last executing test programs: 20m4.10932018s ago: executing program 32 (id=1248): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0xffffffff, 0x4) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r3 = memfd_create(&(0x7f0000000c00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x01\x00\x00\x00.\xd4\xee\xbb\b\x85c\xc0G$hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\xe9c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\b\x00\x00\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\a\x00\x00\x00,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="150e000000ffff0010000008003950323030302e75"], 0x15) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0xffffffffffffffff) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7d9de106c620a3636b"]) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) sendfile(r4, r3, 0x0, 0xffffffff) 16m49.898901677s ago: executing program 34 (id=5464): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r2, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7933707fe9bce142b8971a5f2be0a4b035a87c58f573ded724070800010002"], 0x150}}, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x0) socket$netlink(0x10, 0x3, 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000040)=0x9, 0x4) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m18.898916007s ago: executing program 35 (id=7064): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c040) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x32) r2 = socket$inet6(0xa, 0x800, 0x1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2, 0x3}, 0x1c) write(r2, &(0x7f0000000200)="89", 0xffe3) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 13m46.018528578s ago: executing program 36 (id=8529): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) (async, rerun: 32) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) (async, rerun: 32) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8001, 0x9, 0x8000000000000000}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='highspeed', 0x9) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000015000/0x2000)=nil}) (async, rerun: 64) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) (rerun: 64) ptrace(0x11, r4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10001, 0xb76d46cf1b4fec17, 0x1000, 0x2000, &(0x7f00004ba000/0x2000)=nil}) 12m3.963087351s ago: executing program 37 (id=10054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a000102"], 0x164}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000034"]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79}) 11m6.322922377s ago: executing program 38 (id=10287): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@free_buffer={0x40086303, r1}], 0xffffffffffffff3e, 0x0, 0x0}) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r2, &(0x7f0000000140)="236f1174cb4ce474dc22697877eaf1cae3866313f7e61fe16b1957ff6206d8feea96dbd9eac97ce6fa516cc3739af35926e1ee398238c76765fd029118630609787dacf0dc7fb8ce2f6d2a55e3cc5363a272a1964a1dbd8332019e", 0x5b, 0x0, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) sendmmsg$inet(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)='\\Q', 0x2}], 0x1}}], 0x1, 0x4000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11m6.322757877s ago: executing program 39 (id=10291): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20}, {0x2, 0x4e20, @loopback}, {0x2, 0x2, @multicast1}, 0x248, 0x0, 0x0, 0x0, 0xfff5, 0x0, 0x0, 0x3, 0x5}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x1}) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000780)=ANY=[@ANYRES8=r3]) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x106043, 0x0) r7 = userfaultfd(0x80800) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x458}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000922000/0x2000)=nil, 0x2000}}) r8 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r8) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x40000100000200) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1505000000ffff0010000008003950323030302e75"], 0x15) r9 = dup(r1) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xfffffffffffffffd}}, 0x18) write$FUSE_INIT(r9, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c616e616d653d3a2c6b72f90300c59ae8139923593648169aa43dcc516116dd2712b1847c087e109f7514b865c4c8af01ea1e053fb9fab4e314ea49fa6b0114467bad3c583dfb897b955f3b7f25790f4032f92a06f3b871468d542db904"]) 9m18.960582459s ago: executing program 40 (id=12368): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000005000000450000002500000019000d00000008000d00000000000006040000000000f93132", 0x39}], 0x1) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async, rerun: 64) r3 = dup(r2) (rerun: 64) write$FUSE_BMAP(r3, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r6, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r6, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x18080, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) (async) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x78db5a5a245457f9, r7, {0x6}}, 0x18) (async) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r8) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x14000, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid={'access', 0x3d, r8}}]}}) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r9, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 9m5.420767195s ago: executing program 41 (id=12907): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x100) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000000c0)=""/254) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 8m46.222372661s ago: executing program 42 (id=13297): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket(0x1a, 0x2, 0xa) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = accept(r2, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000003c0)="04", 0x1, 0x11, 0x0, 0x1a) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x2ffdfff, 0x0, 0x0, 0x1}, 0x10) write(r5, &(0x7f00000000c0)="240000001a005f0214f9f407000904001f0000000003000000000000080004000100000e", 0x24) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) mkdir(&(0x7f0000001040)='./file0\x00', 0xc0) getxattr(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0) write$vga_arbiter(r6, &(0x7f0000000300)=@unlock_all, 0xb) write$vga_arbiter(r6, &(0x7f0000000080)=ANY=[@ANYRES64=r4, @ANYRESOCT=r6], 0xe) 8m12.395270393s ago: executing program 43 (id=14063): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000021c0), 0x40843, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x8800, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x5a2}], 0x1, 0x102, 0x0) sendto$inet(r3, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000100)=0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f00000021c0), 0x40843, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x8800, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) (async) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x5a2}], 0x1, 0x102, 0x0) (async) sendto$inet(r3, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000100)=0x1) (async) 7m22.811680206s ago: executing program 44 (id=14553): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1002, 0x8, '9P2000.u'}, 0x15) r2 = dup(r0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x5a}, 0x18) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 64) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async, rerun: 64) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, ':\xe9\x19\x1d\xf3w\xe8~\xd7\x1bw\xff6}\x03{\vOj\x87E\xcf\xdea\x10\xc8*P\xad\x95h\x02\xc7_y\xec\x8b+\x9cF\xc4\x18\xf3k\x02\xf13\x1c?*\xf2\xd0\x82\x1b#j\xb3\x15\xcf\xbb\x8d\x16\xdc\xce\xc7\x06\x8a\xeb\xda\x911R\xd8\xdb\xd9\x1dq `yw\x8dH\xd0\xacd{\xd4&\x81\"\xf6\x0e\xe0k\xe4'}}], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000840)=0x6, 0x4) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc9, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x3, "14"}, @global=@item_4={0x3, 0x1, 0x6, "d803aa2f"}]}}, 0x0}, 0x0) (async, rerun: 64) sendto$inet(r6, 0x0, 0x0, 0x4c8c0, &(0x7f0000000340), 0x10) (async) ioctl$FICLONE(r6, 0x40049409, r1) (async) recvfrom(0xffffffffffffffff, &(0x7f0000000400)=""/204, 0xcc, 0x2000, &(0x7f0000000280)=@phonet={0x23, 0x5, 0xc, 0xb}, 0x80) r8 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r8, r5, 0x0, 0xffffffff) 6m56.247007339s ago: executing program 45 (id=15154): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000440)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1008, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x400, @private1}}}, 0x32) getsockname(r2, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x12, 0x0, 0x4}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc8001, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x3d13, &(0x7f0000000100)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TUNSETGROUP(r4, 0x400454ce, r7) close_range(r1, 0xffffffffffffffff, 0x0) 6m12.002115613s ago: executing program 46 (id=15849): socket$igmp(0x2, 0x3, 0x2) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)={[{@stats}]}) 5m1.32539643s ago: executing program 1 (id=17113): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2dfd3cbb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x12, r0, 0x0) read(r0, &(0x7f0000000340)=""/116, 0x74) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2dfd3cbb) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x12, r0, 0x0) (async) read(r0, &(0x7f0000000340)=""/116, 0x74) (async) 5m1.270243773s ago: executing program 1 (id=17114): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001d00000000000100", 0x1c) recvmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20102, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x25) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) (async) write(r0, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001d00000000000100", 0x1c) (async) recvmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20102, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x25) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 5m1.268301193s ago: executing program 1 (id=17115): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20001, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c80)=ANY=[@ANYBLOB="800100001000010027bd700000000000fc"], 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x4, 0x9, 0x6, 0x8, 0x9, 0xbb, 0x2d, 0x4, 0xf7, 0xa8, 0x2, 0xf9, 0x2, 0x6, 0x0, 0x4}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fallocate(r4, 0x11, 0x8, 0x5ad) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="01022abd7000fedbdf250f00000021000e006804020004007e15000403ffffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="7a391670fc4a4e84132acb9e190403e146c841316fc4631c9aa062f25ca49bcb4ab6cfbb54a77af51bf33445a9f136ad3a8a7d81e2ae25f90f6452d2ef5c74806c7d9e69c6d94563f481f4848855aa247db96d83cac651a8bd3b13c0"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000800000000000000bb000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) r8 = socket(0x1e, 0x1, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4(r8, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="674d0466", @ANYRES16=r7, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x10}, 0x20000050) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x3f5, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x408c0}, 0x60804) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000000)={'ip6gre0\x00', 0x800005}) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f6, 0x20, 0x70bd25, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x400c000) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x1d, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000500)=0xffffffff00000000) 5m1.185982948s ago: executing program 1 (id=17116): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000240)=[{{0x2, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x8) chdir(&(0x7f00000001c0)='./bus\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, 0x0) socketpair(0xf, 0xa, 0x8, &(0x7f0000000300)) fstat(0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000002000600ef63d2adc2cc2eb8c300000000", @ANYRES32=r1, @ANYBLOB="02000500", @ANYRES32=r2, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x34, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 5m1.159580689s ago: executing program 1 (id=17117): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000400)=[@dead_binder_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000100)={0x30, 0x30, 0x30}}, 0x400}], 0x54, 0x0, &(0x7f0000000480)="f433f37e209b678f1b09a098aa77d9ba5718a19491b7ee8db65998f822616f652515d96f86c8d6f86100a1e006ca600cf8d0590b6aea74aadd60ae2f3b8fe3f66c5305f2e2d6d7e102ce60e1e849537011171512"}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x0, 0xc, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="33eedd982748fcbb96b66be12ff2458eba27fcaf409aec984c9ca4d5178de9da51b67c43415a98", 0x27}, {&(0x7f0000000140)="e24718d515874dbe17581dcf2b76b71141ef76704133450905cae4f123148519843553f164ed478cfe4d6c9ce8b8ee11c69322676eee001f41", 0x39}, {&(0x7f0000000380)="8cff8450a8294970d6820eb72ad492dc08fe9abe1c33baa2e3bee59eee2c569ca6e33f9433dd0165b9738810881992edecd43ab186d56f116e85fea9bf858cc2dc26ca0b52c7314d3dc7136776e216145fd6adbd3a95aa8d9ba37acd1942db339a4d556a70b100ea4fbfdd7f61f510fccba3636c476a619d19da549392f216fc989cd5d40085e4cfd56399ce4aa33aedd67ae21aae03960fded593f1c4c2c1e98c76b26c28539477548fea180f204c56f7a2135779977b0db91828daa5080be7da1b1b9089252172d8da5f8a95060dac0215e68f8dc710", 0xd7}, {&(0x7f0000000740)="52fdf623d88b43c66f03bd053dea81fdaf540174b3d04f5acfb71d5769d3f9d66c579a732ca9e2754ab85ada69e9cce5a4ec56ee4e9cf72e6df9ff6422325e1daddcc88e24c9a1885bcf62da4c4dd02fd6b79d5524238de59e56e2faa653b57b9ed9ece942cc537cb515bb2d7156645ae9693a531e247bcaf2ec4821647cf244ad64059e8036da3e6b7b5f3e3424f96889fe843a1ef9c58236cde3cd2c5822fc147106bd3eec740a48ca2f31bc0ca03b65e1207f0af3876beaa0ee82d795cdf33bffcc904a0eb996515a7561eb31bed59d619d78656fc4c9ddef57635308c50bd6605da557eafec53f4c4d2128a99302a9a74b4eda4d89", 0xf7}, {&(0x7f0000000480)="36e23fece2db26c81f5ad0a779e87a6af45f6dfb69517d830642e84a89d8754e7274d981c3192d5f1dc8ad2d18a2f41ea4fc3f45c51685ee01bf5ce546a49d6b43570bb66f89a78a63f14fd058bb9a482d6c937c9ce0eab373534dc7a1ffcd74f6cadbc91a7850d29a97ba9ed2c60b70aa7545163df2004561d8437d30de5ccbc50a3accefe511e1a2fb3941eb63471f4c84ab93d9e8dc78e2a2830509147a053f4eebb677b702f7361304230412f67027b5", 0xb2}], 0x5}, 0x20000004) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a80)=""/241, 0xf1}], 0x1, &(0x7f0000001d00)=""/4067, 0xfe3}, 0x0) close(r1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0xc88f0c602837b9e, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 5m1.066882854s ago: executing program 1 (id=17118): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x66053000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000680)=0xfeab) fchown(r1, r3, 0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0x1, 0x80000000, 0x3, 0x11, 0xffffffff, 0x6, 0x9}, {0x40000000, 0x4, 0x6, 0x6, 0x53a, 0x7f, 0x157}, {0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x9, 0xffff}, {0x80000001, 0x5, 0x5, 0x6, 0x8, 0x400, 0xdd61}]}) fstat(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) setuid(r5) setreuid(r3, r5) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x66053000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0xa, 0x2, 0x0) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000680)=0xfeab) (async) fchown(r1, r3, 0xee01) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) (async) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0x1, 0x80000000, 0x3, 0x11, 0xffffffff, 0x6, 0x9}, {0x40000000, 0x4, 0x6, 0x6, 0x53a, 0x7f, 0x157}, {0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x9, 0xffff}, {0x80000001, 0x5, 0x5, 0x6, 0x8, 0x400, 0xdd61}]}) (async) fstat(r4, &(0x7f0000000000)) (async) setreuid(0x0, r5) (async) setuid(r5) (async) setreuid(r3, r5) (async) 5m1.066410594s ago: executing program 47 (id=17118): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x66053000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000680)=0xfeab) fchown(r1, r3, 0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0x1, 0x80000000, 0x3, 0x11, 0xffffffff, 0x6, 0x9}, {0x40000000, 0x4, 0x6, 0x6, 0x53a, 0x7f, 0x157}, {0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x9, 0xffff}, {0x80000001, 0x5, 0x5, 0x6, 0x8, 0x400, 0xdd61}]}) fstat(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) setuid(r5) setreuid(r3, r5) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x66053000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0xa, 0x2, 0x0) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000680)=0xfeab) (async) fchown(r1, r3, 0xee01) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) (async) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0x1, 0x80000000, 0x3, 0x11, 0xffffffff, 0x6, 0x9}, {0x40000000, 0x4, 0x6, 0x6, 0x53a, 0x7f, 0x157}, {0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x9, 0xffff}, {0x80000001, 0x5, 0x5, 0x6, 0x8, 0x400, 0xdd61}]}) (async) fstat(r4, &(0x7f0000000000)) (async) setreuid(0x0, r5) (async) setuid(r5) (async) setreuid(r3, r5) (async) 4m54.383617282s ago: executing program 5 (id=17337): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x115240) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x6) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f00000001c0)=""/36, &(0x7f0000000000)=0x24) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r5, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r4, 0x407, 0x100004) write$eventfd(r4, &(0x7f0000000240), 0xffffff14) mkdir(0x0, 0x5) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r1, 0xffffb000) 4m53.468790794s ago: executing program 5 (id=17355): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x66053000) 4m53.466891684s ago: executing program 5 (id=17357): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r1, &(0x7f00000046c0)=""/4096, 0x1000) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x180) r3 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000004500)=""/4101, 0x1005}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000000980)=""/160, 0xa0}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000600)=""/173, 0xad}, {&(0x7f0000000900)=""/127, 0x7f}, {&(0x7f0000000000)=""/255, 0xff}], 0x9}, 0x9}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x810}], 0x8, 0x40000100, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000026c0)='[f\x00', 0x0, r3) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x3b, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20001, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') socket$unix(0x1, 0x5, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r6, 0x3304) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x1070bd2a, 0x25dfdbfc}, 0xfffffffffffffead}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4800) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRES16=r5, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x2008c0d4) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000006c0)={@fda={0x66646185, 0x7, 0x1, 0x1b}, @flat=@weak_handle={0x77682a85, 0x100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000c80)=""/224, 0xe0, 0x1, 0x25}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) r11 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r11, &(0x7f0000000040), 0x10) listen(r11, 0x0) 4m53.450043315s ago: executing program 5 (id=17359): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314c74, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fd, 0xf83, 0x8}, 0x1c) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendto$packet(r2, &(0x7f00000007c0)="0b0312002e9b97cf5db4d0d010f6a12f", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) (async) fsmount(r0, 0x0, 0x71) (async, rerun: 32) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (rerun: 32) syz_open_dev$hiddev(&(0x7f00000001c0), 0x3, 0x10f001) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x8, 0x8, 0x7fff}) (async) r6 = socket(0x11, 0x2, 0x5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r7]) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) 4m53.409428847s ago: executing program 5 (id=17362): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r1, 0x10e, 0xc, &(0x7f0000000200)=""/210, &(0x7f0000000180)=0xd2) r2 = socket$netlink(0x10, 0x3, 0x9) r3 = getpid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000002600)=r3) fcntl$getownex(r2, 0x10, &(0x7f0000002700)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000380)={r3}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="05df4a6d255d77a6f0a0aac040d883e63a163f349d73314559da6cc8e15d3d92cc27db785e569e43bfe0e606e66711093bcd215baa78e7caa79067a83bf1717f330c98fd2b0ca9a7e7e33c32658abb312055afeac1311fc93a5da6df7c5c99faf3edf955b39ac1fb07eb7505bf78e84567b374d14c0fde95fefa1460e6dcfe85b21d6369a836dccb83f818f3"], 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x48044) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) sendmsg$AUDIT_GET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x3e8, 0x20, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x1) 4m53.408867868s ago: executing program 5 (id=17363): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r1) mkdirat(r4, &(0x7f0000000140)='./file0\x00', 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x8, r7}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x64, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x40001) syz_open_dev$usbfs(0x0, 0x76, 0x88881) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r8, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$binfmt_elf32(r9, &(0x7f00000020c0)=ANY=[@ANYBLOB="7f454c46040c02050f0000000000000002003e00f7267d0e65"], 0x58) getpriority(0x2, r10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x21, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@directio}]}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') 4m37.118710959s ago: executing program 48 (id=17363): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r1) mkdirat(r4, &(0x7f0000000140)='./file0\x00', 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x8, r7}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x64, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x40001) syz_open_dev$usbfs(0x0, 0x76, 0x88881) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r8, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$binfmt_elf32(r9, &(0x7f00000020c0)=ANY=[@ANYBLOB="7f454c46040c02050f0000000000000002003e00f7267d0e65"], 0x58) getpriority(0x2, r10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x21, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@directio}]}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') 4m20.919466855s ago: executing program 7 (id=17878): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m19.353592843s ago: executing program 7 (id=17887): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000001440)=@urb_type_iso={0x0, {0xf, 0x1}, 0x1, 0x46, &(0x7f0000000440)="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", 0x1000, 0x800, 0x80000001, 0x68, 0xfffffffe, 0x3, &(0x7f0000000100)="2014632fadb09d397da695c4eed4bfa3646530400b472ff19d5fbe10b0889b9ac4246a5f21c96441bf27d8ae2db70b22e51ded9679ed80f996738c8f91e8702ea5c79e58a630aef9cdb76c97228603cb3fd1ce6fc5b2b53a94a2f7247bacb168742dfaf786eb52a2a2235c0da12763f6c80508d026fbaf5ff3993edabc1a61860be01f23fe19b3a8a753c04f078bcf7db916c4043cdf8ae3dc902e8097f53f200ee50a5d71ec788fbbdf89c7b9fedcc69e76c584b3fe164770dba3c8769673d198f6f42d0127447a76d809b81048d29cb2bddd1ce082ffc086b92967d140a0daaa8fd4", [{0x0, 0x3, 0x80000000}, {0x1, 0x6, 0x7}, {0x0, 0x9}, {0x5, 0x0, 0x9}, {0x4ea, 0x8, 0x9512}, {0x100, 0x80000001, 0x6}, {0x4ee, 0x6, 0x80}, {0x24, 0xaa3, 0x1ff}, {0x4, 0x6, 0x6}, {0x8, 0x8, 0x7}, {0x4, 0x9, 0xff}, {0x80000001, 0x4, 0x3}, {0x400, 0x8, 0xe}, {0x1, 0xe0d6, 0x522c}, {0xc6, 0x46a6, 0x4}, {0x3, 0x3ff, 0x8}, {0x2, 0x2, 0x3}, {0xfffffff7, 0xfffffff9, 0x7}, {0x9, 0x7fffffff, 0x67fd}, {0x1a7e, 0x5, 0x200}, {0x8001, 0x401, 0x1ff}, {0x6ee1207b, 0x3, 0xd51}, {0x0, 0xffff7fff, 0x3ff}, {0x1, 0x8}, {0x1, 0x6, 0x1}, {0x8, 0x0, 0xf5}, {0xfffffffe, 0x10, 0x8}, {0x3, 0x6, 0x2}, {0x2, 0x0, 0x100}, {0x0, 0xbbd, 0x9}, {0x7, 0x8, 0x3fb9}, {0x3, 0xa6b5, 0x1ff}, {0x7, 0x6, 0x1}, {0x7, 0x9, 0x6}, {0x8b, 0x1000, 0x3}, {0x3, 0xf52f, 0x9}, {0x0, 0xffffffd2, 0x4}, {0x2, 0x9, 0x80000001}, {0x1, 0x0, 0x7}, {0x4, 0x2, 0x8}, {0xba7, 0x348, 0x4}, {0x4, 0x3, 0x4}, {0xeef7, 0xa, 0x7fffffff}, {0x5, 0x9, 0xffffffff}, {0x800, 0x6, 0x1}, {0x10000, 0x3, 0x5}, {0xe857, 0x5, 0x401}, {0x80000001, 0x4, 0x8001}, {0x7f, 0x8000, 0xc0}, {0x2, 0x40, 0x1}, {0x100, 0x200, 0x1c}, {0xfffffffd, 0x5, 0x2}, {0x8, 0x10, 0x5d2c}, {0x8, 0x800, 0x6}, {0x6, 0x7f, 0x46}, {0xb, 0x3ff, 0x9}, {0x7, 0xf, 0x5}, {0x7, 0x7, 0x3}, {0x1f, 0x401, 0x3}, {0x7ff, 0x10, 0x5}, {0x7, 0x9, 0xf33f}, {0x3, 0xfffffffa, 0x10000}, {0x200, 0x0, 0x9}, {0x5, 0x2, 0x2}, {0x6, 0xd}, {0x4760, 0x7ff, 0x5}, {0x3, 0x8001, 0x8}, {0x6d, 0x8, 0xe00}, {0x2, 0x401, 0x5}, {0x0, 0xfffffffa, 0xe}, {0xfffffc01, 0xd, 0x2}, {0xffffffff, 0x80, 0x8}, {0x6, 0x1}, {0x1, 0x5, 0x1}, {0x0, 0xfffffffe, 0x5ac}, {0x80, 0x7, 0x6}, {0x8, 0xcc8c, 0xf0eb}, {0x6, 0xbf2, 0x3}, {0x83eb, 0x6, 0x4}, {0x1, 0xe, 0x1}, {0x7, 0x1, 0x2}, {0xd445, 0x7fffffff, 0x1000000}, {0x4, 0x1, 0x8}, {0x623, 0x4, 0x5}, {0x101, 0x1, 0x2}, {0x695, 0xf2, 0x8000}, {0x80000000, 0x7, 0x7}, {0x8, 0x1, 0x1ff}, {0x401, 0xff, 0xfffffffd}, {0xfffffffa, 0x0, 0xffffffff}, {0xffff4008, 0xfffffff8, 0x6}, {0xa, 0xea2f, 0x240}, {0x8, 0xd, 0x4}, {0x5, 0xf673, 0xe}, {0x4, 0x79d, 0x8d}, {0x10000, 0xd, 0x7}, {0x1, 0x7fffffff, 0x20}, {0x7f41e2e1, 0x200}, {0x0, 0x0, 0xfb}, {0x8, 0x4, 0x8001}, {0xfffffff7, 0xb3b7, 0x8}, {0xffffffff, 0xd75, 0x8}, {0xb, 0xfffffffc, 0x4}, {0x8, 0x10000, 0xffffff7f}]}) (async) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 32) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) (async) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f0000787000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x7, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m19.352890054s ago: executing program 7 (id=17888): mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@mode={'mode', 0x3d, 0x499}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x15) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r4, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0xc8) getsockopt$packet_int(r6, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f00000000c0)) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') setxattr$security_ima(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280), &(0x7f0000002300)=@v2={0x3, 0x3, 0x17, 0x80, 0x0, "8d7d2477da0fa4cf08d525b5bbbcd93e85c9aefdf73c84a28c99e92a93815359cb9a4d8212726006971faaba9296d1e57a811fce9277da60e98cda675c4c"}, 0x6, 0x1) lseek(r7, 0x10001, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r5, &(0x7f0000002200), 0x4001) 4m19.351217764s ago: executing program 7 (id=17891): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async) setreuid(0xee00, 0x0) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) (async) r1 = getuid() setreuid(0xee00, r1) (async) setfsgid(0xee01) (async, rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000040)) (async, rerun: 64) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) (rerun: 64) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) (async) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='.\x00') (async, rerun: 32) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) sendto$inet(r2, &(0x7f0000000140), 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) shutdown(r2, 0x1) recvfrom(r2, &(0x7f0000000000)=""/116, 0x74, 0x715, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @remote}}}, 0x88) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 4m18.906478919s ago: executing program 7 (id=17904): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x12b8b000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001180)={{r3}, 0x0, 0x16, @unused=[0x9, 0x3, 0x0, 0x2], @devid}) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) read$FUSE(r4, &(0x7f00000004c0)={0x2020}, 0x2020) write$FUSE_INIT(r4, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000100)={0x0, 0x400000, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x40000000000009, 0x10000, 0x1, 0x6, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200a0b091200000030bd7000fcdbdf2598dea8d30a1f8af4a9eaa5067536ca30b9da19ba9b273fd4e9afe64ff98556e4e543e3382efa1f749fba7f79fcc853610a245338c92c540be7f57e01f33f"], 0x10}}, 0x20008004) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_sfeatures}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x19c, r6, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1c}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4b2d38d2, @mcast2, 0xae}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xecf1}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x58, 0x3, "c049c5c9917131bf20fcb0168769d5517e14fb2a94c55e6d0acbb6aa13503059babcca39105a6c1f22b3a426d68d785b3d8c92022eccfb0ff75ef7e2f7885414f3e3a82fb4060c715540d088b1da0b8beb58eac8"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc447}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x14000}, 0x801) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m18.558920708s ago: executing program 7 (id=17908): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xb0, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_STATUS_MASK={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1000}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000040)=0x9) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000100)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r5, 0x325}, 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 4m18.53446019s ago: executing program 49 (id=17908): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xb0, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_STATUS_MASK={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1000}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000040)=0x9) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000100)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r5, 0x325}, 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 2m29.586651601s ago: executing program 0 (id=20013): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9, 0x800) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000180)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x10000a}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000400)="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", 0x1f000) 2m29.479131677s ago: executing program 0 (id=20014): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) (async) 2m29.475708007s ago: executing program 0 (id=20015): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x50, 0x0, &(0x7f0000000240)) r1 = open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x400, 0x8) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$P9_RWALK(r1, &(0x7f00000003c0)={0x30, 0x6f, 0x1, {0x3, [{0x0, 0x2, 0x6}, {0xd8, 0x0, 0x6}, {0x8}]}}, 0x30) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = accept(r3, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4c, 0x2565}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000001600010000000000000000000a00002c"], 0x20}}, 0x4) recvmsg$can_bcm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000700)=""/74, 0x4a}], 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000002c0)={0x4, {{0xa, 0x4e22, 0x24, @empty, 0x101}}}, 0x88) 2m28.617528686s ago: executing program 0 (id=20021): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8910, &(0x7f00000028c0)={'ip6_vti0\x00', 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) recvmmsg(r1, &(0x7f00000013c0)=[{{&(0x7f0000000100)=@pppol2tp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000180)=""/72, 0x48}, 0x8}, {{&(0x7f0000000200)=@xdp, 0x80, &(0x7f0000001300)=[{&(0x7f0000000280)=""/18, 0x12}, {&(0x7f00000002c0)=""/15, 0xf}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, &(0x7f0000001340)=""/80, 0x50}, 0xd}], 0x2, 0x40000161, &(0x7f0000001440)={0x77359400}) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2228008, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012ea2a400a09001287240000000109021200010000000009040000000f01"], 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x2010, r0, 0x23f8e000) 2m28.072847977s ago: executing program 0 (id=20030): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000007c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x4a, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0x9, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xb000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x21, 0x1, 0xfc}, {0x6000, 0x6000, 0x8, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x4, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x0, 0x5, 0x2000, 0x5000, [0xffffffffffffff47, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xd5dd0001, 0x800b, 0xfffdfffb, 0xfffffffc, 0x0, [{0xc, 0x9, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x5, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x5}, {0x8, 0x10, 0x8}, {0x4, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x8}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x0, 0x9, 0x4, '\x00', 0x25}, {0x0, 0x4, 0x5, '\x00', 0x7}, {0x1, 0x4, 0x80, '\x00', 0x4}, {0x3, 0xf5, 0x6, '\x00', 0xb2}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x7, 0x4, 0x4, '\x00', 0xf}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x3, 0x4}, {0xf, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x53, '\x00', 0x1}, {0x9, 0x2, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0xac, 0x8, 0xfa, '\x00', 0x42}]}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2m28.018029589s ago: executing program 0 (id=20031): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75e, 0xa382) sendfile(r3, r3, 0x0, 0x24002de8) syz_io_uring_complete(0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000180)={0x401, 0xc4, 0x7fff, 0x2, 0xccc, 0x8}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES32, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40000) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) syz_open_dev$loop(&(0x7f0000000140), 0x75e, 0xa382) (async) sendfile(r3, r3, 0x0, 0x24002de8) (async) syz_io_uring_complete(0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000180)={0x401, 0xc4, 0x7fff, 0x2, 0xccc, 0x8}) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES32, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 2m27.972759982s ago: executing program 50 (id=20031): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75e, 0xa382) sendfile(r3, r3, 0x0, 0x24002de8) syz_io_uring_complete(0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000180)={0x401, 0xc4, 0x7fff, 0x2, 0xccc, 0x8}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES32, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40000) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) syz_open_dev$loop(&(0x7f0000000140), 0x75e, 0xa382) (async) sendfile(r3, r3, 0x0, 0x24002de8) (async) syz_io_uring_complete(0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000180)={0x401, 0xc4, 0x7fff, 0x2, 0xccc, 0x8}) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES32, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1m41.134956031s ago: executing program 8 (id=20295): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x4, 0x3, 0x80}) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty, 0xfffffffc}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x3, @private2, 0x1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000140)="4b88d4e3baed4e2eb7324fe6ec99fc91f52fb470c8e8a09493a95e68d76e5d02af4f3b72501187cf27246352898cf701d1ce8c9b1eee0b1e7a50895236b0ea8c2299840378d5bd25e70345562ee7f746a37da0b21a6701940d4192a29c6c81b50328ed0047697a89bdd7a1817f3e804322393711c0", 0x75}, {&(0x7f00000001c0)="94e12341ff2e4802185c1eb96facd6a197e3e54cd2a9a12c30120eeb4da9eff6370a65b4a90e8f8da4a1aca62474b769cbef0b6d17e6e055ddb021255b36f77a69c86fb91145229610e1cf1f3b1a8c96d8ae6eb7c254c0c81e553ac2683c19f6657508d4e1c188c4f806b7e02b689862240689e2a7bb11d312fa33bc7d11ec5b1176d4157363c515f593a876f0704e19945fa3b4f1964e9081b0d527505c5987ca41e18274285c29e09db099b27292f3f9d52cf106f407827ef7f5a7e085f3997dae6a6540aedad24cccd0c1995867bbc9f0acf631522b267b338f03cdff50775a63db02d40901170421c1b3838b19280758a09c12ceb7a539", 0xf9}, {&(0x7f00000002c0)="45c5f0db887b8adc3600754a58da41e0242a9f58c0b92fee90bf7dcb0c3824ce0522806b67f1a734bad17ae2d8d206f905bf3343acfcf83be7cd329e44909de6dd25b094155db8df", 0x48}, {&(0x7f0000000340)="46ae6af339051787923be57275ac1fc2e01324064b573ad3c209533c12861a7b890c18914a1ba6bffdb92b04f27330a706032b4bebaf60f053aec1ee847cfb439514dd0b66be6f3e1f42c03e01448afd386f9b8f46e2fe819ee298eed1d939a2a6e105af9e8be3f7560bb1749af7ba29d8b233006ab01c40ef5a5f63c9c4025c7dc3f89d55599b9adf8b89fa970a56c130be10d53fa0a28b643d4d6a58ff2ac777ae4f1649f11c2d08a9aa49c79bd09af746b892899c241facd165c0780b70d067f574986159cd9517ffebcd13682e024718e47560ce30481a", 0xd9}, {&(0x7f0000000080)="669e7b4ba065913c9ca4c3", 0xb}], 0x6, &(0x7f00000004c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x18}}], 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.133122241s ago: executing program 8 (id=20296): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c64656275673d30781730300000303030303030303030372c006e69e97c9a82ae526d4bf9b14b30ce5896d4b52dfc433961af95368ef0b06b0933fa29b023c4bf18c95a806dbd1ea4d059894526f8179c8c0f8aec9aac4e4f7ada2ea7fd5e6ca48a810a3286153110ce9d816ea2322680def2593a19908bb528150259de6653a57c0657c65e7099249c002819257be6c87f2349259ab8b07029"]) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 1m41.101441583s ago: executing program 8 (id=20297): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000900)="01000000", 0x4}, {&(0x7f0000000200)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28", 0x1a}, {&(0x7f0000000940)="74739b5832d9f06f8d760a", 0xb}], 0x3, 0xfffffff8, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6e74657874ccf0d4f05b379200ee000000000000000007c92e93c31fddfe210a7dce7f4826"]) 1m41.049046606s ago: executing program 8 (id=20299): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x18, r1) sendmsg$AUDIT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x4, 0x70bd2d, 0x25dfdbfb, {0x64, 0x1, 0x2, r1, 0x49, 0x1, 0x5, 0x4, 0x0, 0x1, 0x7}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000004) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000edff22000040"]) write$cgroup_subtree(r2, 0x0, 0x3e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0']) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 1m41.039131626s ago: executing program 8 (id=20301): socket$key(0xf, 0x3, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = syz_clone(0x42000000, &(0x7f0000000200)="2479525ce20475688977895d542caed929d263b0eb015572157a2e493c83b8a7933b003eab1a27966851c8dce5a701712add4e01e42a32143834c1a329ebbf9e2e2bcce9d7831d0835627b4c7d7b2be8ed8bc08ff07a17a7b417b78cce42a1071bdff17828cf891f623ba5ea4f14b9fd078754ad41272cbb98eaa2012ca2dc71892e3116cbc80e228384dbfd3eea6c4ab7ce68c69d9e4e121f80f1ff4043aa71a9c085857ca54bb22f1f6d34e3d9ffd33df55c280f15f8e40d9456f49f391e4c33ce99dce0f6a038930d8063fa1dadbc026c839ed31681d1", 0xd8, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140)="68fd267d03f08614f9a8d77de55cc768ef112e4e573f87b7574ba7084d1d4403c4a14f954b0582a922") sched_setscheduler(r1, 0x0, &(0x7f0000000300)=0x7f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2f, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x1, &(0x7f0000001480)=""/4096, 0x0, 0x1, 0x2}, @fda={0x66646185, 0xa, 0x1000000002, 0x9}, @fd}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 1m40.946878532s ago: executing program 8 (id=20302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000640)={0x11, 0x5, 0x5}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000000c0)={0xac00000000000000, 0x5000, 0xfffdfffffffffffe, 0x0, 0x7}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) r4 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) sync() sync() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r6, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x841, 0x9, 0x4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='FROZEN\x00', 0x7) socket(0x17, 0x3, 0xfb) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)={0x2, 0x1, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x40}}, 0x0) write(r7, &(0x7f0000000280)="240000001e005f0214ffffffffff08001f000000000000000800"/36, 0x24) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sync() sync() sync() ioctl$EVIOCSCLOCKID(r4, 0x40084504, 0x0) 1m24.329933041s ago: executing program 51 (id=20302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000640)={0x11, 0x5, 0x5}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000000c0)={0xac00000000000000, 0x5000, 0xfffdfffffffffffe, 0x0, 0x7}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) r4 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) sync() sync() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r6, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x841, 0x9, 0x4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='FROZEN\x00', 0x7) socket(0x17, 0x3, 0xfb) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)={0x2, 0x1, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x40}}, 0x0) write(r7, &(0x7f0000000280)="240000001e005f0214ffffffffff08001f000000000000000800"/36, 0x24) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sync() sync() sync() ioctl$EVIOCSCLOCKID(r4, 0x40084504, 0x0) 20.70638951s ago: executing program 2 (id=21748): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000c, 0x11, r0, 0xdd259000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 20.658359302s ago: executing program 2 (id=21749): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x3, 0x3a, '.^', 0x3a, '&]!/', 0x3a, './cgroup', 0x3a, [0x46, 0x46]}, 0x30) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000040)="91", 0x1) getsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, &(0x7f0000000080)) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x810, r0, 0x5bc7000) 20.657614272s ago: executing program 2 (id=21750): read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000000), 0x1001) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffff5, 0x0, 0x0}) 20.656844752s ago: executing program 2 (id=21751): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000000)) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.650077753s ago: executing program 2 (id=21753): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) (async) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}], [], 0x6b}}) (async) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f0000000300)=@unlock_all, 0xb) (async) write$vga_arbiter(r5, &(0x7f0000000280)=ANY=[], 0xe) 20.587852386s ago: executing program 2 (id=21756): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) epoll_create1(0x80000) sync() sync() sync() r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="307ddfb9", 0x4}, {&(0x7f0000000340)="ced98c1a5f5a93258dfa9a8c31878af8d7be921a531da9e6c50efdba96722424d55ce610a4d9b534b3aa09618dfc04f5504e30a263ad3fedf0a7381a8a", 0x3d}], 0x2}}], 0x3, 0x2000c8c0) write(0xffffffffffffffff, &(0x7f00000002c0)="fc00000015000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a", 0x3f) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93503d", 0x3}], 0x1}}], 0x1, 0x40) sync() recvmmsg(r1, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000001280)=""/79, 0x45}], 0x2}, 0xc8b}], 0x1, 0x120, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000880)={'ip_vti0\x00', r6, 0x8000, 0x700, 0x9, 0x7c864e6a, {{0x38, 0x4, 0x1, 0x9, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@end, @generic={0x89, 0x4, 'F%'}, @timestamp_prespec={0x44, 0x34, 0x7f, 0x3, 0x3, [{@broadcast, 0x8}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@broadcast, 0x7}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @cipso={0x86, 0x7d, 0x1, [{0x1, 0xd, "86c805b7167b22b9c5c50e"}, {0x6, 0x6, "afd6d8a1"}, {0x2, 0x7, "1328cbef18"}, {0x6, 0x4, "0bba"}, {0x5, 0xe, "13fc68e4f7f91d3efd96899d"}, {0x6, 0xc, "3a60f6d893768ab547b9"}, {0x1, 0x12, "5de0c1a07a59cb560362a37be3df4c7c"}, {0x0, 0xc, "40ed321045d31d7e2ed8"}, {0x1, 0x12, "d4d1b4e77806f1f33052a8cdeb573d93"}, {0x0, 0xf, "2ec651849688edd3fe4644af2a"}]}, @end, @end, @ssrr={0x89, 0x7, 0x92, [@empty]}, @timestamp={0x44, 0xc, 0xa8, 0x0, 0x5, [0x9e, 0x9]}]}}}}}) sync() sync() r7 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x124, 0x0, &(0x7f0000000580)=[@acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x2}, @register_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x1, &(0x7f0000000980)=""/183, 0xb7}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x40}}, 0x400}, @register_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x9, 0x2, 0xb}, @fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0x5, 0x0, 0x22}}, &(0x7f0000000540)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @increfs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x15}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/154, 0x9a, 0x0, 0x25}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 5.412032764s ago: executing program 3 (id=21959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x8, 0x3, 0xeb9, 0x3, 0x8, "983a1facc73d0b1056e0ecd47207a148a560a7", 0x2, 0x63}) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) 5.260378153s ago: executing program 3 (id=21962): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x4}, 0x38) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000000)=""/74, 0x329000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0x6}, 0x10) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x180000000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') read$FUSE(r5, &(0x7f0000000240)={0x2020}, 0x2020) exit(0xfffffffffffffff7) close_range(r0, 0xffffffffffffffff, 0x0) 4.392307502s ago: executing program 52 (id=21756): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) epoll_create1(0x80000) sync() sync() sync() r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="307ddfb9", 0x4}, {&(0x7f0000000340)="ced98c1a5f5a93258dfa9a8c31878af8d7be921a531da9e6c50efdba96722424d55ce610a4d9b534b3aa09618dfc04f5504e30a263ad3fedf0a7381a8a", 0x3d}], 0x2}}], 0x3, 0x2000c8c0) write(0xffffffffffffffff, &(0x7f00000002c0)="fc00000015000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a", 0x3f) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93503d", 0x3}], 0x1}}], 0x1, 0x40) sync() recvmmsg(r1, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000001280)=""/79, 0x45}], 0x2}, 0xc8b}], 0x1, 0x120, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000880)={'ip_vti0\x00', r6, 0x8000, 0x700, 0x9, 0x7c864e6a, {{0x38, 0x4, 0x1, 0x9, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@end, @generic={0x89, 0x4, 'F%'}, @timestamp_prespec={0x44, 0x34, 0x7f, 0x3, 0x3, [{@broadcast, 0x8}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@broadcast, 0x7}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @cipso={0x86, 0x7d, 0x1, [{0x1, 0xd, "86c805b7167b22b9c5c50e"}, {0x6, 0x6, "afd6d8a1"}, {0x2, 0x7, "1328cbef18"}, {0x6, 0x4, "0bba"}, {0x5, 0xe, "13fc68e4f7f91d3efd96899d"}, {0x6, 0xc, "3a60f6d893768ab547b9"}, {0x1, 0x12, "5de0c1a07a59cb560362a37be3df4c7c"}, {0x0, 0xc, "40ed321045d31d7e2ed8"}, {0x1, 0x12, "d4d1b4e77806f1f33052a8cdeb573d93"}, {0x0, 0xf, "2ec651849688edd3fe4644af2a"}]}, @end, @end, @ssrr={0x89, 0x7, 0x92, [@empty]}, @timestamp={0x44, 0xc, 0xa8, 0x0, 0x5, [0x9e, 0x9]}]}}}}}) sync() sync() r7 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x124, 0x0, &(0x7f0000000580)=[@acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x2}, @register_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x1, &(0x7f0000000980)=""/183, 0xb7}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x40}}, 0x400}, @register_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x9, 0x2, 0xb}, @fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0x5, 0x0, 0x22}}, &(0x7f0000000540)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @increfs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x15}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/154, 0x9a, 0x0, 0x25}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 4.306880407s ago: executing program 3 (id=21978): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xfffffffe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, 0x0) fstat(0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [{0x2, 0x6, r0}, {0x2, 0x5, r1}]}, 0x34, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 4.234056701s ago: executing program 3 (id=21981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x3b) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 4.085203719s ago: executing program 3 (id=21983): futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583", @ANYRES16], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x40305839, &(0x7f0000000540)={'wg0\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) (async) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000100)) futex(&(0x7f000000cffc)=0x2, 0xa, 0x0, 0x0, 0x0, 0x1000000) (async, rerun: 64) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (rerun: 64) 1.074472029s ago: executing program 6 (id=22035): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x490200, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x11, r1, 0xf648e000) r2 = syz_usb_connect$cdc_ncm(0x0, 0xc1, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "bf96067bf0bb"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x2}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x10, 0x2, 0xb, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm_detail={0x1f, 0x24, 0x13, 0x81, "3f97629b9676841d777b64b02cb340563213b99fd943be181b4773"}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x81}, @obex={0x5, 0x24, 0x15, 0x4840}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r3, 0x8008b705, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x20010, 0xd, 0x2010, 0xe, 0x10, 0x10, 0x10, 0x10, 0x9, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x7ff}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x4a, 0x2, 0x10000, 0x50, @mcast1, @remote, 0x8010, 0x60, 0x1, 0x7}}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1c0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x2) removexattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fstat(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)={0x10, 0x42, 0x1}, 0x10}, {&(0x7f0000002e40)={0xa3c, 0x14, 0x300, 0x70bd2c, 0x5, "", [@typed={0x8, 0x64, 0x0, 0x0, @uid=r9}, @nested={0x42, 0x71, 0x0, 0x1, [@typed={0x8, 0x9c, 0x0, 0x0, @fd}, @generic="2a8cb52539bcf925d3ec916f267d622292c30e2075c6c9c32afa5e36691a95d5948cb7f9221cbeb886768ad35ac9b8b31a3532574d5b"]}, @nested={0x9da, 0x11a, 0x0, 0x1, [@nested={0x4, 0x10}, @nested={0x897, 0xc8, 0x0, 0x1, [@generic="8662254de12e30d4ba5654457ce759f0d1c477ef61a0", @typed={0x14, 0x22, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x29a, 0xac, 0x0, 0x1, [@generic="b3c84b4dd2c2b907a8fa7ffe6acad82e1e5630614f6c46aebc728a994d916dbcb22c6513a9f76ea8f913fcc7a7299317a7c0b57466f47b3443a22e0470db35484b9739054a8d694c466b07e6", @typed={0xb, 0x23, 0x0, 0x0, @str='ns/mnt\x00'}, @nested={0x142, 0x12, 0x0, 0x1, [@generic="d9b2ea65f0d140fea2657665f30d92386cac0a0d566d6f94b34626f226f17a15b08e953ac297a51b9f2b77c755fb1052ce0c63d173393215f7680d085fd4d09b8155f61aeae560458707d4e1c9daeb6a8f825c8c3fa4", @nested={0x4, 0xba}, @generic="fa255c044c5a34d96acc97d7859430dd4aac885dc0b764dc2b844234f65879abe0bfb5174684e25a27266f6f6423e7e866781ceecf47dec91a432f35eec92266a7c00209255c2556fad234a3483f6dfca5c1269644f1ecd8a8504609863b7d697ccb7f2656c3c48fc11d54f38ca8ba3b58ca8b3d3e9fad1bea3bcb15261b2669978d2064fd54a5d58b15c98ff072365f510876b9643204f24c7192a468306b476c924297bb3e5d82786765a206694374b96aa3102da8af6efcf0ce29c8e879058b9c6db9a62d3380c756f9bb588f2ec3", @typed={0x8, 0x134, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x13b}, @nested={0x4, 0xe9}]}, @typed={0x21, 0x7b, 0x0, 0x0, @binary="66e28de4d1a3818a0478ffa100439305ecae8cf822b0cfe5e13612c702"}, @generic="6f1b761b071dc7010f6620753204d3b321a5ed2fec5e7ebc0a3ea0a0ae7d519b000ac14c223a02754613d7b89f007a781521f2677c3743894ac3ebad42579ac798e4107e3d2cd91f9358790b99a4b97db67d3f50c4f66a2c079935158460a33010ed67f48799748cad1ea959350f4d48c23f1c902db77741dfb3ce9962f8f5c9b5129978414d98ec01bb45db68382a19f5cae3a5fe18da4b74232b35acc93581e49462fe327fcddb47d156c2c130ffb8ef757b77c1c288e7ce54b4a85b4bd9380c2a07bcff49115331f33d9bedbdc072a5e48494c611"]}, @nested={0x4b6, 0xdd, 0x0, 0x1, [@typed={0xc, 0xde, 0x0, 0x0, @str='syztnl1\x00'}, @nested={0x210, 0xd6, 0x0, 0x1, [@generic="b642cac6e266e9165c2a193e1f265049b8ec325362fd35e1044877c1e9ff683b6bf0544a02aebfa7ea1d71d07b49a4da0bf703f9b1951ed105e6a926865da9207da44f77860ea9f36c9ef0d9f8faee26ee70f0764df34044c4d03355725e01ed80a07a0808dd659ee4b76cb3c5b10ad1b37945ba4f6c53779528f691bed1b104187b8dd9588db6bee5ddb6c4fc692eb85c1ee06c", @typed={0x4, 0x6}, @nested={0x4, 0x7c}, @nested={0x16a, 0x42, 0x0, 0x1, [@generic="e7da86d78b57282cfedc53fd278a10d47237abd2eb7445050784ce50babfa7362a7584611c04dedaca6dd30ec741bcfab9e923075e9166a0a4e8580c1a6e3c20317c5e0945af1d9d45cfac0b2ff8d2461c17d797fad8f595ade2a41df17e3951e515d2036a63805de93b518a11ff364131bcc9884dd095f95893521d92e228b6d24d0d1ea753174a5b0aeb72915e265ff7945ea08d0242066bc6e0929e43ccf7a7c311bdb9fb6ec397b197adbbde1e8a4031a39016d08b8e8f51e4652bbeb3f28e3fde86b60af51e797a2fd6c941eeea257f8194ac93baa4114c48d016949d3f88", @typed={0x8, 0xaf, 0x0, 0x0, @ipv4=@empty}, @generic="4b600f571f9edd", @generic="804418c3a82eb9e0c2464433c58ffef1aafd5013f514bfc97e5d4774b45eab3df6411bd9c1e09c4d10771b04ed4779006ef341d2a4a0741fb1371de7fe102300ca16572ba9f3b2d5e48d255ac2bf77f08c749359d931d709d9b2ff129faa6d4282cd252327b32cb2e062b1691338f8011e3e68f0c496"]}, @nested={0x4, 0x7c}]}, @generic="ed7b27bbecc0a0263affb409a4549799fe960550b1b46ba4018fc329b5199eee37d63f2c8cb5c042cb815fd71254ebb6842a8e3f8024494f378a3f8fa317aae5bc59743d842bf5831d9808353f87c075da1c03cdb530c3eb125767d9c4177bafb9aa103fa86c7f06174470ceb12e581cbb5780820e9f07c4f308712dbb547d348336c4b2", @generic="3ca007794b55a522146ba0ee851782e7d351f34cbc0eb75fccedfb5682c52263b2a44ebb2a8253ced016ea6fcff0ab7161f79656507714c3b762f90605e489bcb87c08526daea9256115f94d462c1a659e757a331715589dcc91d18637b42a9c1607e9da7b501481e7a49b675e132ea493c7a4f1013f1042b48a942229402a", @generic="d99ae3b10bdef53b65bc076fba5a031e30c96a1c3dccd8e79783060cf790d4dd2ba9b8f499be9c061122b350b7eb6d0c0003446c75531d355106d611d7e70b8037422f041e8e6ba74541429139d350cef6d015604644bfbfec7035c0f2cbb0a8d3c90cbd49ac42c13d875803fa69d79e06dcbf2ecb45ca05cda32404", @typed={0x8, 0x105, 0x0, 0x0, @uid=r9}, @typed={0x0, 0xf8, 0x0, 0x0, @ipv6=@private1}, @typed={0x0, 0x8d, 0x0, 0x0, @str='/dev/rnullb0\x00'}, @generic="1934cbed9a6a4d722fc6a7e94d17114478d43839454865d42e59a5046dd46650a197e994b937ceebbfcbd93a6f9d611189aaa2c4408af43397885ac030a1ff7e", @nested={0xa0, 0xb7, 0x0, 0x1, [@typed={0x9c, 0xa6, 0x0, 0x0, @binary="6572b4b27387f26e43735ca1a9327dcca27ce6cf002e03325f0e5083007469f7e04355c43c22e92c96cc406bfc7e255c37e319006a130ec43c3558feddee141981caf5930d24494d571460ec8220db880f921b1064931c3b0106e10bb9adeb2227aa5855587c6f92ba80728e8db59a1ac2b9829e16a32b3d372afc6d74aea9298a2c96221441b2b1c0967dcdd5e6c99fb17ea3a29b1e56a4"}]}]}, @nested={0xe0, 0x110, 0x0, 0x1, [@generic="a615cc7885f4ab87e66f66da3a4a93e705e2d809393d1ea0289e80a46788593c8c9a324c4d4a5eea11220dbf4215fac7f8fe8e077efb0524694fb4a3b5766926773395c7c2a85d349e62aa0b1d4f926afeec8c3fbb9e48e7f2e79120fe90bbd44cef06d7dcb4b16902bf4cf6845b3d5cc1dee2a3d66fe95d357e3e19ed1db236cfc7dad8cb4819790173f8ea24f118e4f83ef53bb3bbcbf93149355c4249636737b71bfb691efb3158d74ba31b873e6af4b7d75c53f5cdf08cd0fd", @generic="f42fe1e696c98a196e3b4363543b9a4bfe465c83f709f61a9d", @nested={0x8, 0x147, 0x0, 0x1, [@generic="92a012d6fdfdee31125c5c11c8dbf96297ec609d9feb7af984cc1f3201c580c3233623246e60e1662695d7c05628fb5392e42d48558869cc59d0a0a23ac142848faf4ecf19e5ba7eb6b5c0f24c6f5151"]}]}, @typed={0x8, 0x146, 0x0, 0x0, @uid=r9}, @typed={0x8, 0x142, 0x0, 0x0, @uid=r9}, @generic="8447ab18880554a96a8388fd72ac8cf6412424bca3", @typed={0x8, 0x115, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @generic="9bc9f1077cd57f76191a08fda730ceaffa4ebab42ad9dcf4b996f0645d27879ff3ffd9581b9a9c4e519b6c6f4a4435fa02bae4434cf6", @generic="906772d56fbf05654db4ce4deba428bc1af58333e7f28794166c39c86abcc2f018e5322f9269eaaae931017c936423418bdd0e1631b9a92f7bcff6e24badf0e3c89505778d47d416cc21d2dbf785c5f8f0b8cd8c4c22b518298abee8c32eef7ed2946272f78094623a6b2ab6570381192e5a19a2bd96cdb3a5f5cd8227c39fd69688719c189656110cce27632aed6da4cce9fa125ceca4a02c48e2b3db34773199de0fc785542f202a3fb2ca515c2028b6cc652ee5b95cc0a278c2fd6f275d11e9c9e23d1b0add6444bd82054785e661cd3bf7c2d69439216612419ee67a79006b21b6b261a52e46d5cce2856bd6761df306d1ffd5990653", @nested={0x4, 0x95}, @typed={0x5, 0x48, 0x0, 0x0, @pid}]}, @typed={0x4, 0x14e}]}, 0xa3c}], 0x2}, 0x4000040) 520.316171ms ago: executing program 6 (id=22043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x2}, {0x1}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x20008814}, 0xc880) r3 = getpid() syz_open_procfs$userns(r3, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000002380)='net/udp\x00') pread64(r4, &(0x7f0000000080)=""/233, 0xfe58, 0x800000094) r5 = syz_pidfd_open(r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) ioctl$sock_proto_private(r6, 0x89ef, &(0x7f0000000080)="611a6536dd9a765f6ab81d0363ae14122813b5ec57009885cd1d82905527c4fe9a58850bcba0c9eb4c9d43f9ba68631e3408b6645ed8e2a541064057affd1234eb13e36ac95fe16ddb20a4d8f6e44d1fa99bd3248474c9e4a09122723d254ab41c5651dec88d9d01f1b4ee137df954e9873909ef54780a5c97009ed451347a914f0c225f87b34a77c1b793da1fc395672c4612b5054be6") umount2(&(0x7f0000000040)='.\x00', 0x2) 444.122955ms ago: executing program 6 (id=22047): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000200)="0b041000e0ff02000200477baa96a13bb100000000008864110071225aac2191", 0x20, 0x4008000, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x77, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x1, 0xcc01, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x266, 0x0, 0x6, 0x29, 0x0, @multicast1, @broadcast}}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 377.098359ms ago: executing program 6 (id=22049): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)={0x3, 'vlan1\x00', {0x9}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000"], 0x24, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/nf_conntrack\x00') read$FUSE(r4, &(0x7f0000000a40)={0x2020}, 0x2020) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x4800, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) io_setup(0xb, &(0x7f0000000080)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffda4, 0x3, 0x0, 0x2}]) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, 0x0) fstat(0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [{0x2, 0x6, r6}, {0x2, 0x5, r7}]}, 0x34, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 322.247562ms ago: executing program 6 (id=22050): r0 = gettid() ioprio_get$pid(0x3, r0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000001340)) r2 = syz_open_procfs(r0, &(0x7f0000000000)='net/raw\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000097}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r7 = dup(r6) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x20) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000040), 0x1004) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x14, r8, 0x5bc7000) fchdir(r2) 258.974716ms ago: executing program 4 (id=22052): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x11000000009, 0x101000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000004c0)=""/127) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48a01, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x800, 0x8400) r3 = syz_clone(0x30080, &(0x7f00000000c0)="13186a1c016204c9e93c76019ae5bf6eeb5f3c2fa5605a53792916377ff5831c1b785e369ae890e1bc833f155583ff4e31a7ea515b1f0b13c3a56e429a22b4bc33f82c9eb5d7edff193387c142f7002a2af3284c35aa20658346", 0x5a, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000400)="b5794f5cc990f7562f64ddf7b09784bae748a5895562883d3b665469612e73c0f970aea00beebb0d73b17320e5c88434fadd9d4ea7d15f5fb1bd90a0a5a2482cd706ded92d51907d59751b9fb54a2438086d1048a0f81d9c5bdb9a8561e193f0c8b342918e1faa590d72efeb002d43539c05c9ae59e2c38ff48b9187fb268db0fe2e37f948b990feeef0dc0f0415862c0bcac12a33dc20437085f0f89b32bbf3fb58166dd48408a9c59d11123989015d3e32a60c8b407ab552d33c2df946") fcntl$setown(0xffffffffffffffff, 0x8, r3) ioctl$BLKRRPART(r2, 0x125f, 0x0) 252.174806ms ago: executing program 6 (id=22053): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000600)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x9c, 0x0, &(0x7f0000000280)=[@enter_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x4, 0x1, 0x23}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x1000}, @enter_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x5, 0x2, 0x2b}, @flat=@handle={0x73682a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}, @exit_looper], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20600, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000300)={"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"}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000bc0)={0x2, 0x0, @ioapic={0x33325000, 0xb, 0x400000a, 0xfffffffc, 0x0, [{0xc, 0x6, 0x5, '\x00', 0xb4}, {0x83, 0x7, 0x4, '\x00', 0x4b}, {0xfc, 0xc, 0x7, '\x00', 0xf8}, {0x0, 0x8, 0x40, '\x00', 0x7}, {0x8, 0x10, 0x8, '\x00', 0x88}, {0x2, 0x1, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0x8, '\x00', 0x1}, {0x5, 0x7, 0x6, '\x00', 0x4}, {0x2, 0xd, 0x15, '\x00', 0x8}, {0x6, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x87, 0x65, 0xb, '\x00', 0xfd}, {0x6, 0x9b, 0x19, '\x00', 0x5}, {0x7, 0x2, 0x2, '\x00', 0x7}, {0xef, 0x6, 0x29, '\x00', 0x4}, {0xb, 0x6, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0xfc, 0xfd, 0x7, '\x00', 0xff}, {0x92, 0x9, 0xfa}]}}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000003480)=ANY=[@ANYBLOB="1300000065ffff001000000600395032303030"], 0x13) r7 = dup(r6) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000200)={@private2}, 0x14) r10 = socket$xdp(0x2c, 0x3, 0x0) fsetxattr$trusted_overlay_origin(r10, &(0x7f0000000000), 0x0, 0x0, 0x3) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r7, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x40200, 0x7ff, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x9}}, 0x50) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_usb_control_io$hid(r11, &(0x7f0000000040)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00#)'], 0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="0c00e6c4000000", @ANYRESHEX=r7]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f00000025c0)=[@request_death={0x400c6313, 0x8000}], 0x0, 0x0, 0x0}) preadv2(r8, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/187, 0xbb}, {&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f0000000540)=""/69, 0x45}], 0x4, 0x1, 0xf57, 0x10) 251.639496ms ago: executing program 9 (id=22054): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) read(r0, &(0x7f0000000040)=""/37, 0x25) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x8000) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8051}, 0x4001) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, r5, &(0x7f00000003c0)={0x0, 0x6, 0x1, 0x1}) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r2) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r6, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) fcntl$getflags(r2, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x208, r7, 0x500, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x66}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x0, 0x1, 0x7, 0x0, {0xdc4, 0x5, 0x0, 0x200, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x6, 0x2e}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x2, 0x0, {0x8, 0x8, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x300, 0x5, 0x1}}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x80000000}, @NL80211_ATTR_KEYS={0x18, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_IE={0x14e, 0x2a, [@tim={0x5, 0x6c, {0x5, 0x7d, 0x0, "4aad73832f3d9c5fdbf9a23c833e5d91004bf652f336bd5230aa2de03a29876ed816934bd28311d75b9eaca938d31bf3708e958c8edd8847974277e4620031565132a588963cf8ced0215ab381ccadd08196f4f714cd5c1ee7d084dc48ef0b0aa2464bb5e0862633e4"}}, @random_vendor={0xdd, 0xda, "6d506be864bd44aaaaf78910ab57383650c71cc64577e55bb9a78209a06ba620d78009ff5435ee7f95f96448afbf5754d8bbb95ee13496953cc66dd4b132ff8aaee0ba4691a98689763e180d41d97fe0a1ca770c2cf22030658488146470b5b4715de6ea8aad755bb776ee7f950d276f77eb39a98d797e31dd86f1c0cb0ba3152a0c1bca9a8bc0bea6b12d0fa257f571d23a5f865e863726f65419d90c7dc15e364f213bf57a1d1da7e7fa34a075eca2ea2d7287c938ee822092a4d80f06c7ae9a88fd9631697bd461d91918f4175c4d80d8dcac2e8f0609b8d9"}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x50}, 0x8000) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1b) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r9, 0xf502, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000009c0)=@add_del={0x2, &(0x7f0000000980)='vlan1\x00'}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x8, 0x44, @udp='udp:syz0\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000e004) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000b40)={0xdf, 0x0, 0x8000}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r2) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000dc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x118, r11, 0x408, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r7, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x10000, 0x13}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48011}, 0x5) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000f40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r12, &(0x7f0000002f80)={0x28, 0xb225b980d8542d2b, r13, {{0x8, 0x2, 0x0, r4}}}, 0x28) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000002fc0)) 221.513017ms ago: executing program 4 (id=22055): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x100581a, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0xba9, 0x5, 0x5, 0x4}, {0x4e0, 0x8, 0x2, 0x3}]}, 0x10) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendto$packet(r0, &(0x7f0000000080)="d6795ca789b5958f52ff1c6b1eca33db41a1f1a25fd4ceb3b6e7fca060b54c5a4f6a61b87d62dcc3496f2c2586454fa7efb279f595b00abf12dd19ec0edb4cdffe986c13e297b8527b3febb83e8d9f5712b46ef7d6607de00aa5e40b7538d29aff071fc3906e72a16f45674fa6b846c2d4693dd45e3a82475b40ce9a164e82e84785", 0x82, 0x10, &(0x7f0000000180)={0x11, 0x5, r2, 0x1, 0x9, 0x6, @random="5933ea13a912"}, 0x14) 220.890067ms ago: executing program 9 (id=22056): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'erspan0\x00', {0x300}, 0x4b5d}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000380)="f6ace1fe", 0x4, 0xe045, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0xfe6c) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file1\x00'}, 0x6e) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@private2}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="40000000130001402bbd7000f8988042f62c3c7a439a69f1", @ANYRES32=0x0, @ANYBLOB="240025800c002e80080092000080000014001c0020010000000000000000000000000001"], 0x40}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 198.768809ms ago: executing program 4 (id=22057): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x543, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockname$packet(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x14, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000000180)=0x40, 0x4) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) (async) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 142.953262ms ago: executing program 9 (id=22058): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3d29) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000300)=0x80, 0x4) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x200000) (async, rerun: 64) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (rerun: 64) 142.524132ms ago: executing program 4 (id=22059): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x3e0, 0x1f0, 0x1f0, 0x1f0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000080), 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 142.126552ms ago: executing program 9 (id=22060): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000000180)=[{&(0x7f0000000780)=""/13, 0xd}, {&(0x7f0000000280)=""/172, 0xac}, {&(0x7f00000000c0)=""/110, 0x6e}], 0x3, &(0x7f0000000340)=""/125, 0x7d}, 0x8}, {{&(0x7f00000003c0)=@nl=@proc, 0x80, &(0x7f0000000600)=[{&(0x7f00000007c0)=""/172, 0xac}, {&(0x7f0000000d80)=""/238, 0xee}, {&(0x7f00000001c0)=""/10, 0xa}], 0x3}, 0x1}, {{&(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001180)=""/4090, 0xffa}, {&(0x7f00000006c0)=""/182, 0xb6}, {&(0x7f0000000cc0)=""/180, 0xb4}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f0000000880)=""/63, 0x3f}, {&(0x7f00000008c0)=""/234, 0xea}, {&(0x7f00000009c0)=""/196, 0xc4}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000ac0)=""/51, 0x33}], 0x9, &(0x7f0000000bc0)=""/49, 0x31}, 0x5eb}], 0x3, 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 75.766866ms ago: executing program 4 (id=22061): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 74.504606ms ago: executing program 3 (id=22062): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000204) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) r1 = inotify_init1(0x800) fcntl$getownex(r1, 0x10, &(0x7f0000001980)={0x0, 0x0}) lstat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r6 = syz_clone(0xa08100, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000480)={0x2, 0x0, 0x100000000, 0x40, r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) keyctl$chown(0x4, 0x0, r8, r9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a80)={0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001dc0)='/proc/vmstat\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001e40)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000400)="d79f5e3ff19f73b4d585c852c3be641d17b2164c548925d8d7b5b8c4095aace41448d346f23c0b499c41dbde74829990b31df265952d2209e82fd205ab9ef3cc5af7f0311ec06c4e627ee6e189551f805c499ce233bf0c54d5a33da9bc2b822905ae23361b2493c61b86ddaaa4f408030f8af8244eaad89a0f49936e787842b97166963b17c348041c8a702ec59c7bcb9667bf", 0x93}, {&(0x7f00000004c0)="433e3d06a7f804b20f3953bc9c9e788029eaa239416efc875b3181e6d68edf7ed5221971ec40a6815964aafe22d39df1ba522d676d7047503f09c0e15f6c36d66f5060b664cadba18f36ab1358c67df983c66d7b92503d818d98f0351915985538db97e4d61380109c51b15afc236a66dcd545213817d3e4a2d4e469c37927f58717b5a89f7e03883c0415bb5354760896e8114f668ad375187f1ec6982fa9183945e767860a0b8b1a963d32bd0fdf70eac561", 0xb3}, {&(0x7f0000000600)="539386bc30ca5baaaf2fdb4cc1b586fd9583ced241d2bc9c61371a166012452cd1c3345c275371ed16734668eff5b8d53009dc30a61c4a70144677244b6fbe9f88a1a9ef26cec0082a43094051298d637df0042e8406bcafbc033f18ca23bc39f65a17ed5d8682a419854c978a87841d752bc8a0b8df587f12eb6dce5585b6b4091cfbd6053a142d8f298f10d9dd175350e62e8788bee707c9683ea2f8c70470ac806bd3471044c55f311d70b525047ec545682c98b3bd24e12b252689f2f5b4ba910f4cdaa0e86b63ffff07dd1c2bc0df79562bcb88b7a218b5ec600edac40389a2a1cab02f357918b67849f534211481697a", 0xf3}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="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", 0xff}, {&(0x7f0000001800)="05577b54c544413267a1ff0c42430bdd255ce5f0addd6367ff256be119d6cedb7ab0500acaec60726bb57a354737687e7ff2d9afbd4d92902403119533c71534345fdfaa06196806e292fffcadfbff5aa0ac3bc841d4dbdefdf88ad401cc81cc9ec4c8bfd20dd8b6cb666cdf8cf8fe63c46bda7b4de544b6e9bca7eb92f347301a28adf4e641353062e1ea29816a4f818f", 0x91}, {&(0x7f00000018c0)="f54ec59aa82a6b67a9438102cb01e1416c1a563412771f6841ed36714fff49854322d6b4862136321d02b0dc1c2954a5da4d657c9d6a3417bd8c035dbdfb9f289bdc145a20b9918fb4094976ca0ba682db09e34da382d442b5d261153e15b958805aaddfb4f7784272374108c866202e7c23dd677623cb31299a3830e62bb00ec9690a9d1652c5c909c5a84957167fe7c3ba2025336c6f60250312e342ddd52eb27948b4409fa8a85896cc18475495f10e172cd471673da238fb47f4acefc9", 0xbf}], 0x7, &(0x7f0000001b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, 0xffffffffffffffff}}}], 0xc0, 0x48040}}, {{&(0x7f0000001bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001c40)}, {&(0x7f0000001c80)="526ac2d39ee2ebb9bb8a472b274619d788fc1ae3343fd3404163cade52d69c5de28018aec1380ad6e3c85b96a8412dd61ea84da2dd9ecab561a4154dfd349727aac193591acbcb0cf8a4af25a0a5b829455eda6abfbf59ec289e0ec589abeabf9ca07a54446076d1d04f8dc8ebda1dd2f3763d6bae4052d3c347743e652332d46deabae6773458f21e54ccd01f005955084b286b45d3b6c923699fbbb64b0adbf7f0845b8729ad20ccb90a587440e8a1fae6e58d3a2de23dfe8af579a17aa7cbd450867f1e1ba90d5d65f1cee8cf2f687d16", 0xd2}], 0x2, &(0x7f0000001e00)=[@rights={{0x28, 0x1, 0x1, [r0, r12, r1, r1, r13, r1]}}], 0x28, 0x4800}}], 0x2, 0x48050) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000526) r14 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r14, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+') mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0069f793b60c714796416f3632ff352f41cf7e30"]) add_key$user(0x0, 0x0, &(0x7f0000000080)='YK', 0x2, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="f0", 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4044081) r15 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r15) ptrace$setregs(0xd, r15, 0x200, &(0x7f0000000540)) ptrace$cont(0x20, r15, 0x0, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 54.799967ms ago: executing program 9 (id=22063): mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 2.66352ms ago: executing program 4 (id=22064): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25190000000c00018008c1a9000100000064000180080003000300000008000100", @ANYRES32, @ANYBLOB="080003000000000014"], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x40008d4) r0 = socket(0x10, 0x3, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'bond_slave_1\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r7, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@val={0x8, 0x12b, 0xffffffff}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x13}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r7, 0x724, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c804}, 0x4008895) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r5, @ANYBLOB="010328bd700006dcdf250000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x3a3, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="ac000000300010002bbd7000fedbdf256300d58004004a8004001380060029007b000000f49d4f3b3f9cf0088ec0c56603382507abb5ca3d978a910fbf4087e46ac61ea220fef6c747724f09f2cc61fe9e0d0808f976d3fc7c255b37b4e9db1400070000000000000000000000ffffac1e00010010005a800400a080040042800400c88028001e00965bbfa9477d5340440c19ed1aee563d81319da8604eada72ea7e7b76d28858edeb77d74"], 0xac}], 0x1}, 0x4000) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) restart_syscall() getrusage(0xfffffffffffffffe, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) restart_syscall() r9 = getpgid(0xffffffffffffffff) ioctl$BINDER_FREEZE(r8, 0x400c620e, &(0x7f0000000100)={r9, 0x1, 0x800}) 0s ago: executing program 9 (id=22065): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000280)=0x2c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x80000001, 0x4) r3 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @auto=[0x35, 0x61, 0x31, 0x35, 0x5c, 0x36, 0x66, 0x35, 0x64, 0x30, 0x37, 0x37, 0x36, 0x63, 0x63, 0x64]}, &(0x7f00000001c0)={0x0, "5d18e7e4eaafd55a2084e88d16f984a683d195367ae93d0ad985bff3af8adca6dbd8ec2ecdf7ffde2707b805349c5b64ead83299b8f9a098b4380692472d7758", 0x36}, 0x48, 0x0) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='proc\x00', r3) kernel console output (not intermixed with test programs): ] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1111.577810][T25385] veth1: left allmulticast mode [ 1111.689326][ T9] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1111.859845][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1111.867696][ T9] usb 9-1: config index 0 descriptor too short (expected 25953, got 27) [ 1111.881910][ T9] usb 9-1: config 9 has an invalid interface number: 144 but max is 0 [ 1111.898735][ T9] usb 9-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.980175][ T9] usb 9-1: config 9 has no interface number 0 [ 1111.986464][ T9] usb 9-1: config 9 interface 144 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1111.999749][ T9] usb 9-1: config 9 interface 144 has no altsetting 0 [ 1112.008047][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=0927, bcdDevice=4b.68 [ 1112.017322][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.025520][ T9] usb 9-1: Product: syz [ 1112.029995][ T9] usb 9-1: Manufacturer: syz [ 1112.035184][ T9] usb 9-1: SerialNumber: syz [ 1112.044287][ T9] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1112.265049][T25458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 1112.266800][ T9] r8152 9-1:9.144: Expected endpoints are not found [ 1112.284900][ T9] r8152-cfgselector 9-1: USB disconnect, device number 46 [ 1112.446668][T25532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19786'. [ 1112.456589][T25532] 9pnet_fd: Insufficient options for proto=fd [ 1112.826249][T25548] netlink: 'syz.8.19793': attribute type 2 has an invalid length. [ 1112.841310][T25550] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19794'. [ 1112.858519][T25554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1112.858598][T25554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1112.865522][T25554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177 [ 1112.873627][T25554] netlink: 24 bytes leftover after parsing attributes in process `syz.8.19795'. [ 1112.913595][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 1112.913612][ T36] audit: type=1326 audit(2000000017.703:16872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25567 comm="syz.0.19800" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f119cb8eec9 code=0x0 [ 1112.930138][T25572] veth1: entered allmulticast mode [ 1113.005041][T25575] veth1: left allmulticast mode [ 1113.782814][T25607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.790995][T25607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.798232][T25607] bridge_slave_0: entered allmulticast mode [ 1113.806838][T25607] bridge_slave_0: entered promiscuous mode [ 1113.811289][T25612] overlayfs: failed to clone upperpath [ 1113.818672][T25607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.826325][T25607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.833919][T25607] bridge_slave_1: entered allmulticast mode [ 1113.840657][T25607] bridge_slave_1: entered promiscuous mode [ 1113.846987][ T2207] bridge_slave_1: left allmulticast mode [ 1113.852651][ T2207] bridge_slave_1: left promiscuous mode [ 1113.858618][ T2207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.866318][ T2207] bridge_slave_0: left allmulticast mode [ 1113.872094][ T2207] bridge_slave_0: left promiscuous mode [ 1113.877892][ T2207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.942658][T25626] netlink: 32 bytes leftover after parsing attributes in process `syz.8.19816'. [ 1114.016543][ T2207] tipc: Disabling bearer [ 1114.027461][T25607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.034601][T25607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.041912][T25607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.044978][ T2207] tipc: Left network mode [ 1114.048986][T25607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.139137][T18547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.146781][T18547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.163473][T18547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.170587][T18547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.172885][T25652] rust_binder: Write failure EFAULT in pid:204 [ 1114.178715][T18547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.191984][T18547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.234784][T25607] veth0_vlan: entered promiscuous mode [ 1114.242406][T25661] /dev/rnullb0: Can't open blockdev [ 1114.250644][T25607] veth1_macvtap: entered promiscuous mode [ 1114.286681][T25669] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1114.287187][T25669] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 1114.295208][T25669] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 1114.305046][T25669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:212 [ 1114.325993][T25673] rust_binder: Write failure EINVAL in pid:2 [ 1114.395402][T25693] overlayfs: failed to clone upperpath [ 1114.495910][T25711] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1114.496010][T25711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220 [ 1114.502541][T25711] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1114.511746][T25711] rust_binder: Read failure Err(EFAULT) in pid:220 [ 1114.531040][T25715] netlink: 20 bytes leftover after parsing attributes in process `syz.8.19843'. [ 1114.548240][T25715] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1114.548360][T25715] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 1114.582677][T25717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 1114.592049][T25719] binder: Bad value for 'defcontext' [ 1114.673565][T25724] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 1114.725778][T25739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19851'. [ 1115.338907][T25776] overlayfs: failed to clone upperpath [ 1115.398147][T25790] fuse: Bad value for 'fd' [ 1115.470075][T25808] can: request_module (can-proto-0) failed. [ 1115.495012][T25813] devpts: called with bogus options [ 1115.686347][ T9] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1115.846492][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1115.852849][ T9] usb 9-1: config index 0 descriptor too short (expected 54802, got 18) [ 1115.861349][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.871656][ T9] usb 9-1: config 1 has no interfaces? [ 1115.877139][ T9] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=35.87 [ 1115.886421][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.463870][T25852] netlink: 5 bytes leftover after parsing attributes in process `syz.3.19897'. [ 1116.473765][T25852] selinux_netlink_send: 30 callbacks suppressed [ 1116.473786][T25852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25852 comm=syz.3.19897 [ 1116.493751][T25852] netlink: 188 bytes leftover after parsing attributes in process `syz.3.19897'. [ 1118.189421][ T36] audit: type=1400 audit(2000000002.617:16873): avc: denied { relabelto } for pid=25903 comm="syz.3.19917" name="file0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 1118.216216][ T36] audit: type=1400 audit(2000000002.617:16874): avc: denied { read } for pid=25903 comm="syz.3.19917" path="/45/file0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 1118.281723][T25930] netlink: 'syz.0.19923': attribute type 58 has an invalid length. [ 1118.756012][ T36] audit: type=1400 audit(2000000003.142:16875): avc: denied { unlink } for pid=25607 comm="syz-executor" name="file0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 1118.910949][ T7284] usb 9-1: USB disconnect, device number 47 [ 1118.936426][T25946] netlink: 'syz.8.19929': attribute type 12 has an invalid length. [ 1118.953183][ T36] audit: type=1326 audit(2000000003.321:16876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25944 comm="syz.8.19929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5aa2f8eec9 code=0x0 [ 1118.981551][T25952] 9pnet_fd: Insufficient options for proto=fd [ 1119.055074][T25957] binder: Unknown parameter '01777777777777777777777' [ 1119.062280][T25958] netlink: 'syz.8.19929': attribute type 12 has an invalid length. [ 1119.156956][T25966] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1119.172861][T25966] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 1119.183463][T25966] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1119.191515][T25966] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 1119.333204][ T36] audit: type=1326 audit(2000000003.696:16877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25983 comm="syz.8.19943" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5aa2f8eec9 code=0x0 [ 1119.595495][ T36] audit: type=1400 audit(2000000003.931:16878): avc: denied { name_bind } for pid=26003 comm="syz.3.19949" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1119.616759][ T36] audit: type=1326 audit(2000000003.949:16879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26003 comm="syz.3.19949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x0 [ 1138.952968][T26045] rust_binder: Write failure EFAULT in pid:247 [ 1138.970379][T26056] netlink: 'syz.3.19966': attribute type 4 has an invalid length. [ 1138.987086][T26056] netlink: 'syz.3.19966': attribute type 4 has an invalid length. [ 1139.004905][T26056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26056 comm=syz.3.19966 [ 1139.037546][T26066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1139.109798][T26079] overlayfs: failed to resolve './file2': -2 [ 1139.112845][T26082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.131552][T26079] 9pnet_fd: Insufficient options for proto=fd [ 1139.139004][T26082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.208223][T26109] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1139.214012][T26111] netlink: 72 bytes leftover after parsing attributes in process `syz.0.19987'. [ 1139.242414][T26118] 9pnet_fd: Insufficient options for proto=fd [ 1139.310441][T26138] cgroup: Unknown subsys name 'euid' [ 1139.320699][T26138] overlayfs: failed to clone lowerpath [ 1139.326774][T26139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:264 [ 1139.369983][ T9] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1139.382243][T26142] overlayfs: failed to clone upperpath [ 1139.393865][T26142] 9pnet_fd: Insufficient options for proto=fd [ 1139.464391][T26154] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1139.465065][T26154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268 [ 1139.471611][T26155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268 [ 1140.041486][ T9] usb 9-1: device descriptor read/64, error -71 [ 1140.109169][T26195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20016'. [ 1140.350575][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1140.356855][ T9] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1140.365199][ T9] usb 9-1: config 179 has no interface number 0 [ 1140.371532][ T9] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1140.382792][ T9] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1140.394455][ T9] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1140.404592][ T9] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1140.418007][ T9] usb 9-1: config 179 interface 65 has no altsetting 0 [ 1140.424918][ T9] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1140.433998][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.669381][T26202] overlayfs: failed to clone upperpath [ 1141.534318][T26244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20036'. [ 1141.548704][T26244] bridge_slave_1: left allmulticast mode [ 1141.559601][T26244] bridge_slave_1: left promiscuous mode [ 1141.570025][T26244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.576956][T26248] overlayfs: missing 'lowerdir' [ 1141.582247][T26244] bridge_slave_0: left allmulticast mode [ 1141.588208][T26244] bridge_slave_0: left promiscuous mode [ 1141.593864][T26244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.631973][T26255] veth1: entered allmulticast mode [ 1141.663239][T26249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.670294][T26249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.678860][T26249] bridge_slave_0: entered allmulticast mode [ 1141.685170][T26249] bridge_slave_0: entered promiscuous mode [ 1141.691527][T26249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.698606][T26249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.705757][T26249] bridge_slave_1: entered allmulticast mode [ 1141.712000][T26249] bridge_slave_1: entered promiscuous mode [ 1141.753770][T26249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.760859][T26249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.768107][T26249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.775155][T26249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.795049][T18562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.802408][T18562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.812140][ T2218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.819243][ T2218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.829204][T18562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.836277][T18562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.861744][T26249] veth0_vlan: entered promiscuous mode [ 1141.873281][T26249] veth1_macvtap: entered promiscuous mode [ 1141.911218][T26267] netlink: 'syz.9.20032': attribute type 2 has an invalid length. [ 1141.993607][T26270] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 1142.070212][T26274] rust_binder: 7: no such ref 0 [ 1142.075182][T26274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:7 [ 1142.293264][T26293] rust_binder: Failed copying remainder into alloc: EFAULT [ 1142.302680][T26293] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 1142.309910][T26293] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1142.318261][T26293] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:15 [ 1142.339904][ T36] audit: type=1400 audit(2000000025.275:16880): avc: denied { write } for pid=26294 comm="syz.9.20051" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1142.423375][T26303] rust_binder: Error while translating object. [ 1142.423423][T26303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1142.430304][T26303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 1142.691875][T27836] usb 9-1: USB disconnect, device number 48 [ 1142.707225][ T9] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1142.724077][T26308] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 1142.788187][T26324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1142.798688][T26327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=26327 comm=syz.8.20062 [ 1142.818126][T26327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=26327 comm=syz.8.20062 [ 1142.831005][T26327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=26327 comm=syz.8.20062 [ 1142.843825][T26327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=26327 comm=syz.8.20062 [ 1142.856679][T26327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=26327 comm=syz.8.20062 [ 1142.857098][T26326] input: syz1 as /devices/virtual/input/input95 [ 1142.870042][T26327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=26327 comm=syz.8.20062 [ 1142.890197][T26336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20065'. [ 1142.899587][T26336] devpts: called with bogus options [ 1142.899952][ T9] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.924433][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1142.931195][ T9] usb 10-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00 [ 1142.940430][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.944453][T26340] binder: Bad value for 'stats' [ 1142.954303][ T9] usb 10-1: config 0 descriptor?? [ 1142.982587][T26353] binder: Unknown parameter 'defcontext01777777777777777777777' [ 1143.026921][T26359] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1143.027042][T26359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:303 [ 1143.045372][T26361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1143.055074][T26361] netlink: 16 bytes leftover after parsing attributes in process `syz.8.20073'. [ 1143.071294][T26361] rust_binder: Error while translating object. [ 1143.071325][T26361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1143.077504][T26361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:305 [ 1143.207148][T26365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1143.221824][T26365] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 1143.228330][T26365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 1143.236419][T26365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:309 [ 1143.295485][T26367] rust_binder: Write failure EFAULT in pid:311 [ 1143.315559][T26369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1143.333884][T26371] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 1143.353424][T26371] rust_binder: Write failure EFAULT in pid:315 [ 1143.392774][ T9] wacom 0003:056A:0343.0034: hidraw0: USB HID v0.02 Device [HID 056a:0343] on usb-dummy_hcd.9-1/input0 [ 1143.674274][T26397] overlayfs: failed to clone upperpath [ 1144.752651][T26428] 9pnet_fd: Insufficient options for proto=fd [ 1144.818740][T26255] veth1: left allmulticast mode [ 1144.877053][T26450] netlink: 36 bytes leftover after parsing attributes in process `syz.8.20104'. [ 1145.674579][T26512] 9pnet_fd: Insufficient options for proto=fd [ 1145.680830][T26513] 9pnet_fd: Insufficient options for proto=fd [ 1145.779166][ T7283] usb 10-1: USB disconnect, device number 9 [ 1145.886509][T26532] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.20133'. [ 1146.106154][T26555] netlink: 4 bytes leftover after parsing attributes in process `syz.9.20141'. [ 1146.143952][T26555] rust_binder: Error in use_page_slow: ESRCH [ 1146.143968][T26555] rust_binder: use_range failure ESRCH [ 1146.155656][T26555] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 1146.155689][T26555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1146.173284][T26555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:34 [ 1146.277472][T26565] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1146.277505][T26565] rust_binder: Read failure Err(EFAULT) in pid:40 [ 1146.575307][ T7283] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1146.747021][ T7283] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1146.761208][ T7283] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1146.774198][ T7283] usb 10-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 1146.777904][T26602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20158'. [ 1146.783369][ T7283] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.804012][ T7283] usb 10-1: config 0 descriptor?? [ 1146.809744][T26570] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1146.823817][ T7283] usbhid 10-1:0.0: can't add hid device: -22 [ 1146.829922][ T7283] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 1146.856075][T26613] overlayfs: failed to clone upperpath [ 1146.910351][T26627] netlink: 'syz.8.20168': attribute type 4 has an invalid length. [ 1146.918241][T26627] netlink: 17 bytes leftover after parsing attributes in process `syz.8.20168'. [ 1146.928063][T26627] netlink: 'syz.8.20168': attribute type 1 has an invalid length. [ 1146.936016][T26627] netlink: 'syz.8.20168': attribute type 2 has an invalid length. [ 1147.036280][ T7282] usb 10-1: USB disconnect, device number 10 [ 1147.289117][T26630] 9pnet: p9_errstr2errno: server reported unknown error O»Ü‰›Xò۵רѳlú¶uË9 [ 1147.609548][T26649] rust_binder: Error in use_page_slow: ESRCH [ 1147.609572][T26649] rust_binder: use_range failure ESRCH [ 1147.615741][T26649] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 1147.621345][T26649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1147.629497][T26649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:45 [ 1147.799270][T26656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=26656 comm=syz.8.20177 [ 1147.918320][ T7277] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1148.042271][ T36] audit: type=1326 audit(2000000030.622:16881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26667 comm="syz.3.20180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ffc0000 [ 1148.066103][ T36] audit: type=1326 audit(2000000030.622:16882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26667 comm="syz.3.20180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ffc0000 [ 1148.090989][ T36] audit: type=1326 audit(2000000030.622:16883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26667 comm="syz.3.20180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ffc0000 [ 1148.110148][ T7277] usb 10-1: Using ep0 maxpacket: 8 [ 1148.114946][ T36] audit: type=1326 audit(2000000030.622:16884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26667 comm="syz.3.20180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ffc0000 [ 1148.121110][ T7277] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1148.143560][ T36] audit: type=1326 audit(2000000030.622:16885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26667 comm="syz.3.20180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f235998eec9 code=0x7ffc0000 [ 1148.152020][ T7277] usb 10-1: config 179 has no interface number 0 [ 1148.180763][ T36] audit: type=1326 audit(2000000030.622:16886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26667 comm="syz.3.20180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ffc0000 [ 1148.182223][ T7277] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1148.205565][ T36] audit: type=1326 audit(2000000030.622:16887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26667 comm="syz.3.20180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ffc0000 [ 1148.217015][ T7277] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1148.241840][ T36] audit: type=1326 audit(2000000030.622:16888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26667 comm="syz.3.20180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ffc0000 [ 1148.252788][ T7277] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1148.276294][ T36] audit: type=1326 audit(2000000030.622:16889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26667 comm="syz.3.20180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f235998eec9 code=0x7ffc0000 [ 1148.286572][ T7277] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1148.310211][ T36] audit: type=1326 audit(2000000030.622:16890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26667 comm="syz.3.20180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ffc0000 [ 1148.323549][ T7277] usb 10-1: config 179 interface 65 has no altsetting 0 [ 1148.354035][ T7277] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1148.363343][ T7277] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.588503][ T7282] usb 10-1: USB disconnect, device number 11 [ 1149.107971][T26717] veth1: entered allmulticast mode [ 1149.194354][T26722] netlink: 228 bytes leftover after parsing attributes in process `syz.9.20197'. [ 1149.204261][T26722] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1149.204323][T26722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 1149.218290][T26719] veth1: left allmulticast mode [ 1149.249683][T26727] veth1: entered allmulticast mode [ 1149.309663][T26736] veth1: left allmulticast mode [ 1149.377715][T26742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20205'. [ 1149.613130][T26763] netlink: 'syz.8.20214': attribute type 64 has an invalid length. [ 1149.621186][T26763] netlink: 5 bytes leftover after parsing attributes in process `syz.8.20214'. [ 1168.439785][T26779] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 1168.467624][T26779] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 1168.510953][T26786] rust_binder: Write failure EFAULT in pid:57 [ 1168.539902][T26793] netlink: 80 bytes leftover after parsing attributes in process `syz.2.20225'. [ 1168.559696][T26793] fuse: Bad value for 'group_id' [ 1168.564916][T26793] fuse: Bad value for 'group_id' [ 1168.588889][T26797] overlayfs: failed to clone upperpath [ 1186.785076][T26822] 9pnet_fd: Insufficient options for proto=fd [ 1186.845792][T26837] netlink: 20 bytes leftover after parsing attributes in process `syz.8.20240'. [ 1187.017066][T26863] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20247'. [ 1187.122697][T26875] ip6_vti0: entered promiscuous mode [ 1187.128816][T26873] ip6_vti0: left promiscuous mode [ 1187.317080][T26885] erofs: Unknown parameter 'vcan0' [ 1187.327198][T26885] erofs: Unknown parameter 'vcan0' [ 1187.334883][T26885] erofs: Unknown parameter 'vcan0' [ 1187.342543][T26889] overlayfs: failed to clone upperpath [ 1187.624261][T26943] netlink: 20 bytes leftover after parsing attributes in process `syz.8.20273'. [ 1188.183490][T26987] netlink: 96 bytes leftover after parsing attributes in process `syz.9.20283'. [ 1188.212877][T26995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26995 comm=syz.8.20286 [ 1188.345817][T27025] 9pnet_fd: Insufficient options for proto=fd [ 1188.397475][T27033] fuse: Invalid rootmode [ 1189.292185][T27071] netlink: 188 bytes leftover after parsing attributes in process `syz.3.20310'. [ 1189.354067][T27087] fuse: Unknown parameter 'rZotmode' [ 1190.247189][T27104] overlayfs: failed to clone upperpath [ 1191.586803][T27139] tipc: Enabling of bearer rejected, failed to enable media [ 1191.595632][ T36] kauditd_printk_skb: 98 callbacks suppressed [ 1191.595648][ T36] audit: type=1400 audit(2000000071.490:16989): avc: denied { create } for pid=27138 comm="syz.9.20333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1191.769985][T27155] netlink: 'syz.2.20338': attribute type 4 has an invalid length. [ 1191.778088][T27155] netlink: 17 bytes leftover after parsing attributes in process `syz.2.20338'. [ 1192.184349][T27157] fuseblk: Bad value for 'fd' [ 1192.189778][T27157] fuse: Bad value for 'fd' [ 1192.195396][T27157] netlink: 44 bytes leftover after parsing attributes in process `syz.9.20339'. [ 1192.204487][T27157] netlink: 43 bytes leftover after parsing attributes in process `syz.9.20339'. [ 1192.213597][T27157] netlink: 43 bytes leftover after parsing attributes in process `syz.9.20339'. [ 1192.427339][T27176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20346'. [ 1192.831486][T27206] netlink: 16 bytes leftover after parsing attributes in process `syz.9.20357'. [ 1192.841344][T27206] devtmpfs: Unknown parameter 'fuse' [ 1193.044124][T27237] overlayfs: failed to clone upperpath [ 1193.336698][T27274] overlayfs: failed to clone upperpath [ 1193.687707][T27302] netlink: 92 bytes leftover after parsing attributes in process `syz.9.20389'. [ 1194.280211][T27321] cgroup: Unknown subsys name 'hugetlb' [ 1195.230641][T27377] netlink: 'syz.2.20417': attribute type 4 has an invalid length. [ 1195.238610][T27377] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.20417'. [ 1195.334052][T27392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20421'. [ 1195.735151][T27425] Invalid ELF header magic: != ELF [ 1195.756960][T27429] Invalid ELF header type: 2 != 1 [ 1196.264769][T27435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57882 sclass=netlink_route_socket pid=27435 comm=syz.2.20435 [ 1196.285743][ T36] audit: type=1400 audit(2000000075.881:16990): avc: denied { read } for pid=27436 comm="syz.2.20436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1196.678491][T27468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.685592][T27468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.692738][T27468] bridge_slave_0: entered allmulticast mode [ 1196.699407][T27468] bridge_slave_0: entered promiscuous mode [ 1196.706104][T27468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.713142][T27468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.720684][T27468] bridge_slave_1: entered allmulticast mode [ 1196.727180][T27468] bridge_slave_1: entered promiscuous mode [ 1196.737789][ T2218] bridge_slave_1: left allmulticast mode [ 1196.745797][ T2218] bridge_slave_1: left promiscuous mode [ 1196.751472][ T2218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.759376][ T2218] bridge_slave_0: left allmulticast mode [ 1196.765030][ T2218] bridge_slave_0: left promiscuous mode [ 1196.771009][ T2218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.858720][T27468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.865823][T27468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.873142][T27468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.880198][T27468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.897112][ T2218] veth1_macvtap: left promiscuous mode [ 1196.902669][ T2218] veth0_vlan: left promiscuous mode [ 1196.974761][T18536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.985807][T18536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.996569][T26968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.003688][T26968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.014721][T18536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.021803][T18536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.055636][T27468] veth0_vlan: entered promiscuous mode [ 1197.070465][T27468] veth1_macvtap: entered promiscuous mode [ 1197.165303][T27511] rust_binder: Error while translating object. [ 1197.165335][T27511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1197.171537][T27511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 1197.361555][T27553] netlink: 'syz.3.20471': attribute type 3 has an invalid length. [ 1197.378474][T27553] netlink: 944 bytes leftover after parsing attributes in process `syz.3.20471'. [ 1197.407578][T27557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20473'. [ 1197.599254][T27577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27577 comm=syz.3.20479 [ 1198.009567][ T36] audit: type=1400 audit(2000000077.504:16991): avc: denied { append } for pid=27584 comm="syz.2.20482" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1198.023530][T27587] rust_binder: Failed copying remainder into alloc: EFAULT [ 1198.032830][T27587] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 1198.041014][T27587] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1198.049410][T27587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:7 [ 1198.085648][T27591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:11 [ 1198.099003][T27591] rust_binder: Error while translating object. [ 1198.108228][T27591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1198.115054][T27591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 1198.280984][T27629] fuse: Bad value for 'user_id' [ 1198.295595][T27629] fuse: Bad value for 'user_id' [ 1198.895107][T27648] 9pnet_fd: Insufficient options for proto=fd [ 1199.254100][T27670] netlink: 'syz.2.20513': attribute type 46 has an invalid length. [ 1199.262063][T27670] netlink: 'syz.2.20513': attribute type 28 has an invalid length. [ 1199.459023][T27680] EXT4-fs: dax option not supported [ 1199.465450][T27681] EXT4-fs: dax option not supported [ 1199.538388][ T7286] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1199.676958][ T7286] usb 3-1: device descriptor read/64, error -71 [ 1199.932807][ T7286] usb 3-1: device descriptor read/64, error -71 [ 1200.188679][ T7286] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1200.327193][ T7286] usb 3-1: device descriptor read/64, error -71 [ 1200.582962][ T7286] usb 3-1: device descriptor read/64, error -71 [ 1200.700298][ T7286] usb usb3-port1: attempt power cycle [ 1201.062587][ T7286] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1201.084953][ T7286] usb 3-1: device descriptor read/8, error -71 [ 1201.223465][ T7286] usb 3-1: device descriptor read/8, error -71 [ 1201.478319][ T7286] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1201.500752][ T7286] usb 3-1: device descriptor read/8, error -71 [ 1201.639215][ T7286] usb 3-1: device descriptor read/8, error -71 [ 1201.766204][ T7286] usb usb3-port1: unable to enumerate USB device [ 1201.851763][T27779] overlayfs: failed to resolve './file0': -2 [ 1202.122540][T27788] netlink: 'syz.3.20555': attribute type 46 has an invalid length. [ 1202.130642][T27788] netlink: 'syz.3.20555': attribute type 28 has an invalid length. [ 1202.519053][T27812] 8021q: VLANs not supported on lo [ 1203.603718][T27841] rust_binder: Write failure EFAULT in pid:37 [ 1203.642555][ T36] audit: type=1326 audit(2000000082.796:16992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27838 comm="syz.3.20567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7fc00000 [ 1203.717964][T27852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 1203.728378][T27855] rust_binder: Write failure EFAULT in pid:43 [ 1204.004389][ T7282] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1204.175011][ T7282] usb 3-1: Using ep0 maxpacket: 8 [ 1204.181402][ T7282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.192301][ T7282] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1204.205193][ T7282] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1204.214442][ T7282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.223881][ T7282] usb 3-1: config 0 descriptor?? [ 1204.664008][ T7282] hid-rmi 0003:06CB:81A7.0035: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 1204.876271][T27857] __vm_enough_memory: pid: 27857, comm: syz.2.20572, bytes: 18014402804453376 not enough memory for the allocation [ 1204.890909][ T7277] usb 3-1: USB disconnect, device number 46 [ 1205.186194][T27876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20578'. [ 1205.258046][T27877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.265250][T27877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.272394][T27877] bridge_slave_0: entered allmulticast mode [ 1205.278783][T27877] bridge_slave_0: entered promiscuous mode [ 1205.285859][T27877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.292957][T27877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.300089][T27877] bridge_slave_1: entered allmulticast mode [ 1205.306520][T27877] bridge_slave_1: entered promiscuous mode [ 1205.375776][T27877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.382860][T27877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.390160][T27877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.397194][T27877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.422708][T26975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.438910][T26975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.463869][T26968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.471013][T26968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.489967][T26975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.497058][T26975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.547228][T27933] netlink: 'syz.2.20584': attribute type 5 has an invalid length. [ 1205.565766][T27877] veth0_vlan: entered promiscuous mode [ 1205.588080][T27877] veth1_macvtap: entered promiscuous mode [ 1205.891146][ T7282] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1206.014109][T27962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65 [ 1206.014278][T27962] rust_binder: Error in use_page_slow: ESRCH [ 1206.023500][T27962] rust_binder: use_range failure ESRCH [ 1206.029665][T27962] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 1206.035194][T27962] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1206.043407][T27962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:65 [ 1206.050869][ T7282] usb 5-1: Using ep0 maxpacket: 16 [ 1206.067902][ T7282] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1206.078687][ T7282] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1206.088120][ T7282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.102355][ T7282] usb 5-1: Product: syz [ 1206.106727][ T7282] usb 5-1: Manufacturer: syz [ 1206.111333][ T7282] usb 5-1: SerialNumber: syz [ 1206.136784][ T7282] usb 5-1: config 0 descriptor?? [ 1206.145998][ T7282] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1206.149527][T27972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20598'. [ 1206.154440][ T7282] usb 5-1: Detected FT232R [ 1206.165583][T27972] exFAT-fs (rnullb0): invalid boot record signature [ 1206.173931][T27972] exFAT-fs (rnullb0): failed to read boot sector [ 1206.180339][T27972] exFAT-fs (rnullb0): failed to recognize exfat type [ 1206.199771][T27974] binder: Unknown parameter 'contextÌðÔð[7’' [ 1206.216687][T27976] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1206.224694][T27976] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 1206.233523][T27976] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1206.241478][T27976] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 1206.592305][T27950] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 1206.592361][T27950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:5 [ 1206.650053][ T7282] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1206.668511][ T7282] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1206.676218][ T7282] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1206.687995][ T7282] usb 5-1: USB disconnect, device number 32 [ 1206.702039][ T7282] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1206.711854][ T7282] ftdi_sio 5-1:0.0: device disconnected [ 1207.248683][T28025] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1207.256742][T28025] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 1207.265234][T28025] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1207.273221][T28025] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 1207.283505][T28025] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1207.291632][T28025] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 1207.303494][T28025] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1207.310872][ T36] audit: type=1326 audit(2000000086.229:16993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28030 comm="syz.3.20620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x0 [ 1207.311610][T28025] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 1207.381865][T28041] netlink: 'syz.3.20623': attribute type 27 has an invalid length. [ 1207.398927][T28043] netlink: 76 bytes leftover after parsing attributes in process `syz.3.20624'. [ 1207.417200][ T36] audit: type=1326 audit(2000000086.333:16994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28045 comm="syz.3.20625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ff00000 [ 1207.440991][ T36] audit: type=1326 audit(2000000086.333:16995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28045 comm="syz.3.20625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ff00000 [ 1207.464858][ T36] audit: type=1326 audit(2000000086.333:16996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28045 comm="syz.3.20625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ff00000 [ 1207.488741][ T36] audit: type=1326 audit(2000000086.333:16997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28045 comm="syz.3.20625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ff00000 [ 1207.512622][ T36] audit: type=1326 audit(2000000086.333:16998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28045 comm="syz.3.20625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ff00000 [ 1207.536315][ T36] audit: type=1326 audit(2000000086.333:16999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28045 comm="syz.3.20625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ff00000 [ 1207.546023][T28047] 9pnet_fd: Insufficient options for proto=fd [ 1207.560041][ T36] audit: type=1326 audit(2000000086.333:17000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28045 comm="syz.3.20625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ff00000 [ 1207.589909][ T36] audit: type=1326 audit(2000000086.333:17001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28045 comm="syz.3.20625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x7ff00000 [ 1207.834742][T28057] overlayfs: failed to clone upperpath [ 1207.877203][T28066] IPv6: NLM_F_CREATE should be specified when creating new route [ 1207.885069][T28066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1207.892268][T28066] IPv6: NLM_F_CREATE should be set when creating new route [ 1207.899505][T28066] IPv6: NLM_F_CREATE should be set when creating new route [ 1207.923000][T28073] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 1207.923026][T28073] rust_binder: Error while translating object. [ 1207.935359][T28073] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1207.941696][T28073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 1207.961970][T28075] rust_binder: Write failure EFAULT in pid:23 [ 1207.988505][T28078] rust_binder: Write failure EINVAL in pid:25 [ 1208.037687][T28083] tmpfs: Unknown parameter '00000000000000000000004' [ 1208.051059][T28083] netlink: 'syz.4.20638': attribute type 46 has an invalid length. [ 1208.251916][T28101] overlayfs: failed to resolve './file0': -2 [ 1208.632347][T28135] 9pnet_fd: Insufficient options for proto=fd [ 1209.192388][T28155] netlink: 'syz.9.20664': attribute type 1 has an invalid length. [ 1209.301774][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 1209.301791][ T36] audit: type=1326 audit(2000000348.101:17071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28167 comm="syz.9.20668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e6b8eec9 code=0x7fc00000 [ 1209.433164][ T36] audit: type=1400 audit(2000000348.223:17072): avc: denied { associate } for pid=28192 comm="syz.9.20675" name="file0" dev="ramfs" ino=209342 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 1209.472276][T28193] Invalid ELF header magic: != ELF [ 1209.534426][T28206] rust_binder: Error while translating object. [ 1209.534471][T28206] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1209.541006][T28206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 1209.882458][T28215] netlink: 68 bytes leftover after parsing attributes in process `syz.3.20681'. [ 1210.069167][T28222] netlink: 'syz.3.20683': attribute type 16 has an invalid length. [ 1210.077549][T28222] netlink: 'syz.3.20683': attribute type 25 has an invalid length. [ 1210.085834][T28222] netlink: 64094 bytes leftover after parsing attributes in process `syz.3.20683'. [ 1210.433640][ T7282] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1210.469150][T28243] overlayfs: failed to clone upperpath [ 1210.584607][T28257] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1210.601924][ T7282] usb 5-1: Using ep0 maxpacket: 8 [ 1210.608540][ T7282] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1210.616963][ T7282] usb 5-1: config 0 has no interface number 0 [ 1210.625354][ T7282] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1210.634795][ T7282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.643226][ T7282] usb 5-1: Product: syz [ 1210.647433][ T7282] usb 5-1: Manufacturer: syz [ 1210.652132][ T7282] usb 5-1: SerialNumber: syz [ 1210.657500][ T7282] usb 5-1: config 0 descriptor?? [ 1210.877096][T28235] SELinux: security_context_str_to_sid (%¯Ç£¬¢DµâáÜ(ýŸB„Oþ@) failed with errno=-22 [ 1210.893804][ T7282] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 1210.903852][ T7282] usb 5-1: No streaming interface found for terminal 6. [ 1210.911300][ T7282] usb 5-1: Failed to create links for entity 5 [ 1210.917985][ T7282] usb 5-1: Failed to register entities (-22). [ 1210.930522][ T7282] usb 5-1: USB disconnect, device number 33 [ 1210.939402][T28279] rust_binder: Error in use_page_slow: ESRCH [ 1210.939425][T28279] rust_binder: use_range failure ESRCH [ 1210.945716][T28279] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 1210.951218][T28279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1210.959169][T28279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:53 [ 1210.975115][ T336] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1210.999660][T28281] FAT-fs (rnullb0): bogus number of reserved sectors [ 1211.006363][T28281] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1211.051166][T28284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20707'. [ 1211.060353][T28284] netlink: 17 bytes leftover after parsing attributes in process `syz.4.20707'. [ 1211.069451][T28284] tipc: Invalid UDP bearer configuration [ 1211.069474][T28284] tipc: Enabling of bearer rejected, failed to enable media [ 1211.084565][T28284] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 1211.124729][ T336] usb 3-1: device descriptor read/64, error -71 [ 1211.380255][ T336] usb 3-1: device descriptor read/64, error -71 [ 1211.444233][ T7282] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1211.462940][T28298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20713'. [ 1211.605096][ T7282] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.615273][ T7282] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1211.626165][ T7282] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1211.640035][ T7282] usb 5-1: New USB device found, idVendor=0525, idProduct=0008, bcdDevice= 0.40 [ 1211.646780][ T336] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1211.649119][ T7282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1211.664637][ T7282] usb 5-1: SerialNumber: syz [ 1211.698817][T28305] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20716'. [ 1211.785366][ T336] usb 3-1: device descriptor read/64, error -71 [ 1211.894658][ T7277] usb 5-1: USB disconnect, device number 34 [ 1211.992720][T28324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 1212.041259][ T336] usb 3-1: device descriptor read/64, error -71 [ 1212.170439][ T336] usb usb3-port1: attempt power cycle [ 1212.208537][T28353] devpts: called with bogus options [ 1212.382405][ T7277] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1212.542392][ T336] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1212.551713][ T7277] usb 5-1: not running at top speed; connect to a high speed hub [ 1212.560294][ T7277] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1212.571043][ T7277] usb 5-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1212.584300][ T7277] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1212.591600][ T336] usb 3-1: device descriptor read/8, error -71 [ 1212.599811][ T7277] usb 5-1: string descriptor 0 read error: -22 [ 1212.606048][ T7277] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1212.615134][ T7277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.625460][ T7277] usb 5-1: bad CDC descriptors [ 1212.735271][ T336] usb 3-1: device descriptor read/8, error -71 [ 1212.791743][ T36] audit: type=1326 audit(2000000351.374:17073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28360 comm="syz.3.20735" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f235998eec9 code=0x0 [ 1212.908015][ T7284] usb 5-1: USB disconnect, device number 35 [ 1213.000788][ T336] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1213.023077][ T336] usb 3-1: device descriptor read/8, error -71 [ 1213.161648][ T336] usb 3-1: device descriptor read/8, error -71 [ 1213.278098][ T336] usb usb3-port1: unable to enumerate USB device [ 1213.510378][ T36] audit: type=1400 audit(2000000352.040:17074): avc: denied { map } for pid=28363 comm="syz.4.20736" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1213.550381][T28366] rust_binder: Write failure EFAULT in pid:83 [ 1213.561351][T28368] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20738'. [ 1213.688637][T28374] veth1: entered allmulticast mode [ 1213.694255][T28373] veth1: left allmulticast mode [ 1213.751691][T28388] 9pnet: Could not find request transport:  [ 1213.807105][T28400] /dev/sr0: Can't lookup blockdev [ 1214.130879][ T336] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1214.290832][ T336] usb 5-1: Using ep0 maxpacket: 32 [ 1214.297157][ T336] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.307432][ T336] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1214.321355][ T336] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1214.330494][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1214.338635][ T336] usb 5-1: SerialNumber: syz [ 1214.345961][ T336] cdc_acm 5-1:1.0: Zero length descriptor references [ 1214.352664][ T336] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 1214.543003][T28409] fuse: Invalid gid '00000000000037777777777' [ 1214.563059][ T7282] usb 5-1: USB disconnect, device number 36 [ 1215.083360][T28440] 9pnet_fd: Insufficient options for proto=fd [ 1215.090612][T28440] overlay: ./file0 is not a directory [ 1215.133179][T28449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28449 comm=syz.4.20767 [ 1215.145846][T28449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28449 comm=syz.4.20767 [ 1215.159050][T28449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28449 comm=syz.4.20767 [ 1215.171829][T28449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28449 comm=syz.4.20767 [ 1215.184780][T28449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28449 comm=syz.4.20767 [ 1215.197485][T28449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28449 comm=syz.4.20767 [ 1215.210237][T28449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28449 comm=syz.4.20767 [ 1215.222806][T28449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28449 comm=syz.4.20767 [ 1215.235366][T28449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28449 comm=syz.4.20767 [ 1215.247920][T28449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28449 comm=syz.4.20767 [ 1215.308072][T28458] 9pnet_fd: Insufficient options for proto=fd [ 1215.324962][ T336] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1215.358163][T28463] cannot load conntrack support for proto=3 [ 1215.366391][T28463] overlayfs: conflicting options: userxattr,metacopy=on [ 1215.485972][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1215.496978][ T336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1215.509835][ T336] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 1215.518896][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.527554][ T336] usb 3-1: config 0 descriptor?? [ 1215.532869][T28438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1215.540868][ T336] usbhid 3-1:0.0: can't add hid device: -22 [ 1215.546830][ T336] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 1215.755781][ T336] usb 3-1: USB disconnect, device number 51 [ 1231.717442][T28476] fuse: Bad value for 'fd' [ 1231.761360][T28468] 9pnet_fd: Insufficient options for proto=fd [ 1232.495071][T28537] netlink: 80 bytes leftover after parsing attributes in process `syz.9.20796'. [ 1232.495179][T28538] netlink: 4 bytes leftover after parsing attributes in process `syz.9.20796'. [ 1232.523836][T28542] Invalid ELF header type: 2 != 1 [ 1232.761368][T28559] fuse: blksize only supported for fuseblk [ 1232.772861][T28557] 9pnet_fd: Insufficient options for proto=fd [ 1232.897766][T28574] netlink: 188 bytes leftover after parsing attributes in process `syz.2.20805'. [ 1232.989761][T28598] incfs: Error accessing: ./file0/file0. [ 1232.995525][T28598] incfs: mount failed -40 [ 1233.004362][T28599] rust_binder: 28584 RLIMIT_NICE not set [ 1233.009022][T28584] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1233.029883][T28604] overlayfs: failed to clone upperpath [ 1233.090952][T28618] netlink: 152 bytes leftover after parsing attributes in process `syz.2.20824'. [ 1233.216215][ T36] audit: type=1400 audit(2000000370.528:17075): avc: denied { map } for pid=28635 comm="syz.2.20832" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1233.217382][T28636] netlink: 76 bytes leftover after parsing attributes in process `syz.2.20832'. [ 1233.257237][T28636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20832'. [ 1233.293159][T28638] overlayfs: failed to clone lowerpath [ 1233.300646][T28638] overlayfs: failed to clone lowerpath [ 1233.388351][T28667] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 1233.396186][T28667] rust_binder: Write failure EINVAL in pid:190 [ 1233.402196][T28668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1233.421860][T28672] overlay: ./bus is not a directory [ 1233.705322][ T336] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1233.866390][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1233.877702][ T336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1233.890710][ T336] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 1233.899953][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.915568][ T336] usb 3-1: config 0 descriptor?? [ 1233.935118][T28679] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1233.944250][T28723] netlink: 72 bytes leftover after parsing attributes in process `syz.4.20860'. [ 1233.945456][ T336] usbhid 3-1:0.0: can't add hid device: -22 [ 1233.961695][ T336] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 1234.178093][ T7284] usb 3-1: USB disconnect, device number 52 [ 1234.726717][T28775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20879'. [ 1234.757967][T28780] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1234.758373][T28780] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1234.765067][T28780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:206 [ 1234.846873][T28801] binder: Unknown parameter '0177777777777777777777700000000000000000000003' [ 1234.913056][T28812] netlink: 68 bytes leftover after parsing attributes in process `syz.3.20894'. [ 1234.965282][T28822] x_tables: duplicate underflow at hook 1 [ 1234.972636][ T36] audit: type=1400 audit(2000000372.178:17076): avc: denied { setattr } for pid=28823 comm="syz.2.20897" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1235.032579][ T36] audit: type=1400 audit(2000000372.235:17077): avc: denied { write } for pid=28839 comm="syz.2.20901" name="usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1235.087216][T28860] rust_binder: 234: no such ref 0 [ 1235.100846][T28860] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 1235.146760][T28874] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1235.147956][T28874] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1235.251319][ T36] audit: type=1400 audit(2000000372.441:17078): avc: denied { shutdown } for pid=28892 comm="syz.2.20920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1235.286877][T28900] No source specified [ 1235.437169][ T36] audit: type=1326 audit(2000000372.610:17079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28928 comm="syz.4.20933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe48ab8eec9 code=0x0 [ 1235.517841][ T7284] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1235.665824][T28932] overlayfs: failed to clone upperpath [ 1235.677697][ T7284] usb 3-1: Using ep0 maxpacket: 16 [ 1235.684581][ T7284] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 1235.692833][ T7284] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.703274][ T7284] usb 3-1: config 0 has no interface number 0 [ 1235.705454][T28934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20935'. [ 1235.711100][ T7284] usb 3-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 1235.720576][T28934] selinux_netlink_send: 23 callbacks suppressed [ 1235.720594][T28934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=28934 comm=syz.3.20935 [ 1235.727707][ T7284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.755228][ T7284] usb 3-1: Product: syz [ 1235.759459][ T7284] usb 3-1: Manufacturer: syz [ 1235.764116][ T7284] usb 3-1: SerialNumber: syz [ 1235.769483][ T7284] usb 3-1: config 0 descriptor?? [ 1235.994702][ T7284] rndis_host 3-1:0.109: More than one union descriptor, skipping ... [ 1236.003525][ T7284] usb 3-1: bad CDC descriptors [ 1236.008546][ T7284] cdc_acm 3-1:0.109: More than one union descriptor, skipping ... [ 1236.020131][ T7284] usb 3-1: USB disconnect, device number 53 [ 1236.443215][T28958] cgroup: Invalid name [ 1236.511530][T28975] overlayfs: failed to clone upperpath [ 1236.548434][T28982] overlayfs: failed to clone upperpath [ 1236.588275][T28999] netlink: 'syz.9.20958': attribute type 22 has an invalid length. [ 1236.632968][T29014] Bluetooth: hci0: Frame reassembly failed (-84) [ 1236.639760][T18536] Bluetooth: hci0: Frame reassembly failed (-84) [ 1236.645918][T29014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:267 [ 1237.228677][T29048] vcan0: entered allmulticast mode [ 1237.274391][T29059] netlink: 'syz.4.20975': attribute type 1 has an invalid length. [ 1237.283008][T29059] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1237.294453][T29059] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 1237.884700][T29085] 9pnet_fd: Insufficient options for proto=fd [ 1238.458976][T29093] __nla_validate_parse: 3 callbacks suppressed [ 1238.458998][T29093] netlink: 393 bytes leftover after parsing attributes in process `syz.4.20989'. [ 1238.477339][T29093] netlink: 9 bytes leftover after parsing attributes in process `syz.4.20989'. [ 1238.486430][T29093] 0ªî{: renamed from gretap0 (while UP) [ 1238.492239][ T36] audit: type=1326 audit(2000000375.480:17080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29099 comm="syz.9.20992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e6b8eec9 code=0x7ffc0000 [ 1238.513484][T29093] 0ªî{: entered allmulticast mode [ 1238.516129][ T36] audit: type=1326 audit(2000000375.480:17081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29099 comm="syz.9.20992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e6b8eec9 code=0x7ffc0000 [ 1238.521915][T29093] A link change request failed with some changes committed already. Interface 30ªî{ may have been left with an inconsistent configuration, please check. [ 1238.563311][ T36] audit: type=1326 audit(2000000375.480:17082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29099 comm="syz.9.20992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16e6b8d710 code=0x7ffc0000 [ 1238.587488][ T36] audit: type=1326 audit(2000000375.480:17083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29099 comm="syz.9.20992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16e6b8d710 code=0x7ffc0000 [ 1238.611419][ T36] audit: type=1326 audit(2000000375.480:17084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29099 comm="syz.9.20992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e6b8eec9 code=0x7ffc0000 [ 1238.635306][ T36] audit: type=1326 audit(2000000375.480:17085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29099 comm="syz.9.20992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e6b8eec9 code=0x7ffc0000 [ 1238.664292][ T36] audit: type=1326 audit(2000000375.480:17086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29099 comm="syz.9.20992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f16e6b8eec9 code=0x7ffc0000 [ 1238.688259][ T36] audit: type=1326 audit(2000000375.480:17087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29099 comm="syz.9.20992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e6b8eec9 code=0x7ffc0000 [ 1238.712432][ T36] audit: type=1326 audit(2000000375.480:17088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29099 comm="syz.9.20992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f16e6b8eec9 code=0x7ffc0000 [ 1238.736274][ T36] audit: type=1326 audit(2000000375.480:17089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29099 comm="syz.9.20992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e6b8eec9 code=0x7ffc0000 [ 1238.760214][ T36] audit: type=1326 audit(2000000375.480:17090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29099 comm="syz.9.20992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f16e6b8eec9 code=0x7ffc0000 [ 1238.797922][ T36] audit: type=1326 audit(2000000375.480:17091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29099 comm="syz.9.20992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e6b8eec9 code=0x7ffc0000 [ 1238.800375][T29127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21002'. [ 1238.822103][ T4860] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1238.830975][T14434] Bluetooth: hci0: command 0x1003 tx timeout [ 1238.837297][T29127] netlink: 31 bytes leftover after parsing attributes in process `syz.4.21002'. [ 1238.853409][T29127] netlink: 'syz.4.21002': attribute type 3 has an invalid length. [ 1238.861378][T29127] netlink: 'syz.4.21002': attribute type 2 has an invalid length. [ 1238.869223][T29127] netlink: 31 bytes leftover after parsing attributes in process `syz.4.21002'. [ 1238.956730][T29153] netlink: 'syz.4.21011': attribute type 5 has an invalid length. [ 1238.964723][T29153] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.21011'. [ 1239.015091][T29167] netlink: 124 bytes leftover after parsing attributes in process `syz.4.21016'. [ 1239.143345][ T336] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1239.303689][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1239.314805][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.324972][ T336] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1239.334020][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.343452][ T336] usb 3-1: config 0 descriptor?? [ 1239.470691][T29180] 9pnet_fd: Insufficient options for proto=fd [ 1239.777445][ T336] isku 0003:1E7D:319C.0036: item fetching failed at offset 6/7 [ 1239.785717][ T336] isku 0003:1E7D:319C.0036: parse failed [ 1239.791440][ T336] isku 0003:1E7D:319C.0036: probe with driver isku failed with error -22 [ 1239.991497][T29137] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 1240.001313][ T9] usb 3-1: USB disconnect, device number 54 [ 1240.554045][T29215] rust_binder: Write failure EFAULT in pid:275 [ 1241.585518][T29291] netlink: 5 bytes leftover after parsing attributes in process `syz.3.21065'. [ 1241.600891][T29291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1241.616437][T29290] netlink: 5 bytes leftover after parsing attributes in process `syz.3.21065'. [ 1241.625628][T29290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1241.955418][T29327] tmpfs: Bad value for 'uid' [ 1241.960417][T29327] tmpfs: Bad value for 'uid' [ 1242.272766][T29356] netlink: 168 bytes leftover after parsing attributes in process `syz.4.21089'. [ 1243.130799][T29435] overlayfs: failed to clone upperpath [ 1243.234931][T29461] netlink: 'syz.2.21127': attribute type 2 has an invalid length. [ 1244.932251][T29540] 9pnet_fd: Insufficient options for proto=fd [ 1244.972283][T29548] __nla_validate_parse: 3 callbacks suppressed [ 1244.972301][T29548] netlink: 5 bytes leftover after parsing attributes in process `syz.9.21159'. [ 1245.190834][T29569] netlink: 5 bytes leftover after parsing attributes in process `syz.9.21165'. [ 1245.200334][T29569] 0ªî{X¹¦: renamed from bridge_slave_1 (while UP) [ 1245.208029][T29569] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1245.922447][T29605] netlink: 596 bytes leftover after parsing attributes in process `syz.4.21175'. [ 1246.631020][T29616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21179'. [ 1246.640594][T29616] netlink: 68 bytes leftover after parsing attributes in process `syz.2.21179'. [ 1247.319890][T29636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=29636 comm=syz.3.21186 [ 1247.372831][T29647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21189'. [ 1247.417570][T29658] netlink: 68 bytes leftover after parsing attributes in process `syz.3.21193'. [ 1247.532281][T29676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21200'. [ 1248.195125][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 1248.195156][ T36] audit: type=1400 audit(2000000384.588:17110): avc: denied { ioctl } for pid=29755 comm="syz.2.21231" path="socket:[214604]" dev="sockfs" ino=214604 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1248.417706][T29774] netlink: 92 bytes leftover after parsing attributes in process `syz.3.21236'. [ 1248.442973][T29782] 9pnet_fd: Insufficient options for proto=fd [ 1248.522675][T29811] bpf: Bad value for 'gid' [ 1248.526576][T29814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21250'. [ 1248.551697][T29821] netlink: 'syz.3.21252': attribute type 4 has an invalid length. [ 1248.564325][T29821] netlink: 'syz.3.21252': attribute type 4 has an invalid length. [ 1249.179616][T29885] veth1: entered allmulticast mode [ 1249.925504][T29929] overlayfs: failed to resolve './file1': -2 [ 1249.969480][T29938] tmpfs: Unknown parameter 'nr_blocis' [ 1250.067320][T29884] veth1: left allmulticast mode [ 1250.621291][T29968] overlayfs: missing 'workdir' [ 1251.122988][T30021] 9pnet_fd: Insufficient options for proto=fd [ 1251.635453][T30031] netlink: 'syz.3.21328': attribute type 4 has an invalid length. [ 1252.493150][T30122] netlink: 'syz.4.21360': attribute type 1 has an invalid length. [ 1252.501068][T30122] __nla_validate_parse: 3 callbacks suppressed [ 1252.501086][T30122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21360'. [ 1252.517117][T30122] netlink: 'syz.4.21360': attribute type 1 has an invalid length. [ 1252.526330][T30122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21360'. [ 1252.581443][T30139] netlink: 'syz.4.21364': attribute type 16 has an invalid length. [ 1253.300634][T30160] fuse: Bad value for 'fd' [ 1253.330553][T30167] netlink: 'syz.2.21376': attribute type 1 has an invalid length. [ 1253.493112][T30174] cannot load conntrack support for proto=3 [ 1253.584343][ T36] audit: type=1107 audit(2000000389.634:17111): pid=30191 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1253.586450][T30194] futex_wake_op: syz.3.21388 tries to shift op by 32; fix this program [ 1253.611815][T30199] netlink: 'syz.9.21390': attribute type 4 has an invalid length. [ 1253.693780][T30199] netlink: 17 bytes leftover after parsing attributes in process `syz.9.21390'. [ 1254.312778][T30239] tipc: Enabling of bearer rejected, failed to enable media [ 1254.493522][T30278] overlayfs: failed to clone upperpath [ 1254.517652][T30288] overlayfs: failed to clone upperpath [ 1255.432004][ T36] audit: type=1326 audit(2000000000.947:17112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30356 comm="syz.4.21442" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe48ab8eec9 code=0x0 [ 1255.609479][T30398] netlink: 12 bytes leftover after parsing attributes in process `syz.9.21454'. [ 1255.624865][T30398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30398 comm=syz.9.21454 [ 1256.323146][T30421] overlayfs: failed to clone upperpath [ 1256.563395][ T36] audit: type=1326 audit(2000000002.017:17113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30170 comm="syz.2.21378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4b98eec9 code=0x7fc00000 [ 1256.594883][ T36] audit: type=1107 audit(2000000002.045:17114): pid=30439 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1256.608421][ T36] audit: type=1107 audit(2000000002.045:17115): pid=30439 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1256.715480][T30445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1566 sclass=netlink_route_socket pid=30445 comm=syz.3.21470 [ 1256.738412][T30447] 9pnet_fd: Insufficient options for proto=fd [ 1256.972861][T30454] netlink: 12 bytes leftover after parsing attributes in process `syz.9.21474'. [ 1257.129327][T26975] tipc: Left network mode [ 1257.134355][T26975] veth1_macvtap: left promiscuous mode [ 1257.140250][T26975] veth0_vlan: left promiscuous mode [ 1257.348298][T30492] tmpfs: Bad value for 'nr_inodes' [ 1257.850986][T30504] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=30504 comm=syz.2.21490 [ 1257.905187][T30511] 9pnet_fd: Insufficient options for proto=fd [ 1258.611615][T30567] 9pnet_fd: Insufficient options for proto=fd [ 1258.797900][T30583] 9pnet_fd: Insufficient options for proto=fd [ 1258.825636][ T36] audit: type=1326 audit(2000000004.137:17116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30590 comm="syz.2.21521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4b98eec9 code=0x7ffc0000 [ 1258.849484][ T36] audit: type=1326 audit(2000000004.137:17117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30590 comm="syz.2.21521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4b98eec9 code=0x7ffc0000 [ 1258.873313][ T36] audit: type=1326 audit(2000000004.137:17118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30590 comm="syz.2.21521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0f4b98eec9 code=0x7ffc0000 [ 1258.897097][ T36] audit: type=1326 audit(2000000004.137:17119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30590 comm="syz.2.21521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4b98eec9 code=0x7ffc0000 [ 1258.920845][ T36] audit: type=1326 audit(2000000004.137:17120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30590 comm="syz.2.21521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4b98eec9 code=0x7ffc0000 [ 1258.944668][ T36] audit: type=1326 audit(2000000004.137:17121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30590 comm="syz.2.21521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0f4b98eec9 code=0x7ffc0000 [ 1258.968379][ T36] audit: type=1326 audit(2000000004.137:17122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30590 comm="syz.2.21521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4b98eec9 code=0x7ffc0000 [ 1258.992097][ T36] audit: type=1326 audit(2000000004.137:17123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30590 comm="syz.2.21521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4b98eec9 code=0x7ffc0000 [ 1259.016130][ T36] audit: type=1326 audit(2000000004.137:17124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30590 comm="syz.2.21521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f0f4b98eec9 code=0x7ffc0000 [ 1259.039874][ T36] audit: type=1326 audit(2000000004.137:17125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30590 comm="syz.2.21521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 1259.063891][ T36] audit: type=1326 audit(2000000004.137:17126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30590 comm="syz.2.21521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4b98eec9 code=0x7ffc0000 [ 1259.087561][ T36] audit: type=1326 audit(2000000004.137:17127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30590 comm="syz.2.21521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f4b98eec9 code=0x7ffc0000 [ 1259.111762][ T36] audit: type=1326 audit(2000000004.137:17128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30590 comm="syz.2.21521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4b98eec9 code=0x7ffc0000 [ 1259.135656][ T36] audit: type=1326 audit(2000000004.137:17129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30590 comm="syz.2.21521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0f4b98eec9 code=0x7ffc0000 [ 1260.768958][T30713] overlayfs: failed to clone upperpath [ 1260.804250][T30725] /dev/loop0: Can't lookup blockdev [ 1260.880014][T30746] fuse: Bad value for 'fd' [ 1260.961614][T30750] netlink: 'syz.2.21566': attribute type 1 has an invalid length. [ 1261.196429][T30795] netlink: 188 bytes leftover after parsing attributes in process `syz.2.21576'. [ 1261.223490][T30799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=30799 comm=syz.2.21578 [ 1262.496468][T30882] overlayfs: failed to resolve './file1': -2 [ 1262.712737][T30895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.719872][T30895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.727088][T30895] bridge_slave_0: entered allmulticast mode [ 1262.733631][T30895] bridge_slave_0: entered promiscuous mode [ 1262.743216][T30895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.745454][T30900] 9pnet_fd: Insufficient options for proto=fd [ 1262.750703][T30895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.763540][T30895] bridge_slave_1: entered allmulticast mode [ 1262.769910][T30895] bridge_slave_1: entered promiscuous mode [ 1262.836400][T18536] veth1_macvtap: left promiscuous mode [ 1262.842105][T18536] veth0_vlan: left promiscuous mode [ 1262.880283][T18536] vcan0 (unregistering): left allmulticast mode [ 1262.900266][T30895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.907356][T30895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.914602][T30895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.921646][T30895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.947372][T26975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.954810][T26975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.966746][T26973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.973940][T26973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.983372][T26975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.990464][T26975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.021541][T30925] sock: sock_timestamping_bind_phc: sock not bind to device [ 1263.023463][T30895] veth0_vlan: entered promiscuous mode [ 1263.042977][T30895] veth1_macvtap: entered promiscuous mode [ 1263.091362][T30940] 9pnet_fd: Insufficient options for proto=fd [ 1263.129666][T30950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 1263.406051][ T336] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1263.597597][ T336] usb 4-1: Using ep0 maxpacket: 32 [ 1263.603829][ T336] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1263.618853][ T336] usb 4-1: config 0 has no interface number 0 [ 1263.625009][ T336] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1263.640877][ T336] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1263.649955][ T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.661481][ T336] usb 4-1: Product: syz [ 1263.666797][ T336] usb 4-1: Manufacturer: syz [ 1263.671405][ T336] usb 4-1: SerialNumber: syz [ 1263.683875][ T336] usb 4-1: config 0 descriptor?? [ 1263.693895][ T336] smsc75xx v1.0.0 [ 1264.137561][T31003] overlayfs: failed to resolve './file0': -2 [ 1264.245052][T31020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21653'. [ 1264.263933][ T36] kauditd_printk_skb: 11064 callbacks suppressed [ 1264.263951][ T36] audit: type=1326 audit(2000000010.233:28194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30972 comm="syz.4.21635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe48ab8d97f code=0x50000 [ 1264.294556][ T36] audit: type=1326 audit(2000000010.233:28195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30972 comm="syz.4.21635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe48ab8d97f code=0x50000 [ 1264.319031][ T36] audit: type=1326 audit(2000000010.233:28196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30972 comm="syz.4.21635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe48ab8d97f code=0x50000 [ 1264.344612][ T336] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1264.355579][ T336] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1264.365126][ T36] audit: type=1326 audit(2000000010.233:28197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30972 comm="syz.4.21635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe48ab8d97f code=0x50000 [ 1264.395508][ T36] audit: type=1326 audit(2000000010.233:28198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30972 comm="syz.4.21635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe48ab8d97f code=0x50000 [ 1264.424536][ T36] audit: type=1326 audit(2000000010.233:28199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30972 comm="syz.4.21635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe48ab8d97f code=0x50000 [ 1264.452725][ T36] audit: type=1326 audit(2000000010.233:28200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30972 comm="syz.4.21635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe48ab8d97f code=0x50000 [ 1264.476481][ T36] audit: type=1326 audit(2000000010.233:28201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30972 comm="syz.4.21635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe48ab8d97f code=0x50000 [ 1264.500099][ T36] audit: type=1326 audit(2000000010.233:28202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30972 comm="syz.4.21635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe48ab8d97f code=0x50000 [ 1264.523652][ T36] audit: type=1326 audit(2000000010.233:28203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30972 comm="syz.4.21635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe48ab8d97f code=0x50000 [ 1264.608686][ T336] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1264.622096][ T336] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1264.633761][ T336] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1264.659534][ T336] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1264.684869][ T336] usb 4-1: USB disconnect, device number 38 [ 1265.333773][T31071] rust_binder: Write failure EFAULT in pid:25 [ 1265.475448][T31098] SELinux: security_context_str_to_sid (¼DT^"Ù/¾) failed with errno=-22 [ 1265.645283][ T7283] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1265.803880][ T7283] usb 4-1: Using ep0 maxpacket: 16 [ 1265.815735][ T7283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.828318][ T7283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.846784][ T7283] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1265.860419][ T7283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.880751][ T7283] usb 4-1: config 0 descriptor?? [ 1266.314607][ T7283] hid-multitouch 0003:1FD2:6007.0037: unknown main item tag 0x0 [ 1266.329399][ T7283] hid-multitouch 0003:1FD2:6007.0037: item fetching failed at offset 3/5 [ 1266.348263][ T7283] hid-multitouch 0003:1FD2:6007.0037: probe with driver hid-multitouch failed with error -22 [ 1266.529266][ T336] usb 4-1: USB disconnect, device number 39 [ 1267.087751][T31135] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 1267.087776][T31135] rust_binder: Error while translating object. [ 1267.096682][T31135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1267.102909][T31135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 1267.167356][T31139] netlink: 'syz.3.21693': attribute type 3 has an invalid length. [ 1267.184311][T31139] netlink: 944 bytes leftover after parsing attributes in process `syz.3.21693'. [ 1267.382678][T31147] netlink: 'syz.4.21697': attribute type 12 has an invalid length. [ 1267.432952][T31145] binder: Unknown parameter '0x0000000000000003' [ 1267.461083][T31172] fuseblk: Bad value for 'fd' [ 1267.998724][T31205] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=31205 comm=syz.3.21716 [ 1268.082530][T31219] binder: Unknown parameter 'defcontext01777777777777777777777' [ 1268.135096][T31225] veth1: entered allmulticast mode [ 1268.294590][T31256] netlink: 'syz.9.21734': attribute type 32 has an invalid length. [ 1268.302650][T31256] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21734'. [ 1268.427561][T31258] netlink: 80 bytes leftover after parsing attributes in process `syz.9.21735'. [ 1268.462941][T31261] futex_wake_op: syz.9.21736 tries to shift op by -1; fix this program [ 1268.727044][T31292] overlayfs: failed to clone upperpath [ 1268.872943][T31317] 9pnet_fd: Insufficient options for proto=fd [ 1268.993524][T31322] netlink: 76 bytes leftover after parsing attributes in process `syz.3.21759'. [ 1269.002771][T31322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21759'. [ 1269.093957][T31325] kvm: pic: non byte read [ 1269.098724][T31325] kvm: pic: non byte read [ 1269.103111][T31325] kvm: pic: non byte read [ 1269.107491][T31325] kvm: pic: non byte read [ 1269.111895][T31325] kvm: pic: non byte read [ 1269.116493][T31325] kvm: pic: non byte read [ 1269.121084][T31325] kvm: pic: non byte read [ 1269.125467][T31325] kvm: pic: non byte read [ 1269.129876][T31325] kvm: pic: non byte read [ 1269.134259][T31325] kvm: pic: non byte read [ 1269.248596][T31332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=31332 comm=syz.3.21760 [ 1269.264822][T31332] netlink: 80 bytes leftover after parsing attributes in process `syz.3.21760'. [ 1269.281625][T31332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 1269.425744][T31356] Bluetooth: hci0: Frame reassembly failed (-84) [ 1269.445325][T26975] Bluetooth: hci0: Frame reassembly failed (-84) [ 1269.456188][T31356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 1270.011117][T31383] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1270.037801][T31388] /dev/sr0: Can't lookup blockdev [ 1270.053583][T31390] sit0: entered promiscuous mode [ 1270.059631][T31390] netlink: 'syz.4.21781': attribute type 1 has an invalid length. [ 1270.067542][T31390] netlink: 1 bytes leftover after parsing attributes in process `syz.4.21781'. [ 1270.175797][T31398] netlink: 104 bytes leftover after parsing attributes in process `syz.9.21784'. [ 1270.689409][T31431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21795'. [ 1270.831432][T31461] overlayfs: failed to clone lowerpath [ 1270.837665][ T36] kauditd_printk_skb: 16012 callbacks suppressed [ 1270.837681][ T36] audit: type=1400 audit(2000000272.408:44216): avc: denied { relabelto } for pid=31460 comm="syz.4.21804" name="ptp0" dev="tmpfs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 1270.876352][ T36] audit: type=1400 audit(2000000272.408:44217): avc: denied { associate } for pid=31460 comm="syz.4.21804" name="ptp0" dev="tmpfs" ino=998 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 1270.904666][ T36] audit: type=1400 audit(2000000272.436:44218): avc: denied { create } for pid=31467 comm="syz.4.21806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1270.925324][ T36] audit: type=1400 audit(2000000272.436:44219): avc: denied { setopt } for pid=31467 comm="syz.4.21806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1270.925497][T31473] 9pnet_fd: Insufficient options for proto=fd [ 1270.946317][ T36] audit: type=1400 audit(2000000272.464:44220): avc: denied { name_bind } for pid=31469 comm="syz.4.21807" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1270.973979][ T36] audit: type=1400 audit(2000000272.464:44221): avc: denied { node_bind } for pid=31469 comm="syz.4.21807" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1270.997037][ T36] audit: type=1400 audit(2000000272.464:44222): avc: denied { create } for pid=31469 comm="syz.4.21807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1271.017459][ T36] audit: type=1400 audit(2000000272.464:44223): avc: denied { bind } for pid=31469 comm="syz.4.21807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1271.037751][ T36] audit: type=1400 audit(2000000272.464:44224): avc: denied { write } for pid=31469 comm="syz.4.21807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1271.058105][ T36] audit: type=1400 audit(2000000272.464:44225): avc: denied { read } for pid=31469 comm="syz.4.21807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1271.165001][T31490] netlink: 120 bytes leftover after parsing attributes in process `syz.4.21815'. [ 1271.634231][T31357] Bluetooth: hci0: command 0x1003 tx timeout [ 1271.640286][ T4860] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1272.627480][T31531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1272.627515][T31531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:99 [ 1272.787038][T31539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:105 [ 1273.371592][ T7283] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1273.555591][ T7283] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 1273.564505][ T7283] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 1273.572614][ T7283] usb 4-1: config 0 has no interface number 0 [ 1273.579936][ T7283] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 1273.589756][ T7283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.599211][ T7283] usb 4-1: config 0 descriptor?? [ 1273.606678][ T7283] ftdi_sio 4-1:0.4: FTDI USB Serial Device converter detected [ 1273.615628][ T7283] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 1273.822639][T31546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.831263][T31546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.840176][T31546] No source specified [ 1273.845022][T31546] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 1273.852309][T31546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 1273.859626][ T336] usb 4-1: USB disconnect, device number 40 [ 1273.880734][ T336] ftdi_sio 4-1:0.4: device disconnected [ 1274.554332][T31575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119 [ 1275.376669][T31615] input: syz0 as /devices/virtual/input/input101 [ 1275.652548][ T336] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1275.677211][T31620] veth1: entered allmulticast mode [ 1275.812455][ T336] usb 4-1: Using ep0 maxpacket: 16 [ 1275.819872][ T336] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1275.829375][ T336] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.839954][ T336] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1275.848949][ T336] usb 4-1: config 1 has no interface number 1 [ 1275.855100][ T336] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1275.867905][ T336] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1275.881635][ T336] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1275.890781][ T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.898946][ T336] usb 4-1: Product: syz [ 1275.903099][ T336] usb 4-1: Manufacturer: syz [ 1275.907680][ T336] usb 4-1: SerialNumber: syz [ 1276.140031][ T336] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1276.156732][ T336] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 1276.165022][ T336] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1276.174190][ T336] usb 4-1: USB disconnect, device number 41 [ 1276.214901][T30542] udevd[30542]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1276.563056][T31619] veth1: left allmulticast mode [ 1276.603298][ T36] kauditd_printk_skb: 512 callbacks suppressed [ 1276.603315][ T36] audit: type=1400 audit(2000000277.812:44738): avc: denied { create } for pid=31623 comm="syz.9.21862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1276.694308][ T36] audit: type=1400 audit(2000000277.897:44739): avc: denied { read write } for pid=30895 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1276.719315][ T36] audit: type=1400 audit(2000000277.897:44740): avc: denied { read write open } for pid=30895 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1276.725337][T31628] binder: Bad value for 'max' [ 1276.744549][ T36] audit: type=1400 audit(2000000277.897:44741): avc: denied { ioctl } for pid=30895 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1276.760463][T31628] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1276.775554][ T36] audit: type=1400 audit(2000000277.925:44742): avc: denied { mounton } for pid=31627 comm="syz.3.21863" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1276.804936][ T36] audit: type=1400 audit(2000000277.953:44743): avc: denied { mounton } for pid=31627 comm="syz.3.21863" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1276.836032][T31628] __nla_validate_parse: 2 callbacks suppressed [ 1276.836053][T31628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21863'. [ 1276.852608][ T36] audit: type=1400 audit(2000000278.047:44744): avc: denied { read write } for pid=31627 comm="syz.3.21863" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1276.876546][ T36] audit: type=1400 audit(2000000278.047:44745): avc: denied { read write open } for pid=31627 comm="syz.3.21863" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1276.901832][ T36] audit: type=1400 audit(2000000278.047:44746): avc: denied { create } for pid=31627 comm="syz.3.21863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1276.925154][ T36] audit: type=1400 audit(2000000278.047:44747): avc: denied { ioctl } for pid=31627 comm="syz.3.21863" path="socket:[220942]" dev="sockfs" ino=220942 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1277.155463][T27361] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1277.324933][T31631] netlink: 'syz.3.21864': attribute type 27 has an invalid length. [ 1277.364249][T31631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=31631 comm=syz.3.21864 [ 1277.399068][T31631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1277.399097][T31631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 1277.443420][T27361] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1277.482191][T27361] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1277.496856][T27361] usb 4-1: can't read configurations, error -71 [ 1277.508363][T31659] overlayfs: missing 'lowerdir' [ 1277.532161][T31659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:136 [ 1277.716903][T31674] rust_binder: Error while translating object. [ 1277.726289][T31674] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 1277.733806][T31674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:146 [ 1278.391895][T27361] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1278.555080][T31697] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=31697 comm=syz.4.21891 [ 1278.571519][T27361] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1278.571522][T31697] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31697 comm=syz.4.21891 [ 1278.581451][T27361] usb 4-1: not running at top speed; connect to a high speed hub [ 1278.595489][T31697] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31697 comm=syz.4.21891 [ 1278.602776][T27361] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1278.615214][T31697] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=31697 comm=syz.4.21891 [ 1278.624847][T27361] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1278.649269][T27361] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1278.658774][T27361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.666825][T27361] usb 4-1: Product: syz [ 1278.672201][T27361] usb 4-1: Manufacturer: syz [ 1278.676909][T27361] usb 4-1: SerialNumber: syz [ 1278.711926][T31704] overlay: filesystem on ./bus is read-only [ 1278.741531][T31706] netlink: 68 bytes leftover after parsing attributes in process `syz.4.21894'. [ 1278.886147][T31713] 9pnet_fd: Insufficient options for proto=fd [ 1278.919885][T31685] FAT-fs (rnullb0): bogus number of reserved sectors [ 1278.926976][T31685] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1278.935296][T27361] usb 4-1: 0:2 : does not exist [ 1278.952896][T27361] usb 4-1: USB disconnect, device number 43 [ 1279.006040][T30542] udevd[30542]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1279.513015][T31742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 1279.788125][ T7283] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1279.958676][ T7283] usb 4-1: Using ep0 maxpacket: 16 [ 1279.966940][ T7283] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.977759][ T7283] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1279.989262][ T7283] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1279.998351][ T7283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.006363][ T7283] usb 4-1: Product: syz [ 1280.010555][ T7283] usb 4-1: Manufacturer: syz [ 1280.015160][ T7283] usb 4-1: SerialNumber: syz [ 1280.239586][T31744] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1280.247618][T31744] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 1280.256233][T31744] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1280.264229][T31744] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 1280.278412][ T7283] usb 4-1: 0:2 : does not exist [ 1280.288609][ T7283] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1280.300103][ T7283] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1280.310988][ T7283] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1280.323041][ T7283] usb 4-1: USB disconnect, device number 44 [ 1280.362455][T30542] udevd[30542]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1280.843247][T31760] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 1280.844176][T31760] rust_binder: Error while translating object. [ 1280.853019][T31760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1280.859724][T31760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 1280.937183][T31772] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 1280.954668][T31772] rust_binder: Write failure EINVAL in pid:170 [ 1281.090868][T31776] rust_binder: 31775 RLIMIT_NICE not set [ 1281.097422][T31775] rust_binder: Write failure EINVAL in pid:172 [ 1281.107142][ T7282] rust_binder: 31773: removing orphan mapping 0:1168 [ 1281.959161][ T36] kauditd_printk_skb: 416 callbacks suppressed [ 1281.959177][ T36] audit: type=1400 audit(2000000282.841:45164): avc: denied { execmem } for pid=31800 comm="syz.4.21928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1281.985201][ T36] audit: type=1400 audit(2000000282.850:45165): avc: denied { create } for pid=31800 comm="syz.4.21928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1282.006218][ T36] audit: type=1400 audit(2000000282.850:45166): avc: denied { create } for pid=31800 comm="syz.4.21928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1282.026358][ T36] audit: type=1400 audit(2000000282.850:45167): avc: denied { setopt } for pid=31800 comm="syz.4.21928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1282.046354][ T36] audit: type=1400 audit(2000000282.850:45168): avc: denied { ioctl } for pid=31800 comm="syz.4.21928" path="socket:[222261]" dev="sockfs" ino=222261 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1282.090907][ T36] audit: type=1400 audit(2000000282.850:45169): avc: denied { sys_module } for pid=31800 comm="syz.4.21928" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1282.119145][ T36] audit: type=1400 audit(2000000282.850:45170): avc: denied { accept } for pid=31800 comm="syz.4.21928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1282.143698][ T36] audit: type=1400 audit(2000000282.850:45171): avc: denied { write } for pid=31800 comm="syz.4.21928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1282.165690][ T36] audit: type=1400 audit(2000000282.850:45172): avc: denied { setopt } for pid=31800 comm="syz.4.21928" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1282.185497][T31812] overlayfs: failed to clone lowerpath [ 1282.187101][ T36] audit: type=1400 audit(2000000282.888:45173): avc: denied { create } for pid=31802 comm="syz.4.21929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1282.234251][T31815] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1282.234275][T31815] rust_binder: Read failure Err(EFAULT) in pid:188 [ 1282.428427][T31835] netlink: 'syz.3.21939': attribute type 8 has an invalid length. [ 1282.496964][T31845] netlink: 'syz.3.21942': attribute type 30 has an invalid length. [ 1282.847179][T27361] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1283.007039][T27361] usb 4-1: Using ep0 maxpacket: 8 [ 1283.014358][T27361] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1283.023433][T27361] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1283.033308][T27361] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1283.042371][T27361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.492783][T27361] usb 4-1: string descriptor 0 read error: -71 [ 1283.510089][T27361] usb 4-1: USB disconnect, device number 45 [ 1283.531941][T30542] udevd[30542]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1284.332965][T31904] fuse: blksize only supported for fuseblk [ 1284.459903][T31916] 9pnet_fd: Insufficient options for proto=fd [ 1285.107458][ T9] rust_binder: 0: removing orphan mapping 0:1168 [ 1285.298833][T31963] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1285.298866][T31963] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:211 [ 1285.325487][T31955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.341818][T31955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.348892][T31955] bridge_slave_0: entered allmulticast mode [ 1285.356470][T31955] bridge_slave_0: entered promiscuous mode [ 1285.364666][T31955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.371743][T31955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.378861][T31955] bridge_slave_1: entered allmulticast mode [ 1285.391154][T31955] bridge_slave_1: entered promiscuous mode [ 1285.551831][T31955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.558933][T31955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.566255][T31955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.573291][T31955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.693070][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1285.772031][T26975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.782147][T26975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.798255][T26975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.805356][T26975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.837978][T26975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.845080][T26975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.977914][T31955] veth0_vlan: entered promiscuous mode [ 1286.034940][T31955] veth1_macvtap: entered promiscuous mode [ 1286.228063][T32025] binder: Bad value for 'stats' [ 1286.262468][T32027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1286.262498][T32027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 1286.289991][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1286.313560][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1286.322905][ T9] usb 4-1: config 179 has no interface number 0 [ 1286.329350][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1286.341393][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1286.353163][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1286.364430][ T9] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1286.378062][ T9] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1286.384941][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1286.394271][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.407761][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input102 [ 1286.527791][T32035] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 1286.621734][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.628523][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.637357][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.644167][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.653452][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.660243][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.670057][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.677533][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.686869][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.693807][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.701604][T32039] rust_binder: Error while translating object. [ 1286.701642][T32039] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 1286.703460][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.707981][T32039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:21 [ 1286.718399][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.742606][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.750082][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.758839][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.767751][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.776784][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.784192][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.793645][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.800412][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.810667][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.819311][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.829773][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.837218][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.846702][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.853477][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.878456][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.888946][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.915910][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.925973][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.936015][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.945717][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.955113][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.962889][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1286.971536][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1286.980131][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.006737][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.014170][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.024478][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.033495][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.046303][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.053718][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.063107][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.075730][T32071] netlink: 104 bytes leftover after parsing attributes in process `syz.9.22015'. [ 1287.079660][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.101970][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.114540][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.124308][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.131132][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.141100][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.148615][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.158540][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.166340][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.177602][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.184809][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.196759][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.203545][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.213140][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.224730][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.235544][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.243024][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.252576][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.266135][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.275503][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.282964][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.292969][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.299762][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.308574][ T36] kauditd_printk_skb: 811 callbacks suppressed [ 1287.308591][ T36] audit: type=1400 audit(2000000287.860:45985): avc: denied { mounton } for pid=31972 comm="syz.3.21983" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1287.309361][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.346847][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.355188][ T36] audit: type=1400 audit(2000000287.898:45986): avc: denied { mounton } for pid=31972 comm="syz.3.21983" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1287.355986][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.386131][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.395340][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.402976][ T36] audit: type=1400 audit(2000000287.935:45987): avc: denied { mounton } for pid=31972 comm="syz.3.21983" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1287.427996][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.437743][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.445405][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.452262][ T36] audit: type=1400 audit(2000000287.982:45988): avc: denied { mounton } for pid=31972 comm="syz.3.21983" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1287.478440][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.485199][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.492350][ T36] audit: type=1400 audit(2000000288.020:45989): avc: denied { create } for pid=32072 comm="syz.9.22017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1287.515304][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.523009][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.530086][ T36] audit: type=1400 audit(2000000288.020:45990): avc: denied { write } for pid=32072 comm="syz.9.22017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1287.553101][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.561050][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.570159][ T36] audit: type=1400 audit(2000000288.020:45991): avc: denied { mounton } for pid=31972 comm="syz.3.21983" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1287.595737][T32091] devpts: called with bogus options [ 1287.595884][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.602548][ T36] audit: type=1400 audit(2000000288.020:45992): avc: denied { read } for pid=32072 comm="syz.9.22017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1287.611230][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.654227][ T36] audit: type=1400 audit(2000000288.020:45993): avc: denied { read } for pid=32072 comm="syz.9.22017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1287.657019][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.686275][ T36] audit: type=1400 audit(2000000288.057:45994): avc: denied { mounton } for pid=31972 comm="syz.3.21983" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1287.700003][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.719414][T32093] netlink: 140 bytes leftover after parsing attributes in process `syz.6.22021'. [ 1287.731053][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.737796][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.756390][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.771674][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.784800][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.791636][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.801386][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.808787][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.818728][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.826650][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.835356][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.843994][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.853447][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.866633][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.876161][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.883636][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.893257][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.905332][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.915838][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.923783][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.933574][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.941454][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.951007][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.958468][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.974013][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.980787][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1287.990968][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1287.998361][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1288.017063][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1288.035043][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1288.049686][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1288.067649][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1288.080281][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1288.096781][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1288.114257][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1288.126834][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1288.146286][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1288.159610][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1288.176459][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1288.185350][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1288.195343][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1288.202508][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1288.212068][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1288.218786][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1288.228511][T31977] FAT-fs (rnullb0): bogus number of reserved sectors [ 1288.235897][T31977] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1288.646454][T32132] overlayfs: failed to clone lowerpath [ 1289.058890][T32172] incfs: Options parsing error. -22 [ 1289.066495][T32172] incfs: mount failed -22 [ 1289.076100][T32172] incfs: Options parsing error. -22 [ 1289.089750][T32172] incfs: mount failed -22 [ 1289.099206][T32172] incfs: Options parsing error. -22 [ 1289.111129][T32172] incfs: mount failed -22 [ 1289.346956][ T7283] usb 4-1: USB disconnect, device number 46 [ 1289.347094][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1289.361580][ T7283] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1289.443659][T32213] ------------[ cut here ]------------ [ 1289.449221][T32213] WARNING: CPU: 0 PID: 32213 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 1289.458787][T32213] Modules linked in: [ 1289.462719][T32213] CPU: 0 UID: 0 PID: 32213 Comm: syz.3.22062 Not tainted syzkaller #0 274f9aef60e05467e019488b9f7ece6681bb0342 [ 1289.474522][T32213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1289.484660][T32213] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 1289.490620][T32213] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 22 1f ee 05 00 0f 85 be 00 00 00 c6 05 15 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 1289.510301][T32213] RSP: 0018:ffffc90001f47560 EFLAGS: 00010246 [ 1289.516389][T32213] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 1289.524406][T32213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90001f47618 [ 1289.526676][T32217] netlink: 'syz.4.22064': attribute type 16 has an invalid length. [ 1289.532427][T32213] RBP: ffffc90001f476a0 R08: ffffc90001f47617 R09: 0000000000000000 [ 1289.548526][T32213] R10: ffffc90001f47600 R11: fffff520003e8ec3 R12: ffffc90001f475a0 [ 1289.549755][T32217] netlink: 'syz.4.22064': attribute type 4 has an invalid length. [ 1289.556600][T32213] R13: dffffc0000000000 R14: 1ffff920003e8eb0 R15: 0000000000000000 [ 1289.556625][T32213] FS: 00007f48d7ff76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1289.556644][T32213] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1289.556658][T32213] CR2: 0000200000001dc0 CR3: 000000011a09e000 CR4: 00000000003526b0 [ 1289.556677][T32213] Call Trace: [ 1289.556684][T32213] [ 1289.556691][T32213] ? vfs_write+0x3bd/0xf30 [ 1289.588287][T32217] netlink: 63966 bytes leftover after parsing attributes in process `syz.4.22064'. [ 1289.596162][T32213] ? ksys_write+0x141/0x250 [ 1289.596195][T32213] ? x64_sys_call+0x271c/0x2ee0 [ 1289.625607][T32213] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 1289.631484][T32213] ? hashtab_init+0xdb/0x1f0 [ 1289.636112][T32213] ___kmalloc_large_node+0x81/0x220 [ 1289.641387][T32213] ? hashtab_init+0xdb/0x1f0 [ 1289.646004][T32213] __kmalloc_large_node_noprof+0x1e/0xe0 [ 1289.651696][T32213] ? hashtab_init+0xdb/0x1f0 [ 1289.656309][T32213] __kmalloc_noprof+0x26d/0x450 [ 1289.661197][T32213] hashtab_init+0xdb/0x1f0 [ 1289.665798][T32213] ? class_read+0x162/0x8a0 [ 1289.670391][T32213] symtab_init+0x44/0x70 [ 1289.674692][T32213] class_read+0x1df/0x8a0 [ 1289.679053][T32213] ? __cfi_class_read+0x10/0x10 [ 1289.683953][T32213] ? hashtab_init+0x105/0x1f0 [ 1289.688695][T32213] policydb_read+0xaa8/0x28c0 [ 1289.693431][T32213] ? kasan_save_alloc_info+0x40/0x50 [ 1289.698743][T32213] ? __cfi_policydb_read+0x10/0x10 [ 1289.703891][T32213] ? security_load_policy+0x128/0x12f0 [ 1289.709361][T32213] security_load_policy+0x162/0x12f0 [ 1289.715779][T32213] ? avc_has_perm_noaudit+0x21c/0x360 [ 1289.721197][T32213] ? _raw_spin_unlock+0x45/0x60 [ 1289.725129][T32220] __vm_enough_memory: pid: 32220, comm: syz.3.22062, bytes: 18014402804453376 not enough memory for the allocation [ 1289.726390][T32213] ? __check_object_size+0x50a/0x810 [ 1289.743524][T32213] ? __cfi_security_load_policy+0x10/0x10 [ 1289.749263][T32213] ? __kasan_check_write+0x18/0x20 [ 1289.754427][T32213] sel_write_load+0x298/0x5e0 [ 1289.759129][T32213] ? __cfi_sel_write_load+0x10/0x10 [ 1289.764366][T32213] ? bpf_lsm_file_permission+0xd/0x20 [ 1289.769901][T32213] ? __cfi_sel_write_load+0x10/0x10 [ 1289.775160][T32213] vfs_write+0x3bd/0xf30 [ 1289.779454][T32213] ? __cfi_vfs_write+0x10/0x10 [ 1289.784230][T32213] ? __kasan_check_write+0x18/0x20 [ 1289.789394][T32213] ? mutex_lock+0x92/0x1c0 [ 1289.793826][T32213] ? __cfi_mutex_lock+0x10/0x10 [ 1289.798758][T32213] ? __fget_files+0x2c5/0x340 [ 1289.803474][T32213] ksys_write+0x141/0x250 [ 1289.807881][T32213] ? xfd_validate_state+0x68/0x150 [ 1289.813011][T32213] ? __cfi_ksys_write+0x10/0x10 [ 1289.817936][T32213] ? __kasan_check_write+0x18/0x20 [ 1289.823066][T32213] ? fpregs_restore_userregs+0x11d/0x260 [ 1289.828735][T32213] __x64_sys_write+0x7f/0x90 [ 1289.833327][T32213] x64_sys_call+0x271c/0x2ee0 [ 1289.838043][T32213] do_syscall_64+0x58/0xf0 [ 1289.842484][T32213] ? clear_bhb_loop+0x50/0xa0 [ 1289.847172][T32213] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1289.853092][T32213] RIP: 0033:0x7f48d958eec9 [ 1289.857529][T32213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1289.877157][T32213] RSP: 002b:00007f48d7ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1289.885697][T32213] RAX: ffffffffffffffda RBX: 00007f48d97e5fa0 RCX: 00007f48d958eec9 [ 1289.893710][T32213] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000008 [ 1289.901697][T32213] RBP: 00007f48d9611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1289.909721][T32213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1289.917729][T32213] R13: 00007f48d97e6038 R14: 00007f48d97e5fa0 R15: 00007ffc942c1318 [ 1289.925744][T32213] [ 1289.928789][T32213] ---[ end trace 0000000000000000 ]--- [ 1289.935105][T32213] SELinux: failed to load policy