process `syz.5.23982'. [ 1505.374085][T10036] overlayfs: failed to clone upperpath [ 1505.592329][T10061] cgroup: fork rejected by pids controller in /syz3 [ 1505.729682][T10104] fuse: Bad value for 'user_id' [ 1505.742739][T10104] fuse: Bad value for 'user_id' [ 1505.905377][T10114] netlink: 'syz.3.24011': attribute type 4 has an invalid length. [ 1505.913383][T10114] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.24011'. [ 1505.923841][T10114] overlayfs: failed to resolve './file1': -2 [ 1506.735594][T10144] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1506.744455][T10145] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1506.844052][T10150] netlink: 'syz.3.24023': attribute type 4 has an invalid length. [ 1506.852029][T10150] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.24023'. [ 1506.944160][T10159] overlayfs: failed to resolve './file1': -2 [ 1507.234910][T10174] netlink: 188 bytes leftover after parsing attributes in process `syz.5.24033'. [ 1507.417132][ T36] audit: type=1400 audit(2000000383.965:77243): avc: denied { listen } for pid=10189 comm="syz.5.24039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1507.694185][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24040'. [ 1507.704856][T10192] overlayfs: failed to clone lowerpath [ 1507.729705][T10194] overlay: filesystem on ./bus is read-only [ 1507.768304][T10197] overlayfs: failed to clone upperpath [ 1507.870806][T10199] bridge0: entered promiscuous mode [ 1507.878030][T10199] bridge0: entered allmulticast mode [ 1508.005159][T10226] fuse: Unknown parameter '0x0000000000000006' [ 1509.275871][T10307] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 1509.339282][T10321] rust_binder: 10309 RLIMIT_NICE not set [ 1509.347884][T10321] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 1509.360829][T10321] rust_binder: Write failure EINVAL in pid:489 [ 1509.571466][T10350] overlayfs: disabling nfs_export due to verity=require [ 1509.589421][T10350] overlayfs: failed to clone upperpath [ 1509.603203][T10354] 9pnet_fd: p9_fd_create_tcp (10354): problem connecting socket to 127.0.0.1 [ 1509.604672][T10356] netlink: 64 bytes leftover after parsing attributes in process `syz.3.24089'. [ 1509.622497][T10354] sit0: entered promiscuous mode [ 1509.629564][T10354] netlink: 'syz.5.24088': attribute type 1 has an invalid length. [ 1509.639284][T10354] netlink: 1 bytes leftover after parsing attributes in process `syz.5.24088'. [ 1509.654379][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24091'. [ 1509.753330][T10377] netlink: 96 bytes leftover after parsing attributes in process `syz.5.24097'. [ 1510.396377][ T36] audit: type=1326 audit(2000000386.945:77244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz.3.24113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa57e78eba9 code=0x0 [ 1510.904244][T10419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=10419 comm=syz.0.24114 [ 1510.928490][T10421] netlink: 104 bytes leftover after parsing attributes in process `syz.0.24115'. [ 1511.297605][T10431] overlayfs: failed to resolve './file1': -2 [ 1511.304866][T10431] overlayfs: failed to resolve './file1': -2 [ 1511.421832][T10449] lo: MTU too low for tipc bearer [ 1511.426974][T10449] tipc: Enabling of bearer rejected, failed to enable media [ 1511.483144][ T36] audit: type=1400 audit(2000000388.035:77245): avc: denied { map } for pid=10457 comm="syz.0.24126" path="socket:[350325]" dev="sockfs" ino=350325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1511.551227][T10463] netlink: 'syz.3.24128': attribute type 1 has an invalid length. [ 1511.744865][T10474] devpts: called with bogus options [ 1512.146224][T10512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24145'. [ 1512.185206][T10520] 9pnet_fd: Insufficient options for proto=fd [ 1512.260151][T10524] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1512.269543][T10524] overlayfs: missing 'lowerdir' [ 1513.903464][ T36] audit: type=1326 audit(2000000390.455:77246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.0.24156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888078eba9 code=0x7fc00000 [ 1513.963004][ T36] audit: type=1326 audit(2000000390.505:77247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.0.24165" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f888078eba9 code=0x0 [ 1513.963056][T10577] netlink: 180 bytes leftover after parsing attributes in process `syz.3.24166'. [ 1514.130148][T10604] overlayfs: failed to clone upperpath [ 1514.804387][T10629] netlink: 'syz.5.24183': attribute type 4 has an invalid length. [ 1514.812282][T10629] netlink: 'syz.5.24183': attribute type 5 has an invalid length. [ 1514.820450][T10629] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.24183'. [ 1516.214754][T10763] overlayfs: failed to resolve './bus': -2 [ 1516.264274][T10769] 9pnet_fd: Insufficient options for proto=fd [ 1516.472228][T10777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.479501][T10777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.486885][T10777] bridge_slave_0: entered allmulticast mode [ 1516.493727][T10777] bridge_slave_0: entered promiscuous mode [ 1516.500593][T10777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.507834][T10777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.515221][T10777] bridge_slave_1: entered allmulticast mode [ 1516.521606][T10777] bridge_slave_1: entered promiscuous mode [ 1516.578589][T10777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.585724][T10777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.593254][T10777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.600313][T10777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.843049][T30199] bridge_slave_1: left allmulticast mode [ 1516.848756][T30199] bridge_slave_1: left promiscuous mode [ 1516.861708][T30199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.873233][T30199] bridge_slave_0: left allmulticast mode [ 1516.879108][T30199] bridge_slave_0: left promiscuous mode [ 1516.885065][T30199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.946052][T20797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.953728][T20797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.964217][T20799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.971319][T20799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.981568][T20797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.988717][T20797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.005182][T30199] tipc: Left network mode [ 1517.012642][T30199] veth1_macvtap: left promiscuous mode [ 1517.073003][T10777] veth0_vlan: entered promiscuous mode [ 1517.091516][T10777] veth1_macvtap: entered promiscuous mode [ 1517.203620][ T36] audit: type=1326 audit(2000000393.755:77248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10824 comm="syz.0.24244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f179f98eba9 code=0x0 [ 1517.479992][T10854] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48330 sclass=netlink_xfrm_socket pid=10854 comm=syz.5.24253 [ 1517.888784][T10886] overlayfs: failed to clone upperpath [ 1518.035288][T26420] rust_binder: 10824: removing orphan mapping 0:4232 [ 1518.086081][T10904] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1518.125033][T10909] netlink: 1327 bytes leftover after parsing attributes in process `syz.3.24274'. [ 1518.149334][ T36] audit: type=1400 audit(2000000394.695:77249): avc: denied { write } for pid=10910 comm="syz.3.24275" path="socket:[351253]" dev="sockfs" ino=351253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1518.663510][T20797] bridge_slave_1: left allmulticast mode [ 1518.669270][T20797] bridge_slave_1: left promiscuous mode [ 1518.674973][T20797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.682770][T20797] bridge_slave_0: left allmulticast mode [ 1518.688434][T20797] bridge_slave_0: left promiscuous mode [ 1518.694225][T20797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.845792][T20797] veth1_macvtap: left promiscuous mode [ 1518.851386][T20797] veth0_vlan: left promiscuous mode [ 1518.902458][T10918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.909740][T10918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.917031][T10918] bridge_slave_0: entered allmulticast mode [ 1518.923378][T10918] bridge_slave_0: entered promiscuous mode [ 1518.929971][T10918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.937173][T10918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.944320][T10918] bridge_slave_1: entered allmulticast mode [ 1518.951305][T10918] bridge_slave_1: entered promiscuous mode [ 1519.012653][T10918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.019748][T10918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.027197][T10918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.034282][T10918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.057319][T30199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.064958][T30199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.075211][T30194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.082301][T30194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.092064][T30199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.099190][T30199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.127630][T10918] veth0_vlan: entered promiscuous mode [ 1519.140446][T10918] veth1_macvtap: entered promiscuous mode [ 1519.205821][T10938] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 1519.315815][T10942] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 1519.315838][T10942] rust_binder: Error while translating object. [ 1519.324597][T10942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1519.330812][T10942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 1520.066901][T26420] rust_binder: 10962: removing orphan mapping 0:4208 [ 1520.607351][ T330] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 1520.623297][ T330] hid-generic 0000:0000:0000.0097: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1520.841939][T10987] x_tables: duplicate underflow at hook 1 [ 1520.849904][T10987] rust_binder: Write failure EFAULT in pid:548 [ 1521.074665][T11008] rust_binder: Write failure EFAULT in pid:25 [ 1521.332750][ T330] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1521.503709][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1521.514904][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1521.524721][ T330] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1521.534104][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.542941][ T330] usb 3-1: config 0 descriptor?? [ 1521.809365][T11022] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 1521.809395][T11022] rust_binder: Error while translating object. [ 1521.820064][T11022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1521.826302][T11022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:563 [ 1521.836595][T11022] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1521.874645][T11027] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1522.012049][ T330] hid-steam 0003:28DE:1142.0098: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1522.085777][T11044] kvm: kvm [11043]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 1522.093090][ T330] hid-steam 0003:28DE:1142.0098: Steam wireless receiver connected [ 1522.095584][T11044] kvm: kvm [11043]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 1522.102425][ T330] hid-steam 0003:28DE:1142.0098: No HID_FEATURE_REPORT submitted - nothing to read [ 1522.136253][ T330] hid-steam 0003:28DE:1142.0099: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1522.301089][T11054] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1522.301124][T11054] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1522.308364][T11054] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1522.328189][T11063] rust_binder: Error while translating object. [ 1522.335594][T11063] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1522.342099][T11063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 1522.365429][T11065] rust_binder: 41: no such ref 2 [ 1522.379578][T11065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 1522.633536][T11077] tipc: Started in network mode [ 1522.647713][T11077] tipc: Node identity ac14142c, cluster identity 4711 [ 1522.655226][T11077] tipc: Enabling of bearer rejected, failed to enable media [ 1522.805136][T11080] tmpfs: Unknown parameter 'noinode32' [ 1522.862888][T11083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1522.862927][T11083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:56 [ 1523.250889][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24332'. [ 1523.272788][ T1387] usb 3-1: reset high-speed USB device number 95 using dummy_hcd [ 1523.420357][ T36] audit: type=1400 audit(2000000399.965:77250): avc: denied { mounton } for pid=11105 comm="syz.0.24334" path="/file0" dev="ramfs" ino=352969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1523.421279][T11106] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 1523.456285][T11106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65386 sclass=netlink_route_socket pid=11106 comm=syz.0.24334 [ 1523.570772][T11118] incfs: Error accessing: ./file0. [ 1523.574345][T11120] binder: Unknown parameter '00000000000000000000003QLo-(E?_ %c.s_krzV}YEBIh7[OƟ>7O4' [ 1523.576190][T11118] incfs: mount failed -20 [ 1523.711435][T11144] cgroup: Invalid name [ 1523.716881][T11144] cgroup: Invalid name [ 1523.736325][T11149] random: crng reseeded on system resumption [ 1523.743553][ T36] audit: type=1400 audit(2000000400.285:77251): avc: denied { write } for pid=11148 comm="syz.0.24347" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1523.766534][T11151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=11151 comm=syz.3.24348 [ 1523.831987][T11155] cgroup: Invalid name [ 1523.843845][T11155] rust_binder: Error while translating object. [ 1523.843905][T11155] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1523.850375][T11155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:91 [ 1523.916453][T11161] netlink: 80 bytes leftover after parsing attributes in process `syz.0.24352'. [ 1524.125428][T11168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:32 [ 1524.125845][T11168] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1524.153724][T11173] netlink: 'syz.2.24356': attribute type 63 has an invalid length. [ 1524.164439][T11173] netlink: 5 bytes leftover after parsing attributes in process `syz.2.24356'. [ 1524.173928][T11173] gretap0: entered allmulticast mode [ 1524.179542][T11173] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1524.195567][T11174] netlink: 'syz.2.24356': attribute type 63 has an invalid length. [ 1524.203961][T11174] netlink: 5 bytes leftover after parsing attributes in process `syz.2.24356'. [ 1524.242709][T11176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 1524.242771][T11176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:40 [ 1524.337335][T11178] 9pnet_fd: Insufficient options for proto=fd [ 1524.415681][T11184] rust_binder: Write failure EFAULT in pid:48 [ 1524.813804][T20797] bridge_slave_1: left allmulticast mode [ 1524.826130][T20797] bridge_slave_1: left promiscuous mode [ 1524.832524][T20797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.840401][T20797] bridge_slave_0: left allmulticast mode [ 1524.846751][T20797] bridge_slave_0: left promiscuous mode [ 1524.852481][T20797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.873139][ T330] usb 3-1: USB disconnect, device number 95 [ 1524.881976][ T330] hid-steam 0003:28DE:1142.0098: Steam wireless receiver disconnected [ 1524.913949][ T36] audit: type=1400 audit(2000000401.465:77252): avc: denied { remount } for pid=11199 comm="syz.0.24367" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1524.995329][T20797] veth1_macvtap: left promiscuous mode [ 1525.003421][T20797] veth0_vlan: left promiscuous mode [ 1525.091471][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24371'. [ 1525.176706][T11221] overlayfs: failed to clone upperpath [ 1525.192489][T11222] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 1525.192528][T11222] rust_binder: Error in use_page_slow: EFAULT [ 1525.208119][T11201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.208548][T11222] rust_binder: use_range failure EFAULT [ 1525.221981][T11222] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 1525.226182][T11201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.228131][T11222] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1525.243831][T11222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:582 [ 1525.249721][T11201] bridge_slave_0: entered allmulticast mode [ 1525.270314][T11201] bridge_slave_0: entered promiscuous mode [ 1525.276937][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24376'. [ 1525.286774][T11201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.295185][T11201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.308475][T11201] bridge_slave_1: entered allmulticast mode [ 1525.319431][T11201] bridge_slave_1: entered promiscuous mode [ 1525.363848][T11237] overlayfs: failed to clone upperpath [ 1525.448204][T20799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.455362][T20799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.481046][T20799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.488167][T20799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.508885][T11201] veth0_vlan: entered promiscuous mode [ 1525.530650][T11201] veth1_macvtap: entered promiscuous mode [ 1525.667463][T11270] random: crng reseeded on system resumption [ 1525.674278][T11264] rust_binder: 11263 RLIMIT_NICE not set [ 1525.674531][T11263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 1525.722952][T11272] rust_binder: 11272 RLIMIT_NICE not set [ 1525.735350][T11272] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 1525.741057][T11272] rust_binder: Failure BR_FAILED_REPLY { source: ENOMEM } during reply - delivering BR_FAILED_REPLY to sender. [ 1525.754146][ T330] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 1525.793223][T11272] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:6 [ 1525.800389][ T330] hid-generic 0000:0000:0000.009A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1525.816240][T26420] rust_binder: 11271: removing orphan mapping 0:1048 [ 1525.856670][T11288] rust_binder: Write failure EFAULT in pid:9 [ 1525.931897][T11302] overlayfs: conflicting options: userxattr,verity=require [ 1525.971319][T11302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:591 [ 1526.024204][T11298] fuse: Invalid rootmode [ 1526.038029][T11299] fuse: Invalid rootmode [ 1526.551600][T11352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 1526.551629][T11352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:596 [ 1526.587618][T11359] __vm_enough_memory: pid: 11359, comm: syz.6.24415, bytes: 18014402804453376 not enough memory for the allocation [ 1526.611564][T11359] __vm_enough_memory: pid: 11359, comm: syz.6.24415, bytes: 18014402804453376 not enough memory for the allocation [ 1526.623985][T11359] __vm_enough_memory: pid: 11359, comm: syz.6.24415, bytes: 18014402804453376 not enough memory for the allocation [ 1526.636517][T11359] __vm_enough_memory: pid: 11359, comm: syz.6.24415, bytes: 18014402804453376 not enough memory for the allocation [ 1526.648816][T11359] __vm_enough_memory: pid: 11359, comm: syz.6.24415, bytes: 18014402804453376 not enough memory for the allocation [ 1526.662236][T11359] __vm_enough_memory: pid: 11359, comm: syz.6.24415, bytes: 18014402804453376 not enough memory for the allocation [ 1526.683054][T11359] __vm_enough_memory: pid: 11359, comm: syz.6.24415, bytes: 18014402804453376 not enough memory for the allocation [ 1526.737174][T11365] pimreg: tun_chr_ioctl cmd 1074025677 [ 1526.742816][T11365] pimreg: linktype set to 778 [ 1526.748249][T11365] pimreg: tun_chr_ioctl cmd 1074025672 [ 1526.753834][T11365] pimreg: ignored: set checksum enabled [ 1527.913117][T11399] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 1528.183084][T11420] __vm_enough_memory: pid: 11420, comm: syz.4.24436, bytes: 18014402804453376 not enough memory for the allocation [ 1528.562649][ T330] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1528.734510][ T330] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1528.742811][ T330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.762254][ T330] usb 5-1: config 0 has no interface number 0 [ 1528.770062][ T330] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1528.781105][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.789220][ T330] usb 5-1: Product: syz [ 1528.793624][ T330] usb 5-1: Manufacturer: syz [ 1528.798325][ T330] usb 5-1: SerialNumber: syz [ 1528.803848][ T330] usb 5-1: config 0 descriptor?? [ 1528.917917][T11433] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1528.942644][T11433] overlayfs: missing 'lowerdir' [ 1529.014512][ T330] usb 5-1: USB disconnect, device number 72 [ 1529.160574][T11460] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1529.219937][T11467] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1529.295944][T11474] kvm: kvm [11473]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 1529.311253][T11474] kvm: kvm [11473]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 1529.597298][T11484] kvm: kvm [11483]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 1529.606163][T11484] kvm: kvm [11483]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 1530.546500][T11525] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1530.555073][T11525] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1530.566900][T11525] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1530.677771][T11534] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 1530.686103][T11534] rust_binder: Write failure EINVAL in pid:82 [ 1530.952491][T11553] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1530.967745][T11553] overlayfs: missing 'lowerdir' [ 1531.552729][T26421] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1531.702766][T26421] usb 5-1: Using ep0 maxpacket: 16 [ 1531.709188][T26421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1531.720548][T26421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1531.730621][T26421] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1531.743517][T26421] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1531.752694][T26421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.761455][T26421] usb 5-1: config 0 descriptor?? [ 1531.972384][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.6.24488'. [ 1531.984779][T11576] tipc: Enabling not permitted [ 1531.990377][T11576] tipc: Enabling of bearer rejected, failed to enable media [ 1532.168629][T26421] microsoft 0003:045E:07DA.009B: global environment stack underflow [ 1532.176782][T26421] microsoft 0003:045E:07DA.009B: item 0 4 1 11 parsing failed [ 1532.184788][T26421] microsoft 0003:045E:07DA.009B: parse failed [ 1532.191113][T26421] microsoft 0003:045E:07DA.009B: probe with driver microsoft failed with error -22 [ 1532.356620][T11589] netlink: 'syz.6.24492': attribute type 63 has an invalid length. [ 1532.364753][T11589] netlink: 5 bytes leftover after parsing attributes in process `syz.6.24492'. [ 1532.495167][T11608] 9pnet_fd: Insufficient options for proto=fd [ 1532.557309][T11622] vcan0: entered allmulticast mode [ 1532.723925][T11656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1532.724305][T11656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1532.731341][T11656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1532.738477][T11656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1532.738584][T11657] rust_binder: 104: no such ref 3 [ 1532.748513][T11656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1532.752377][T11657] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 1532.762346][T11656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1532.763823][T11657] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 1532.772448][T11656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1532.777218][T11657] rust_binder: Write failure EFAULT in pid:104 [ 1532.784547][T11656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1532.806004][T11656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1532.812937][T11656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1532.819621][T11656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1532.832660][T11656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1533.594139][T11736] netlink: 1 bytes leftover after parsing attributes in process `syz.6.24541'. [ 1533.850553][T11743] netlink: 104 bytes leftover after parsing attributes in process `syz.3.24543'. [ 1533.899397][T11749] overlayfs: failed to clone upperpath [ 1533.958047][T11755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1533.958087][T11755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:165 [ 1534.008173][ T36] audit: type=1400 audit(2000000410.555:77253): avc: denied { attach_queue } for pid=11757 comm="syz.0.24548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1534.042672][ T36] audit: type=1400 audit(2000000410.585:77254): avc: denied { accept } for pid=11757 comm="syz.0.24548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1534.128748][T11765] netlink: 'syz.0.24551': attribute type 2 has an invalid length. [ 1534.195679][T11774] /dev/rnullb0: Can't lookup blockdev [ 1534.216034][T11776] netlink: 'syz.6.24556': attribute type 64 has an invalid length. [ 1534.303881][ T6778] usb 5-1: USB disconnect, device number 73 [ 1534.562788][ T36] audit: type=1326 audit(2000000411.115:77255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.0.24565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f179f98eba9 code=0x0 [ 1534.714206][T11809] tipc: Trying to set illegal importance in message [ 1534.722552][T11809] tipc: Enabling of bearer rejected, failed to enable media [ 1535.344259][T11835] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 1535.824209][T11884] tmpfs: Bad value for 'nr_inodes' [ 1536.644517][ T36] audit: type=1326 audit(2000000413.195:77256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.6.24607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x0 [ 1536.668715][T11917] __vm_enough_memory: pid: 11917, comm: syz.0.24608, bytes: 18014402804453376 not enough memory for the allocation [ 1536.681412][T11918] __vm_enough_memory: pid: 11918, comm: syz.0.24608, bytes: 18014402804453376 not enough memory for the allocation [ 1536.771510][T11944] netlink: 'syz.3.24617': attribute type 32 has an invalid length. [ 1537.136127][T11952] netlink: 'syz.4.24620': attribute type 27 has an invalid length. [ 1537.603566][T11970] /dev/rnullb0: Can't lookup blockdev [ 1537.672795][T11978] overlayfs: failed to clone upperpath [ 1537.770689][T11982] can0: slcan on ttyS3. [ 1537.891942][T11982] can0 (unregistered): slcan off ttyS3. [ 1538.555794][T12017] overlay: ./file0 is not a directory [ 1538.759589][T12049] netlink: 'syz.3.24645': attribute type 4 has an invalid length. [ 1538.834435][T12051] netlink: 68 bytes leftover after parsing attributes in process `syz.3.24646'. [ 1538.844829][ T36] audit: type=1400 audit(2000000415.405:77257): avc: denied { lock } for pid=12050 comm="syz.3.24646" path="socket:[357654]" dev="sockfs" ino=357654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1539.157129][T12059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=12059 comm=syz.6.24649 [ 1539.324982][T12083] netlink: 'syz.6.24657': attribute type 40 has an invalid length. [ 1540.215117][T12114] overlayfs: missing 'lowerdir' [ 1540.364857][T12130] overlayfs: failed to clone upperpath [ 1541.682337][T12165] rust_binder: Error while translating object. [ 1541.682376][T12165] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1541.689008][T12165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:152 [ 1542.330731][ T36] audit: type=1400 audit(2000000418.875:77258): avc: denied { module_load } for pid=12191 comm="syz.4.24694" path="/54/file0" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1542.330740][T12192] Invalid ELF header len 1 [ 1542.387311][T12195] binder: Bad value for 'stats' [ 1542.419703][ T36] audit: type=1400 audit(2000000418.965:77259): avc: denied { map } for pid=12202 comm="syz.4.24697" path="socket:[358640]" dev="sockfs" ino=358640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1542.443601][T12203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177 [ 1542.700777][T12232] rust_binder: Read failure Err(EAGAIN) in pid:189 [ 1543.069953][ T36] audit: type=1326 audit(2000000419.615:77260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.3.24718" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa57e78eba9 code=0x0 [ 1543.130535][T12265] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1543.130561][T12265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:208 [ 1544.016954][T12315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1544.026342][T12315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222 [ 1544.100333][T12328] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1544.163509][T12331] rust_binder: 227: no such ref 3 [ 1544.175383][T12331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 1544.176012][T12331] rust_binder: Error while translating object. [ 1544.185286][T12331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1544.191749][T12331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 1544.240985][T12333] rust_binder: Error while translating object. [ 1544.250395][T12333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1544.257003][T12333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:229 [ 1544.350585][T12341] 9p: Unknown Cache mode or invalid value mmap2"뎀&g8CjG|X\v&V [ 1544.444335][T12355] netlink: 'syz.6.24751': attribute type 1 has an invalid length. [ 1544.465350][T12358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1544.472691][T12358] IPv6: NLM_F_CREATE should be set when creating new route [ 1544.479918][T12358] IPv6: NLM_F_CREATE should be set when creating new route [ 1544.488264][T12358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:234 [ 1544.503463][T12364] overlayfs: failed to clone upperpath [ 1544.519163][T12364] fuse: Bad value for 'fd' [ 1544.524079][T12365] fuse: Bad value for 'fd' [ 1544.651010][T12383] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24761'. [ 1544.725492][ T6778] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1544.859852][ T36] audit: type=1326 audit(2000000421.405:77261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1544.883855][ T36] audit: type=1326 audit(2000000421.405:77262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1544.892660][ T6778] usb 5-1: Using ep0 maxpacket: 8 [ 1544.914003][ T36] audit: type=1326 audit(2000000421.405:77263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1544.924626][ T6778] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1544.946136][ T6778] usb 5-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 1544.956766][ T6778] usb 5-1: config 1 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1544.967871][ T36] audit: type=1326 audit(2000000421.405:77264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1544.974888][ T6778] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1545.000623][ T36] audit: type=1326 audit(2000000421.405:77265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1545.014066][ T6778] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1545.042297][ T6778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.052723][ T6778] usb 5-1: Product: syz [ 1545.060468][ T36] audit: type=1326 audit(2000000421.405:77266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1545.070623][ T6778] usb 5-1: Manufacturer: syz [ 1545.099598][ T36] audit: type=1326 audit(2000000421.405:77267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1545.112432][ T6778] usb 5-1: SerialNumber: syz [ 1545.224111][T12416] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1546.035347][T12430] ip6_vti0: mtu less than device minimum [ 1547.332795][ T36] kauditd_printk_skb: 14993 callbacks suppressed [ 1547.332814][ T36] audit: type=1326 audit(2000000423.885:92261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1547.367180][ T36] audit: type=1326 audit(2000000423.915:92262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1547.391264][ T36] audit: type=1326 audit(2000000423.915:92263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1547.415155][ T36] audit: type=1326 audit(2000000423.915:92264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1547.428564][ T6778] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1547.441440][ T36] audit: type=1326 audit(2000000423.915:92265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1547.468184][ T6778] usb 5-1: USB disconnect, device number 74 [ 1547.484499][ T36] audit: type=1326 audit(2000000423.915:92266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1547.508542][ T36] audit: type=1326 audit(2000000423.915:92267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1547.538825][ T36] audit: type=1326 audit(2000000423.915:92268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1547.563820][ T36] audit: type=1326 audit(2000000423.915:92269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1547.588119][ T36] audit: type=1326 audit(2000000423.915:92270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12403 comm="syz.6.24766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0a98eba9 code=0x50000 [ 1548.037882][T12464] 9pnet_fd: Insufficient options for proto=fd [ 1548.057466][T12466] x_tables: duplicate entry at hook 2 [ 1548.386570][T12484] fuse: Bad value for 'fd' [ 1549.557436][T12558] overlayfs: failed to clone upperpath [ 1549.642408][T12571] 9pnet: Could not find request transport: xen [ 1549.878867][T12579] fuse: Bad value for 'fd' [ 1550.032273][T12598] netlink: 104 bytes leftover after parsing attributes in process `syz.0.24836'. [ 1551.272271][T12684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24859'. [ 1551.283439][T12684] overlayfs: failed to resolve './file0': -2 [ 1551.397354][T12698] overlayfs: failed to clone upperpath [ 1551.467455][T12702] netlink: 212 bytes leftover after parsing attributes in process `syz.6.24865'. [ 1552.131421][T12978] netlink: 'syz.4.24882': attribute type 30 has an invalid length. [ 1552.744235][T13023] veth0: entered promiscuous mode [ 1552.749930][T13023] !@: renamed from xfrm0 (while UP) [ 1552.757390][T13022] veth0: left promiscuous mode [ 1552.819555][T13031] fuseblk: Bad value for 'source' [ 1552.942511][T13053] overlayfs: failed to clone upperpath [ 1552.964032][T13056] netlink: 'syz.6.24913': attribute type 4 has an invalid length. [ 1552.985284][T13058] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1553.031109][T13066] tipc: Started in network mode [ 1553.036121][T13066] tipc: Node identity ac14142f, cluster identity 4711 [ 1553.043075][T13066] tipc: Enabling of bearer rejected, failed to enable media [ 1553.063700][T13069] overlayfs: failed to resolve './file0': -2 [ 1553.871915][ T36] kauditd_printk_skb: 2305 callbacks suppressed [ 1553.871941][ T36] audit: type=1326 audit(2000000430.415:94576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13118 comm="syz.0.24933" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f179f98eba9 code=0x0 [ 1554.454274][T13158] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1555.059490][T13238] netlink: 44 bytes leftover after parsing attributes in process `syz.3.24973'. [ 1555.183506][T13254] veth0_virt_wifi: entered allmulticast mode [ 1555.190106][T13252] veth0_virt_wifi: left allmulticast mode [ 1555.306035][T13264] 8021q: VLANs not supported on ip_vti0 [ 1556.037251][T13312] overlayfs: failed to resolve './file1': -2 [ 1556.187035][ T36] audit: type=1326 audit(2000000432.735:94577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13317 comm="syz.3.25001" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa57e78eba9 code=0x0 [ 1556.615320][T13330] netlink: 'syz.0.25005': attribute type 4 has an invalid length. [ 1557.044056][T13349] overlayfs: failed to clone upperpath [ 1557.810270][T13453] Invalid ELF header len 1 [ 1558.261678][T13475] overlayfs: failed to clone upperpath [ 1558.347152][T13489] netlink: 'syz.0.25060': attribute type 4 has an invalid length. [ 1558.357841][T13489] netlink: 'syz.0.25060': attribute type 4 has an invalid length. [ 1558.382196][T13497] x_tables: duplicate underflow at hook 1 [ 1558.601946][T13507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.834350][T13542] netlink: 'syz.0.25080': attribute type 29 has an invalid length. [ 1558.842318][T13542] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.25080'. [ 1558.880549][T13547] overlayfs: failed to clone lowerpath [ 1558.887037][T13547] overlayfs: failed to clone upperpath [ 1559.598064][T13594] 9pnet_fd: Insufficient options for proto=fd [ 1559.636304][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.25100'. [ 1559.646130][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.25100'. [ 1559.669252][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.25103'. [ 1559.690871][ T36] audit: type=1400 audit(2000000436.235:94578): avc: denied { setattr } for pid=13610 comm="syz.6.25104" name="/" dev="configfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1560.399287][T13674] overlay: filesystem on ./bus is read-only [ 1560.859037][T13702] netlink: 'syz.0.25137': attribute type 12 has an invalid length. [ 1560.878055][T13709] overlayfs: failed to clone upperpath [ 1561.046828][T13721] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.25145'. [ 1561.073976][T13724] netlink: 'syz.4.25146': attribute type 27 has an invalid length. [ 1561.512266][ T36] audit: type=1326 audit(2000000438.055:94579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13751 comm="syz.0.25156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f179f98eba9 code=0x0 [ 1561.823789][ T36] audit: type=1400 audit(2000000438.375:94580): avc: denied { map } for pid=13786 comm="syz.3.25168" path="socket:[361891]" dev="sockfs" ino=361891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1561.875505][T13795] overlayfs: failed to clone upperpath [ 1562.338532][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25180'. [ 1562.347679][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25180'. [ 1562.391151][T13825] netlink: 104 bytes leftover after parsing attributes in process `syz.0.25183'. [ 1562.436475][T13831] overlayfs: failed to clone lowerpath [ 1562.457728][T13831] netlink: 9 bytes leftover after parsing attributes in process `syz.0.25186'. [ 1562.467003][T13831] gretap0: entered promiscuous mode [ 1562.472778][T13831] netlink: 25 bytes leftover after parsing attributes in process `syz.0.25186'. [ 1562.481976][T13831] gretap0: left promiscuous mode [ 1562.487166][T13831] gretap0: entered allmulticast mode [ 1562.759130][ T36] audit: type=1326 audit(2000000439.305:94581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.3.25193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57e78eba9 code=0x7ffc0000 [ 1562.793011][ T36] audit: type=1326 audit(2000000439.305:94582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.3.25193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57e78eba9 code=0x7ffc0000 [ 1562.826386][ T36] audit: type=1326 audit(2000000439.335:94583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.3.25193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa57e78eba9 code=0x7ffc0000 [ 1562.850781][ T36] audit: type=1326 audit(2000000439.335:94584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.3.25193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa57e78eba9 code=0x7ffc0000 [ 1562.888427][ T36] audit: type=1326 audit(2000000439.335:94585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.3.25193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa57e78eba9 code=0x7ffc0000 [ 1562.897636][T13874] overlayfs: failed to clone upperpath [ 1562.913042][ T36] audit: type=1326 audit(2000000439.335:94586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.3.25193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa57e78eba9 code=0x7ffc0000 [ 1562.949352][ T36] audit: type=1326 audit(2000000439.335:94587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.3.25193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa57e78eba9 code=0x7ffc0000 [ 1563.027037][T13884] 9pnet_fd: Insufficient options for proto=fd [ 1563.035510][T13880] netlink: 5 bytes leftover after parsing attributes in process `syz.0.25203'. [ 1563.045098][T13880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1563.061120][T13886] veth0: entered allmulticast mode [ 1563.147464][T13882] veth0: left allmulticast mode [ 1563.175192][T13897] 9pnet_fd: Insufficient options for proto=fd [ 1563.257997][T13915] x_tables: duplicate underflow at hook 2 [ 1563.419921][T13932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13932 comm=syz.4.25223 [ 1563.556663][T13954] overlayfs: failed to clone upperpath [ 1564.107566][T13991] 9pnet_fd: Insufficient options for proto=fd [ 1564.657901][T14014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25250'. [ 1565.082215][T14040] 9pnet_fd: Insufficient options for proto=fd [ 1565.292753][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25261'. [ 1565.308075][T14043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14043 comm=syz.3.25261 [ 1565.762840][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.25286'. [ 1565.788023][T14118] overlayfs: failed to clone upperpath [ 1565.889310][T14127] overlayfs: failed to clone lowerpath [ 1565.896847][T14127] overlayfs: failed to clone lowerpath [ 1565.923869][T14132] VFS: Mount too revealing [ 1566.254374][T14155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=14155 comm=syz.3.25299 [ 1566.268201][T14155] netlink: 32 bytes leftover after parsing attributes in process `syz.3.25299'. [ 1566.627353][T14188] overlayfs: failed to clone lowerpath [ 1566.999158][T14216] netlink: 'syz.4.25318': attribute type 13 has an invalid length. [ 1567.020019][T14218] overlayfs: failed to clone upperpath [ 1567.303861][T14243] netlink: 36 bytes leftover after parsing attributes in process `syz.6.25330'. [ 1567.795661][T14271] 9pnet_fd: Insufficient options for proto=fd [ 1567.843144][T14283] overlayfs: failed to clone lowerpath [ 1567.852737][T14287] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1567.896573][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 1567.896592][ T36] audit: type=1400 audit(2000000444.445:94614): avc: denied { mount } for pid=14295 comm="syz.3.25350" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1567.943678][T14302] netlink: 20 bytes leftover after parsing attributes in process `syz.4.25351'. [ 1568.051735][T14328] overlayfs: failed to clone upperpath [ 1568.188504][T14339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=14339 comm=syz.4.25364 [ 1568.876482][ T36] audit: type=1326 audit(2000000445.425:94615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14376 comm="syz.0.25377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f179f98eba9 code=0x0 [ 1568.929086][ T36] audit: type=1400 audit(2000000445.475:94616): avc: denied { create } for pid=14380 comm="syz.6.25379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1569.033060][ T36] audit: type=1326 audit(2000000445.585:94617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14398 comm="syz.6.25385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf0a98eba9 code=0x0 [ 1569.033957][T14400] fuseblk: Bad value for 'fd' [ 1569.807772][T14441] cgroup: none used incorrectly [ 1570.432793][T14487] veth0_virt_wifi: entered allmulticast mode [ 1570.440454][T14486] veth0_virt_wifi: left allmulticast mode [ 1571.087065][T14526] overlayfs: failed to clone upperpath [ 1571.789578][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25439'. [ 1573.861808][T14660] overlayfs: failed to clone upperpath [ 1573.897932][T14662] fuse: Unknown parameter '00000000000000000005' [ 1573.902748][T14663] fuse: Unknown parameter '00000000000000000005' [ 1574.569286][T14721] netlink: 'syz.3.25501': attribute type 27 has an invalid length. [ 1574.630475][T14724] 9pnet_fd: Insufficient options for proto=fd [ 1574.643154][T14723] 9pnet_fd: Insufficient options for proto=fd [ 1574.667806][T14731] overlayfs: failed to resolve './file1': -2 [ 1575.069803][T14747] netlink: 104 bytes leftover after parsing attributes in process `syz.4.25512'. [ 1575.416014][T14755] netlink: 'syz.3.25516': attribute type 4 has an invalid length. [ 1575.424080][T14755] netlink: 17 bytes leftover after parsing attributes in process `syz.3.25516'. [ 1575.435501][T14756] netlink: 'syz.3.25516': attribute type 4 has an invalid length. [ 1575.443567][T14756] netlink: 17 bytes leftover after parsing attributes in process `syz.3.25516'. [ 1575.504008][ T36] audit: type=1400 audit(2000000452.055:94618): avc: denied { create } for pid=14752 comm="syz.6.25515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1575.639260][T14775] tipc: Started in network mode [ 1575.644282][T14775] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 1575.653744][T14775] tipc: Enabled bearer , priority 10 [ 1575.689849][T14783] netlink: 188 bytes leftover after parsing attributes in process `syz.4.25524'. [ 1575.714482][T14787] overlayfs: failed to clone upperpath [ 1575.867772][T14808] overlayfs: failed to clone upperpath [ 1576.493795][T14852] bridge0: port 3(veth0_macvtap) entered blocking state [ 1576.500797][T14852] bridge0: port 3(veth0_macvtap) entered disabled state [ 1576.508296][T14852] veth0_macvtap: entered allmulticast mode [ 1576.514743][T14852] veth0_macvtap: entered promiscuous mode [ 1576.520694][T14852] bridge0: port 3(veth0_macvtap) entered blocking state [ 1576.527717][T14852] bridge0: port 3(veth0_macvtap) entered forwarding state [ 1576.782666][ T8244] tipc: Node number set to 4269801494 [ 1576.990163][ T36] audit: type=1326 audit(2000000453.535:94619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14927 comm="syz.4.25570" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fe3f8eba9 code=0x0 [ 1577.201206][T14932] !@: renamed from xfrm0 (while UP) [ 1577.637377][ T36] audit: type=1400 audit(2000000454.185:94620): avc: denied { module_load } for pid=14947 comm="syz.3.25577" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=364963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 1577.668761][ T36] audit: type=1326 audit(2000000454.215:94621): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14947 comm="syz.3.25577" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa57e78eba9 code=0x0 [ 1578.264885][T14982] fuse: Unknown parameter 'euid<00000000000000000000' [ 1578.337232][T14995] netlink: 64 bytes leftover after parsing attributes in process `syz.6.25594'. [ 1578.426549][T15010] netlink: 37 bytes leftover after parsing attributes in process `syz.6.25600'. [ 1578.634547][T15024] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1579.164219][T15045] xt_NFQUEUE: number of total queues is 0 [ 1579.173088][ T36] audit: type=1326 audit(2000000455.725:94622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15044 comm="syz.0.25612" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f179f98eba9 code=0x0 [ 1579.267356][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25616'. [ 1579.437368][T15062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.444631][T15062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.451880][T15062] bridge_slave_0: entered allmulticast mode [ 1579.458515][T15062] bridge_slave_0: entered promiscuous mode [ 1579.465483][T15062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.472529][T15062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.479914][T15062] bridge_slave_1: entered allmulticast mode [ 1579.486630][T15062] bridge_slave_1: entered promiscuous mode [ 1579.546639][T15067] overlayfs: failed to clone lowerpath [ 1579.723428][T30194] bridge_slave_1: left allmulticast mode [ 1579.729219][T30194] bridge_slave_1: left promiscuous mode [ 1579.735457][T30194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.747727][T30194] bridge_slave_0: left allmulticast mode [ 1579.753569][T30194] bridge_slave_0: left promiscuous mode [ 1579.759516][T30194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.767173][ T36] audit: type=1326 audit(2000000456.325:94623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15071 comm="syz.4.25620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fe3f8eba9 code=0x0 [ 1579.856230][T15074] netlink: 'syz.6.25621': attribute type 12 has an invalid length. [ 1579.886616][T15062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.893769][T15062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1579.901089][T15062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.908173][T15062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1579.918655][T30194] tipc: Left network mode [ 1579.925057][T30194] veth1_macvtap: left promiscuous mode [ 1579.977163][T20799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.984769][T20799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.000732][T20798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.007878][T20798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1580.027056][T30199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.034169][T30199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1580.077978][T15062] veth0_vlan: entered promiscuous mode [ 1580.099277][T15062] veth1_macvtap: entered promiscuous mode [ 1580.674461][T15140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=15140 comm=syz.4.25638 [ 1580.713567][T15142] 9pnet_fd: Insufficient options for proto=fd [ 1581.265444][T15159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25643'. [ 1581.313505][T15165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25645'. [ 1581.473758][T15186] overlayfs: failed to clone upperpath [ 1581.479663][T15186] overlayfs: failed to clone upperpath [ 1581.485611][T15186] overlayfs: failed to clone upperpath [ 1581.491541][T15186] overlayfs: failed to clone upperpath [ 1581.503603][T15186] overlayfs: failed to clone upperpath [ 1581.518273][T15186] overlayfs: failed to clone upperpath [ 1581.533287][T15186] overlayfs: failed to clone upperpath [ 1581.539474][T15186] overlayfs: failed to clone upperpath [ 1581.553197][T15186] overlayfs: failed to clone upperpath [ 1581.559217][T15186] overlayfs: failed to clone upperpath [ 1581.566339][T15186] overlayfs: failed to clone upperpath [ 1581.575574][T15186] overlayfs: failed to clone upperpath [ 1581.583174][T15186] overlayfs: failed to clone upperpath [ 1581.589144][T15186] overlayfs: failed to clone upperpath [ 1581.595556][T15186] overlayfs: failed to clone upperpath [ 1581.602381][T15186] overlayfs: failed to clone upperpath [ 1581.614216][T15186] overlayfs: failed to clone upperpath [ 1581.620305][T15186] overlayfs: failed to clone upperpath [ 1581.628040][T15190] binder: Unknown parameter 'fscontext?}' [ 1581.634297][T15186] overlayfs: failed to clone upperpath [ 1581.640337][T15186] overlayfs: failed to clone upperpath [ 1581.646741][T15186] overlayfs: failed to clone upperpath [ 1581.659517][T15186] overlayfs: failed to clone upperpath [ 1581.667301][T15186] overlayfs: failed to clone upperpath [ 1581.679866][T15186] overlayfs: failed to clone upperpath [ 1581.687700][T15186] overlayfs: failed to clone upperpath [ 1581.695014][T15186] overlayfs: failed to clone upperpath [ 1581.701248][T15186] overlayfs: failed to clone upperpath [ 1581.712704][T15186] overlayfs: failed to clone upperpath [ 1581.724200][T15186] overlayfs: failed to clone upperpath [ 1581.730587][T15186] overlayfs: failed to clone upperpath [ 1581.738009][T15186] overlayfs: failed to clone upperpath [ 1581.744179][T15186] overlayfs: failed to clone upperpath [ 1581.828272][T15216] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=15216 comm=syz.4.25663 [ 1582.244981][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25667'. [ 1582.254666][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25667'. [ 1582.427177][T15239] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15239 comm=syz.4.25672 [ 1582.440311][T15239] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=15239 comm=syz.4.25672 [ 1582.831004][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.25677'. [ 1582.852143][T15263] 9pnet_fd: Insufficient options for proto=fd [ 1582.899256][T15270] netlink: 24 bytes leftover after parsing attributes in process `syz.6.25680'. [ 1583.430030][T15285] overlay: Unknown parameter 'appraise' [ 1583.687777][T15306] 9pnet_fd: p9_fd_create_unix (15306): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1583.976657][T15341] overlayfs: failed to resolve './file0': -2 [ 1583.994695][T30199] tipc: Subscription rejected, illegal request [ 1584.003965][T15344] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1584.058210][T15352] 9pnet_fd: Insufficient options for proto=fd [ 1584.458548][T15371] incfs: Error accessing: ./file0. [ 1584.463838][T15371] incfs: mount failed -20 [ 1584.730630][T15385] overlayfs: failed to resolve './file1': -2 [ 1584.753768][T15387] rust_binder: Write failure EFAULT in pid:33 [ 1584.892098][ T36] audit: type=1107 audit(2000000002.630:94624): pid=15403 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1585.458327][T15447] netlink: 'syz.3.25741': attribute type 4 has an invalid length. [ 1585.466502][T15447] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.25741'. [ 1585.632165][T15473] veth0_virt_wifi: entered allmulticast mode [ 1585.638939][T15472] veth0_virt_wifi: left allmulticast mode [ 1585.673566][T15477] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1585.682185][T15477] netlink: 88 bytes leftover after parsing attributes in process `syz.4.25753'. [ 1586.616870][T15548] sit0: entered promiscuous mode [ 1586.623890][T15548] netlink: 'syz.4.25781': attribute type 1 has an invalid length. [ 1586.631729][T15548] netlink: 1 bytes leftover after parsing attributes in process `syz.4.25781'. [ 1586.672720][T15556] cgroup: subsys name conflicts with all [ 1587.375829][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25808'. [ 1587.651093][T15641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25815'. [ 1587.660226][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25815'. [ 1588.548506][T15666] binder: Bad value for 'defcontext' [ 1588.665024][T15677] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1588.738720][T15682] kvm: kvm [15681]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 1588.751198][T15682] kvm: kvm [15681]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 1588.763152][T15694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15694 comm=syz.0.25832 [ 1588.854431][ T36] audit: type=1326 audit(2000000006.600:94625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.3.25836" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86ea38eba9 code=0x0 [ 1588.954983][T15710] netlink: 68 bytes leftover after parsing attributes in process `syz.3.25836'. [ 1588.966074][T15710] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1589.368150][T15726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=15726 comm=syz.4.25842 [ 1589.521022][T15760] netlink: 272 bytes leftover after parsing attributes in process `syz.4.25853'. [ 1589.725061][T15768] kvm: kvm [15767]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 1589.738003][T15768] kvm: kvm [15767]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 1590.003888][T15782] /dev/rnullb0: Can't lookup blockdev [ 1590.131401][T15789] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 1590.139223][T15789] rust_binder: Write failure EINVAL in pid:89 [ 1590.142851][T15789] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 1590.161763][T15789] rust_binder: Write failure EINVAL in pid:89 [ 1590.167109][T15789] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1590.305076][T15794] rust_binder: Error while translating object. [ 1590.305123][T15794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1590.311404][T15794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 1590.437184][T15805] kvm: kvm [15804]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 1590.455541][T15805] kvm: kvm [15804]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 1590.549138][T15817] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 1591.279602][T15851] netlink: 44 bytes leftover after parsing attributes in process `syz.0.25886'. [ 1591.297011][T15851] netlink: 'syz.0.25886': attribute type 6 has an invalid length. [ 1591.306008][T15851] netlink: 'syz.0.25886': attribute type 5 has an invalid length. [ 1591.314320][T15851] netlink: 'syz.0.25886': attribute type 4 has an invalid length. [ 1591.351508][T15856] fuse: Bad value for 'fd' [ 1591.403790][T15865] netlink: 32 bytes leftover after parsing attributes in process `syz.3.25890'. [ 1591.765698][ T9] rust_binder: 15891: removing orphan mapping 0:24 [ 1591.934093][T15903] netlink: 'syz.3.25900': attribute type 64 has an invalid length. [ 1591.954639][T15903] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1592.677287][T15929] random: crng reseeded on system resumption [ 1592.918427][T15944] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 1593.184671][T15969] fuse: Unknown parameter 'rootmode00000000000000000060000' [ 1593.823718][T16007] netlink: 44 bytes leftover after parsing attributes in process `syz.4.25938'. [ 1593.823968][T16008] netlink: 44 bytes leftover after parsing attributes in process `syz.4.25938'. [ 1595.053273][T16033] fuse: Bad value for 'group_id' [ 1595.058392][T16033] fuse: Bad value for 'group_id' [ 1595.152791][ T36] audit: type=1326 audit(2000000012.900:94626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16040 comm="syz.4.25948" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3f8eba9 code=0x0 [ 1595.251030][T16058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25953'. [ 1595.260304][T16059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25953'. [ 1595.377491][T16061] overlayfs: failed to clone upperpath [ 1595.467732][ T36] audit: type=1326 audit(2000000013.210:94627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16063 comm="syz.4.25955" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fe3f8eba9 code=0x0 [ 1595.711369][T16069] overlayfs: failed to clone upperpath [ 1596.022812][T16073] netlink: 72 bytes leftover after parsing attributes in process `syz.6.25959'. [ 1596.111174][ T36] audit: type=1400 audit(2000000013.850:94628): avc: denied { search } for pid=16086 comm="syz.3.25964" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1596.139286][ T36] audit: type=1400 audit(2000000013.880:94629): avc: denied { read } for pid=16086 comm="syz.3.25964" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1596.161633][ T36] audit: type=1400 audit(2000000013.880:94630): avc: denied { open } for pid=16086 comm="syz.3.25964" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1596.184164][ T36] audit: type=1400 audit(2000000013.880:94631): avc: denied { write } for pid=16086 comm="syz.3.25964" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1596.334441][T16122] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 1596.687722][T16138] rust_binder: Error while translating object. [ 1596.695895][T16138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 1596.702101][T16138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:175 [ 1596.723995][T16140] rust_binder: Write failure EFAULT in pid:177 [ 1596.774784][T16144] fuse: Unknown parameter '*ĢXSm' [ 1605.913414][T16173] overlayfs: failed to clone lowerpath [ 1605.920968][T16174] overlayfs: failed to clone upperpath [ 1605.940185][ T36] audit: type=1326 audit(2000000023.680:94632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16178 comm="syz.6.25999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf0a98eba9 code=0x0 [ 1605.998261][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26003'. [ 1606.008477][T16196] overlayfs: failed to clone upperpath [ 1606.721246][T16243] overlayfs: missing 'lowerdir' [ 1607.693434][T16275] fuse: Unknown parameter 'growp_id9p6ˌt;g?}J[K00000000000000000000' [ 1607.892408][T16289] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1607.902889][T16289] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 1607.925910][T16295] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16295 comm=syz.4.26037 [ 1607.966436][T16300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26038'. [ 1608.504027][T16324] netlink: 'syz.6.26047': attribute type 2 has an invalid length. [ 1609.168040][T16364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.26062'. [ 1609.213565][T16374] netlink: 100 bytes leftover after parsing attributes in process `syz.0.26065'. [ 1609.223834][T16374] netlink: 100 bytes leftover after parsing attributes in process `syz.0.26065'. [ 1609.550162][T16404] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1609.559816][T16404] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1609.610145][T16413] 9pnet_fd: Insufficient options for proto=fd [ 1609.627587][T16416] overlay: Unknown parameter 'hash' [ 1609.816206][ T36] audit: type=1326 audit(2000000027.560:94633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.4.26074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3f8eba9 code=0x7fc00000 [ 1609.876193][T16426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.884438][ T36] audit: type=1326 audit(2000000027.560:94634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.4.26074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3f8eba9 code=0x7fc00000 [ 1609.910708][T16426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.923123][T16426] bridge_slave_0: entered allmulticast mode [ 1609.937749][T16426] bridge_slave_0: entered promiscuous mode [ 1609.947113][T16426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.954843][T16426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.972680][T16426] bridge_slave_1: entered allmulticast mode [ 1609.979240][T16426] bridge_slave_1: entered promiscuous mode [ 1610.083620][T16426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.090758][T16426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1610.098204][T16426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.105282][T16426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1610.128741][T16462] tipc: New replicast peer: 0.0.0.0 [ 1610.135088][T16462] tipc: Enabled bearer , priority 10 [ 1610.353252][T16462] tipc: New replicast peer: 255.255.255.255 [ 1610.360292][T30194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.368118][T30194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.376536][T20798] veth0_macvtap: left allmulticast mode [ 1610.382237][T20798] veth0_macvtap: left promiscuous mode [ 1610.388103][T20798] bridge0: port 3(veth0_macvtap) entered disabled state [ 1610.395564][T20798] bridge_slave_1: left allmulticast mode [ 1610.401238][T20798] bridge_slave_1: left promiscuous mode [ 1610.407183][T20798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.415273][T20798] bridge_slave_0: left allmulticast mode [ 1610.420931][T20798] bridge_slave_0: left promiscuous mode [ 1610.426686][T20798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.488684][T30194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.495800][T30194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1610.505206][T30199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.512320][T30199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1610.536478][T20798] tipc: Left network mode [ 1610.555281][T16426] veth0_vlan: entered promiscuous mode [ 1610.571005][T16426] veth1_macvtap: entered promiscuous mode [ 1610.604594][T20798] veth1_macvtap: left promiscuous mode [ 1610.612695][T20798] veth0_vlan: left promiscuous mode [ 1610.633658][ T36] audit: type=1326 audit(2000000028.380:94635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.6.26080" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5b618eba9 code=0x0 [ 1610.706714][T20798] vcan0 (unregistering): left allmulticast mode [ 1610.756853][T16492] input: syz0 as /devices/virtual/input/input96 [ 1610.765507][T16492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1610.765571][T16492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2 [ 1611.048694][T16508] 9pnet_fd: Insufficient options for proto=fd [ 1611.490386][T16550] 9pnet_fd: Insufficient options for proto=fd [ 1611.811661][T16564] netlink: 40 bytes leftover after parsing attributes in process `syz.6.26116'. [ 1611.874789][T16568] rust_binder: Error while translating object. [ 1611.874835][T16568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1611.881223][T16568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:21 [ 1612.040179][ T36] audit: type=1400 audit(2000000029.780:94636): avc: denied { watch } for pid=16569 comm="syz.3.26118" path="pipe:[371257]" dev="pipefs" ino=371257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1612.268608][T16596] netlink: 152 bytes leftover after parsing attributes in process `syz.0.26127'. [ 1612.387897][T16588] tmpfs: Unknown parameter './file0' [ 1613.023315][ T36] audit: type=1400 audit(2000000030.770:94637): avc: denied { remount } for pid=16607 comm="syz.3.26130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1613.056728][T16610] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 1613.067900][T16613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1613.077124][T16613] netlink: 57 bytes leftover after parsing attributes in process `syz.3.26132'. [ 1613.093517][T16612] rust_binder: Error while translating object. [ 1613.093550][T16612] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1613.099955][T16612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:214 [ 1613.278606][T16623] rust_binder: validate_parent_fixup: fixup_min_offset=18, parent_offset=12 [ 1613.287899][T16623] rust_binder: Error while translating object. [ 1613.296882][T16623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1613.303317][T16623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 1614.103380][ T36] audit: type=1326 audit(2000000031.850:94638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16647 comm="syz.4.26139" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fe3f8eba9 code=0x0 [ 1614.231810][T16654] tipc: Enabling of bearer rejected, already enabled [ 1614.285661][T16663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 1614.437213][T16666] /dev/rnullb0: Can't lookup blockdev [ 1614.465486][T16668] incfs: Options parsing error. -22 [ 1614.470829][T16668] incfs: mount failed -22 [ 1614.615503][T16671] fuse: Unknown parameter '' [ 1614.974267][ T6778] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 1614.992932][ T6778] hid-generic 0000:0000:0000.009C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1615.091706][T16694] netlink: 'syz.6.26154': attribute type 1 has an invalid length. [ 1615.392941][T16714] overlayfs: failed to clone upperpath [ 1615.482894][T16717] fuse: Bad value for 'user_id' [ 1615.487975][T16717] fuse: Bad value for 'user_id' [ 1615.908793][T16752] sit0: entered promiscuous mode [ 1615.927625][T16752] netlink: 'syz.0.26172': attribute type 1 has an invalid length. [ 1615.947014][T16752] netlink: 'syz.0.26172': attribute type 3 has an invalid length. [ 1616.216564][T16775] tipc: Started in network mode [ 1616.221596][T16775] tipc: Node identity 4, cluster identity 4711 [ 1616.238095][T16775] tipc: Node number set to 4 [ 1616.248965][T13110] tipc: Subscription rejected, illegal request [ 1616.373920][T16776] rust_binder: Failed to allocate buffer. len:4232, is_oneway:true [ 1616.373957][T16776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 1616.392187][T16776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:256 [ 1618.244592][ T36] audit: type=1107 audit(2000000035.990:94639): pid=16851 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1619.324935][T16882] sit0: entered promiscuous mode [ 1619.331150][T16882] netlink: 'syz.3.26215': attribute type 1 has an invalid length. [ 1619.339233][T16882] netlink: 1 bytes leftover after parsing attributes in process `syz.3.26215'. [ 1619.349508][T16882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16882 comm=syz.3.26215 [ 1619.554899][T16892] netlink: 36 bytes leftover after parsing attributes in process `syz.3.26218'. [ 1619.652229][T16899] overlayfs: missing 'lowerdir' [ 1619.710276][T16903] .N: renamed from veth0_to_bond (while UP) [ 1620.564972][ T36] audit: type=1326 audit(2000000038.310:94640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16915 comm="syz.4.26227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3f8eba9 code=0x7ff00000 [ 1620.588974][ T36] audit: type=1326 audit(2000000038.310:94641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16915 comm="syz.4.26227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3f8eba9 code=0x7ff00000 [ 1620.613468][ T36] audit: type=1326 audit(2000000038.310:94642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16915 comm="syz.4.26227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3f8eba9 code=0x7ff00000 [ 1620.637297][ T36] audit: type=1326 audit(2000000038.310:94643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16915 comm="syz.4.26227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3f8eba9 code=0x7ff00000 [ 1620.661237][ T36] audit: type=1326 audit(2000000038.310:94644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16915 comm="syz.4.26227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3f8eba9 code=0x7ff00000 [ 1620.685330][ T36] audit: type=1326 audit(2000000038.310:94645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16915 comm="syz.4.26227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3f8eba9 code=0x7ff00000 [ 1620.688597][T16917] batadv_slave_0: entered promiscuous mode [ 1620.709316][ T36] audit: type=1326 audit(2000000038.310:94646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16915 comm="syz.4.26227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3f8eba9 code=0x7ff00000 [ 1620.719472][T16917] batadv_slave_0: left promiscuous mode [ 1620.739304][ T36] audit: type=1326 audit(2000000038.310:94647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16915 comm="syz.4.26227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3f8eba9 code=0x7ff00000 [ 1620.768470][ T36] audit: type=1326 audit(2000000038.310:94648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16915 comm="syz.4.26227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3f8eba9 code=0x7ff00000 [ 1620.893074][T16920] x_tables: duplicate underflow at hook 1 [ 1620.944276][T16925] SELinux: Context /usr/sbin/cupsd is not valid (left unmapped). [ 1620.986381][T16933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26233'. [ 1620.996194][T16933] overlayfs: failed to clone upperpath [ 1621.195202][T16936] 9pnet: p9_errstr2errno: server reported unknown error ottle.io_service_bytes_recursive [ 1621.227145][T16936] rust_binder: inc_ref_done called when no active inc_refs [ 1621.335673][T16956] 9pnet_fd: Insufficient options for proto=fd [ 1621.368986][T16960] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 140) [ 1621.369017][T16960] rust_binder: Error while translating object. [ 1621.380005][T16960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1621.388463][T16960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 1621.398698][T16960] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1621.689616][T16984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26251'. [ 1622.150598][T17004] /dev/rnullb0: Can't lookup blockdev [ 1622.164285][T17004] /dev/rnullb0: Can't lookup blockdev [ 1622.186912][T17007] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1622.194954][ T331] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1622.202867][ T331] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1622.210504][ T331] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1622.218413][ T331] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1622.226450][ T331] rtc rtc0: __rtc_set_alarm: err=-22 [ 1622.307467][T17016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 1622.622666][T17064] overlayfs: failed to clone upperpath [ 1622.719363][T17073] 9pnet_fd: Insufficient options for proto=fd [ 1623.354427][T17087] netlink: 32 bytes leftover after parsing attributes in process `syz.4.26281'. [ 1623.549116][T17107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.26287'. [ 1624.553867][T17164] netlink: 'syz.0.26307': attribute type 1 has an invalid length. [ 1624.561937][T17164] netlink: 9 bytes leftover after parsing attributes in process `syz.0.26307'. [ 1624.571372][T17160] netlink: 'syz.0.26307': attribute type 1 has an invalid length. [ 1624.579839][T17160] netlink: 9 bytes leftover after parsing attributes in process `syz.0.26307'. [ 1624.625001][T17171] bridge0: port 3(syz_tun) entered blocking state [ 1624.631467][T17171] bridge0: port 3(syz_tun) entered disabled state [ 1624.638211][T17171] syz_tun: entered allmulticast mode [ 1624.644463][T17171] syz_tun: entered promiscuous mode [ 1624.649794][T17171] bridge0: port 3(syz_tun) entered blocking state [ 1624.656513][T17171] bridge0: port 3(syz_tun) entered forwarding state [ 1624.671490][T17171] netlink: 'syz.6.26310': attribute type 1 has an invalid length. [ 1624.679947][T17171] netlink: 164 bytes leftover after parsing attributes in process `syz.6.26310'. [ 1626.184983][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 1626.185004][ T36] audit: type=1400 audit(2000000044.934:94714): avc: denied { append } for pid=17222 comm="syz.3.26329" name="pfkey" dev="proc" ino=4026534106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1626.320701][ T36] audit: type=1400 audit(2000000045.064:94715): avc: denied { write } for pid=17226 comm="syz.3.26331" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1627.641801][T17253] netlink: 37 bytes leftover after parsing attributes in process `syz.4.26340'. [ 1627.760953][ T36] audit: type=1400 audit(2000000046.504:94716): avc: denied { write } for pid=17271 comm="syz.4.26345" name="kvm" dev="tmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="/usr/sbin/cupsd" [ 1628.009956][T17285] overlayfs: failed to clone lowerpath [ 1628.109302][T17289] netlink: 16 bytes leftover after parsing attributes in process `syz.6.26352'. [ 1628.508796][T17299] overlayfs: failed to clone upperpath [ 1628.539594][T17303] overlayfs: failed to clone upperpath [ 1629.202260][T17334] fuse: Unknown parameter '~g;o|4kN' [ 1629.497497][T17364] overlayfs: failed to clone upperpath [ 1629.616474][T17373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=101 sclass=netlink_tcpdiag_socket pid=17373 comm=syz.6.26383 [ 1629.703939][T17381] netlink: 56 bytes leftover after parsing attributes in process `syz.6.26386'. [ 1629.793273][T17386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46098 sclass=netlink_route_socket pid=17386 comm=syz.6.26388 [ 1629.806641][T17386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=17386 comm=syz.6.26388 [ 1630.126981][ T36] audit: type=1326 audit(2000000048.874:94717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17398 comm="syz.6.26392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5b618eba9 code=0x0 [ 1630.985692][T17426] netlink: 24 bytes leftover after parsing attributes in process `syz.6.26401'. [ 1631.314674][T17433] netlink: 'syz.4.26403': attribute type 16 has an invalid length. [ 1631.322909][T17433] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.26403'. [ 1631.426072][T17445] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1631.437928][T17446] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1631.449651][T17446] overlayfs: missing 'lowerdir' [ 1631.452643][T17445] overlayfs: missing 'lowerdir' [ 1631.570017][T17474] netlink: 28 bytes leftover after parsing attributes in process `syz.6.26417'. [ 1632.503568][T17503] netlink: 'syz.4.26426': attribute type 4 has an invalid length. [ 1632.511670][T17503] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.26426'. [ 1632.574405][T17507] netlink: 'syz.6.26428': attribute type 4 has an invalid length. [ 1632.642788][T17515] overlayfs: failed to clone lowerpath [ 1632.777995][T17525] overlayfs: failed to clone upperpath [ 1632.830348][T17521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.842632][T17521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.849904][T17521] bridge_slave_0: entered allmulticast mode [ 1632.856405][T17521] bridge_slave_0: entered promiscuous mode [ 1632.882821][T17521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.889931][T17521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.897476][T17521] bridge_slave_1: entered allmulticast mode [ 1632.903819][T17521] bridge_slave_1: entered promiscuous mode [ 1632.952104][ T36] audit: type=1326 audit(2000000051.694:94718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17537 comm="syz.0.26439" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f179f98eba9 code=0x0 [ 1633.000379][T17521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.007518][T17521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.014875][T17521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.021945][T17521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.048719][T30194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.057550][T30194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.068465][T20798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.075571][T20798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.085033][T30194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.092101][T30194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.347643][T13110] bridge_slave_1: left allmulticast mode [ 1633.353418][T13110] bridge_slave_1: left promiscuous mode [ 1633.359253][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.367030][T13110] bridge_slave_0: left allmulticast mode [ 1633.372796][T13110] bridge_slave_0: left promiscuous mode [ 1633.378496][T13110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.460031][T17521] veth0_vlan: entered promiscuous mode [ 1633.473119][T17521] veth1_macvtap: entered promiscuous mode [ 1633.488333][T13110] tipc: Disabling bearer [ 1633.493938][T13110] tipc: Disabling bearer [ 1633.499392][T13110] tipc: Left network mode [ 1633.553877][T17561] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1633.561057][T17561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 1633.578894][ T36] audit: type=1326 audit(2000000052.324:94719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.26443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92c18eba9 code=0x7ffc0000 [ 1633.624592][T13110] veth1_macvtap: left promiscuous mode [ 1633.642764][ T36] audit: type=1326 audit(2000000052.324:94720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.26443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92c18eba9 code=0x7ffc0000 [ 1633.674996][T17569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17569 comm=syz.6.26444 [ 1633.687834][ T36] audit: type=1326 audit(2000000052.354:94721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.26443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc92c18eba9 code=0x7ffc0000 [ 1633.691432][T17566] fuse: Bad value for 'fd' [ 1633.744241][ T36] audit: type=1326 audit(2000000052.354:94722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.26443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92c18eba9 code=0x7ffc0000 [ 1633.774809][ T36] audit: type=1326 audit(2000000052.354:94723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.26443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc92c190ac7 code=0x7ffc0000 [ 1633.804690][ T36] audit: type=1326 audit(2000000052.354:94724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.26443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc92c190a3c code=0x7ffc0000 [ 1633.837441][ T36] audit: type=1326 audit(2000000052.364:94725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.26443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc92c190974 code=0x7ffc0000 [ 1633.863928][ T36] audit: type=1326 audit(2000000052.364:94726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.26443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc92c190974 code=0x7ffc0000 [ 1633.888137][ T36] audit: type=1326 audit(2000000052.364:94727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.26443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc92c18d80a code=0x7ffc0000 [ 1633.971926][T17586] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1633.971958][T17586] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.006005][T17596] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1634.218394][T17607] rust_binder: 17606 RLIMIT_NICE not set [ 1634.234182][T17609] rust_binder: Write failure EFAULT in pid:36 [ 1634.262502][T17611] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1634.333213][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.333245][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.350468][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.359501][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.382673][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.389196][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.395862][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.402632][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.402868][T17628] netlink: 44 bytes leftover after parsing attributes in process `syz.0.26461'. [ 1634.409259][T17625] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.426120][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.432865][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.439474][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.447046][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.453811][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.460629][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.479480][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.487816][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.494802][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.501453][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.511497][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.519467][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.526574][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.533960][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.541047][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.548117][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.555413][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.562116][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.569287][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.576029][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.582726][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.589539][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.597768][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.604346][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.610803][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.617326][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.623810][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.630247][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.637252][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.643904][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.650532][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.658674][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.665439][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.675537][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.684881][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.691412][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.698486][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.705376][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.711869][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.718550][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.731108][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.741920][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.755571][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.762067][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.772612][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.781721][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.788715][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.796025][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.804545][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.811822][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.818858][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.821201][T17660] fuse: Bad value for 'fd' [ 1634.826321][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.837275][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.844384][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.850988][T17658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17658 comm=syz.6.26475 [ 1634.851043][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.871192][T17624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1634.992299][T17671] !@: renamed from xfrm0 (while UP) [ 1635.374063][T17682] netlink: 68 bytes leftover after parsing attributes in process `syz.4.26485'. [ 1636.049556][T17713] tmpfs: Unknown parameter '01777777777777777777777' [ 1636.229185][T17740] netlink: 'syz.4.26503': attribute type 22 has an invalid length. [ 1636.361880][T17755] overlayfs: failed to clone upperpath [ 1636.653787][T17761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.660896][T17761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.668026][T17761] bridge_slave_0: entered allmulticast mode [ 1636.674706][T17761] bridge_slave_0: entered promiscuous mode [ 1636.687434][T17761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.694639][T17761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.701759][T17761] bridge_slave_1: entered allmulticast mode [ 1636.708198][T17761] bridge_slave_1: entered promiscuous mode [ 1636.765006][T17761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.772069][T17761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1636.779462][T17761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.786560][T17761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1636.812857][T13110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.821888][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.836162][T13110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.843282][T13110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1636.856254][T20798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.863369][T20798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1636.868438][T17781] overlayfs: failed to clone upperpath [ 1636.903304][T17761] veth0_vlan: entered promiscuous mode [ 1636.918630][T17761] veth1_macvtap: entered promiscuous mode [ 1636.933854][T17791] fuse: Unknown parameter 'c).QMO;r$b'a\xdQPJ#' [ 1637.109778][T17810] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 1637.166199][T17814] rust_binder: Write failure EFAULT in pid:9 [ 1637.198426][T17820] rust_binder: 11: no such ref 0 [ 1637.209859][T17820] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1637.217640][T17820] rust_binder: 11: no such ref 0 [ 1637.443308][T30199] bridge_slave_1: left allmulticast mode [ 1637.449371][T30199] bridge_slave_1: left promiscuous mode [ 1637.455321][T30199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.463076][T30199] bridge_slave_0: left allmulticast mode [ 1637.468764][T30199] bridge_slave_0: left promiscuous mode [ 1637.474488][T30199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.626283][T17847] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1637.662719][T30199] tipc: Left network mode [ 1637.784968][T30199] veth1_macvtap: left promiscuous mode [ 1637.790848][T30199] veth0_vlan: left promiscuous mode [ 1638.245803][T17872] overlayfs: failed to clone upperpath [ 1638.271390][T17873] rust_binder: Error while translating object. [ 1638.271420][T17873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 1638.277904][T17873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:336 [ 1638.598406][T17899] netlink: 68 bytes leftover after parsing attributes in process `syz.4.26553'. [ 1639.069069][T17934] netlink: 64 bytes leftover after parsing attributes in process `syz.3.26566'. [ 1640.285496][T17984] fuse: Bad value for 'fd' [ 1641.151079][T17996] overlayfs: failed to clone upperpath [ 1641.462003][T18046] fuse: Bad value for 'fd' [ 1641.504122][T18050] fuse: Unknown parameter '_' [ 1642.246270][T18056] devpts: called with bogus options [ 1642.251814][T18056] devpts: called with bogus options [ 1642.257555][T18056] devpts: called with bogus options [ 1642.262998][T18056] devpts: called with bogus options [ 1642.268452][T18056] devpts: called with bogus options [ 1642.274287][T18056] devpts: called with bogus options [ 1642.279621][T18056] devpts: called with bogus options [ 1642.285094][T18056] devpts: called with bogus options [ 1642.290411][T18056] devpts: called with bogus options [ 1642.295915][T18056] devpts: called with bogus options [ 1642.301273][T18056] devpts: called with bogus options [ 1642.306741][T18056] devpts: called with bogus options [ 1642.312051][T18056] devpts: called with bogus options [ 1642.317508][T18056] devpts: called with bogus options [ 1642.322900][T18056] devpts: called with bogus options [ 1642.328261][T18056] devpts: called with bogus options [ 1642.339178][T18056] devpts: called with bogus options [ 1642.344916][T18056] devpts: called with bogus options [ 1642.350572][T18056] devpts: called with bogus options [ 1642.356225][T18056] devpts: called with bogus options [ 1642.361975][T18056] devpts: called with bogus options [ 1642.367642][T18056] devpts: called with bogus options [ 1642.373206][T18056] devpts: called with bogus options [ 1642.378577][T18056] devpts: called with bogus options [ 1642.384011][T18056] devpts: called with bogus options [ 1642.389385][T18056] devpts: called with bogus options [ 1642.394884][T18056] devpts: called with bogus options [ 1642.400263][T18056] devpts: called with bogus options [ 1642.405780][T18056] devpts: called with bogus options [ 1642.411106][T18056] devpts: called with bogus options [ 1642.416906][T18056] devpts: called with bogus options [ 1642.422302][T18056] devpts: called with bogus options [ 1642.427740][T18056] devpts: called with bogus options [ 1642.502891][T18065] netlink: 56 bytes leftover after parsing attributes in process `syz.6.26610'. [ 1642.512753][T18065] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26610'. [ 1642.522730][T18065] netlink: 31 bytes leftover after parsing attributes in process `syz.6.26610'. [ 1642.532101][T18065] netlink: 'syz.6.26610': attribute type 3 has an invalid length. [ 1642.540112][T18065] netlink: 'syz.6.26610': attribute type 2 has an invalid length. [ 1642.548090][T18065] netlink: 31 bytes leftover after parsing attributes in process `syz.6.26610'. [ 1642.557712][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 1642.557729][ T36] audit: type=1107 audit(2000000061.302:94736): pid=18064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1642.601118][T18067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18067 comm=syz.4.26611 [ 1643.110086][ T36] audit: type=1326 audit(2000000061.852:94737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18083 comm="syz.6.26617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5b618eba9 code=0x0 [ 1643.310994][T18086] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 1643.311018][T18086] rust_binder: Error while translating object. [ 1643.323383][T18086] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1643.329583][T18086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 1643.380548][T18088] rust_binder: Error in use_page_slow: ESRCH [ 1643.389876][T18088] rust_binder: use_range failure ESRCH [ 1643.396126][T18088] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 1643.402085][T18088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1643.410153][T18088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:21 [ 1645.815377][T18143] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1646.476622][T18201] overlayfs: failed to resolve './file0': -2 [ 1646.514017][T18210] rust_binder: 18210 RLIMIT_NICE not set [ 1646.627558][ T8244] rust_binder: 0: removing orphan mapping 0:1024 [ 1646.716779][T18243] /dev/rnullb0: Can't lookup blockdev [ 1646.722772][T18243] /dev/rnullb0: Can't lookup blockdev [ 1646.809138][T18248] rust_binder: 41: no such ref 3 [ 1646.814403][T18248] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 1646.821499][T18248] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 1646.828734][T18248] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1646.835829][T18248] rust_binder: 41: no such ref 0 [ 1647.704009][T18274] tipc: Started in network mode [ 1647.709100][T18274] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1647.723104][T18274] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1647.733996][T18274] tipc: Enabled bearer , priority 10 [ 1647.810114][T18285] netlink: 68 bytes leftover after parsing attributes in process `syz.0.26682'. [ 1647.819809][T18285] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 1647.881144][T18299] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1647.889152][T18299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 1647.930181][ T36] audit: type=1326 audit(2000000066.672:94738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18300 comm="syz.6.26687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5b618eba9 code=0x0 [ 1648.021316][T18318] rust_binder: inc_ref_done called when no active inc_refs [ 1648.209862][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.26705'. [ 1648.406393][ T36] audit: type=1400 audit(2000000067.152:94739): avc: denied { getopt } for pid=18360 comm="syz.6.26707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1648.732661][T26421] tipc: Node number set to 1 [ 1649.217004][T18401] netlink: 'syz.4.26721': attribute type 6 has an invalid length. [ 1650.394757][T18465] rust_binder: 18465 RLIMIT_NICE not set [ 1650.423616][ T330] rust_binder: 0: removing orphan mapping 0:1048 [ 1651.051548][T18502] netlink: 'syz.6.26759': attribute type 6 has an invalid length. [ 1651.114172][T18512] veth0_virt_wifi: entered allmulticast mode [ 1651.120517][T18511] veth0_virt_wifi: left allmulticast mode [ 1651.824372][T18524] rust_binder: Error in use_page_slow: ESRCH [ 1651.824402][T18524] rust_binder: use_range failure ESRCH [ 1651.830511][T18524] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 1651.837707][T18524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1651.845830][T18524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:394 [ 1652.033235][T18554] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1652.067333][T18556] netlink: 84 bytes leftover after parsing attributes in process `syz.6.26781'. [ 1652.167372][T18583] overlayfs: failed to clone lowerpath [ 1652.302581][ T36] audit: type=1326 audit(2000000071.042:94740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18597 comm="syz.6.26796" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5b618eba9 code=0x0 [ 1652.480302][T18616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26802'. [ 1652.490542][T18616] fuseblk: Unknown parameter 'smackfsroot' [ 1654.275921][T18698] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.26826'. [ 1655.554074][T18714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.26830'. [ 1655.799130][T18727] rust_binder: Write failure EINVAL in pid:414 [ 1658.301087][T18767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=18767 comm=syz.4.26847 [ 1658.366456][T18779] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1658.375463][T18779] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1658.384953][T18779] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1658.394010][T18779] veth0_to_team: mtu greater than device maximum [ 1658.927921][T18789] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1659.225584][T18796] netlink: 108 bytes leftover after parsing attributes in process `syz.6.26857'. [ 1659.816728][T18806] overlayfs: failed to resolve './file1': -2 [ 1659.849446][T18803] binder: Bad value for 'max' [ 1660.049584][T18827] veth0_virt_wifi: entered allmulticast mode [ 1660.059964][T18827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=18827 comm=syz.3.26869 [ 1660.086781][T18830] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 1660.094296][T18830] rust_binder: Write failure EINVAL in pid:118 [ 1660.109959][ T36] audit: type=1400 audit(2000000078.852:94741): avc: denied { read } for pid=18831 comm="syz.0.26871" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1660.141084][ T36] audit: type=1400 audit(2000000078.852:94742): avc: denied { open } for pid=18831 comm="syz.0.26871" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1660.142363][T18832] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 1660.166107][T18832] rust_binder: Error while translating object. [ 1660.167208][ T36] audit: type=1400 audit(2000000078.882:94743): avc: denied { ioctl } for pid=18831 comm="syz.0.26871" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1660.176768][T18832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1660.215852][T18832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:120 [ 1660.272142][ T36] audit: type=1400 audit(2000000079.012:94744): avc: denied { append } for pid=18835 comm="syz.0.26873" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1661.079728][T18869] can0: slcan on ttyS3. [ 1661.233365][T18869] can0 (unregistered): slcan off ttyS3. [ 1661.424342][T18913] rust_binder: 439: no such ref 2 [ 1661.429418][T18913] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1661.436676][T18914] rust_binder: 439: no such ref 2 [ 1661.441750][T18914] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1662.309192][T20799] Bluetooth: hci0: Frame reassembly failed (-84) [ 1662.697401][T18947] overlayfs: failed to clone upperpath [ 1663.542094][T18983] rust_binder: Write failure EFAULT in pid:135 [ 1663.670779][T18996] netlink: 'syz.6.26918': attribute type 4 has an invalid length. [ 1663.870168][T19019] fuse: Bad value for 'user_id' [ 1663.875122][T19019] fuse: Bad value for 'user_id' [ 1663.992908][T19021] kvm: kvm [19020]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 1664.002170][T19021] kvm: kvm [19020]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 1664.115096][T19039] rust_binder: Write failure EFAULT in pid:154 [ 1664.341089][ T2470] Bluetooth: hci0: command 0x1003 tx timeout [ 1664.342145][T19865] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1664.394104][T19059] rust_binder: Write failure EFAULT in pid:461 [ 1664.406085][T19062] /dev/rnullb0: Can't lookup blockdev [ 1664.430464][T19048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:157 [ 1664.454167][T19069] binder: Bad value for 'stats' [ 1664.500466][ T1387] rust_binder: 19047: removing orphan mapping 0:24 [ 1664.680514][T19078] tipc: Enabling of bearer rejected, failed to enable media [ 1664.943313][T19123] netlink: 3 bytes leftover after parsing attributes in process `syz.4.26962'. [ 1665.007183][T19123] netlink: 3 bytes leftover after parsing attributes in process `syz.4.26962'. [ 1665.016312][T19123] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1665.585201][T19139] overlay: ./file1 is not a directory [ 1665.598662][T19142] rust_binder: Error in use_page_slow: ESRCH [ 1665.598680][T19142] rust_binder: use_range failure ESRCH [ 1665.604975][T19142] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 1665.610557][T19142] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1665.618886][T19142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:171 [ 1665.811625][T19149] netlink: 'syz.6.26973': attribute type 4 has an invalid length. [ 1665.829567][T19149] netlink: 17 bytes leftover after parsing attributes in process `syz.6.26973'. [ 1665.855470][T19153] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 1665.893233][T19164] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1666.134889][ T36] audit: type=1326 audit(2000000084.860:94745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.4.26986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc92c18eba9 code=0x0 [ 1666.477141][ T36] audit: type=1400 audit(2000000085.197:94746): avc: denied { mounton } for pid=19204 comm="syz.4.26992" path="/210/file0" dev="tmpfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1666.478471][T19205] 9pnet: Unknown protocol version 9 [ 1666.506095][T19207] 9pnet: Unknown protocol version 9 [ 1667.500101][T19248] rust_binder: 197: no such ref 3 [ 1667.506048][T19248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 1667.508939][T19248] rust_binder: Error while translating object. [ 1667.518332][T19248] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1667.519468][T19245] overlay: ./file0 is not a directory [ 1667.524801][T19248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 1667.583418][T19255] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1667.673980][T19266] cgroup: No subsys list or none specified [ 1667.889773][T19281] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 1670.474996][T19316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27030'. [ 1670.678901][T19321] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=19321 comm=syz.3.27031 [ 1670.801138][T19330] netlink: 'syz.3.27033': attribute type 5 has an invalid length. [ 1670.809149][T19330] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.27033'. [ 1670.818418][T19329] netlink: 'syz.3.27033': attribute type 5 has an invalid length. [ 1670.826420][T19329] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.27033'. [ 1670.847955][T19332] rust_binder: 499: no such ref 1 [ 1670.853334][T19332] rust_binder: Error while translating object. [ 1670.853370][T19332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1670.859873][T19332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:499 [ 1670.882345][T19334] rust_binder: Write failure EFAULT in pid:501 [ 1671.004965][T19341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1671.011255][T19341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:508 [ 1671.056743][T19343] netlink: 44 bytes leftover after parsing attributes in process `syz.3.27038'. [ 1671.075192][T19343] netlink: 35 bytes leftover after parsing attributes in process `syz.3.27038'. [ 1671.084509][T19343] netlink: 'syz.3.27038': attribute type 6 has an invalid length. [ 1671.092415][T19343] netlink: 'syz.3.27038': attribute type 5 has an invalid length. [ 1671.100249][T19343] netlink: 35 bytes leftover after parsing attributes in process `syz.3.27038'. [ 1671.216054][T19350] rust_binder: Write failure EFAULT in pid:214 [ 1671.738099][T19385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:216 [ 1672.166397][T19408] netlink: 'syz.6.27061': attribute type 4 has an invalid length. [ 1672.183863][T19408] netlink: 'syz.6.27061': attribute type 4 has an invalid length. [ 1672.358203][T19424] rust_binder: Read failure Err(EFAULT) in pid:528 [ 1672.369086][T19426] PM: Enabling pm_trace changes system date and time during resume. [ 1672.369086][T19426] PM: Correct system time has to be restored manually after resume. [ 1672.772543][ T36] audit: type=1400 audit(2000000091.452:94747): avc: denied { connect } for pid=19438 comm="syz.4.27072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1672.837232][ T36] audit: type=1326 audit(2000000091.512:94748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.6.27074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5b618eba9 code=0x0 [ 1673.683092][T19485] overlayfs: failed to resolve './file0': -2 [ 1675.467109][T19506] rust_binder: 225: no such ref 2 [ 1675.472378][T19506] rust_binder: 225: no such ref 2 [ 1675.477583][T19506] rust_binder: Read failure Err(EAGAIN) in pid:225 [ 1675.781527][ T36] audit: type=1400 audit(2000000094.432:94749): avc: denied { mounton } for pid=19549 comm="syz.0.27111" path="/dev/binderfs/binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1675.846189][ T36] audit: type=1326 audit(2000000094.502:94750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19554 comm="syz.0.27112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f718738eba9 code=0x0 [ 1675.876042][T19556] rust_binder: 549: no such ref 2 [ 1675.881447][T19556] rust_binder: 549: no such ref 3 [ 1676.130189][T19561] netlink: 44 bytes leftover after parsing attributes in process `syz.4.27114'. [ 1676.471307][T19581] netlink: 20 bytes leftover after parsing attributes in process `syz.6.27122'. [ 1676.740979][T19593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1676.741007][T19593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:248 [ 1676.801923][ T36] audit: type=1107 audit(2000000095.456:94751): pid=19599 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1676.842898][T19606] rust_binder: Error in use_page_slow: ESRCH [ 1676.842919][T19606] rust_binder: use_range failure ESRCH [ 1676.856412][T19606] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 1676.856453][T19606] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1676.879666][T19606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:250 [ 1676.899255][T19611] __vm_enough_memory: pid: 19611, comm: syz.0.27132, bytes: 18014402804453376 not enough memory for the allocation [ 1676.968135][T19617] batadv_slave_0: mtu less than device minimum [ 1676.991919][T19620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:261 [ 1677.045015][T19619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:565 [ 1677.141977][T19637] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 1677.324570][T19658] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 1677.341045][T19657] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 1677.352342][T19658] rust_binder: Write failure EINVAL in pid:272 [ 1677.354920][T19657] rust_binder: Write failure EINVAL in pid:272 [ 1679.408241][T19703] netlink: 580 bytes leftover after parsing attributes in process `syz.6.27166'. [ 1680.522395][T20799] bridge_slave_1: left allmulticast mode [ 1680.528111][T20799] bridge_slave_1: left promiscuous mode [ 1680.533860][T20799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.541480][T20799] bridge_slave_0: left allmulticast mode [ 1680.547322][T20799] bridge_slave_0: left promiscuous mode [ 1680.553540][T20799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.655049][T19741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.662375][T19741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.669699][T19750] rust_binder: Error in use_page_slow: ESRCH [ 1680.669722][T19750] rust_binder: use_range failure ESRCH [ 1680.669827][T19741] bridge_slave_0: entered allmulticast mode [ 1680.676752][T19750] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 1680.682977][T19741] bridge_slave_0: entered promiscuous mode [ 1680.687616][T19750] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1680.696535][T19741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.717896][T19750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:575 [ 1680.718420][T19741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.735180][T19741] bridge_slave_1: entered allmulticast mode [ 1680.741847][T19741] bridge_slave_1: entered promiscuous mode [ 1680.750406][T20799] tipc: Disabling bearer [ 1680.765180][T20799] tipc: Left network mode [ 1680.790209][T19760] overlayfs: failed to clone upperpath [ 1680.821988][T20799] veth1_macvtap: left promiscuous mode [ 1680.833751][T20799] veth0_vlan: left promiscuous mode [ 1680.925757][T19741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.932995][T19741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1680.940439][T19741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.947535][T19741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1680.970970][T30199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.978476][T30199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.989338][T30194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.996473][T30194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1681.006336][T30199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.013438][T30199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1681.041400][T19741] veth0_vlan: entered promiscuous mode [ 1681.053318][T19741] veth1_macvtap: entered promiscuous mode [ 1681.641721][T19811] netlink: 24 bytes leftover after parsing attributes in process `syz.6.27199'. [ 1682.010244][T19820] random: crng reseeded on system resumption [ 1682.045125][T19824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 1682.518938][T19835] netlink: 124 bytes leftover after parsing attributes in process `syz.4.27206'. [ 1682.518938][T19831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27206'. [ 1682.549105][T19835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27206'. [ 1682.563401][T19831] netlink: 182 bytes leftover after parsing attributes in process `syz.4.27206'. [ 1682.946068][ T9] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 1683.076809][ T9] usb 9-1: device descriptor read/64, error -71 [ 1683.318213][ T9] usb 9-1: device descriptor read/64, error -71 [ 1683.513164][T19910] fuse: Bad value for 'user_id' [ 1683.518181][T19910] fuse: Bad value for 'user_id' [ 1683.547379][T19919] virtiofs: Unknown parameter 'always' [ 1683.559709][ T9] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1683.700434][ T9] usb 9-1: device descriptor read/64, error -71 [ 1683.815570][T19928] veth1_macvtap: left promiscuous mode [ 1683.821174][T19928] macsec0: entered promiscuous mode [ 1683.942137][ T9] usb 9-1: device descriptor read/64, error -71 [ 1684.052493][ T9] usb usb9-port1: attempt power cycle [ 1684.150400][T19944] __vm_enough_memory: pid: 19944, comm: syz.3.27242, bytes: 18014402804453376 not enough memory for the allocation [ 1684.176688][T19946] /dev/rnullb0: Can't lookup blockdev [ 1684.395157][ T9] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1684.426123][ T9] usb 9-1: device descriptor read/8, error -71 [ 1684.560433][ T9] usb 9-1: device descriptor read/8, error -71 [ 1684.583363][T19998] rust_binder: Error while translating object. [ 1684.583427][T19998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1684.590042][T19998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:623 [ 1684.707475][ T330] rust_binder: 20006: removing orphan mapping 0:24 [ 1684.728042][T20001] 9pnet_fd: Insufficient options for proto=fd [ 1684.806674][ T9] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1684.827986][ T9] usb 9-1: device descriptor read/8, error -71 [ 1684.841887][T20032] overlayfs: failed to clone upperpath [ 1684.958755][ T9] usb 9-1: device descriptor read/8, error -71 [ 1685.019425][T20060] tipc: Enabling of bearer rejected, media not registered [ 1685.078213][ T9] usb usb9-port1: unable to enumerate USB device [ 1685.496027][T20070] netlink: 176 bytes leftover after parsing attributes in process `syz.6.27282'. [ 1685.619624][T20081] overlayfs: failed to resolve './cgroup': -2 [ 1685.664040][T20085] overlayfs: failed to resolve './file2': -2 [ 1685.760388][T20090] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1685.801522][T20092] overlayfs: failed to clone upperpath [ 1685.820133][T20092] overlayfs: missing 'lowerdir' [ 1685.837924][T20092] netlink: 652 bytes leftover after parsing attributes in process `syz.6.27293'. [ 1685.920452][T20100] netlink: 24 bytes leftover after parsing attributes in process `syz.6.27295'. [ 1686.177916][T20111] netlink: 'syz.3.27299': attribute type 11 has an invalid length. [ 1686.296278][T20115] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1686.296494][T20115] rust_binder: Error while translating object. [ 1686.329481][T20115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1686.336041][T20115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:649 [ 1687.151020][T20172] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1687.169412][T20171] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1687.181474][T20171] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1687.190174][T20172] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1687.198559][T20171] overlayfs: conflicting options: metacopy=off,verity=require [ 1687.206617][T20172] overlayfs: conflicting options: metacopy=off,verity=require [ 1687.217288][T20176] netlink: 'syz.6.27322': attribute type 32 has an invalid length. [ 1687.263949][T20184] fuseblk: Unknown parameter 'fdY0xffffffffffffffff' [ 1687.556710][T20226] overlayfs: failed to clone upperpath [ 1687.563428][T20226] 9pnet_fd: Insufficient options for proto=fd [ 1687.750937][T20232] netlink: 9 bytes leftover after parsing attributes in process `syz.4.27345'. [ 1687.760620][T20232] gretap0: entered promiscuous mode [ 1687.767762][T20232] netlink: 5 bytes leftover after parsing attributes in process `syz.4.27345'. [ 1687.776910][T20232] 0{X: renamed from gretap0 [ 1687.782464][T20232] 0{X: left promiscuous mode [ 1687.787654][T20232] 0{X: entered allmulticast mode [ 1687.793695][T20232] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1687.811918][T20232] overlayfs: failed to clone upperpath [ 1687.935178][T20250] netlink: 'syz.8.27354': attribute type 13 has an invalid length. [ 1687.957822][ T36] audit: type=1326 audit(2000000106.541:94752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20253 comm="syz.4.27355" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc92c18eba9 code=0x0 [ 1688.130028][T20272] overlayfs: failed to clone upperpath [ 1688.718703][T20294] incfs: Error accessing: ./file0. [ 1688.723902][T20294] incfs: mount failed -20 [ 1688.728761][T20293] incfs: Error accessing: ./file0. [ 1688.734368][T20293] incfs: mount failed -20 [ 1689.543904][T20297] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1689.614661][T20301] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 1689.623419][T20301] rust_binder: Write failure EINVAL in pid:659 [ 1690.416581][T20304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27368'. [ 1691.240691][T20375] overlayfs: failed to clone upperpath [ 1691.348738][T20382] netlink: 32 bytes leftover after parsing attributes in process `syz.6.27394'. [ 1691.772305][T20397] netlink: 44 bytes leftover after parsing attributes in process `syz.8.27400'. [ 1691.781514][T20397] netlink: 'syz.8.27400': attribute type 6 has an invalid length. [ 1691.781987][T20399] sock: sock_set_timeout: `syz.4.27399' (pid 20399) tries to set negative timeout [ 1691.789779][T20397] netlink: 'syz.8.27400': attribute type 5 has an invalid length. [ 1691.807098][T20397] netlink: 'syz.8.27400': attribute type 4 has an invalid length. [ 1692.121111][ T36] audit: type=1326 audit(2000000110.679:94753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20406 comm="syz.8.27403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4fb4f8eba9 code=0x0 [ 1693.430242][T20464] netlink: 36 bytes leftover after parsing attributes in process `syz.4.27421'. [ 1693.440433][ T36] audit: type=1326 audit(2000000111.992:94754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20463 comm="syz.4.27421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc92c18eba9 code=0x0 [ 1693.566973][T20480] overlayfs: failed to clone upperpath [ 1693.577380][T20479] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1693.719297][T20490] rust_binder: Write failure EINVAL in pid:684 [ 1693.835244][ T36] audit: type=1400 audit(2000000112.390:94755): avc: denied { map } for pid=20491 comm="syz.3.27430" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1694.037570][ T9] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 1694.050326][ T9] hid-generic 0000:0000:0000.009D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1694.157765][T20505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27434'. [ 1694.187772][T20505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=20505 comm=syz.3.27434 [ 1694.205248][T20505] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1694.205273][T20505] rust_binder: Read failure Err(EFAULT) in pid:698 [ 1694.269202][T20511] netlink: 220 bytes leftover after parsing attributes in process `syz.6.27437'. [ 1694.382959][T20517] /dev/rnullb0: Can't lookup blockdev [ 1694.390158][T20517] netlink: 88 bytes leftover after parsing attributes in process `syz.3.27440'. [ 1695.141728][T20530] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1695.150787][T20530] overlayfs: missing 'lowerdir' [ 1695.847541][T20554] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 1695.867587][T20557] overlayfs: failed to clone upperpath [ 1696.059657][T20565] netlink: 44 bytes leftover after parsing attributes in process `syz.3.27455'. [ 1696.124686][T20567] futex_wake_op: syz.3.27456 tries to shift op by -1; fix this program [ 1696.186983][T20569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:714 [ 1696.187403][T20569] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1696.196770][T20569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:714 [ 1696.218000][T20571] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 1696.235522][T20571] rust_binder: Write failure EINVAL in pid:716 [ 1696.722538][T20611] netlink: 165 bytes leftover after parsing attributes in process `syz.8.27474'. [ 1697.050427][T20614] /dev/loop0: Can't lookup blockdev [ 1697.060728][T20614] /dev/loop0: Can't lookup blockdev [ 1697.080593][T20619] rust_binder: Write failure EINVAL in pid:719 [ 1697.111508][T20631] /dev/loop0: Can't lookup blockdev [ 1697.141480][ T36] audit: type=1400 audit(2000000115.675:94756): avc: denied { mounton } for pid=20636 comm="syz.3.27482" path="mnt:[4026532456]" dev="nsfs" ino=4026532456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1697.207906][T20650] netlink: 'syz.6.27486': attribute type 20 has an invalid length. [ 1697.243387][T20654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27488'. [ 1697.352538][T20657] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1697.397609][T20667] netlink: 'syz.4.27493': attribute type 3 has an invalid length. [ 1697.406653][T20667] netlink: 944 bytes leftover after parsing attributes in process `syz.4.27493'. [ 1697.419143][ T36] audit: type=1404 audit(2000000115.953:94757): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 1697.469620][ T36] audit: type=1400 audit(2000000116.003:94758): avc: denied { create } for pid=20668 comm="syz.3.27495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1697.511217][ T36] audit: type=1400 audit(2000000116.003:94759): avc: denied { read write } for pid=20668 comm="syz.3.27495" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 1697.551574][ T36] audit: type=1400 audit(2000000116.033:94760): avc: denied { create } for pid=20675 comm="syz.4.27496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 1697.581028][ T36] audit: type=1400 audit(2000000116.033:94761): avc: denied { create } for pid=20675 comm="syz.4.27496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1697.612078][ T36] audit: type=1400 audit(2000000116.043:94762): avc: denied { sys_module } for pid=20674 comm="syz.6.27497" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 1697.652077][ T36] audit: type=1400 audit(2000000116.063:94763): avc: denied { read } for pid=20668 comm="syz.3.27495" name="binder1" dev="binder" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 1698.293692][T20728] can0: slcan on ttyS3. [ 1698.357483][T20727] can0 (unregistered): slcan off ttyS3. [ 1698.465910][ T36] kauditd_printk_skb: 1626 callbacks suppressed [ 1698.465929][ T36] audit: type=1400 audit(2000000116.989:96342): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1698.494221][ T36] audit: type=1400 audit(2000000116.999:96343): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1698.516034][ T36] audit: type=1400 audit(2000000116.999:96344): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1698.537214][ T36] audit: type=1400 audit(2000000116.999:96345): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1698.540608][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1698.563490][ T36] audit: type=1400 audit(2000000116.999:96346): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1698.565780][ T149] audit: audit_lost=17 audit_rate_limit=0 audit_backlog_limit=64 [ 1698.586789][ T36] audit: type=1400 audit(2000000116.999:96347): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1698.594745][ T149] audit: backlog limit exceeded [ 1698.615410][ T36] audit: type=1400 audit(2000000116.999:96348): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1699.764311][T20826] netlink: 'syz.8.27551': attribute type 64 has an invalid length. [ 1701.693563][T20953] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1107 sclass=netlink_tcpdiag_socket pid=20953 comm=syz.3.27598 [ 1703.497848][ T36] kauditd_printk_skb: 38495 callbacks suppressed [ 1703.497868][ T36] audit: type=1400 audit(2000000122.017:133281): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1703.532639][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1703.539347][ T149] audit: audit_lost=539 audit_rate_limit=0 audit_backlog_limit=64 [ 1703.547229][ T149] audit: backlog limit exceeded [ 1703.552294][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1703.558936][ T36] audit: type=1400 audit(2000000122.037:133282): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1703.580252][ T149] audit: audit_lost=540 audit_rate_limit=0 audit_backlog_limit=64 [ 1703.588233][ T149] audit: backlog limit exceeded [ 1703.593429][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1703.600048][ T36] audit: type=1400 audit(2000000122.037:133283): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1705.036639][T21114] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=21114 comm=syz.4.27656 [ 1706.981029][T21134] netlink: 'syz.6.27663': attribute type 4 has an invalid length. [ 1707.016833][T21134] netlink: 'syz.6.27663': attribute type 6 has an invalid length. [ 1707.041922][T21134] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.27663'. [ 1707.424436][T21144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21144 comm=syz.3.27667 [ 1708.528035][ T36] kauditd_printk_skb: 21618 callbacks suppressed [ 1708.528068][ T36] audit: type=1400 audit(2000000127.026:153262): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1708.556083][ T36] audit: type=1400 audit(2000000127.026:153263): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1708.573604][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1708.577806][ T36] audit: type=1400 audit(2000000127.026:153264): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1708.584480][ T149] audit: audit_lost=1088 audit_rate_limit=0 audit_backlog_limit=64 [ 1708.606476][ T36] audit: type=1400 audit(2000000127.026:153265): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1708.614185][ T149] audit: backlog limit exceeded [ 1708.635442][ T36] audit: type=1400 audit(2000000127.026:153266): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1708.641143][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1708.661884][ T36] audit: type=1400 audit(2000000127.026:153267): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1709.170849][T21240] netlink: 'syz.4.27702': attribute type 6 has an invalid length. [ 1711.195220][T21323] netlink: 'syz.3.27734': attribute type 4 has an invalid length. [ 1711.203480][T21323] netlink: 17 bytes leftover after parsing attributes in process `syz.3.27734'. [ 1712.068683][T21375] netlink: 'syz.4.27751': attribute type 4 has an invalid length. [ 1712.092385][T21375] netlink: 'syz.4.27751': attribute type 4 has an invalid length. [ 1712.344054][T21385] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 1712.741275][T21399] can0: slcan on ttyS3. [ 1712.814754][T21399] can0 (unregistered): slcan off ttyS3. [ 1713.556776][ T36] kauditd_printk_skb: 38073 callbacks suppressed [ 1713.556796][ T36] audit: type=1400 audit(2000000132.028:189944): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1713.574618][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1713.584856][ T36] audit: type=1400 audit(2000000132.028:189945): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1713.591210][ T149] audit: audit_lost=1555 audit_rate_limit=0 audit_backlog_limit=64 [ 1713.612282][ T36] audit: type=1400 audit(2000000132.028:189946): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1713.620419][ T149] audit: backlog limit exceeded [ 1713.641621][ T36] audit: type=1400 audit(2000000132.028:189947): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1713.647361][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1713.667739][ T36] audit: type=1400 audit(2000000132.028:189948): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1713.674337][ T149] audit: audit_lost=1556 audit_rate_limit=0 audit_backlog_limit=64 [ 1714.322228][T21490] netlink: 'syz.8.27787': attribute type 6 has an invalid length. [ 1714.894708][T21550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27809'. [ 1715.135454][T21571] netlink: 'syz.3.27818': attribute type 4 has an invalid length. [ 1715.172445][T21571] netlink: 17 bytes leftover after parsing attributes in process `syz.3.27818'. [ 1715.444503][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27827'. [ 1716.133748][T21674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27852'. [ 1716.236533][T21680] netlink: 'syz.6.27851': attribute type 28 has an invalid length. [ 1716.307468][T21686] netlink: 'syz.3.27854': attribute type 12 has an invalid length. [ 1718.584103][ T36] kauditd_printk_skb: 38344 callbacks suppressed [ 1718.584125][ T36] audit: type=1400 audit(2000000137.040:227434): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1718.619531][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1718.626567][ T36] audit: type=1400 audit(2000000137.040:227435): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1718.626964][T21740] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1718.647780][ T149] audit: audit_lost=1843 audit_rate_limit=0 audit_backlog_limit=64 [ 1718.662264][ T149] audit: backlog limit exceeded [ 1718.664018][T21740] audit: audit_lost=1844 audit_rate_limit=0 audit_backlog_limit=64 [ 1718.667362][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1718.675707][T21740] audit: backlog limit exceeded [ 1718.681848][ T36] audit: type=1400 audit(2000000137.040:227436): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1719.327125][T21755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21755 comm=syz.8.27880 [ 1719.343151][T21751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21751 comm=syz.8.27880 [ 1721.070331][T21771] netlink: 'syz.4.27887': attribute type 4 has an invalid length. [ 1723.610074][ T36] kauditd_printk_skb: 48542 callbacks suppressed [ 1723.610095][ T36] audit: type=1400 audit(2000000142.054:275977): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1723.638185][ T36] audit: type=1400 audit(2000000142.054:275978): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1723.659641][ T36] audit: type=1400 audit(2000000142.054:275979): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1723.681144][ T36] audit: type=1400 audit(2000000142.054:275980): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1723.707752][ T36] audit: type=1400 audit(2000000142.054:275981): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1723.707902][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1723.729108][ T36] audit: type=1400 audit(2000000142.054:275982): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1723.739434][ T149] audit: audit_lost=1846 audit_rate_limit=0 audit_backlog_limit=64 [ 1723.756818][ T36] audit: type=1400 audit(2000000142.054:275983): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1723.764942][ T149] audit: backlog limit exceeded [ 1724.734492][T21817] netlink: 12 bytes leftover after parsing attributes in process `syz.8.27902'. [ 1724.758371][T30199] bridge_slave_1: left allmulticast mode [ 1724.773809][T30199] bridge_slave_1: left promiscuous mode [ 1724.780678][T30199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.789289][T30199] bridge_slave_0: left allmulticast mode [ 1724.803947][T30199] bridge_slave_0: left promiscuous mode [ 1724.812234][T30199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.976790][T21838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=21838 comm=syz.8.27902 [ 1725.000393][T30199] veth0_vlan: left promiscuous mode [ 1725.084218][T21836] netlink: 12 bytes leftover after parsing attributes in process `syz.8.27902'. [ 1725.426659][T18498] bridge0: port 3(syz_tun) entered disabled state [ 1725.436450][T18498] syz_tun (unregistering): left allmulticast mode [ 1725.443396][T18498] syz_tun (unregistering): left promiscuous mode [ 1725.457244][T18498] bridge0: port 3(syz_tun) entered disabled state [ 1728.634968][ T36] kauditd_printk_skb: 45557 callbacks suppressed [ 1728.634991][ T36] audit: type=1400 audit(2000000147.050:320512): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1728.663027][ T36] audit: type=1400 audit(2000000147.060:320513): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1728.684595][ T36] audit: type=1400 audit(2000000147.060:320514): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1728.706139][ T36] audit: type=1400 audit(2000000147.060:320515): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1728.727661][ T36] audit: type=1400 audit(2000000147.060:320516): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1728.736187][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1728.748989][ T36] audit: type=1400 audit(2000000147.060:320517): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1728.755635][ T149] audit: audit_lost=2190 audit_rate_limit=0 audit_backlog_limit=64 [ 1728.778455][ T36] audit: type=1400 audit(2000000147.060:320518): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1728.784871][ T149] audit: backlog limit exceeded [ 1733.658523][ T36] kauditd_printk_skb: 49717 callbacks suppressed [ 1733.658543][ T36] audit: type=1400 audit(2000000152.076:369852): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1733.686423][ T36] audit: type=1400 audit(2000000152.076:369853): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1733.707951][ T36] audit: type=1400 audit(2000000152.076:369854): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1733.722590][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1733.729391][ T36] audit: type=1400 audit(2000000152.076:369855): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1733.735872][ T149] audit: audit_lost=2319 audit_rate_limit=0 audit_backlog_limit=64 [ 1733.757045][ T36] audit: type=1400 audit(2000000152.076:369856): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1733.764886][ T149] audit: backlog limit exceeded [ 1733.786268][ T36] audit: type=1400 audit(2000000152.076:369857): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1733.791577][ T149] audit: audit_backlog=65 > audit_backlog_limit=64