last executing test programs: 12m23.153887965s ago: executing program 32 (id=142): setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, 0x0, 0x4000) pipe2(0x0, 0x80000) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000001400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) bind$unix(r4, &(0x7f0000001400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x65) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e1b000/0x4000)=nil, 0x4000, &(0x7f00000004c0)='nfc\x00') mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prlimit64(0x0, 0x7, 0x0, 0x0) (async) prlimit64(0x0, 0x7, 0x0, 0x0) syz_io_uring_setup(0x36e2, &(0x7f0000000600)={0x0, 0x5946, 0x400, 0x0, 0x2c5}, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 11m7.149590335s ago: executing program 33 (id=1284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000f00)={0x81, 0x0, 0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) (async) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000f00)={0x81, 0x0, 0x1}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) (async) 9m38.56108577s ago: executing program 34 (id=2819): socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200200, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x20008844) (async) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x101) close(r1) (async) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000001c0)='.\x00', 0x400017e) (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB]) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='rdma.current\x00', 0x275a, 0x0) (async) mlockall(0x2) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1, 0x3, 0x8}) (async) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) (async) fcntl$lock(r5, 0x7, &(0x7f0000000280)={0x2, 0x0, 0x100002f, 0x9}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x10000, 0x9}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x4, 0xf5eb, 0x9, 0xb, 0x202}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x155b42, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x9, @loopback, 0xf6}, 0x1c) (async) sendmmsg$inet(r8, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000980)="21ae1b", 0x3}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x80) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0xffff8000) 9m35.949932691s ago: executing program 35 (id=3118): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 9m1.077798349s ago: executing program 36 (id=3441): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x817) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000008d0400000085b87176"]) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') getdents64(r5, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x10000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r8 = syz_io_uring_setup(0x49ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x400003, 0x19a}, &(0x7f0000000100), &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) ppoll(&(0x7f00000001c0)=[{r8, 0x8020}], 0x1, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x40000100000200) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000002100)=ANY=[@ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64=r0, @ANYRESOCT=r2]) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r11, 0x80605414, 0x0) mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2, 0x13, r7, 0x98b2f000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x1, 0x2000, 0x2000, &(0x7f0000018000/0x2000)=nil}) 8m59.630571697s ago: executing program 37 (id=3471): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0xa, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x3, 0x7, 0x5f, 0xfffffffc, 0xa18f, 0x2, 0x80000000, 0x5, 0x1ff, 0xfffffff9, 0xa}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0xa, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x3, 0x7, 0x5f, 0xfffffffc, 0xa18f, 0x2, 0x80000000, 0x5, 0x1ff, 0xfffffff9, 0xa}}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$BLKRRPART(r0, 0x125f, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x1000000000007) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x28011, r7, 0xffffc000) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x98, r8, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x70}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x392}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}]]}, 0x98}, 0x1, 0x0, 0x0, 0x2000c840}, 0x20040000) r9 = socket$netlink(0x10, 0x3, 0x0) set_tid_address(0x0) (async) set_tid_address(0x0) sendmsg$netlink(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1e8}], 0x1}, 0x0) (async) sendmsg$netlink(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1e8}], 0x1}, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) 8m8.551932862s ago: executing program 9 (id=4780): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x68800, 0x20) read$FUSE(r1, &(0x7f0000002040)={0x2020}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close(r4) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r0, 0xffffffffffffffff, 0x0) 8m8.461366113s ago: executing program 9 (id=4783): mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x68) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0) r1 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_mcast\x00') pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}], [], 0x6b}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000240)=0xe8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}, {@directio}, {@directio}], [{@euid_gt={'euid>', r8}}, {@context={'context', 0x3d, 'user_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\\\''}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x400}}, {@subj_type={'subj_type', 0x3d, '^(]'}}, {@smackfstransmute}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x65, 0x5, 0x32, 0x66, 0x33, 0x37, 0x30], 0x2d, [0x37, 0x31, 0x65, 0x34], 0x2d, [0x61, 0x66, 0x31, 0x64], 0x2d, [0x35, 0x0, 0x66, 0x35], 0x2d, [0x32, 0x32, 0x61, 0x31, 0x66, 0x39, 0x33, 0x61]}}}]}}) r9 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000080), 0x8) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca946e64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c000100070c10000000000000000000", 0x58}], 0x1) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r11, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) 8m8.429866154s ago: executing program 9 (id=4786): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) getdents64(r3, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) pipe2$9p(&(0x7f0000000040), 0x80880) open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x162) r5 = socket$inet6(0xa, 0x80002, 0x1) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)=0x3) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x24044081}, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0x1c, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 8m8.342487886s ago: executing program 9 (id=4787): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x2000000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) futex(&(0x7f0000000000)=0x1, 0x8, 0x1, 0x0, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r5 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000080)={@private0, r8}, 0x14) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0xeb, @rand_addr=' \x01\x00', 0xfff}, 0x1c) r9 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r9, &(0x7f000000c340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 8m8.305492096s ago: executing program 9 (id=4789): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0xe4, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0xd0, 0x1, [@m_ipt={0xcc, 0x4, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xff}, @TCA_IPT_TARG={0x48, 0x6, {0xba15, 'security\x00', 0xdb, 0x4, "7235abc3ea74ebfe13207f3546e4fab4397e89d456e50ff5de907536ebdc"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x6400c041}, 0x2400b180) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0x770a, 0x2) 8m8.265133268s ago: executing program 9 (id=4790): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000280)={0xfffffffffffffe62, 0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000001c0)={0x28, r3, 0x801, 0x70bd28, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x840) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') write$eventfd(r5, &(0x7f0000000000)=0xffff, 0x8) close_range(r4, 0xffffffffffffffff, 0x0) 8m8.199905579s ago: executing program 38 (id=4790): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000280)={0xfffffffffffffe62, 0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000001c0)={0x28, r3, 0x801, 0x70bd28, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x840) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') write$eventfd(r5, &(0x7f0000000000)=0xffff, 0x8) close_range(r4, 0xffffffffffffffff, 0x0) 5m28.760922819s ago: executing program 3 (id=7612): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setuid(0xee01) clock_adjtime(0x0, &(0x7f0000000000)={0x10001, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x81, 0xffffffffffffffff, 0x8000000000000001, 0x5a6c101, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x1ff, 0x4}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000240)) setsockopt$inet_buf(r2, 0x0, 0x40, &(0x7f0000000080)="8c5d7b870500cae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 5m28.69469142s ago: executing program 3 (id=7614): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xf, 0x4) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) read$FUSE(r0, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xf, 0x4) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x4) (async) 5m28.67884422s ago: executing program 3 (id=7615): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0xfffffffc}, 0x1c) write(r2, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b3650dace6ffd148ee98b8cb08591ffc2467faa14e", 0x28) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x16, 0x0, &(0x7f0000000180)) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x25440, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYRESDEC=r0, @ANYBLOB="84c2870355381018bdf652fdf6ab6f58c3a661bf46825aaf86155271e301754a5c31f5b1602ef0106c1f126ce39646e34f70a6ada905a3660ffcffffffe21da5a1ee0a9eb6c1eb3fdc097dd018d4d2d65ff8ce0313de578ccb732d97b9cdd31cfcb3d0a698ab0287be690e18f24cfb66c458df6be630f841ba74dcc5090d6ddf769f68384aa3aafadf261b36268686", @ANYBLOB="6dced652c66f4831146dfffbc76bb5a7da0c0de7417b4cc3351e496b4d74bb3d0d7f8eaa3782f03c00dd855525bd7a94ef5251139e9d9fc9ead8320a9dfe7565f42bee9cec819338b100f95ebbf84450b80dc9b92704f46ae8529b0dc2e61432f3e67fe52b46c13c6c87e9c14927aaded2245d1a2d7a73efa7b28806671d3ca7ac708eda03e0afcc0bf641e803083bc3ad0d08126337a40362b269bb2287673af6e07019c71e123873f8d7a9ca4e887a585862b82770aa0f6f91", @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRES8=r3]) 5m28.655887971s ago: executing program 3 (id=7616): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000180)=0xe, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x64) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) 5m27.362974186s ago: executing program 3 (id=7651): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0xffff1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r3, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/175, 0xaf}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f000001b000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="440f3266ba420066edc4a201ad066567420f30b97d0200000f3266ba410066b8ff2a66ef440fabfa0f01c38f29f89a8fe5000000450f01340f", 0x39}], 0x1, 0xd, &(0x7f0000000140), 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r5 = memfd_create(&(0x7f0000000a00)='\vem\xda\x99R@i\x93\xfe\x9b#*\xff', 0x2) write(r5, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r5, r5, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='!(+.\x00') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 5m27.266044948s ago: executing program 3 (id=7652): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000240)="0979e127b8b3891be8dd397c67fc82251cecd27196a59beb85cb7450266767e735d2f6932155ed86f508fe87dbb49fc69db4458cbb2113dbf9f32c7a53eed2206e041bb9eee97a5798b41527404ddeff"}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = dup(r1) getpeername$packet(r2, 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) 5m27.245470368s ago: executing program 39 (id=7652): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000240)="0979e127b8b3891be8dd397c67fc82251cecd27196a59beb85cb7450266767e735d2f6932155ed86f508fe87dbb49fc69db4458cbb2113dbf9f32c7a53eed2206e041bb9eee97a5798b41527404ddeff"}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = dup(r1) getpeername$packet(r2, 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) 5m7.685085127s ago: executing program 5 (id=8112): getgid() mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x100010, 0xffffffffffffffff, 0xd9a77000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000100)={0xffffffffffffffff}) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0xc, 0x4) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f000010c000/0x4000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clock_adjtime(0x0, &(0x7f0000000000)={0xfffd, 0x4, 0xb0000000000, 0x3, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x80, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x1ff, 0x4}) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) 5m7.629932928s ago: executing program 5 (id=8114): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) r2 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7", 0x14}], 0x1}}], 0x1, 0x408c0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000040)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}]}}) r3 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) mincore(&(0x7f0000701000/0x1000)=nil, 0x1000, &(0x7f00000004c0)=""/74) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x400, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}]}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="4d01000000000000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x43, 0x81, &(0x7f0000000340)={0x11, 0x0, r8, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m7.611390279s ago: executing program 5 (id=8115): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) (async) r1 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private0, r2}, 0x14) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0xeb, @rand_addr=' \x01\x00', 0xfff}, 0x1c) (async) sendto$inet(r0, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) (async) pselect6(0x40, &(0x7f0000000000)={0xb, 0x3ef, 0x2, 0x9, 0xaae5, 0x2, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000000)=@string={0x2}}, {0x5a, 0x0}]}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c015700020301010000009d0dda8d000200000a080089010002000008d9f434bec1d9e715af13cdf9c5d34fa97642e74a5188e0bef7134ea392e2b8975a2653e7998b8c1f35ef53cd65dd9017eeaf55901a1955e28126593916f03a324d599a167b1584b3b050327a0b8feb3b49ceef1554b5b0844a86672831601ca611a526a8a7"], 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0x40485404, &(0x7f0000000180)={{0x3}}) (async) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x2294080, 0x0) 5m6.336063543s ago: executing program 5 (id=8137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7b983e6c727d6b63, 0x0, 0x0}, &(0x7f0000000000)=0x40) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x10, 0x0, 0xfffffffffffffff0}]}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='.\x00') mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x40040) listen(r5, 0x7fffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 5m6.248703175s ago: executing program 5 (id=8138): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x8000}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) getdents64(r2, &(0x7f0000000240)=""/67, 0x43) close_range(r0, 0xffffffffffffffff, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f00000002c0)=0xffffffffffffff01) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0xbd, 0xe, 0x2678, 0x7c43ee386c4e4384, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x700, 0xfffffff8, 0xc18}}) setsockopt$inet6_mreq(r3, 0x29, 0x12, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, r4}, 0x14) 5m6.133915697s ago: executing program 5 (id=8139): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x2006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x80, 0x80, [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x4d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfa, 0x6, 0x70}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x6, 0x2, 0x5}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2, 0x3d, 0x2, 0x10, 0xc2}, 0x30, &(0x7f0000000080)={0x5, 0xf, 0x30, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2c, 0xff, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x5, 0x5}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "481939d79f80f8a4fa44fe9c96fa399c"}]}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42c}}, {0xfe, &(0x7f00000001c0)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f00000002c0)=@string={0x3b, 0x3, "baeda67507e5f299cd28e52f1d7aef82b1777863a1a3a943c5e40e7485a9bcde800289b5c11f3e6ecd569d759090a2d19480bcace411c62c78"}}, {0x67, &(0x7f0000000300)=@string={0x67, 0x3, "5509cca407bad83aee644d33b416b6c3d6b784989fc3d51d08573f8b0e1ca4ef5c1af7230897d40104a491c51fb54da1a49cfc5fe60a373d370bed865d273568de45eb8a741677069177ccdb6d01bb4d3c63bc56569028ef2ebf7d804c6cbb54f63dfec29c"}}, {0x99, &(0x7f0000000440)=@string={0x99, 0x3, "17ff6e436364e43b7a57eeaca9fdb9f07c17178c5e2f617ca98a401f0839feb0d65894202c7430b17098f8a73e55de788ea384e693be288bed4798bd7a699daa046ffdc029a7fbc994265bce5485773dd6e6808e12a26fbe6d127bc7d64f0e0c3f36c30a14d109131398c4f389b7ff1926eb2a816e9ff3ad9b7c0f062f36c9d6e303b1fb8189d372425692457b13875d9411b238fe1181"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x208}}, {0x1a, &(0x7f0000000600)=@string={0x1a, 0x3, "f311c3d3d17b18ce8cd4cc0d6b69ec4993129d680eb16595"}}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m6.120174988s ago: executing program 40 (id=8139): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x2006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x80, 0x80, [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x4d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfa, 0x6, 0x70}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x6, 0x2, 0x5}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2, 0x3d, 0x2, 0x10, 0xc2}, 0x30, &(0x7f0000000080)={0x5, 0xf, 0x30, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2c, 0xff, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x5, 0x5}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "481939d79f80f8a4fa44fe9c96fa399c"}]}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42c}}, {0xfe, &(0x7f00000001c0)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f00000002c0)=@string={0x3b, 0x3, "baeda67507e5f299cd28e52f1d7aef82b1777863a1a3a943c5e40e7485a9bcde800289b5c11f3e6ecd569d759090a2d19480bcace411c62c78"}}, {0x67, &(0x7f0000000300)=@string={0x67, 0x3, "5509cca407bad83aee644d33b416b6c3d6b784989fc3d51d08573f8b0e1ca4ef5c1af7230897d40104a491c51fb54da1a49cfc5fe60a373d370bed865d273568de45eb8a741677069177ccdb6d01bb4d3c63bc56569028ef2ebf7d804c6cbb54f63dfec29c"}}, {0x99, &(0x7f0000000440)=@string={0x99, 0x3, "17ff6e436364e43b7a57eeaca9fdb9f07c17178c5e2f617ca98a401f0839feb0d65894202c7430b17098f8a73e55de788ea384e693be288bed4798bd7a699daa046ffdc029a7fbc994265bce5485773dd6e6808e12a26fbe6d127bc7d64f0e0c3f36c30a14d109131398c4f389b7ff1926eb2a816e9ff3ad9b7c0f062f36c9d6e303b1fb8189d372425692457b13875d9411b238fe1181"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x208}}, {0x1a, &(0x7f0000000600)=@string={0x1a, 0x3, "f311c3d3d17b18ce8cd4cc0d6b69ec4993129d680eb16595"}}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m45.198019473s ago: executing program 8 (id=8404): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000035c0)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000040)=0x1, 0x100000000000001) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x6) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="12015001000000106b1d010140000102030109029a00030100e0000904000000010100000a24010000000201020c240200000000000e0000000524050000082404030f8bf8ae0c240701050000c80975f9070d24070101000005cf1f000005092403000000000100090401000001020000090401010101020000090501090000010000072501000100000904020000010200000904", @ANYRES16], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0xffffffff, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0xffffff91, 0x2, 0x16}, @fda={0x66646185, 0x4, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, &(0x7f0000000300)) shutdown(r4, 0x1) 4m41.993413795s ago: executing program 8 (id=8445): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001280)=ANY=[@ANYBLOB="7472616e733d66642c7266f5092313e650a16fad4a982370ac646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',directio,\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r3, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 4m41.968614916s ago: executing program 8 (id=8446): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[]) 4m41.901944797s ago: executing program 8 (id=8448): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000040)={0x1, 0x0, 0x8}) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000f59ffc)=0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) stat(&(0x7f00000002c0)='./file1/file0/../file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x2000, 0x7ff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000200)='./file1/file0\x00', r4, r5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) write$binfmt_elf64(r7, &(0x7f0000000500)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r5, @ANYRES64=r4, @ANYRES64], 0x1cb) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r8 = gettid() ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r9, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f00000000c0)=""/74, 0x4a}], 0x2) tkill(r8, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x7916c0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4m41.788606269s ago: executing program 8 (id=8451): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) setgroups(0x2, &(0x7f0000000040)=[0x0, 0x0]) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1, 0x0, 0x325, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@wr_crn={0x46, 0x20, {0x4, 0x7fffffffffffffff}}, @out_dx={0xaa, 0x28, {0xebfd, 0x6, 0x10001}}, @wr_drn={0x6e, 0x20, {0x7, 0x4}}, @wrmsr={0x1e, 0x20, {0xbc7, 0x98bd}}, @rdmsr={0x32, 0x18, {0x271}}, @out_dx={0xaa, 0x28, {0xe586, 0x3, 0x31c122d7}}, @wr_crn={0x46, 0x20, {0x8, 0x19}}, @in_dx={0x82, 0x20, {0x8b1b, 0x4}}, @wr_crn={0x46, 0x20, {0x3, 0xa81}}, @in_dx={0x82, 0x20, {0x768f, 0x6}}, @rdmsr={0x32, 0x18, {0xae1}}, @cpuid={0x14, 0x18, {0x7, 0x7fffffff}}, @out_dx={0xaa, 0x28, {0x9934, 0x4, 0x8}}, @uexit={0x0, 0x18}, @rdmsr={0x32, 0x18, {0xb62}}, @out_dx={0xaa, 0x28, {0xc376, 0x2, 0x4}}, @code={0xa, 0x6c, {"c4026505de4f0fc7af1e5466a20f370f01d166baf80cb80422a780ef66bafc0c66ed660f23be66ba4000b806000000ef676cb805000000b9070000000f01d9c744240000780000c744240200000100c7442406000000000f011424"}}, @rdmsr={0x32, 0x18, {0x9d9}}], 0x27c}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m41.70980251s ago: executing program 8 (id=8454): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000042c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004280)={&(0x7f0000004300)={0x14, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}}, 0x48000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async, rerun: 32) r2 = getpid() (rerun: 32) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) getrandom(&(0x7f0000000440)=""/195, 0xc3, 0x1) (async) r3 = userfaultfd(0x80001) getrandom(&(0x7f00000005c0)=""/97, 0x61, 0x2) (async, rerun: 32) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 32) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 64) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (rerun: 64) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async, rerun: 64) r7 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) (async, rerun: 64) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@private=0xa0100fe, @broadcast, 0x0, 0xffffffff, 0x0, 0x10, {@mac=@remote, {[0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x2000, 0x0, 0xffff, 0x4, 'pimreg\x00', 'nr0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf000, 0x4}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, 0xffffff00, 0xff000000, 0x9, 0x9, {@empty, {[0xff, 0xff, 0xff, 0x1fe, 0xff, 0xff]}}, {@mac=@random="e5a1091340a3", {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x9, 0xff81, 0x1, 0x0, 0xb1, 0x3, 'bond0\x00', 'ip6gre0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @multicast2, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x5, 0xff03}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000540)=ANY=[@ANYBLOB="fba985e83725f7c4d9ab13423dfc20111eacebef643a5013cbf2a98a0e9645f0994b9cbb19026cad07a4ee0e301b49711385a9488916d66bea4ef58eb6753b4b0d30a28a9e79a0b9e2b7b34f7f608400"/96]) 4m41.659627652s ago: executing program 41 (id=8454): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000042c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004280)={&(0x7f0000004300)={0x14, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}}, 0x48000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async, rerun: 32) r2 = getpid() (rerun: 32) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) getrandom(&(0x7f0000000440)=""/195, 0xc3, 0x1) (async) r3 = userfaultfd(0x80001) getrandom(&(0x7f00000005c0)=""/97, 0x61, 0x2) (async, rerun: 32) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 32) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 64) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (rerun: 64) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async, rerun: 64) r7 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) (async, rerun: 64) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@private=0xa0100fe, @broadcast, 0x0, 0xffffffff, 0x0, 0x10, {@mac=@remote, {[0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x2000, 0x0, 0xffff, 0x4, 'pimreg\x00', 'nr0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf000, 0x4}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, 0xffffff00, 0xff000000, 0x9, 0x9, {@empty, {[0xff, 0xff, 0xff, 0x1fe, 0xff, 0xff]}}, {@mac=@random="e5a1091340a3", {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x9, 0xff81, 0x1, 0x0, 0xb1, 0x3, 'bond0\x00', 'ip6gre0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @multicast2, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x5, 0xff03}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000540)=ANY=[@ANYBLOB="fba985e83725f7c4d9ab13423dfc20111eacebef643a5013cbf2a98a0e9645f0994b9cbb19026cad07a4ee0e301b49711385a9488916d66bea4ef58eb6753b4b0d30a28a9e79a0b9e2b7b34f7f608400"/96]) 4m25.162348391s ago: executing program 6 (id=8807): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 4m25.048852023s ago: executing program 6 (id=8808): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x80004, 0x6) (async, rerun: 64) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="736563757268ed6b72"], 0x0, 0x0, 0x3) (async, rerun: 64) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x9, 0x30, r0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x440002) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 4m25.001429294s ago: executing program 6 (id=8810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x1034, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b73134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397236fa9476ac5fac7c2c896babca09d74720004cd0e634327de4fd87ed72ae069c095d2c70caed52e3335478c1c3719925e24f2fd7755baebd5cde385727a0f0440dd3b662248c43ff5afc4f186ff0051ba8eaa07623b79c4bb6985f14c5ac15041a6ff7584f921982e5414481d4db4c76798d70a59b5aeccb6e7882aefe70993758b55b4dc4039c2b1c98452113aaf23ccdf68cb6eff6e048f9da6f39a2def3caaf80cdcbadb83b029b8738391f02fec90c8a8b6f036aae8ceaff5dca7d3e0098423fedc676c6774ab0e6a72bd246c0b3004d1988f802b846d62ca59e9a63ce12814176ec4380e1cf29d27e7b2f7e7eadcaae8f182498ad32e67323fe6ef9508fec40dd38897652053ef92e44a909060c237890c196f0c26ab10248f999001f6231813a81313971bea77a5470f312d185dce689adc99e430e4010a3a341482c51fb71c23c3cdf92303c7580c73775f9a74685a61ce9849eaca52b97ee7ffe2e672dc1be5267c285a102711b1b5d81d6dbb76494f2892fd4f85244ade3cdd3809fd5fdfce5157fc79e5e41fcd1658f0bceb379489732583707c170fc6392aa4f5b94843aeb18da58e0156e029c2b722918b1b3dc7c151cb9c248ddd18423629b53cd4b0ab2693b0df29c88c04657f4eccdc41357de8186fdc0ec86f92950734975921a2fde57c3e7176b57c871d76ff8a8f36520b67e64930cf34bcde9ad92d057a359ca022b646df18e2b7202845bd8ac4be5e5ebae436dc4b93dfaaf2778a53e7e4be937e83dac7d1d481bdbd8081ab0ac08af067e62580bbdbf397cbc629db9b023734b6fad7824d1a8b3257c1c18d6ebc928140060f004ec484b183560f830a1eb0c527c8600bb2600d761e847454e677aa29486aa407a9e9a5e9dc9542de038e3e55fdfec13184cdb16716556f972eef5c56230c43d146c86a9147265c309a279db6d138647920410896c5397c5f83634fa5e92b5161f786482d84830864388b91c2c1e3e9f9f038d5fa66f7fe904e14df0a60d46066c6b1f37cec6e13c35832f512be21da21a5921b81cc452b0076c2ec10fc5481cd0e1ca917b40cb3aa839b120ce6eb9773e942b74ececac6bdcd22eb8dd6cd9f148e0ebe5ef3094f42adc39bc5ca2259e1eab5059ccf5e82bb57b97d4d13a90747299b2e6b64f962aabf222e4f287503181de3c3a68fb2b0068583f3b97e40ce06e9805a7121eccac0527b8f1b18a62762efe0a9ce4114b7d1ba942bc93533ee0b1bd7f0a607207b976dfa1fbe3ce0868e7f4e31b41a0aada0ac6b291aefe22ea5338f07e57b981b8e4e4a121f231d2f46989fd5dd09a7c1d198f5886b4f1a222eccdabff096a81fef3c9e497621128562880938fe05a1f1c4da81daba55bf326f1e3a1712d79f01fbef2ee230615d4e454be67f0ad4dc2bfffaecbb683742925738b45854ab713ae548b9709e9ea2e28224ef466bced79e3ec6c163d45db187bc01c75afa85f78003927dcd122086acc8dd1b1224de41d62b83e34083dd39fe68aa5a479ba403f5dbddf9b763ca521b7efca6234be16484f1e0112d963672a6d24cdac15e80bcb82b3b22231670c41fe7e8a0a083b6df768e7fb0d94a004f8372f5cf8b9b45cc679eb67828a94d0ffabfe09d95ad2789cb8657f7ea86a46260416a72e6fc7b44e549a2e39fe015c7647cc0bec15fa63d26894be1cc5326331e7e0b1c505934182accf049bab033b026d48fda51de740afc0666e6c891e0c5192f4b2df21493477ff45319d7d8b816f0b73ccfa12d6846362feb4b85063ca42e950eb577c630300dc52698a38ca19cbbb398404a1e8e27d0be49985e59caef03da096d1ccbeed73bd7c9588325b747ab77f4d7c1c1f18388ce1771882ee680ed737ad197ff92f1052e5e79f6ffa5b85ba3fac5db13e0d0046c9dca0ab4b74b20299ba6bdd758940e088df31e1382cee6901503299028467a864d27affae30fd9aef5a6ff948c052124511a75a46d5a316e28fb6c5bfac787be5833c63c535557235b0e09f9a78a338aa8864613fca77a7e252d1975af2c4a6bcc969d1e20e3cd4dfc1b2fe34b70fd7804dbfde4fa4d950e5fb4eb926dece9e4601b12efe322bb42ac808158fef0a2690085a404726654987e7de20d1e41e82c607c33c6bae7bb234744b51dc683d5857afd6ba8246cebc734e393806ef102a6baaf04f3a7c3cb888d5830e1c6ae170c5c920e806b4f518be4416b216cdf9b1658a412d9e4eab6c9b20ce99960f27e77fdf9a2e98b35c63859f9db6bdcbef1001a19e12e41370f9358531987851ab64c250e68a8569ace4418e2118caff7d3d4caf1c87bc50a8ae75770fdae88a8490c041b39d08190d8b7c908caddd66331a508929d53dd6bc2dbc86f97115ff0a364b70f96918e6ed354c97e59ea5e2c7b149cd51d7c85a27ac658e78b99326857858df0ac0ee240cbb6ee9d9ee6c2c2ff7c29dd25fd337dc08bddeb50305ed48b9f5d89c55ffedde29ce0412ea8e2c976f961eb0c4966d2a8be0b657a5e51048a8a10005c488e1f637ce208a35b5aed0c2067465191dc42ebf6e4853cc89998bdf2ef755f38a3cd985b62df36a5ebc3b47df32423ee46857f9db9d756ff69ecd4ef2f307dcaefd4a1f399543952df972269c28200df8ebacad4eed1c00b9ce9841799bea583cafdeaa8d4a371a8ae55d8ffe4846833985975d8b234adff63eace9d2c4d1680c370827ebe1831ef311077607e8c4920506e03528861085dcfdb918f1efe91420c390fbca0a38377e1635c402ec1c34eddae986ffa8756b27f6c340907bae99f4a6b328fca8177b4dfaceea5ad3ceb901dbcefc15ded322bece4e750969e81935764ebe88749464af7e692e3d324c519b456013daae93bd63215541f80a7fe08f0e050cdeb25db2a8b9b6f5720ad1e7d2c5b6d609712ecefcc586611fb642a4cdf72504aabd017a9b4827d1e0e0264435a5e1045dbe33834968d2db503972995559b1efe1b9ce475405118346b63f637b1abf8e8374e7100d6b41c9c672d2b244c7a82ffb882522efd9e903fc69db14c469685780005843856c6623591f305d383eae55a1a1d5619dfff0027413f26fa6a793a348ba8b192e1b088745a2175d55517a75d4b63cce41cc0dcaca9002cd37a1ccc6710ba2a099297b0824f976919e8abf3b1510b1305a95241fefbd036afa9d4538affc82f005d29b9f2c0e60d6c20f673b8ca28cb088e1e89efe334f25ffe1a3fb3581e5aa63b9a4a49f269b5538788aacbbc04d49902ae2af1f59d2484ab6ba7a9b477be0d92e221fc48cdbc00bef7125bfe36f9afb1cbd58fef21625ec99ffd2e35fb00767e3f22dba7d36163203cfaf1860a8b1afe0d878ea00fe08f68fd592a6395fb357acbdc2834c8ac85571527dbf1dbaaccede3d583e2b9bf076737716785f44aebc7ba917fb426d5541adff1e75836ab70fb0b43565ab5e24c5902879f31701cc006b4ee2f57be0916cf0b6cd489c4fa9129031a4af75a00048f20eb962f0c6f68cda0d7756a4e83f7d065c4a00b8263d95f6b979507b7ca01735e83a5e5ff0b76f077ef6e4c1150f9202b5311a231b76111d48a387e09075edb2448fb19d2869ae420ada8ee7577fe980ed7e057dc963c0a98db790bb5b7920220f8a55213b6530637b832abdf3c6fefdefb712a2c2c9eba8087ce39335ddabdadb86f493061e593981c6b2d70b4bac3b58885787c46f85c1022f5ff6cec16ba227aa5dac2e0be30522c08369f18d170b9cb454f3ebf86d1e923fdd65245d8e0c476bfedddcb772453f4d0e70d059e79b8811c379c9eff6e45d99f81186930b32b24cdcb906a41fe29c147ed834b37e77800a33c15e65d121ee85a924ef6bbc1c8f4a423fbc5d14645a08178227f4c7f111fa318823a6c075ddf9e131c9bca8d56dec4a68fbab9a0c1a128880d8b4dec59b89ec33c19eb76f09f31ad730cba735b60deba54c399119949e45af4de5c758281945fe6b6a25ac1cd57a81b48f11a6575e79b82e529d4ba1b2a1175cfa03ef6d149b165195fa64736b302e28ee6444368fb395a2d89c8747348b546a07ed0306682971539f0031d88ffa020d0b3d40369e0a3d2238293a75a155eb5c0749f64ed37a9af5be26d5a4322a55a23c33d176280bd0e4c5168f2e66bca925304d0f32074f5e68d7c43f9e2e3f14a6bcf3e77e6b71737131c3e90208072e37c8a6cad1cabd756aa694e85b86256ce13b43541a26438374b6029ee461d223ed34ed1e9a3e580cec7b2b41bc9823b3729e683f079a498636d022799dd94c5e870b6aa7f3d36fb51ffb6c5e317fcde6b5ae45073f8e90ee0fc1fa0641ff6f0b789dcc6df2fe9a3b5e6ed9d2be3403f5af96e7c6019b0a0ce4f8342323638a52c121956de068069fe5c44946b5023e1db7742fec29cb749bcdc09d795b683c553dbae1298540b2cf1bc3e5e52adf252bca47ba2182c80541daf1d11b1c67675171e69c1abe3c0bc3a0f2d1a6e2165ca1647c394970a404a6002621a258cef01e2ca12a138888dace9ad06d2f0c0209f286c11b289626aa557cc201560651054a6042e84c6fc5e345e2f702d61851fed5ffa36ade652f76db815dabb7b8eee016ea0836d0086f2a2f7bd1c4a4ceb1d706817b41347a891c34b45eb06a9ecb19041d5a39f050cb0413662dc4700385fac2e1823e1ce4d08c66692fde0862a057f2aa2425d511735fff53d0e3d88bfb245e7724ba4ba8452e469862d333dad5c63bfa778809c043132db3a57e122d0495441f7a07034a3ac1024b8fc063694d8316c29639cb6605ff362a853f976c763f6d10e4e0972760e60f08acdd8a73607e7311819fe24ad8b670bbf0adede086f91bd0839ce37927f43a263e3e8369932db9ab786ba66e1bba664bfa8aa50d98ed18fc90e560933c2e8da72757a4539756740a73c41180cf97fde47cf3e9e6005302459d831eea7a03157e0c3178776e4d4add3999b9a1efca7c99b8234ff9d33492431dd9bd0814301ee49260e30b8b6afc46ce8a733bc9d7850c789e5e98cdefbfb11131a85bc24e75453a16c6780ab4229b985d1fe7a255f71cfe18398e881d493ded88300b54f6c4a5567fd84a6e1f11835433448a00420ab1b3a49fcc0e9938da52b68f9409c94a0de61f0beb69532c4f7a11fae6a9ffd10db7de01e3272448b517ad795a06f3fef8148b7196cb81a80aed42e395c1ac346dd27f9bce87661e19f957a17d54d59b68e023c1516ae9ba4d75f18d4b8fc7e9fe6f74e38597b0e52"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1034}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003500), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fgetxattr(r0, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x6) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000080)={0x3b}, 0x8) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0x37, 0x0, 0x1, [{0xfffffffffffffe48, &(0x7f0000000180)=@string={0xdd, 0x3, "3fdac53cf7914d906f886b900c5c517912cdc3d7056283ff80557a0020e2ca072f9e42e77a0b4bfa5d5b73cbe16b0213aaadf6f647f6ebb5711bc602de8b76cc6ce221bc7ed66c0ceaf2b38c2ffbb8cf6f8aa2a28de985cd24526920156f51d69bba589f36b9f40a0a1b52c97fa441029f3cc592d6e1753c76ba56df139e8d083736d467011745e00f6a92285ca8dd13a4c1bc4244379826cc60a10ba7d7188144fd0ba82d867cfca0b446aab3bdd46d1597e2d27f223092ad2e9f9ec4870f15bf7251c4ec26fd6a0c40d307ebc05fd5428eb4c0fe20c200000000"}}]}) fstatfs(r0, &(0x7f0000000280)=""/146) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="509e6789"]) 4m21.803519177s ago: executing program 6 (id=8868): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000034c0)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003480)={0x0}, 0x1, 0x0, 0x0, 0x48010}, 0x4814) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) r1 = syz_clone(0x0, 0x0, 0x26, 0x0, 0x0, 0x0) ptrace(0x4206, r1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '-}%/'}}]}}) ptrace(0x8, r1) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, 0x0, 0x4001) ptrace(0x4207, r1) r5 = getpgid(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_clone(0x4040000, &(0x7f0000003740)="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"/448, 0x1c0, &(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000200)="155ab11828ef4d708d8396e8ba86a68f26da315c6835ed19a50e9012fcb37c8f0ac3317b6d46eb13f826a16d2f5fc5686e512bd2c98ae2f499d23429c5bdfb2c913f5421af24ca6e0ea39779f0ea4077a6606b923b89e037a10ff3920f21f44ec5cc0168922641943e49c55ffd6b7e47393151b04edfb24f39c458b792bc9f3a82c022de6f06112cceef21e5371d803e565db332d8afde0d12c9348ff28460eea899d1babe7780f9387f0aab61ca872accdaf2d842999e01e6") r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r9, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_clone3(&(0x7f0000003500)={0x48020000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x2a}, &(0x7f0000000100)=""/60, 0x3c, &(0x7f0000000140)=""/52, &(0x7f00000003c0)=[r1, r5, r6, r7, r8, 0xffffffffffffffff, 0x0], 0x7, {r9}}, 0x58) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) syz_clone3(&(0x7f00000002c0)={0x100000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20001, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r11, 0x3304) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r10, &(0x7f0000000400)="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", 0x1f000) 4m21.762459187s ago: executing program 6 (id=8869): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000040)={0x0, 0x6, 0x7f, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000440)={r1, 0x8, 0x22c5, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x400184, 0x0) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000880)) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000900)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) fsetxattr$security_capability(r0, &(0x7f0000000b40), &(0x7f0000000b80)=@v1={0x1000000, [{0xb25d, 0x8}]}, 0xc, 0x2) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x8, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000c40)={@mcast1, 0x0}, &(0x7f0000000c80)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000dc0)={'ip_vti0\x00', &(0x7f0000000cc0)={'gretap0\x00', r5, 0x40, 0x7, 0xd, 0x1, {{0x31, 0x4, 0x1, 0x39, 0xc4, 0x66, 0x0, 0x7, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x34, 0xab, 0x3, 0x7, [{@local, 0x3ff}, {@private=0xa010102, 0x8}, {@multicast1}, {@rand_addr=0x64010100, 0x7}, {@remote, 0x8000}, {@local, 0xfffffbac}]}, @timestamp_prespec={0x44, 0x1c, 0x4f, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1b}, 0x9}, {@remote, 0x3}, {@private=0xa010102, 0x7}]}, @lsrr={0x83, 0x23, 0x26, [@remote, @loopback, @private=0xa010102, @empty, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}, @local]}, @timestamp_prespec={0x44, 0x3c, 0x8f, 0x3, 0x8, [{@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010100, 0x4}, {@multicast2, 0x3}, {@broadcast, 0x1}, {@empty, 0x1}, {@multicast2, 0x7}]}]}}}}}) (async) r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$HIDIOCSUSAGE(r6, 0x4018480c, &(0x7f0000000e00)={0x2, 0x1, 0xb, 0xd8, 0xae82, 0x1}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f0000000e40)={0x80000002}) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r6) sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x4044018) (async, rerun: 64) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000fc0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x43, r5}) (rerun: 64) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x6}) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000001180)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001040)=""/14, 0xe, 0x1, &(0x7f0000001080)=""/228, 0xe4}, &(0x7f00000011c0)=0x40) (async) r8 = accept4$unix(r4, &(0x7f0000001200), &(0x7f0000001280)=0x6e, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r8, 0x40089413, &(0x7f00000012c0)=0x2) (async) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000001300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4000}) preadv(r2, &(0x7f0000001580)=[{&(0x7f0000001340)=""/245, 0xf5}, {&(0x7f0000001440)}, {&(0x7f0000001480)=""/213, 0xd5}], 0x3, 0x8dd3, 0x7) (async) chdir(&(0x7f00000015c0)='./file1\x00') clock_gettime(0x0, &(0x7f0000001640)={0x0, 0x0}) ppoll(&(0x7f0000001600)=[{r0}, {r3, 0x2200}], 0x2, &(0x7f0000001680)={r9, r10+60000000}, &(0x7f00000016c0)={[0x400]}, 0x8) (async) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) (async) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000001700)={{r6}, "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"}) mount$bind(&(0x7f0000002700)='./file1\x00', &(0x7f0000002740)='./file0\x00', &(0x7f0000002780), 0x82a000, 0x0) 4m21.62590322s ago: executing program 6 (id=8870): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x3}) 4m21.570942031s ago: executing program 42 (id=8870): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x3}) 2m14.65953155s ago: executing program 4 (id=11352): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'ip_vti0\x00', {0x1}, 0x3}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m14.620732231s ago: executing program 4 (id=11354): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xc801, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000000)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000080)=ANY=[], 0x190) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r3 = creat(&(0x7f00000000c0)='./cgroup\x00', 0xb8) close_range(r3, r0, 0x2) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 2m14.619109711s ago: executing program 4 (id=11356): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x145) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) statx(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x8, &(0x7f0000000400)) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) (rerun: 32) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000080)="e4", 0x1}], 0x2, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0xc8, 0x29, 0x100, 0x70bd27, 0x25dfdbfe, {0x1}, [@typed={0x8, 0xa3, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}, @generic="7f2af0d309", @nested={0x5d, 0x6, 0x0, 0x1, [@generic="7e6071de040f3b6aba7867bdd7bf212159a415b4bc894aed3c02477598a6c498a760935f057b2eeea19787817265f435b381ee110abd0e2ec8509d9dabb9f24903", @typed={0xc, 0x150, 0x0, 0x0, @binary="bc9e6cbd86ae43f2"}, @nested={0x4, 0xf7}, @nested={0x4, 0x45}, @nested={0x4, 0x131}]}, @nested={0x44, 0x23, 0x0, 0x1, [@typed={0x38, 0x14, 0x0, 0x0, @binary="ed93d888844fe106e68c6ae9f861e8ca76c8de100981f7da9fd0d91f89e9d11a96e54d49f415b7884f08551bd55fcd8010ead4c7"}, @typed={0x8, 0x79, 0x0, 0x0, @fd=r4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8051}, 0x20008090) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8000000) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0xffff8000) (async, rerun: 32) getrandom(&(0x7f00000004c0)=""/315, 0x13b, 0x0) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001580)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008000a00", @ANYRES32], 0x1c}], 0x1}, 0x4040000) (async, rerun: 64) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x2}], 0xe, 0x10040, 0x0) (async, rerun: 64) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x0, 0xc) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) fcntl$setlease(r10, 0x400, 0x0) (async) write$cgroup_subtree(r9, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) (async, rerun: 64) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x2000000) (rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m14.576014422s ago: executing program 4 (id=11359): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000067f000/0x4000)=nil, 0x4000, 0x3) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x1, 0x11, r0, 0x315b1d8b) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000400)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, r4, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf25050000001800018014000200766c616e3000000000213eb00000000000000005000700a100009a"], 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x40, 0x2, 0x0, 0x8}, {0x6, 0x6, 0x10}]}, 0x10) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0x9ffc) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000010000100000100dffddbdf25070000f616000000"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) getpgrp(r5) r9 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000000080)) tkill(r9, 0x35) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x10, 0x9, 0x40, @loopback, @mcast2, 0x7800, 0x7, 0x9, 0x2}}) syz_pidfd_open(r5, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000002480)={0x198, r10, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_MODES_OURS={0x134, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x130, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4537c97c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{}/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x97}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdf1}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40044}, 0x20000050) 2m14.523226823s ago: executing program 4 (id=11363): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) (async) unshare(0x22020400) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (async, rerun: 32) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) (async, rerun: 32) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) futex(0x0, 0x84, 0x2, 0x0, 0x0, 0x22) (async, rerun: 32) r5 = fsmount(r4, 0x0, 0xf7) r6 = openat$cgroup_ro(r5, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) readv(r6, &(0x7f00000012c0)=[{&(0x7f0000001300)=""/4109, 0x100d}], 0x1) (async) sendfile(r4, r6, &(0x7f0000000000), 0x5) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x3a801, 0x0) (async) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000040)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r7, 0x0, 0x0) (async, rerun: 32) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000340)=""/150) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$inet(0x2, 0x6, 0x7) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310d2dbd7000ffdbdf252500000008000300", @ANYRES32=r9, @ANYBLOB="0a00340001010101010100000800350000000000080026006c0900000a0006005009000000500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e3ffffff", @ANYRES16=r11, @ANYBLOB="010000000000ffdbdf251700000004000680"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) (async) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2c004891}, 0x340498c1) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x101440, 0x0) 2m14.521564743s ago: executing program 4 (id=11364): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r1}, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) io_setup(0x9b6, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0xfffffffffffffffe, 0x0, &(0x7f0000000300), &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) socket$nl_audit(0x10, 0x3, 0x9) (async) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, 0x0) (async) ioctl$sock_SIOCETHTOOL(r10, 0x8946, 0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[], [], 0x6b}}) r12 = dup2(r7, r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r12, 0x890c, &(0x7f00000017c0)={@remote, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0xc, 0x40, 0x5, 0x100, 0x10000002, 0x20010, r13}) r14 = eventfd(0x71d) eventfd(0x4) (async) r15 = eventfd(0x4) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) (async) r16 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) io_submit(r5, 0x5, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0xe765, r0, &(0x7f00000001c0)="1a24ca211e3f247903f53ecafceae121510b7e04403b540a9c2a5323b68c8aa34e097e7f7d19d7f65d27fcf5d1cc5adfbd1d72b2a155c7b3d190cd1f021e5619874d7d00a7f9b71afb93bce7e669d78aa62b3bb6d878430cca7935237694358fb7533afa75c89ede77685301658545be276d529b", 0x74, 0x2, 0x0, 0x1, r12}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000340)="e3e63b1b871ba4a3f24ed433a1df6fc66e874e4a2ad061e807d64afa57a79fc611cc5ac3b0713a7a0efbdd892be4a6ded688e4864c5dd1a2a32d01abe09080d9b10f09ea0343df0b65342f152779f0788ee92a0e107a89a0a5f6e009f47401de1729df6335dc966a24827aa6236b6c88acad22933e70c6bc4b8ebd0f85050292ecb80ce536eb0281ab8c8575663831a1689b8f69d8bed1978f79a318a511a48f27b105e8c29d0c16cf9913ed8c35460d0835eeb5356b4167e0da6767ce5bf4664d0a87f961252d5b41f4f19c9e87aadeef41d92fff8ba08a6887c9faebb8f224cb874626e4", 0xe5, 0x8ba, 0x0, 0x1, r14}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000480)="eb742c2b18ccc5645c1c8e3e8cfe8f31d58cda1574baa92b38c9e560ebb98ed89a463ada8790069c658b45697148a28f0effb40ff3c3a31b88c04cd8cbe4eb2ef28453b2344b7b5ba1441fb23ab326692ae443ecc718b74c438ac4df0ef0e5828e0e3b5d476d83d63593eaff7de10dee0c6098a6e47e5efc2166c4ea0f9d1b2ecb4dd66784efe1025f323cd4baf96e4ac06345e7a0ff1ed5192396b9fb92a1e428e7fd627d56b5418784a1a6f197229e64bf59d6519872314ff1cd", 0xbb, 0x1000, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x6, r0, &(0x7f0000000540)="26e3d6f543af3aeb41845affcf87b51707f8a52bdb88a5c87ef0f59116f35b9b2329541500b72d74e2886450c5d64b34b66cecf7b9e8d651a4811a1fa0ce5f10083c66520df1dedced8b1664aced3514b2e4f5e7900e76afc2bf14f8064a6f2ba48dcfbe33b2f202e42665838b4f2fd327160ebc90db8c29fc2fa322fb6756eb0cfe6398a3a4f33eca51439bf221614d", 0x90, 0x0, 0x0, 0x3, r15}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x3, r16, &(0x7f0000000640)="abe5328c208ddcba431a705ab3d7cd0da0", 0x11, 0x2, 0x0, 0x1}]) timer_settime(r2, 0x1, &(0x7f0000000100)={{}, {r3, r4+60000000}}, 0x0) (async) timer_settime(r2, 0x1, &(0x7f0000000100)={{}, {r3, r4+60000000}}, 0x0) timer_create(0x5, &(0x7f0000000840)={0x0, 0x1, 0x2, @thr={&(0x7f0000000700)="dd731d43e9a1d37bdd516c5fc1c3542c918e3f6a623c25ce230feebf3d344711a8c8dbc9511594305d41d405200357d34bcf822f6aa1c42efb93b123fa0e", &(0x7f0000000740)="8ace1168c32e6ef36bd2fa31bd06a4f6c294ff3e8aa5e2e99b2f39247dba68f9747d7c64d8824d07536cd68a8e0b3af9658fb29f9c78b642acf7f3508227b99079162f983873c091004ca11b0b1e2718c4ea859a23f08519da87592e241750df199266150781dd34c1115f20e7427af9a364114d2e19ee3bc0c5d96d398b4f65bac3201027db6906f5b02b2a7c13523636410296b8e06a7b4ccd00bb3fca5882f350e1f4956c666320c14028330d0c6b07e9da3995dcc657c19fbd89b20d1b322c4cde6e093efc2494283d1e833c45b391b4f0a514c13b5036ca1c544881518fc74a33a105f36209"}}, &(0x7f0000000880)=0x0) timer_gettime(r17, 0x0) (async) timer_gettime(r17, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff00b1]}, 0x0, 0x0, 0x8) (async) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff00b1]}, 0x0, 0x0, 0x8) r18 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r18, 0x29, 0x39, &(0x7f0000000440)=ANY=[@ANYBLOB="75004df1a180c10d"], 0x8) 1m58.530960523s ago: executing program 43 (id=11364): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r1}, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) io_setup(0x9b6, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0xfffffffffffffffe, 0x0, &(0x7f0000000300), &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) socket$nl_audit(0x10, 0x3, 0x9) (async) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, 0x0) (async) ioctl$sock_SIOCETHTOOL(r10, 0x8946, 0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[], [], 0x6b}}) r12 = dup2(r7, r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r12, 0x890c, &(0x7f00000017c0)={@remote, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0xc, 0x40, 0x5, 0x100, 0x10000002, 0x20010, r13}) r14 = eventfd(0x71d) eventfd(0x4) (async) r15 = eventfd(0x4) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) (async) r16 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) io_submit(r5, 0x5, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0xe765, r0, &(0x7f00000001c0)="1a24ca211e3f247903f53ecafceae121510b7e04403b540a9c2a5323b68c8aa34e097e7f7d19d7f65d27fcf5d1cc5adfbd1d72b2a155c7b3d190cd1f021e5619874d7d00a7f9b71afb93bce7e669d78aa62b3bb6d878430cca7935237694358fb7533afa75c89ede77685301658545be276d529b", 0x74, 0x2, 0x0, 0x1, r12}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000340)="e3e63b1b871ba4a3f24ed433a1df6fc66e874e4a2ad061e807d64afa57a79fc611cc5ac3b0713a7a0efbdd892be4a6ded688e4864c5dd1a2a32d01abe09080d9b10f09ea0343df0b65342f152779f0788ee92a0e107a89a0a5f6e009f47401de1729df6335dc966a24827aa6236b6c88acad22933e70c6bc4b8ebd0f85050292ecb80ce536eb0281ab8c8575663831a1689b8f69d8bed1978f79a318a511a48f27b105e8c29d0c16cf9913ed8c35460d0835eeb5356b4167e0da6767ce5bf4664d0a87f961252d5b41f4f19c9e87aadeef41d92fff8ba08a6887c9faebb8f224cb874626e4", 0xe5, 0x8ba, 0x0, 0x1, r14}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000480)="eb742c2b18ccc5645c1c8e3e8cfe8f31d58cda1574baa92b38c9e560ebb98ed89a463ada8790069c658b45697148a28f0effb40ff3c3a31b88c04cd8cbe4eb2ef28453b2344b7b5ba1441fb23ab326692ae443ecc718b74c438ac4df0ef0e5828e0e3b5d476d83d63593eaff7de10dee0c6098a6e47e5efc2166c4ea0f9d1b2ecb4dd66784efe1025f323cd4baf96e4ac06345e7a0ff1ed5192396b9fb92a1e428e7fd627d56b5418784a1a6f197229e64bf59d6519872314ff1cd", 0xbb, 0x1000, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x6, r0, &(0x7f0000000540)="26e3d6f543af3aeb41845affcf87b51707f8a52bdb88a5c87ef0f59116f35b9b2329541500b72d74e2886450c5d64b34b66cecf7b9e8d651a4811a1fa0ce5f10083c66520df1dedced8b1664aced3514b2e4f5e7900e76afc2bf14f8064a6f2ba48dcfbe33b2f202e42665838b4f2fd327160ebc90db8c29fc2fa322fb6756eb0cfe6398a3a4f33eca51439bf221614d", 0x90, 0x0, 0x0, 0x3, r15}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x3, r16, &(0x7f0000000640)="abe5328c208ddcba431a705ab3d7cd0da0", 0x11, 0x2, 0x0, 0x1}]) timer_settime(r2, 0x1, &(0x7f0000000100)={{}, {r3, r4+60000000}}, 0x0) (async) timer_settime(r2, 0x1, &(0x7f0000000100)={{}, {r3, r4+60000000}}, 0x0) timer_create(0x5, &(0x7f0000000840)={0x0, 0x1, 0x2, @thr={&(0x7f0000000700)="dd731d43e9a1d37bdd516c5fc1c3542c918e3f6a623c25ce230feebf3d344711a8c8dbc9511594305d41d405200357d34bcf822f6aa1c42efb93b123fa0e", &(0x7f0000000740)="8ace1168c32e6ef36bd2fa31bd06a4f6c294ff3e8aa5e2e99b2f39247dba68f9747d7c64d8824d07536cd68a8e0b3af9658fb29f9c78b642acf7f3508227b99079162f983873c091004ca11b0b1e2718c4ea859a23f08519da87592e241750df199266150781dd34c1115f20e7427af9a364114d2e19ee3bc0c5d96d398b4f65bac3201027db6906f5b02b2a7c13523636410296b8e06a7b4ccd00bb3fca5882f350e1f4956c666320c14028330d0c6b07e9da3995dcc657c19fbd89b20d1b322c4cde6e093efc2494283d1e833c45b391b4f0a514c13b5036ca1c544881518fc74a33a105f36209"}}, &(0x7f0000000880)=0x0) timer_gettime(r17, 0x0) (async) timer_gettime(r17, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff00b1]}, 0x0, 0x0, 0x8) (async) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff00b1]}, 0x0, 0x0, 0x8) r18 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r18, 0x29, 0x39, &(0x7f0000000440)=ANY=[@ANYBLOB="75004df1a180c10d"], 0x8) 2.884998784s ago: executing program 2 (id=13620): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300090c00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000400000000030005006c00000002000000e000000100000000000000000100f5ff4d200000010014"], 0x60}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='minix\x00', 0x100000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) sync_file_range(r4, 0x1899, 0x5528, 0x3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) connect$unix(r6, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noextend,uname=minix\x00,cache=loose,version=9p2000.L,directio,dfltgid=', @ANYRESHEX=r7, @ANYBLOB="2c616669643d3078303030303030303030303030313030302c7375626a5f757365723d2f5e252c61707072616973652c000b8515da07bed04d03bf7b7cd8e9bcf0349f"]) 2.840310645s ago: executing program 2 (id=13623): ioperm(0x9, 0x7ff, 0x100000000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/81, 0x51}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/143, 0x8f}, {&(0x7f0000000080)=""/1, 0x1}, {&(0x7f00000001c0)=""/231, 0xe7}], 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 2.757869187s ago: executing program 2 (id=13625): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000007"]) syz_usb_connect$uac1(0x6, 0xa4, &(0x7f0000000100)=ANY=[], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x5, 0x4, 0x3f0, 0x0, 0xe8, 0xe8, 0x308, 0x308, 0xe8, 0x4, 0x0, {[{{@arp={@broadcast, @local, 0x0, 0xff000001, 0xa, 0xe, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x8002, 0x3, 0x401, 0x79f, 0x0, 0x1000, 'syz_tun\x00', 'nr0\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @private}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0x64010100, @empty, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001f80)=""/4102, 0x1006) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) mlock2(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x1) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x20c, 0x3f7, 0x400, 0x70bd2a, 0x25dfdbff, {0xf9, 0xf9, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, ["", "", "", ""]}, 0x20c}, 0x1, 0x0, 0x0, 0x80}, 0x8080) 2.674500748s ago: executing program 7 (id=13628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) open(0x0, 0x100000, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_DIRENTPLUS(r1, 0x0, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x38, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.189864347s ago: executing program 2 (id=13630): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x458}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000922000/0x2000)=nil, 0x2000}}) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="f4660f38827a00660f3807b3e03f0f01df66b96609000066b86e00000066ba000000000f3067df960c5c0000c4e275cfa300806467f30f090f22de0f013a", 0x3e}], 0x1, 0x30, &(0x7f0000000080)=[@efer={0x2, 0x501}, @dstype3={0x7, 0xd}], 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 2.184212418s ago: executing program 2 (id=13632): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x48040040, 0x80, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@nodevmap}], [], 0x6b}}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x6) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.159444898s ago: executing program 7 (id=13633): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x147342, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) 2.156568808s ago: executing program 2 (id=13634): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x4) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="005a225c6bf98c2e5e7e84e15afc65bf9cffdbdf2503000000110001002f6465762f726e756c6c62"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', 0x262) open_tree(r2, &(0x7f0000000080)='./file0/../file0\x00', 0x9000) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.098028839s ago: executing program 7 (id=13635): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x800) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187013, &(0x7f0000000040)={0x1, 0x0, {0x0, 0xfffffffb, 0xffffffff, 0x12, 0x5, 0xfffffffc}}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) 2.097625619s ago: executing program 7 (id=13636): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@hci={0x1f, 0x4, 0x3}, 0x80, 0x0}}], 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) syz_usb_connect(0x1, 0x79, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0xf8, 0x28, 0xe5, 0x8, 0x12d1, 0x1402, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x40, 0xf3, 0x80, 0x0, [{{0x9, 0x4, 0xae, 0xd0, 0x0, 0x3d, 0xb5, 0xaf, 0x7, [@generic={0x2, 0xe}]}}, {{0x9, 0x4, 0xfc, 0xfc, 0x4, 0x33, 0x69, 0xfe, 0x6, [], [{{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x6a, 0x5, 0x8}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x7, 0x7f, 0xa}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0xf, 0x0, 0x40}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x4, 0x1, 0x53, [@generic={0x2, 0x4}]}}]}}, {{0x9, 0x4, 0x8c, 0x9, 0x2, 0xce, 0x8f, 0xc7, 0x8d, [@hid_hid={0x9, 0x21, 0xb12, 0x7f, 0x1, {0x22, 0x792}}], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0x3, 0xf8, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xeb, 0x6, 0x81}}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x2, &(0x7f0000000300)=@string={0x2}}]}) 1.55650967s ago: executing program 7 (id=13637): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1f}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)={0x0, 0x6, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x4, [0x0, 0x8]}}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0xc}, @pad1, @jumbo={0xc2, 0x4, 0x10000}, @padn={0x1, 0x1, [0x0]}]}, 0x38) 1.53567346s ago: executing program 7 (id=13638): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x54, 0x0, 0x0, 0x80}, {0x6}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') copy_file_range(r1, &(0x7f0000000080)=0xfffffffffffffff9, r1, 0x0, 0xfffffffffffffffc, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1c4bc6ae772f0601}, 0x20044411) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x1, 0x4, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) fremovexattr(0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r10 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$netlink(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000740)={0x1fc, 0x29, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x10, 0x66, 0x0, 0x1, [@nested={0x4, 0x8a}, @typed={0x8, 0x7c, 0x0, 0x0, @u32=0x9}]}, @nested={0x4, 0x86}, @generic="21c35435d38114d7b84c3ecc6a5ee1f16af662f5fe3795b9c52de374cab2fe1d1c58992e7826485a3a2f1410f1f85d8681039d6a7d4f4cd2afcdab52a364f8028cd93d703a967acb02f7aa9c6b3a6ae33eb7f573d2a0c7c0c0475864082bf3852bf1ed1f39759c5807b4e78e90b476e03d3d8ce6882350b0f4ffeff34b0efe1a4a2017e08ec79ce4207579bfac572be057640481721acdae4196fff936175dc35dbddcd5e7606e6d58d6cf75fd578da6d53d04aa819fe6cd179d81117f1704c9505c665ee066dcb602c3cb0dc8cec86932bd7e0178ac1577d380cd26", @nested={0x4, 0x7}, @nested={0x61, 0x2d, 0x0, 0x1, [@nested={0x4, 0x14b}, @generic="791c10ad8ef0ef761b4ba5b12d3b62dec9ea4417cb7480af65b9232f203a3750f8ac606b197f565e42e16147811bbee314103b9f5ef6d500ff7e959394", @typed={0x8, 0xe6, 0x0, 0x0, @str='$\'.\x00'}, @nested={0x4, 0x24}, @typed={0xc, 0x36, 0x0, 0x0, @u64=0xa}, @nested={0x4, 0x2d}]}, @generic="193ff3ce8189ec84ade523fd1491ad362832ec3a82a27ec9b0a666801bbbe17ef3374b396903ddb8a951392a0cac70ac151737d64cc76baefc2e0307e7ea5bba9c95c2bc2bcf19cb45cdfdbfb13459b022d8045f041e6eeac7bff378081ac9e804eb0522d36952cc72bd20b7f58478f2b3784e408e37172fdb960f66d9161dc0726e969f897e2a203cd16b16932f0ed556"]}, 0x1fc}, {&(0x7f0000000c00)={0x1394, 0x34, 0x400, 0x70bd25, 0x25dfdbfc, "", [@generic="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", @generic="bb6aece16b932a8f7b45061b8752f993bd6390039df0faa8246bea9fa8996823e5790abe861daa238eabb9d4690ffe9d5f0e13f9fe45bfd5419222af55e47176e9b58cfcc2b3275eff302ff9885c3856c5b48877592a521a2e4598e2d9a2094d17dee33e74262a7fb621a4691ce02ae9cdae4d0f3c1e17364366cfdaf4eba101b85d274d3cc3f85921161f1a4f6f7c2c0631dba73ae51cc402a9c3ae225c8026aa770c9850701885c809d9dae6949d1f4716ca8de505b3f12ec6273f510a12128e8956d81837f0ef104d02287198051b8ea008f47e90bff1f1cbc5cba208bb6d70d54517716eceee1dde49c6aa", @generic="31f2da70b633b9d1e359c8c7e35f3bc28586debb2f8e24091510ece83d56b4a679f936d7abcfb95d08e8635a087b22880fbe99c856074e9e8bef5b2587ade0646eed5a10b76b973e4e7979777d01d9380955b972cb57a7528e809702732f91", @nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x2e}]}, @nested={0x1ba, 0x13c, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @u32=0x8}, @generic="4fe601667de6254387e4894e9a736a4ea1fb1a66a4cb089e00b314b3f9ad2cd75ff0a49e57a73858d222280b9fdbf86ace166f9663fb8b168e3211fdf9f69e3f", @typed={0xc, 0xa7, 0x0, 0x0, @u64=0x9}, @generic="004c57d1599ae745e215756b1c6d792aad1544e27e6c2ce203cb993ca8141fb04e0658c82bb2b2ade1897b1f0d2e111173b26ff0b0d40af66db79324d5a25ac58165023dc2030c4d57158e19473aff34b7fa3c7feae4d4915bf660bb91e3341c6bfd099b46b3c1266c4be1d7a6a719fba7987fff467917bbd34b51fed92afe32fc8b92b24e109e1f6e1d4c6a4cad7ffbb3580070c9494865723b992fa91e51d2bab0db35856cbd257d7a52cbc877fd8f37dc745eea51435ecfce2a1a0ade3f94a5d6a71008d5996c56ff385000671054227966d5fb01265cec6b78ad36a3318a43bfcc9d401a32752c76227ebf36", @typed={0x73, 0x7c, 0x0, 0x0, @binary="5cfacaa844ae7b1a7b210bf03b7ef85495df44bd5cd76367e75a6d6df174e957c20f1ca747c3a85e477217eea52c8e88622975114941658fc9d3ce61a20599474b00d191e99b1417c464e13518ef2615087f451d7aaeba91b671755040eb74a45372a42f223bb88ff4a9eb0744b587"}]}, @typed={0xc, 0x97, 0x0, 0x0, @str='syztnl0\x00'}, @nested={0x65, 0x44, 0x0, 0x1, [@generic="76f696d0d8dd945a8c5705a1a39f364df4d3149745a023584eb41060e9d42351c487fb4a58c872745820583ccb90abf36b06e1e84025d82e6926752aeed861cf443707d77fd37caa963cf86527a70b48c9fd565f046367efd8da4d3c94", @nested={0x4, 0x20}]}]}, 0x1394}, {&(0x7f0000000200)={0xa8, 0x35, 0x200, 0x70bd29, 0x25dfdbff, "", [@typed={0xc, 0x10, 0x0, 0x0, @u64}, @generic="26760cf127fe0abbbd487ea7b44cfc9e1a4f47784eb79402056d7b1857d5262dce5a783038ab4444f76fd0e6feffde4ed0853a81e404a168b4cf441f9dbbde0d42ceea283057bac8dec19c9b6666a5398b697471978aa8e6050f4b2059a3a94422469a97ba3fdfebeb8a01c328d1fe24692dadd303ca2d8abba67a3759dbf15a4363a7ab84a40a622dde80a0"]}, 0xa8}, {&(0x7f0000001fc0)={0x308, 0x1b, 0x2, 0x70bd2c, 0x25dfdbfe, "", [@nested={0xc, 0xe9, 0x0, 0x1, [@typed={0x8, 0x66, 0x0, 0x0, @u32=0x2}]}, @generic="b2e263a231dbbd05dddd74ed0ad2e72eb2b1eb1fe91e42e00570f1ac023649fb52f2c0fa7350510b1ca14d94326483fb8e27283a5428091106cd30b982db8053161c52f5f734612277324d13698368f3ecb031f80cc93b5a6a7aee7a2db680c4a45a0d97c474b16e4fab9f94a60fed3c1e4c007a21e93f0c0432d57ae3e62610a7a78684154c7b3442d37ff267d770258544faadd8bc28309602fafab41ef74f50b1b0237777a6c44b34de", @nested={0x23d, 0xe2, 0x0, 0x1, [@nested={0x4, 0xc5}, @nested={0x4, 0xa6}, @generic="91501a38304db934f8d40156860176201fb88491a07a397012d88fdda7412b32ba6aa7458b894e7e7e3d7ec46513396062e445045e06acc3724aeb863affcb7d8f62cf0b3117b392c491292fa2fce8552bafa027090c7825ead38cf9dbf78deb766fd4805be7709e3f296debe6859c09e3577738be6432ba50b01c4f962d10e1dfe4bb05f52c4233c8f731f20186cbee17c80c51e974066862ee269902d1f9619275f567f1e98be43f105d150fd9fd", @generic="d0b3ca8173291a73d067b578aa3695320e792555113cc2872569d28aad2420efcc3991f64bf20c6fa9e5ba8efcb98c7368a786d65045d21ff583df234b38204ebb2415b83c0765940301d78a75fd43ec55f2f0a71d8f3595ac7f740ba0f5702deb809fd586449e6c4598e12ee77c306bd9de3549bf5cb7ac6f4a1d872d17bdbb2dcf1689aeb8ab2c10828e939df407dc1b9fe05060f02719f66f2a4561f95c0f02281b7a0842dd933adedc5ce49f3167ac2f075f366ca869255d5991de467b5daea8565d8de50fa6188a8e760ea3ba8e2826dfe033de", @nested={0x4, 0x20}, @generic="2607ff39a6d5a5df0c59b21cca79f770d2924848675e18450507425de467b662653adcef5bb2aaaa413e80924efdf8ee1ea97c3a2040002137532b8aac4e606e1d89725e39ba737c3b0d16180c9ffe329dc0864d77e99760e7447c7d30cd753f4a4a01b321ca9518853338743f9bbc9e36a27b136ac7d87bbb709b0dea94dc7705f499c478692b72dbe2101bf572e52d7791ae75346f3f93954ddfcb801c8901acc1652102e04e50"]}]}, 0x308}, {&(0x7f0000002300)={0x400, 0x10, 0x2, 0x70bd2b, 0x25dfdbfe, "", [@generic="483275d4ae0117dee9c0df537d0457b5f94daa41d048453846cd9f85c499b022a23932a5dc0c238d6b7e9dc8d67187ff92872d8ca4a628590e3146d1fa06335c9df8365bb8cc9162d677a1c8618462bdf28303e9f77d1cd5613a10d3f17eb23165c39dd20379065c47982f464b21d70a87bc5d21d9f9", @nested={0x30a, 0xae, 0x0, 0x1, [@nested={0x4, 0x13c}, @generic="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", @typed={0x8, 0x102, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x6, 0x0, 0x0, @uid=r8}, @generic="9bdd2ee4f3b3a4517bb21c7dd3d6bafba0f0db5d5f77c336170f9fe661a19cffb71508b67a12130ccc0920a968eeaa53a6b54fac9e45a5d40a979464a41d6274683964164593f3a0e335c65cc708816681660a4b688534f75259931a235f99ab8f81de9c0a603ca69a2e8cba96db58cfbf8ad503d3c28c78896426e5af072de99851382c9fd21981e83b5f884ea0", @nested={0x4, 0x54}, @generic="8d2140b574498c1f06518abf48e55c973ab2829ad82d0fd2409188ca8f7e9a0d60fd37dba08b9d849ee6af710542875ef3413728a19055e5474dab360362ce9ab5236142eccfb6d5d429d85d04e2db1fb752829d23eb0e9c2ae4ee4ed8201cc7cc2712ad7c2d5deb2867cf6dbac9c89b025cdfbbf34c041224ccd761c164610a84280c65301c9757a7a1e9153b6d27589aa7bf742b26f41ed35be9fe3fa1e009331d3466b7ec291cb46298e34f8af9a1b67e1e634d0be0676b84f96eff99808d504a37876b484501898437f73a8896f79cca38caae9b086b99ae15face57301ae7ceed53d61096756f58e571326a0da5a95cfd85d61b10afa3a7", @generic="8b61151b5e7d3a10389fb8f7b3cfbd48c4476ff7a66eaf12ec147be7d5fefaf0dc14f400d83a77505a91649fdc13dda882385deebe86700fb185afbf5bc4fd14a4b55fed700df8476acacb8e11a4c26c881b41d953bac10d2d82895c3bbcc46df1dcbe590df268e0", @nested={0x4, 0x47}]}, @generic="2a126c7f6eec30662d01a461df92c257b727739d3725becc9f35b205a464285faba2e8d96d573c825e1bf64947b77de78f7001a557699b04a2da3d1a2b73ce45ca4a12daef8d6b7d87441afb9231fe940bbd00ac8b7d6c57484cea2762c8a8bcc5c09b469620ea38949b824d"]}, 0x400}, {&(0x7f0000000940)={0x110, 0x42, 0x200, 0x70bd27, 0x25dfdbfc, "", [@typed={0x4, 0x27}, @nested={0x7c, 0x9a, 0x0, 0x1, [@generic="5163e8a709a235ef8eaff674b78e6f2d87aa72f04dcf98c44d532d53f1176677048e32408bd756d7", @generic="58c84144005d9df356ef86614fedad7a46362a257222d483a8621a092f0b994c88dbe6fb04aaca881771dba8ca95ef28e66b130ee14949c03d3b2b61dbbe6ae7a253da8472c1f54b24a8652946f13478"]}, @generic, @generic="ef01779fd45a3afc898300edbc4976f4d4e1b91a355654a7cb7ebedac67431682cb588b947885ff6ac99b8cda3b8286dda67ff0d4897432361e31ec210ec87f07f55b21b43f9204f5eaed5d7b4be7984df540fae74c782e97668a4bbc0fb80f23cf9a12c8fcda0633eb227b3070038c5aa268112", @typed={0xc, 0x143, 0x0, 0x0, @u64=0x7f}]}, 0x110}, {&(0x7f00000003c0)={0x18, 0x23, 0x400, 0x70bd26, 0x25dfdbfd, "", [@generic, @typed={0x8, 0x7, 0x0, 0x0, @u32=0x6}]}, 0x18}, {&(0x7f0000002700)={0x4b8, 0x3c, 0x2, 0x70bd28, 0x25dfdbff, "", [@nested={0xc, 0x3e, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @u32=0x9}]}, @generic="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", @generic="f5f54596c23285529945acdc9ce2e8421735360acd45bef6054b1e2b02363141bc48a082c3aab5d1d9cf", @generic="bf7d3349f23867b079acaa92e08999c29cf3f9fe92b84de0ed4f4f42a6bf04ee48648c8bda1c04f9c7bb98c5ba131715945eaa4b805ca843a8299cd12fb1ba68e24ff234458da6e415b959f0d3aeba987a901852d37056c52cd855335b55fe54bf03661e30cf69e0582709d16bab8765c142a9eb5a298f90d2f0a1ba38643423a5d2c01d1f3bdc1f004330a20306ca8a2700da5aad9e3636118238606c9492e8fd9608c25a8f67b5e8637c7303116d22862cea14f86cc481de1598e07c902c535b794841df212da2838f8a684cefe5a2b89a4a0b8b2059af6f457df6448415", @generic="68c2d7077a725ebbe27f8dff98d09b0eddefa3f5e81882b180688d", @typed={0x4, 0x27}, @typed={0x5, 0xba, 0x0, 0x0, @str='\x00'}, @nested={0x26b, 0xd1, 0x0, 0x1, [@generic="eabfceead8abed603c26a351713c8e7d18097576131d30de84754a9ca3430b52ed219e879651a027976112de9576e6dd04f260afde9a8397d987df76227ab392c1aa50a74b885cd91c8cd805eebf4fd7f0e871769a83b196c2ffd429e2b6b6054bf83aa4bd0016ec5b044c107cb5bfd6e18808f5b5dde49f0ed67f0a9e59038b960500caa7fc964f231e03cd0d27bfac8690b74571ccadaf76271c98bf60707d0a03f551d7503fa1e4c5a47a421dc3", @generic="b0eda17dd85787edc1cef6e345a32244e9c843f8d1366ff7f1c845b66cc07b2999e25c270826d44e61811f31a817028637b68bd9fffc69528211c3331b963cd8b70683ff0f0ba0c7b37f62024a2895a0ef0b822240b010daf6f8d792802e48306cab86ba932f78725cad1fb7fb85826328a1794a4f719acd16cd5f4ef8dc2bbc3fb76656ced3718a99798e0f22916fe47cfa727a8d7d956c3f2c560fc902d56769549593ece965f7a8dcfeb57be79cabfc888b2ee15be2435b7c6c8ae053d67baaf40c9f4f0920a091f2", @generic="18c6b536c28e306dfdf1e246d5cfca3258bef15aff1f6700fd6e53ee6dad654fc87ef13b3fab330e569bd051ab2892501237436729757c22ffbe0401809a4261f31922d17b78c87eb2b1358bf80508667d048fd97bb1418fd9f9c987597e2d1ae8347e3b0604e254f33accba2602", @generic="f87f16630ae753473e4974b0b446c3a5ff88c89ca83c9a5a172be80d2ed148c81fd92404fca83ea973e8e2706a354d63aed52f057c22c9711f1b6745c5a1687b", @generic="ad3f758568218d7ffbca71c978c920ab7205a3f02df19c3c916a2e34223427eb595bf995722ef7819f2832bfb4c2a352410082f4291008491a198d32", @nested={0x4, 0x26}]}]}, 0x4b8}, {&(0x7f0000002bc0)={0x2a4, 0x27, 0x10, 0x70bd25, 0x25dfdbfc, "", [@generic="5df4020e99a5877b401d8a4658dc2dfc3d40b0f068d5c25dc9d1566ff93362de979c0a71e7242a8b687d040a157d355a18427b221886585c688d88314029520893fc82045a80784890b2f8fc9694813ddaa079ecc4acd3b292ca1a57647a86737a5143edd0edb44988370ce2c4b6cd77bee270af75691a80932247d8fadef174756b0d", @nested={0x18d, 0x45, 0x0, 0x1, [@generic="f6c88c48b78b2c84489dc0819c87766db96b0224c6c7873f71efbba49e422ee508065180262f7215af90f5a51c9f94b556c9c323336e7b9caaa64d24f05831a96107e42f4ed9fc93b26c9b6cb568d11512b5f618b49b5af52da833e7fa3f4eb9540889b42c6997147f387104ac0c378b6dde578721d88fea8f5db4c4fdaf781a86325c6b632e397465a51433235792a8e3d9ebad78f304a4b8ab15b2ec65be42326d18b466f3c47994881e96fc0a0fa472def8b1e4a6b7c65a5a6fce0710f4846152eedd0379e87845fe06e66a44fad0055991b42b6fdf", @nested={0x4, 0xb}, @generic="174569d749473c0e635ef92e6ad705412aee3299334557d3d100e657f27afae68453a98ca7d87627be2e5541c02a47c74fbc6e807883697aa79e84bdaeb1ea1888d0afda86af3830545289f18b078e191dcf6b0d6fc6bcddb24a71dc7d75a3e8272f17b9451d8f2f955b8e7f0c10dd1434cafbc505d18703b27b0a3a9000c532c6f410e05e4f35b2e2c4b118321d283427310d874271d4ae95173b6caea20643e17dd1255dbd54356326", @nested={0x4, 0x13a}]}, @typed={0x4, 0x58}, @typed={0xc, 0x27, 0x0, 0x0, @u64=0x7ff}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x80}, @typed={0x8, 0x4a, 0x0, 0x0, @u32}, @generic="9d93a0656ca3738f247bcf41d0d2554d51518b99b81271e5fa1dc8824b9b26bb7697fd23087953747e5567fc9c3a3ea0d50dbc3f6b30e139160b74226e014b93dacef52d11ff0ff19fba063d1937129392fce722c947d4fbb70483374ffe2f"]}, 0x2a4}], 0x9, &(0x7f0000000a80)=[@rights={{0x20, 0x1, 0x1, [r1, r4, r1, r6]}}, @rights={{0x24, 0x1, 0x1, [r0, r9, r5, r10, r2]}}], 0x48}, 0x0) bind$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) syz_usb_connect(0x1, 0x79, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0xf8, 0x28, 0xe5, 0x8, 0x12d1, 0x1402, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x40, 0xf3, 0x80, 0x0, [{{0x9, 0x4, 0xae, 0xd0, 0x0, 0x3d, 0xb5, 0xaf, 0x7, [@generic={0x2, 0xe}]}}, {{0x9, 0x4, 0xfc, 0xfc, 0x4, 0x33, 0x69, 0xfe, 0x6, [], [{{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x6a, 0x5, 0x8}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x7, 0x7f, 0xa}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0xf, 0x0, 0x40}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x4, 0x1, 0x53, [@generic={0x2, 0x4}]}}]}}, {{0x9, 0x4, 0x8c, 0x9, 0x2, 0xce, 0x8f, 0xc7, 0x8d, [@hid_hid={0x9, 0x21, 0xb12, 0x7f, 0x1, {0x22, 0x792}}], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0x3, 0xf8, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xeb, 0x6, 0x81}}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x2b, &(0x7f0000000000)={0x5, 0xf, 0x2b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "2e6d3b2321a7550875b8256e8a57bebb"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x14, 0x7b, 0x3, 0x5, 0xfe}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x1, 0xed1}]}, 0x3, [{0x0, 0x0}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x2, &(0x7f0000000300)=@string={0x2}}]}) 1.303770785s ago: executing program 1 (id=13640): setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) (async) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async, rerun: 64) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe01000000000000", 0x1c) (async, rerun: 64) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r4, 0x0, 0x4000) pipe2(0x0, 0x80000) prlimit64(0x0, 0x7, 0x0, 0x0) (async) syz_io_uring_setup(0x36e2, &(0x7f0000000600)={0x0, 0x5946, 0x400, 0x0, 0x2c5}, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x8) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x28011, r0, 0xffffe000) 1.259079466s ago: executing program 0 (id=13641): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000080)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280)=0x0) fcntl$setown(r0, 0x8, r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r4, 0x1) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @remote}}}, 0x88) sendfile(r0, r0, 0x0, 0x7ffff000) 1.205760837s ago: executing program 1 (id=13642): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000740)="32780f643983", 0x6, 0x20000045, &(0x7f0000000440)={0xa, 0x2, 0x81, @empty, 0x3}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000000600), 0x0, 0x92, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x12, r2, 0xa4840000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r5, &(0x7f0000000000)=""/78, 0x4e) ioctl$TCSETSF(0xffffffffffffffff, 0x5457, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "7a58bec239ed2d5a99bbc4bff0ebd318665a8a"}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000000000)=0x81, 0x4) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f0000000100)=@ethtool_cmd={0x45, 0x8, 0xfffffffe, 0x0, 0x40, 0x3, 0x3, 0x81, 0x0, 0x2, 0x10, 0x2, 0x2, 0x0, 0x83, 0x6, [0x2d, 0x2]}}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008000a00"], 0x1c}], 0x1}, 0x0) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000180)={0x0, 0x0, @pic={0x8, 0x70, 0x2, 0x6, 0xc6, 0x1, 0x3, 0x5, 0x20, 0xd3, 0x49, 0x0, 0x4, 0x50, 0x6, 0x40}}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, &(0x7f0000000100)) 1.204772416s ago: executing program 0 (id=13643): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1, 0x2}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.072231969s ago: executing program 0 (id=13644): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r0, 0x0, 0x3) (async) ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f0000000580)) (async) syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x35, 0xfe, 0x65, 0x10, 0x1aca, 0xb28e, 0x9232, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0xd, 0x1, 0x90, 0x2, [{{0x9, 0x4, 0x32, 0xa7, 0x2, 0x1, 0x3, 0x9e, 0x8, [], [{{0x9, 0x5, 0x8, 0x6, 0x10, 0x6, 0x4, 0x8, [@generic={0x2, 0x23}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4f8}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x4, 0x2, 0x66}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) (async) r2 = socket(0x6, 0x1, 0xc) sendmsg(r2, &(0x7f0000000540)={&(0x7f00000005c0)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)="d5f695de722258ae79374aa59235329682975e4b30d3b79a2794645410073d8fddb72401e434cbcbf89f834a6bee105200b350c47858ce0996d3f530267c6d34f72480514c1d5d58f8bb7b166807652883995c82ab490d13bc349543478a62d77af010030cbb2a13a367c5f57f97", 0x6e}, {&(0x7f0000000180)="5ffab8a60585301c89a85b33488de1d95c9b20abfbf4497e100149ff185c2c813283233640425ac8bced3d54964f99ed0a2324774206cb1b3fe0070bda96caa8a5e46da2c82a2134ce3e00c32a897e677561b3146c117ae8b6c59a21001b8ab417d561034240b22a", 0x68}, {&(0x7f0000000080)="ed674d323980f20ff66cd7c19f79c8a485c3fe00766ceaca6099ea16f8508811cea51a68e7bcb2dabee6369d44046234911ce4", 0x33}, {&(0x7f0000000200)="7ab3ff92f0b09927235443fd5c8cabb334a83b01f73e5d828cf2b4ef02a0a61c6e1da06a08367c7b6c338917c94e6b075f06db1cba919a3aec4dce74457649b49d37db5ecb133cad86147dfcd14e6adfeab9d5eb1910b83e4c34a2ce03b16b7bd4f9640765f64a88f03fce58c246e08ec006a883146026492485b57a544055093783d58371e645281f184ec91ffc76044f5f61d1d1e1cff4508a55ee6856b35b612456255ceb3fa634daf2a78df97db2820fce040b2417c3d12216944572a8bc38122c08e008b4b34a928d12fca0dc872f52077dbed62e5d8519a605d0feb7ade5770f934df5016547a1fa5654222cc390a6ccc7acd6ce2c9c6cb7baaf24", 0xfe}, {&(0x7f0000000340)="d3271ab0c5f53d519b69255c76c1ee2338a4a078cdadb16d7f8609659ce7131e4a0b6262da2711a00c0dbb5c9e4c3498c062459e3ca050da7d2f71", 0x3b}, {&(0x7f0000000640)="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"/416, 0x1a0}], 0x6}, 0x20008000) r3 = socket(0x10, 0x2, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x20, 0x0, 0x0) write(r3, &(0x7f0000000500)="1c0000001a009b8a14e500"/28, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) (async) close_range(r1, 0xffffffffffffffff, 0x0) 964.736791ms ago: executing program 1 (id=13645): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x5) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r3, 0x7, 0x2, r3}) write$eventfd(r3, &(0x7f0000000240)=0xfffffffffffffffa, 0x8) read$eventfd(r3, &(0x7f0000000200), 0x8) r4 = syz_io_uring_complete(0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000040)) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00') setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r7, 0x10e, 0x8, &(0x7f0000000040)=""/60, &(0x7f0000000080)=0x3c) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x202, 0x46) copy_file_range(r8, 0x0, r8, &(0x7f0000000100)=0x20008a, 0x400000000000002, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x4f4f, &(0x7f0000000100)) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, 0x0) mmap(&(0x7f0000018000/0x3000)=nil, 0x3000, 0xa8ca3411d1c2601d, 0x8010, r10, 0x22e7e000) 361.744133ms ago: executing program 0 (id=13646): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x20008001) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) (async, rerun: 64) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="3c00000000000000034d564b"]) (rerun: 64) r7 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r8, 0x20, 0x40, 0x1001000, 0x6, {{0x6, 0x4, 0x2, 0x6, 0x18, 0x64, 0x0, 0xf9, 0x29, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4}]}}}}}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) r9 = signalfd4(r2, &(0x7f0000000440)={[0x8]}, 0x8, 0x80800) (async) r10 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) fsconfig$FSCONFIG_SET_PATH_EMPTY(r9, 0x4, &(0x7f0000000480)='/dev/kvm\x00', &(0x7f00000004c0)='./file0\x00', r10) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 361.183733ms ago: executing program 0 (id=13647): io_setup(0xe95, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000500)={0x9, 0x20, 0x3f519662, 0x20, 0x1}, 0x48) syz_open_dev$loop(&(0x7f0000000200), 0x64f, 0x490000) r1 = syz_open_procfs(0x0, &(0x7f0000000800)='net/wireless\x00') read$FUSE(r1, &(0x7f0000002f00)={0x2020}, 0x2020) pipe2(&(0x7f0000000440), 0x80080) syz_open_dev$mouse(&(0x7f0000000580), 0x0, 0x204880) unshare(0x62040200) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6174000100800000000000000000000000000000000000000000100000000002"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="18000000420038cde8e119fc0106000000000000000008000000", @ANYRES32=0x0, @ANYBLOB], 0x18}, {&(0x7f0000000880)={0x20, 0x12, 0xc9222ec23c9a640f, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x14e, 0x0, 0x1, [@nested={0x4, 0x77}]}, @generic="17ad583718"]}, 0x20}], 0x2}, 0x800) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) userfaultfd(0x80000) openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x301000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x30, 0x0, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x2512, 0x4) sendmmsg$inet6(r8, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 280.187564ms ago: executing program 1 (id=13648): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000000)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x14, 0xc, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) 241.233706ms ago: executing program 1 (id=13649): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@private1, 0x56}) (async, rerun: 32) socket$inet6(0xa, 0x3, 0xff) (async, rerun: 32) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 157.864627ms ago: executing program 1 (id=13650): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000180)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x20000, 0x800, 0x907, 0x3}, 0x20) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/custom1\x00', 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB='-', @ANYRESHEX=r7], 0x27) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f0000006e80)={0x2020}, 0x2082) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x1d, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) 0s ago: executing program 0 (id=13651): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x0) (async) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) (async) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sigaltstack(&(0x7f0000000340)={0x0, 0x1, 0xfffffffffffffe63}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={[{@name={'name', 0x3d, '-#{!(^^$}!%#.+]}^\\!'}}]}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) chdir(0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r5, 0x0, r6, 0x0, 0x10000000000016, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89a3, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) socket$inet6(0xa, 0x5, 0x18) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000002f80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x9, 0x9, 0x7f, 0x40, 0x5}, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80000, 0x20) (async) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80000, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYRESDEC=r7, @ANYRES32=0x0, @ANYBLOB="b44e160ae0e5fbe36261cde26461a36d5a12e30f2150ff0d8e8e0f9a5197ca3461d49bc8166d4130ddbef58bd30b42121ec6d85aa11198d860f24e5c5adbf55169cea89d7f0b84d10cf4e0dcf95357beae6a75a9e81f36518966a80a419c"], 0x1c}, 0x1, 0x0, 0x0, 0x24}, 0x854) read$FUSE(r7, 0x0, 0x0) kernel console output (not intermixed with test programs): 3][ T2640] tipc: Started in network mode [ 681.405808][ T2640] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 681.415110][ T2640] tipc: Enabling of bearer rejected, failed to enable media [ 681.554207][ T2645] netlink: 44 bytes leftover after parsing attributes in process `syz.7.11880'. [ 681.563862][ T36] audit: type=1400 audit(2016777537.613:28950): avc: denied { getopt } for pid=2644 comm="syz.7.11880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 681.564047][ T2645] binder: Bad value for 'defcontext' [ 681.736924][ T36] audit: type=1400 audit(2016777537.772:28951): avc: denied { unmount } for pid=1919 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 681.781889][ T36] audit: type=1400 audit(2016777537.810:28952): avc: denied { unmount } for pid=1919 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 681.882759][ T2690] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11895'. [ 681.892884][ T2690] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11895'. [ 681.901930][ T2690] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 681.963015][ T2701] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 681.980161][ T2704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2704 comm=syz.7.11900 [ 682.013340][ T36] audit: type=1326 audit(2016777538.026:28953): auid=4294967295 uid=16832 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.0.11898" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd83d98eec9 code=0x0 [ 682.050901][ T36] audit: type=1400 audit(2016777538.063:28954): avc: denied { listen } for pid=2713 comm="syz.7.11902" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 682.072615][ T36] audit: type=1400 audit(2016777538.073:28955): avc: denied { read write } for pid=2713 comm="syz.7.11902" name="usbmon4" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 682.090145][ T2718] __vm_enough_memory: pid: 2718, comm: syz.7.11903, bytes: 18014402804453376 not enough memory for the allocation [ 682.096862][ T36] audit: type=1400 audit(2016777538.073:28956): avc: denied { ioctl open } for pid=2713 comm="syz.7.11902" path="/dev/usbmon4" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 682.138401][ T2720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 682.138434][ T2720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:104 [ 682.138486][ T36] audit: type=1400 audit(2016777538.148:28957): avc: denied { ioctl } for pid=2719 comm="syz.7.11904" path="socket:[122837]" dev="sockfs" ino=122837 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 682.782482][ T2753] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11916'. [ 683.057125][ T2786] 9pnet_fd: Insufficient options for proto=fd [ 683.119034][ T2801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11932'. [ 683.687165][ T2811] overlayfs: failed to clone upperpath [ 684.192387][ T2825] /dev/loop0: Can't lookup blockdev [ 685.432390][ T2874] netlink: 'syz.7.11957': attribute type 16 has an invalid length. [ 685.440326][ T2874] __nla_validate_parse: 1 callbacks suppressed [ 685.440339][ T2874] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.11957'. [ 685.492650][ T36] audit: type=1400 audit(2016777541.291:28958): avc: denied { setcurrent } for pid=2881 comm="syz.7.11959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 685.500210][ T2882] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 685.512654][ T2882] rust_binder: Error while translating object. [ 685.523745][ T2882] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 685.530013][ T2882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:120 [ 685.555261][ T2884] netlink: 228 bytes leftover after parsing attributes in process `syz.7.11960'. [ 685.921067][ T2903] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28436 sclass=netlink_xfrm_socket pid=2903 comm=syz.2.11965 [ 685.975875][ T2910] overlayfs: failed to clone upperpath [ 686.033447][ T2924] netlink: 393 bytes leftover after parsing attributes in process `syz.2.11973'. [ 686.053371][ T2928] /dev/rnullb0: Can't lookup blockdev [ 687.009643][ T36] audit: type=1400 audit(2016777542.717:28959): avc: denied { map } for pid=2946 comm="syz.1.11980" path="socket:[123135]" dev="sockfs" ino=123135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 687.088965][ T36] audit: type=1326 audit(2016777542.792:28960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2946 comm="syz.1.11980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb09f58eec9 code=0x0 [ 687.462833][ T2952] incfs: Backing dir is not set, filesystem can't be mounted. [ 687.472545][ T2952] incfs: mount failed -2 [ 687.497376][ T2957] 9pnet_fd: Insufficient options for proto=fd [ 687.515478][ T2957] 9pnet_fd: Insufficient options for proto=fd [ 687.551884][ T2963] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 687.569201][ T36] audit: type=1400 audit(2016777543.242:28961): avc: denied { relabelto } for pid=2962 comm="syz.0.11984" name="514" dev="tmpfs" ino=2800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 687.596077][ T36] audit: type=1400 audit(2016777543.242:28962): avc: denied { associate } for pid=2962 comm="syz.0.11984" name="514" dev="tmpfs" ino=2800 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 687.625650][ T36] audit: type=1400 audit(2016777543.242:28963): avc: denied { write } for pid=28485 comm="syz-executor" name="514" dev="tmpfs" ino=2800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 687.652886][ T36] audit: type=1400 audit(2016777543.242:28964): avc: denied { remove_name } for pid=28485 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 687.680310][ T36] audit: type=1400 audit(2016777543.242:28965): avc: denied { rmdir } for pid=28485 comm="syz-executor" name="514" dev="tmpfs" ino=2800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 688.031307][ T2987] netlink: 'syz.1.11992': attribute type 16 has an invalid length. [ 688.050104][ T2987] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.11992'. [ 688.139503][ T36] audit: type=1400 audit(2016777543.777:28966): avc: denied { create } for pid=3000 comm="syz.1.11998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 688.208050][ T36] audit: type=1400 audit(2016777543.843:28967): avc: denied { map } for pid=3019 comm="syz.0.12004" path="socket:[124183]" dev="sockfs" ino=124183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 688.219560][ T3022] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 688.400685][ T3043] overlay: ./file0 is not a directory [ 688.901239][ T3054] /dev/rnullb0: Can't open blockdev [ 689.074568][ T3063] cgroup: release_agent respecified [ 689.081188][ T3063] netlink: 'syz.1.12019': attribute type 12 has an invalid length. [ 689.498876][ T3091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=3091 comm=syz.2.12031 [ 689.512514][ T3091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12031'. [ 689.524109][ T3091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3091 comm=syz.2.12031 [ 689.700409][ T3106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12037'. [ 689.724101][ T3108] 9pnet_fd: p9_fd_create_tcp (3108): problem connecting socket to 127.0.0.1 [ 689.767250][ T3114] /dev/rnullb0: Can't lookup blockdev [ 689.773006][ T3115] /dev/rnullb0: Can't lookup blockdev [ 689.792007][ T3117] netlink: 'syz.1.12041': attribute type 15 has an invalid length. [ 690.043776][ T3128] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 690.131580][ T3137] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12049'. [ 690.541622][ T3163] 9pnet_fd: Insufficient options for proto=fd [ 690.547926][ T3170] 9pnet_fd: Insufficient options for proto=fd [ 691.097560][ T3197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12069'. [ 691.104119][ T3199] fuse: Bad value for 'fd' [ 692.013356][ T3255] bpf: Bad value for 'mode' [ 692.792331][ T3290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12102'. [ 692.802655][ T3290] overlayfs: failed to clone upperpath [ 693.016845][ T3299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12106'. [ 693.074871][ T3310] 9pnet_fd: Insufficient options for proto=fd [ 693.083690][ T36] audit: type=1400 audit(2016777548.412:28968): avc: denied { mounton } for pid=3309 comm="syz.0.12110" path="/" dev="configfs" ino=2215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 693.796725][ T3384] 9pnet_fd: Insufficient options for proto=fd [ 693.796725][ T3385] 9pnet_fd: Insufficient options for proto=fd [ 693.819285][ T36] audit: type=1326 audit(2016777549.106:28969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3387 comm="syz.1.12135" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb09f58eec9 code=0x0 [ 693.857690][ T36] audit: type=1400 audit(2016777549.143:28970): avc: denied { create } for pid=3391 comm="syz.7.12137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 693.939311][ T3404] tipc: Enabling not permitted [ 693.945045][ T3404] tipc: Enabling of bearer rejected, failed to enable media [ 694.783321][ T36] audit: type=1400 audit(2016777550.007:28971): avc: denied { create } for pid=3438 comm="syz.1.12151" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 694.823626][ T36] audit: type=1400 audit(2016777550.007:28972): avc: denied { write } for pid=3438 comm="syz.1.12151" name="file2" dev="rootfs" ino=123673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 694.880635][ T36] audit: type=1400 audit(2016777550.007:28973): avc: denied { open } for pid=3438 comm="syz.1.12151" path="/file2" dev="rootfs" ino=123673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 694.926734][ T36] audit: type=1400 audit(2016777550.007:28974): avc: denied { ioctl } for pid=3438 comm="syz.1.12151" path="/file2" dev="rootfs" ino=123673 ioctlcmd=0x1284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 696.207885][ T36] audit: type=1400 audit(2016777551.348:28975): avc: denied { create } for pid=3459 comm="syz.0.12158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 697.007401][ T4587] tipc: Subscription rejected, illegal request [ 697.096630][ T36] audit: type=1326 audit(2016777552.183:28976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3493 comm="syz.1.12169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb09f58eec9 code=0x0 [ 698.035848][ T3523] fuse: Unknown parameter 'roomode' [ 698.406446][ T3549] netlink: 96 bytes leftover after parsing attributes in process `syz.7.12189'. [ 698.689198][ T3561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=3561 comm=syz.7.12193 [ 698.938360][ T3580] 9pnet_fd: Insufficient options for proto=fd [ 698.944758][ T3580] /dev/rnullb0: Can't lookup blockdev [ 698.951818][ T3582] overlayfs: failed to clone lowerpath [ 698.959753][ T3582] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59251 sclass=netlink_xfrm_socket pid=3582 comm=syz.2.12201 [ 699.062178][ T3591] tmpfs: Unknown parameter '00000000000000000000000' [ 699.234912][ T3618] overlayfs: failed to clone upperpath [ 701.290180][ T3695] netlink: 'syz.0.12238': attribute type 40 has an invalid length. [ 701.359849][ T3711] 9pnet_fd: Insufficient options for proto=fd [ 701.470084][ T3724] incfs: mount failed -22 [ 701.474602][ T36] audit: type=1400 audit(2016777556.283:28977): avc: denied { mounton } for pid=3723 comm="syz.1.12247" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 701.622507][ T3741] bpf: Bad value for 'mode' [ 701.966720][ T36] audit: type=1400 audit(2016777556.752:28978): avc: denied { watch_reads } for pid=3764 comm="syz.0.12263" path="/593/file0" dev="tmpfs" ino=3220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 701.979377][ T3765] fuse: blksize only supported for fuseblk [ 701.995115][ T3766] fuse: blksize only supported for fuseblk [ 702.040383][ T3778] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.12267'. [ 702.284903][ T3797] fuseblk: Unknown parameter 'tmoe' [ 702.861501][ T3827] tipc: Cannot configure node identity twice [ 703.173454][ T36] audit: type=1326 audit(2016777557.878:28979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.1.12273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09f58eec9 code=0x7fc00000 [ 703.693008][ T3859] overlayfs: failed to clone upperpath [ 703.948005][ T3895] overlay: ./file1 is not a directory [ 705.141533][ T3954] ./cgroup: Can't lookup blockdev [ 706.376701][ T4001] 9pnet_fd: Insufficient options for proto=fd [ 706.431354][ T4011] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12346'. [ 706.441303][ T4012] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12346'. [ 706.532715][ T36] audit: type=1326 audit(2016777561.030:28980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 706.558283][ T36] audit: type=1326 audit(2016777561.030:28981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 706.628591][ T36] audit: type=1326 audit(2016777561.030:28982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 706.664954][ T36] audit: type=1326 audit(2016777561.030:28983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 706.715203][ T36] audit: type=1326 audit(2016777561.030:28984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 706.747015][ T36] audit: type=1326 audit(2016777561.030:28985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 706.770610][ T36] audit: type=1326 audit(2016777561.030:28986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 706.811133][ T36] audit: type=1326 audit(2016777561.030:28987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 706.836314][ T36] audit: type=1326 audit(2016777561.030:28988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 706.859717][ T36] audit: type=1326 audit(2016777561.030:28989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 706.883256][ T36] audit: type=1326 audit(2016777561.030:28990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 706.911051][ T36] audit: type=1326 audit(2016777561.030:28991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 706.925381][ T4042] overlayfs: failed to clone upperpath [ 706.935291][ T36] audit: type=1326 audit(2016777561.030:28992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 706.963528][ T36] audit: type=1326 audit(2016777561.030:28993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 706.964190][ T4036] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.986976][ T36] audit: type=1326 audit(2016777561.030:28994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 706.996468][ T4036] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.017521][ T36] audit: type=1326 audit(2016777561.030:28995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 707.024916][ T4036] bridge_slave_0: entered allmulticast mode [ 707.047822][ T36] audit: type=1326 audit(2016777561.030:28996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.2.12352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x50000 [ 707.054759][ T4036] bridge_slave_0: entered promiscuous mode [ 707.100654][ T1367] bridge_slave_1: left allmulticast mode [ 707.112880][ T1367] bridge_slave_1: left promiscuous mode [ 707.120668][ T1367] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.128569][ T4048] netlink: 'syz.7.12356': attribute type 3 has an invalid length. [ 707.141254][ T1367] bridge_slave_0: left allmulticast mode [ 707.152197][ T1367] bridge_slave_0: left promiscuous mode [ 707.157987][ T1367] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.251456][ T4036] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.258542][ T4036] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.268407][ T4036] bridge_slave_1: entered allmulticast mode [ 707.276508][ T4036] bridge_slave_1: entered promiscuous mode [ 707.291717][ T4062] netlink: 8568 bytes leftover after parsing attributes in process `syz.7.12361'. [ 707.321660][ T1367] veth1_macvtap: left promiscuous mode [ 707.327302][ T1367] veth0_vlan: left promiscuous mode [ 707.428939][ T4036] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.436044][ T4036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.443399][ T4036] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.450465][ T4036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.509051][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.516891][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.527766][T22936] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.534834][T22936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.552777][T22936] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.559929][T22936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.586475][ T4036] veth0_vlan: entered promiscuous mode [ 707.601891][ T4036] veth1_macvtap: entered promiscuous mode [ 708.425254][ T4109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12373'. [ 708.605846][ T4122] cgroup: noprefix used incorrectly [ 709.650263][ T4129] binder: Unknown parameter '01777777777777777777777' [ 710.825536][ T4179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12394'. [ 711.202540][ T399] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 711.362438][ T399] usb 1-1: Using ep0 maxpacket: 16 [ 711.369722][ T399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.380677][ T399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.390484][ T399] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 711.399554][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.408255][ T399] usb 1-1: config 0 descriptor?? [ 711.678200][ T4284] macsec0: entered promiscuous mode [ 711.684738][ T4284] macsec0: left promiscuous mode [ 711.750040][ T4284] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37977 sclass=netlink_xfrm_socket pid=4284 comm=syz.1.12432 [ 711.842949][ T399] hid-multitouch 0003:1FD2:6007.0028: unknown main item tag 0x1 [ 711.857449][ T399] hid-multitouch 0003:1FD2:6007.0028: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 712.119416][ T4314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 712.119453][ T4314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:17 [ 712.243297][ T4326] netlink: 328 bytes leftover after parsing attributes in process `syz.1.12446'. [ 712.837253][ T4348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4348 comm=syz.1.12454 [ 712.849779][ T4349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4349 comm=syz.1.12454 [ 713.477649][ T4359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12458'. [ 713.511761][ T4362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12459'. [ 713.702529][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.709695][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.716790][ T4366] bridge_slave_0: entered allmulticast mode [ 713.724648][ T4366] bridge_slave_0: entered promiscuous mode [ 713.731561][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.738621][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.745797][ T4366] bridge_slave_1: entered allmulticast mode [ 713.752139][ T4366] bridge_slave_1: entered promiscuous mode [ 713.795972][ T1367] bridge_slave_1: left allmulticast mode [ 713.801797][ T1367] bridge_slave_1: left promiscuous mode [ 713.807519][ T1367] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.815086][ T1367] bridge_slave_0: left allmulticast mode [ 713.820762][ T1367] bridge_slave_0: left promiscuous mode [ 713.826485][ T1367] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.923416][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.930484][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.937814][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.944903][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.993782][T22936] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.001415][T22936] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.011362][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.018451][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.033126][T22936] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.040251][T22936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.072626][ T4366] veth0_vlan: entered promiscuous mode [ 714.085101][ T4366] veth1_macvtap: entered promiscuous mode [ 714.125305][ T4377] rust_binder: 2: no such ref 3 [ 714.130286][ T4377] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 714.138363][ T4377] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 714.145527][ T4377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 714.170696][ T45] usb 1-1: USB disconnect, device number 64 [ 714.613314][ T45] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 714.775815][ T45] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 714.784962][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.792983][ T45] usb 1-1: Product: syz [ 714.797226][ T45] usb 1-1: Manufacturer: syz [ 714.801835][ T45] usb 1-1: SerialNumber: syz [ 714.885773][ T4423] incfs: Options parsing error. -22 [ 714.890170][ T4422] incfs: Options parsing error. -22 [ 714.891217][ T4423] incfs: mount failed -22 [ 714.896297][ T4422] incfs: mount failed -22 [ 715.480849][ T4450] 9pnet_fd: Insufficient options for proto=fd [ 715.498003][ T45] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 715.573026][ T4460] tipc: Enabling of bearer rejected, failed to enable media [ 715.669904][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 715.679057][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.689533][ T45] usb 2-1: config 0 descriptor?? [ 715.909202][ T4446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 715.909327][ T4446] rust_binder: 47: no such ref 0 [ 715.920845][ T4446] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 715.927964][ T4446] rust_binder: 47: no such ref 2 [ 715.932956][ T4446] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 716.203607][ T45] logitech-djreceiver 0003:046D:C53F.0029: item fetching failed at offset 1/5 [ 716.220728][ T45] logitech-djreceiver 0003:046D:C53F.0029: logi_dj_probe: parse failed [ 716.229193][ T45] logitech-djreceiver 0003:046D:C53F.0029: probe with driver logitech-djreceiver failed with error -22 [ 716.434872][ T4471] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 716.435006][ T4471] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 716.783674][ T4488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12500'. [ 716.804323][ T4488] overlayfs: failed to clone upperpath [ 717.484355][ T45] usb 1-1: USB disconnect, device number 65 [ 718.440963][ T4517] tmpfs: Bad value for 'size' [ 718.453875][ T36] kauditd_printk_skb: 95 callbacks suppressed [ 718.453893][ T36] audit: type=1400 audit(2016777572.223:29092): avc: denied { read write } for pid=4516 comm="syz.0.12510" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 718.456499][ T399] usb 2-1: USB disconnect, device number 29 [ 718.469080][ T36] audit: type=1400 audit(2016777572.223:29093): avc: denied { open } for pid=4516 comm="syz.0.12510" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 718.516024][ T36] audit: type=1400 audit(2016777572.223:29094): avc: denied { ioctl } for pid=4516 comm="syz.0.12510" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 718.759049][ T4544] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12520'. [ 718.900536][ T4554] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 718.908916][ T4554] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 718.979992][ T4560] rust_binder: Write failure EFAULT in pid:57 [ 718.990309][ T4562] rust_binder: Write failure EFAULT in pid:59 [ 718.994069][ T893] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 719.164935][ T893] usb 2-1: too many configurations: 72, using maximum allowed: 8 [ 719.178369][ T893] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 719.187771][ T893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.196723][ T893] usb 2-1: config 0 descriptor?? [ 719.234630][ T4571] netlink: 68 bytes leftover after parsing attributes in process `syz.7.12531'. [ 719.388424][ T64] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 719.415693][ T4541] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 719.425100][ T4541] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 719.425120][ T4541] rust_binder: Error while translating object. [ 719.435767][ T4541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 719.442269][ T4541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 719.457325][ T893] usb 2-1: USB disconnect, device number 30 [ 719.478376][ T36] audit: type=1326 audit(2016777573.180:29095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.1.12541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f613d38eec9 code=0x0 [ 719.560014][ T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.570685][ T64] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 719.580431][ T64] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 719.590613][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 719.598706][ T64] usb 1-1: SerialNumber: syz [ 719.818076][ T4565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 719.818110][ T4565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:62 [ 719.828997][ T64] usb 1-1: 0:2 : does not exist [ 719.844812][ T64] usb 1-1: USB disconnect, device number 66 [ 719.910721][ T893] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 719.955622][ T4637] tmpfs: Unknown parameter '' [ 720.070567][ T893] usb 2-1: Using ep0 maxpacket: 8 [ 720.082859][ T893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.093850][ T893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.103962][ T893] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 720.113531][ T893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.122725][ T893] usb 2-1: config 0 descriptor?? [ 720.140566][ T4664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=4664 comm=syz.7.12558 [ 720.556021][ T4609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.564658][ T4609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.575245][ T893] hid-multitouch 0003:0EEF:72C4.002A: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 720.623841][ T4683] overlayfs: failed to resolve './file0': -2 [ 721.301866][ T4711] rust_binder: Error while translating object. [ 721.301922][ T4711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 721.308463][ T4711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:70 [ 721.483655][ T36] audit: type=1400 audit(2016777575.057:29096): avc: denied { write } for pid=4729 comm="syz.0.12582" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 721.527997][ T36] audit: type=1400 audit(2016777575.057:29097): avc: denied { setattr } for pid=4729 comm="syz.0.12582" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 721.861242][ T399] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 722.022583][ T399] usb 1-1: unable to get BOS descriptor or descriptor too short [ 722.031006][ T399] usb 1-1: not running at top speed; connect to a high speed hub [ 722.039965][ T399] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 722.048702][ T399] usb 1-1: config 1 has no interface number 0 [ 722.055024][ T399] usb 1-1: config 1 interface 138 has no altsetting 0 [ 722.063473][ T399] usb 1-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 722.073004][ T399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.081243][ T399] usb 1-1: Product: syz [ 722.085729][ T399] usb 1-1: Manufacturer: syz [ 722.090401][ T399] usb 1-1: SerialNumber: syz [ 722.311463][ T4732] syz.0.12583: attempt to access beyond end of device [ 722.311463][ T4732] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 722.340918][ T4732] FAT-fs (loop0): unable to read boot sector [ 722.370422][ T399] usb 1-1: USB disconnect, device number 67 [ 722.471618][ T4768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12595'. [ 722.688436][ T399] usb 2-1: USB disconnect, device number 31 [ 722.727377][ T36] audit: type=1400 audit(2016777576.229:29098): avc: denied { connect } for pid=4781 comm="syz.1.12600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 722.933082][ T4793] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 722.933132][ T4793] rust_binder: Error while translating object. [ 722.946459][ T4793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 722.952779][ T4793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 723.108325][ T399] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 723.280535][ T399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 723.291662][ T399] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 723.304846][ T399] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 723.314125][ T399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.325026][ T399] usb 2-1: config 0 descriptor?? [ 723.334513][ T4788] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 723.344598][ T399] usbhid 2-1:0.0: can't add hid device: -22 [ 723.351911][ T399] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 723.460016][ T661] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 723.520414][ T36] audit: type=1400 audit(2016777580.973:29099): avc: denied { rename } for pid=4799 comm="syz.2.12607" name="file0" dev="tmpfs" ino=1483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 723.564859][ T9] usb 2-1: USB disconnect, device number 32 [ 723.609249][ T661] usb 1-1: device descriptor read/64, error -71 [ 723.877077][ T661] usb 1-1: device descriptor read/64, error -71 [ 724.131558][ T661] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 724.147656][ T36] audit: type=1326 audit(2016777581.564:29100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.7.12611" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c2638eec9 code=0x0 [ 724.170927][ T36] audit: type=1400 audit(2016777581.564:29101): avc: denied { write } for pid=4810 comm="syz.1.12612" path="socket:[131412]" dev="sockfs" ino=131412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 724.193470][ T4814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12613'. [ 724.262089][ T36] audit: type=1400 audit(2016777581.667:29102): avc: denied { append } for pid=4818 comm="syz.1.12614" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 724.269973][ T4819] netlink: 556 bytes leftover after parsing attributes in process `syz.1.12614'. [ 724.294285][ T661] usb 1-1: device descriptor read/64, error -71 [ 724.305127][ T4819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 724.305388][ T4819] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 724.312485][ T4819] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 724.421263][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 724.451352][ T36] audit: type=1400 audit(2016777581.836:29103): avc: denied { listen } for pid=4823 comm="syz.1.12616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 724.557871][ T661] usb 1-1: device descriptor read/64, error -71 [ 724.643000][ T4828] overlayfs: failed to clone upperpath [ 724.675251][ T661] usb usb1-port1: attempt power cycle [ 724.711635][ T4830] tmpfs: Unknown parameter '' [ 725.037524][ T661] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 725.059844][ T661] usb 1-1: device descriptor read/8, error -71 [ 725.072170][ T4846] sit0: entered promiscuous mode [ 725.089147][ T4846] netlink: 'syz.7.12625': attribute type 1 has an invalid length. [ 725.097274][ T4846] netlink: 1 bytes leftover after parsing attributes in process `syz.7.12625'. [ 725.143464][ T4852] overlayfs: failed to clone lowerpath [ 725.158587][ T36] audit: type=1400 audit(2016777582.512:29104): avc: denied { nlmsg_tty_audit } for pid=4853 comm="syz.7.12629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 725.198444][ T661] usb 1-1: device descriptor read/8, error -71 [ 725.242520][ T4871] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 725.243087][ T4871] @0: renamed from bond_slave_1 [ 725.410090][ T4889] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12641'. [ 725.423483][ T4893] rust_binder: Error while translating object. [ 725.423525][ T4893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 725.429760][ T4893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 725.453203][ T661] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 725.487125][ T661] usb 1-1: device descriptor read/8, error -71 [ 725.565584][ T4912] netlink: 288 bytes leftover after parsing attributes in process `syz.2.12648'. [ 725.624827][ T661] usb 1-1: device descriptor read/8, error -71 [ 725.752333][ T661] usb usb1-port1: unable to enumerate USB device [ 725.943568][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 726.035814][ T36] audit: type=1400 audit(2016777583.328:29105): avc: denied { bind } for pid=4961 comm="syz.2.12667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 726.059927][ T4964] netlink: 'syz.7.12658': attribute type 2 has an invalid length. [ 726.084689][ T4968] overlayfs: failed to clone lowerpath [ 726.101697][ T4970] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12670'. [ 726.126475][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.142190][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 726.160987][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 726.170229][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 726.179413][ T9] usb 2-1: SerialNumber: syz [ 726.202102][ T36] audit: type=1400 audit(2016777583.488:29106): avc: denied { remount } for pid=4987 comm="syz.7.12677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 726.225385][ T4990] netlink: 'syz.0.12678': attribute type 1 has an invalid length. [ 726.233931][ T4990] /dev/rnullb0: Can't open blockdev [ 726.406521][ T9] usb 2-1: 0:2 : does not exist [ 726.413949][ T9] usb 2-1: USB disconnect, device number 33 [ 726.421832][ T4387] udevd[4387]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 726.992362][ T36] audit: type=1400 audit(2016777584.229:29107): avc: denied { create } for pid=5013 comm="syz.1.12688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 727.175031][ T36] audit: type=1326 audit(2016777584.398:29108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.0.12690" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc569d8eec9 code=0x0 [ 727.229742][ T5021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 727.275866][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 727.425096][ T9] usb 2-1: device descriptor read/64, error -71 [ 727.680894][ T9] usb 2-1: device descriptor read/64, error -71 [ 727.936733][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 728.075275][ T9] usb 2-1: device descriptor read/64, error -71 [ 728.331080][ T9] usb 2-1: device descriptor read/64, error -71 [ 728.331080][ T661] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 728.459176][ T9] usb usb2-port1: attempt power cycle [ 728.490964][ T661] usb 1-1: Using ep0 maxpacket: 8 [ 728.497267][ T661] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.508247][ T661] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.518018][ T661] usb 1-1: config 0 interface 0 has no altsetting 0 [ 728.524769][ T661] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 728.533861][ T661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.543759][ T661] usb 1-1: config 0 descriptor?? [ 728.821406][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 728.843740][ T9] usb 2-1: device descriptor read/8, error -71 [ 728.980618][ T661] ntrig 0003:1B96:0004.002B: unknown main item tag 0x0 [ 728.986640][ T9] usb 2-1: device descriptor read/8, error -71 [ 728.987669][ T661] ntrig 0003:1B96:0004.002B: unknown main item tag 0x0 [ 729.000677][ T661] ntrig 0003:1B96:0004.002B: item fetching failed at offset 2/5 [ 729.008508][ T661] ntrig 0003:1B96:0004.002B: parse failed [ 729.014296][ T661] ntrig 0003:1B96:0004.002B: probe with driver ntrig failed with error -22 [ 729.196295][ T5029] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 729.196343][ T5029] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:101 [ 729.208235][T28969] usb 1-1: USB disconnect, device number 72 [ 729.247883][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 729.269994][ T9] usb 2-1: device descriptor read/8, error -71 [ 729.419388][ T9] usb 2-1: device descriptor read/8, error -71 [ 729.536563][ T9] usb usb2-port1: unable to enumerate USB device [ 732.488227][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 737.418480][ T5085] syzkaller0: refused to change device tx_queue_len [ 737.430741][ T5085] SELinux: policydb string SE L;( does not match my string SE Linux [ 737.440243][ T5085] SELinux: failed to load policy [ 737.451490][ T5085] rust_binder: validate_parent_fixup: new_min_offset=25, sg_entry.length=0 [ 737.451517][ T5085] rust_binder: Error while translating object. [ 737.472263][ T5085] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 737.486488][ T5085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 737.505806][ T5111] x_tables: unsorted underflow at hook 2 [ 737.560175][ T5127] /dev/rnullb0: Can't open blockdev [ 737.593849][ T5131] fuse: Bad value for 'fd' [ 737.620429][ T5126] @: renamed from vlan0 (while UP) [ 737.966558][ T661] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 738.126415][ T661] usb 2-1: Using ep0 maxpacket: 8 [ 738.135826][ T661] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 738.147181][ T661] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 738.156608][ T661] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.201928][ T5159] netlink: 7 bytes leftover after parsing attributes in process `syz.7.12743'. [ 738.212785][ T5159] netlink: 'syz.7.12743': attribute type 1 has an invalid length. [ 738.220709][ T5159] netlink: 'syz.7.12743': attribute type 2 has an invalid length. [ 738.228972][ T5160] netlink: 'syz.7.12743': attribute type 1 has an invalid length. [ 738.236855][ T5160] netlink: 'syz.7.12743': attribute type 2 has an invalid length. [ 738.384126][ T661] usb 2-1: string descriptor 0 read error: -71 [ 738.390525][ T661] hub 2-1:32.0: USB hub found [ 738.396076][ T661] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 738.429719][ T661] usb 2-1: USB disconnect, device number 38 [ 738.456892][ T399] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 738.563204][ T5174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12748'. [ 738.618217][ T399] usb 1-1: unable to get BOS descriptor or descriptor too short [ 738.626834][ T399] usb 1-1: config 64 has an invalid interface number: 174 but max is 2 [ 738.635724][ T399] usb 1-1: config 64 has an invalid interface number: 252 but max is 2 [ 738.644071][ T399] usb 1-1: config 64 has an invalid interface descriptor of length 2, skipping [ 738.653528][ T399] usb 1-1: config 64 has an invalid interface number: 140 but max is 2 [ 738.661909][ T399] usb 1-1: config 64 has no interface number 0 [ 738.668088][ T399] usb 1-1: config 64 has no interface number 1 [ 738.674321][ T399] usb 1-1: config 64 has no interface number 2 [ 738.680535][ T399] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 738.691732][ T399] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 738.702814][ T399] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 738.713463][ T399] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 738.724642][ T399] usb 1-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 738.735441][ T399] usb 1-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 738.746428][ T399] usb 1-1: config 64 interface 174 has no altsetting 0 [ 738.753307][ T399] usb 1-1: config 64 interface 252 has no altsetting 0 [ 738.760235][ T399] usb 1-1: config 64 interface 140 has no altsetting 0 [ 738.769093][ T399] usb 1-1: string descriptor 0 read error: -22 [ 738.775285][ T399] usb 1-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 738.784397][ T399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.794265][ T399] usb-storage 1-1:64.174: USB Mass Storage device detected [ 738.821417][ T399] usb-storage 1-1:64.252: USB Mass Storage device detected [ 738.877285][ T399] usb-storage 1-1:64.140: USB Mass Storage device detected [ 739.009109][T28969] usb 1-1: USB disconnect, device number 73 [ 739.172738][ T36] audit: type=1400 audit(2016777595.656:29109): avc: denied { map } for pid=5211 comm="syz.2.12760" path="socket:[131029]" dev="sockfs" ino=131029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 739.197432][ T36] audit: type=1400 audit(2016777595.656:29110): avc: denied { accept } for pid=5211 comm="syz.2.12760" path="socket:[131029]" dev="sockfs" ino=131029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 739.225214][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 739.283148][ T36] audit: type=1400 audit(2016777595.759:29111): avc: denied { setattr } for pid=5218 comm="syz.2.12763" name="NETLINK" dev="sockfs" ino=132104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 739.405451][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 739.413116][ T9] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 739.422255][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.430281][ T9] usb 2-1: Product: syz [ 739.434454][ T9] usb 2-1: Manufacturer: syz [ 739.439100][ T9] usb 2-1: SerialNumber: syz [ 739.444409][ T9] usb 2-1: config 0 descriptor?? [ 739.450535][ T9] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 739.561173][ T5236] /dev/rnullb0: Can't open blockdev [ 739.568800][ T5236] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12768'. [ 739.720314][ T5240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12759'. [ 740.511545][ T5266] /dev/rnullb0: Can't open blockdev [ 740.541485][ T5272] tipc: Started in network mode [ 740.546566][ T5272] tipc: Node identity 4, cluster identity 4711 [ 740.552815][ T5272] tipc: Node number set to 4 [ 740.642478][ T5288] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 740.642514][ T5288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149 [ 740.751702][ T5299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 740.761429][ T5298] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 740.775927][ T5298] rust_binder: Write failure EINVAL in pid:159 [ 740.775974][ T5299] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 740.790146][ T5299] rust_binder: Write failure EINVAL in pid:159 [ 740.802474][ T5301] binder: Bad value for 'stats' [ 740.828216][ T5304] 9pnet_fd: Insufficient options for proto=fd [ 740.848394][ T5306] netlink: 'syz.0.12794': attribute type 27 has an invalid length. [ 741.124615][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12795'. [ 741.174816][ T399] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 741.241301][ T5318] overlayfs: failed to resolve './file0/file0': -2 [ 741.334692][ T399] usb 1-1: Using ep0 maxpacket: 8 [ 741.340846][ T399] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 741.349354][ T399] usb 1-1: config 179 has no interface number 0 [ 741.355645][ T399] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 741.367246][ T399] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 741.379199][ T399] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 741.389355][ T399] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 741.402835][ T399] usb 1-1: config 179 interface 65 has no altsetting 0 [ 741.409799][ T399] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 741.418849][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.645234][ T9] usb 1-1: USB disconnect, device number 74 [ 742.157049][ T399] usb 2-1: USB disconnect, device number 39 [ 742.196659][ T5331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5331 comm=syz.2.12803 [ 742.211696][ T5331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=5331 comm=syz.2.12803 [ 742.258099][ T5344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12808'. [ 742.344764][ T5351] netlink: 228 bytes leftover after parsing attributes in process `syz.2.12810'. [ 742.443224][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 742.445787][ T5365] 9pnet_fd: Insufficient options for proto=fd [ 742.603087][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 742.609512][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 742.619853][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 742.631673][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 742.641132][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 742.649719][ T9] usb 1-1: SerialNumber: syz [ 742.655674][ T5337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 742.665257][ T5337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 742.674553][ T5377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12820'. [ 742.830275][ T5399] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12827'. [ 742.904084][ T9] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 742.923493][ T9] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 742.933548][ T9] usb 1-1: USB disconnect, device number 75 [ 742.954167][ T5406] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12829'. [ 743.162672][ T5418] bpf: Bad value for 'uid' [ 743.327921][ T893] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 743.488890][ T893] usb 2-1: No LPM exit latency info found, disabling LPM. [ 743.496900][ T893] usb 2-1: config 64 has an invalid interface number: 174 but max is 2 [ 743.505353][ T893] usb 2-1: config 64 has an invalid interface number: 252 but max is 2 [ 743.513639][ T893] usb 2-1: config 64 has an invalid interface descriptor of length 2, skipping [ 743.522848][ T893] usb 2-1: config 64 has an invalid interface number: 140 but max is 2 [ 743.531367][ T893] usb 2-1: config 64 has no interface number 0 [ 743.537581][ T893] usb 2-1: config 64 has no interface number 1 [ 743.543796][ T893] usb 2-1: config 64 has no interface number 2 [ 743.549983][ T893] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 743.561230][ T893] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 743.572299][ T893] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 743.582620][ T893] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 743.594025][ T893] usb 2-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 743.604899][ T893] usb 2-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 743.615945][ T893] usb 2-1: config 64 interface 174 has no altsetting 0 [ 743.622834][ T893] usb 2-1: config 64 interface 252 has no altsetting 0 [ 743.629829][ T893] usb 2-1: config 64 interface 140 has no altsetting 0 [ 743.638833][ T5454] random: crng reseeded on system resumption [ 743.638871][ T36] audit: type=1400 audit(2016777599.850:29112): avc: denied { write } for pid=5453 comm="syz.0.12844" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 743.669762][ T893] usb 2-1: string descriptor 0 read error: -22 [ 743.676086][ T893] usb 2-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 743.685229][ T893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.695490][ T893] usb-storage 2-1:64.174: USB Mass Storage device detected [ 743.745485][ T893] usb-storage 2-1:64.252: USB Mass Storage device detected [ 743.771507][ T36] audit: type=1107 audit(2016777599.972:29113): pid=5453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 743.785185][ T36] audit: type=1107 audit(2016777599.972:29114): pid=5453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 743.820286][ T893] usb-storage 2-1:64.140: USB Mass Storage device detected [ 743.916408][ T893] usb 2-1: USB disconnect, device number 40 [ 744.063828][ T5472] 9pnet_fd: Insufficient options for proto=fd [ 744.231487][ T5476] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 744.299613][ T36] audit: type=1326 audit(2016777600.469:29115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.7.12847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c2638eec9 code=0x0 [ 744.493316][ T36] audit: type=1400 audit(2016777600.647:29116): avc: denied { setattr } for pid=5483 comm="syz.1.12850" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 744.513246][ T5484] rust_binder: 139: no such ref 268435457 [ 744.522413][ T5484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:139 [ 744.830786][ T893] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 745.003123][ T893] usb 2-1: config 192 has an invalid interface number: 162 but max is 0 [ 745.011637][ T893] usb 2-1: config 192 has no interface number 0 [ 745.017989][ T893] usb 2-1: config 192 interface 162 has no altsetting 0 [ 745.026428][ T893] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 745.035561][ T893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.043654][ T893] usb 2-1: Product: syz [ 745.047927][ T893] usb 2-1: Manufacturer: syz [ 745.052535][ T893] usb 2-1: SerialNumber: syz [ 745.282055][ T893] usb-storage 2-1:192.162: USB Mass Storage device detected [ 745.292198][ T5523] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12861'. [ 745.292338][ T893] usb-storage 2-1:192.162: device ignored [ 745.335546][ T893] usb 2-1: USB disconnect, device number 41 [ 745.349260][ T5535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5535 comm=syz.7.12864 [ 745.971542][ T5559] rust_binder: Write failure EFAULT in pid:195 [ 745.986200][ T5564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 745.992567][ T5564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:197 [ 746.036620][ T5574] __vm_enough_memory: pid: 5574, comm: syz.0.12877, bytes: 18014402804453376 not enough memory for the allocation [ 746.059226][ T5574] __vm_enough_memory: pid: 5574, comm: syz.0.12877, bytes: 18014402804453376 not enough memory for the allocation [ 746.104932][ T5585] fuse: Unknown parameter '000000000000000000000000x0000000000000003' [ 746.136234][ T5590] rust_binder: Error while translating object. [ 746.136271][ T5590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 746.141307][ T5592] overlayfs: failed to clone upperpath [ 746.146630][ T5590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:208 [ 746.195039][ T893] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 746.266330][ T5601] cgroup: name respecified [ 746.333604][ T36] audit: type=1400 audit(2016777602.373:29117): avc: denied { accept } for pid=5593 comm="syz.0.12886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 746.365744][ T893] usb 2-1: device descriptor read/64, error -71 [ 746.398871][ T36] audit: type=1400 audit(2016777602.439:29118): avc: denied { read write } for pid=5614 comm="syz.0.12895" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 746.434815][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.440400][ T36] audit: type=1400 audit(2016777602.467:29119): avc: denied { open } for pid=5614 comm="syz.0.12895" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 746.445161][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.483141][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.490805][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.498504][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.506669][ T5619] netlink: 'syz.7.12896': attribute type 12 has an invalid length. [ 746.516104][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.523717][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.531427][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.539169][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.546895][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.554459][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.562208][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.569911][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.577540][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.585228][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.592896][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.600563][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.617546][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.628149][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.635985][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.643780][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.651820][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.659746][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.664066][ T893] usb 2-1: device descriptor read/64, error -71 [ 746.667477][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.686428][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.694176][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.701954][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.709728][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.717635][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.725500][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.733390][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.741113][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.749096][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.757251][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.765148][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.783936][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.791610][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.799834][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.807624][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.816735][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.825338][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.832988][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.841080][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.849003][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.856777][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.864353][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.877303][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.884986][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.892744][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.900705][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.908388][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.914445][ T5630] incfs: ino conflict with backing FS 1 [ 746.916196][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.929174][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.929676][ T5630] incfs: ino conflict with backing FS 1 [ 746.937054][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.951860][ T893] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 746.956749][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.967187][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.968593][ T5630] incfs: ino conflict with backing FS 1 [ 746.974991][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.988052][ T5630] incfs: ino conflict with backing FS 1 [ 746.990034][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 746.994893][ T5630] incfs: ino conflict with backing FS 1 [ 747.002260][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.007519][ T5630] incfs: ino conflict with backing FS 1 [ 747.014547][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.020975][ T5630] incfs: ino conflict with backing FS 1 [ 747.028141][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.033560][ T5630] incfs: ino conflict with backing FS 1 [ 747.040785][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.046707][ T5630] incfs: ino conflict with backing FS 1 [ 747.053767][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.071223][ T5630] incfs: ino conflict with backing FS 1 [ 747.075872][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.081800][ T5630] incfs: ino conflict with backing FS 1 [ 747.084734][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.092634][ T5630] incfs: ino conflict with backing FS 1 [ 747.097752][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.103021][ T893] usb 2-1: device descriptor read/64, error -71 [ 747.110855][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.125117][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.126103][ T5630] incfs: ino conflict with backing FS 1 [ 747.133278][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.139588][ T5630] incfs: ino conflict with backing FS 1 [ 747.146116][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.152101][ T5630] incfs: ino conflict with backing FS 1 [ 747.159500][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.165658][ T5630] incfs: ino conflict with backing FS 1 [ 747.172504][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.178289][ T5630] incfs: ino conflict with backing FS 1 [ 747.185433][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.191323][ T5630] incfs: ino conflict with backing FS 1 [ 747.198578][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.205274][ T5630] incfs: ino conflict with backing FS 1 [ 747.211588][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.217420][ T5630] incfs: ino conflict with backing FS 1 [ 747.224611][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.230975][ T5630] incfs: ino conflict with backing FS 1 [ 747.237660][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.243742][ T5630] incfs: ino conflict with backing FS 1 [ 747.250780][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.256624][ T5630] incfs: ino conflict with backing FS 1 [ 747.263844][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.269694][ T5630] incfs: ino conflict with backing FS 1 [ 747.276680][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.283004][ T5630] incfs: ino conflict with backing FS 1 [ 747.293938][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.295838][ T5630] incfs: ino conflict with backing FS 1 [ 747.302721][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.309196][ T5630] incfs: ino conflict with backing FS 1 [ 747.315797][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.322089][ T5630] incfs: ino conflict with backing FS 1 [ 747.329101][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.335579][ T5630] incfs: ino conflict with backing FS 1 [ 747.341914][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.348257][ T5630] incfs: ino conflict with backing FS 1 [ 747.354932][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.361338][ T5630] incfs: ino conflict with backing FS 1 [ 747.368061][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.374252][ T5630] incfs: ino conflict with backing FS 1 [ 747.381149][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.386841][ T893] usb 2-1: device descriptor read/64, error -71 [ 747.394746][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.401046][ T5630] incfs: ino conflict with backing FS 1 [ 747.408225][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.421201][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.428732][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.436279][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.443809][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.451281][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.458822][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.466334][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.473816][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.481326][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.488882][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.497574][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.505081][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.512661][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.520293][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.527517][ T893] usb usb2-port1: attempt power cycle [ 747.527834][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.540734][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.548271][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.555802][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.563315][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.570842][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.578330][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.585838][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.593351][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.600821][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.608346][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.615875][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.623390][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.630878][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.638390][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.645921][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.653410][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.660917][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.668489][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.675964][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.683505][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.691016][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.698532][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.706043][ T399] hid-generic 0000:10000:0007.002C: unknown main item tag 0x0 [ 747.714888][ T399] hid-generic 0000:10000:0007.002C: hidraw0: HID v9.40 Device [syz1] on syz1 [ 747.734220][ T5646] fido_id[5646]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 747.747823][ T36] audit: type=1400 audit(2016777603.696:29120): avc: denied { map } for pid=5647 comm="syz.0.12905" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 747.807387][ T5655] netlink: 'syz.2.12907': attribute type 27 has an invalid length. [ 747.822373][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.829617][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.878290][ T5662] input: syz0 as /devices/virtual/input/input62 [ 747.900925][ T893] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 747.933588][ T893] usb 2-1: device descriptor read/8, error -71 [ 748.004431][ T5697] overlayfs: missing 'lowerdir' [ 748.022037][ T5669] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 748.029875][ T5669] rust_binder: Write failure EINVAL in pid:222 [ 748.072105][ T893] usb 2-1: device descriptor read/8, error -71 [ 748.171301][ T5730] can: request_module (can-proto-4) failed. [ 748.337480][ T893] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 748.359818][ T893] usb 2-1: device descriptor read/8, error -71 [ 748.498728][ T893] usb 2-1: device descriptor read/8, error -71 [ 748.614652][ T893] usb usb2-port1: unable to enumerate USB device [ 748.686394][ T36] audit: type=1326 audit(2016777604.578:29121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5750 comm="syz.2.12940" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x7fbf0000 [ 748.833748][ T36] audit: type=1326 audit(2016777604.719:29122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.0.12942" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc569d8eec9 code=0x0 [ 749.151601][ T5768] tipc: Can't bind to reserved service type 0 [ 749.179525][ T36] audit: type=1326 audit(2016777605.038:29123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5770 comm="syz.2.12947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x0 [ 749.204585][ T36] audit: type=1326 audit(2016777605.047:29124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5770 comm="syz.2.12947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x0 [ 749.228365][ T5776] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.229481][ T5775] rust_binder: Error in use_page_slow: ESRCH [ 749.236099][ T5776] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 749.242160][ T5776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 749.246867][ T5775] rust_binder: use_range failure ESRCH [ 749.250115][ T5776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:155 [ 749.259923][ T5775] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 749.274188][ T5775] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 749.282166][ T5775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:155 [ 749.305598][ T5780] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=1 [ 749.314783][ T5780] rust_binder: Error while translating object. [ 749.323485][ T5780] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 749.329729][ T5780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 749.389675][ T5793] rust_binder: Error in use_page_slow: ESRCH [ 749.398862][ T5793] rust_binder: use_range failure ESRCH [ 749.404903][ T5793] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 749.410395][ T5793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 749.418260][ T5793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:163 [ 749.452146][ T36] audit: type=1400 audit(2016777605.301:29125): avc: denied { execute } for pid=5795 comm="syz.1.12954" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 749.673738][ T5806] rust_binder: Error while translating object. [ 749.673771][ T5806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 749.679986][ T5806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:176 [ 749.746651][ T5810] netlink: 'syz.0.12960': attribute type 12 has an invalid length. [ 749.809900][ T5816] netlink: 25 bytes leftover after parsing attributes in process `syz.0.12963'. [ 749.827420][ T36] audit: type=1326 audit(2016777605.648:29126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.0.12963" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc569d8eec9 code=0x0 [ 750.100773][ T5840] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 750.100811][ T5840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 750.108927][ T5840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:182 [ 750.160109][ T399] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 750.185591][ T5846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 750.185619][ T5846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:188 [ 750.330661][ T399] usb 1-1: Using ep0 maxpacket: 8 [ 750.345581][ T5853] /dev/rnullb0: Can't open blockdev [ 750.346323][ T399] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 750.359123][ T399] usb 1-1: config 179 has no interface number 0 [ 750.365444][ T399] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 750.376730][ T399] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 750.388173][ T399] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 750.398519][ T399] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 750.411882][ T399] usb 1-1: config 179 interface 65 has no altsetting 0 [ 750.418812][ T399] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 750.427871][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.542068][ T5863] 9pnet_fd: Insufficient options for proto=fd [ 750.562770][ T5869] incfs: mount failed -22 [ 750.695866][ T5867] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12983'. [ 751.202111][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12995'. [ 751.249055][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12997'. [ 751.294375][ T5911] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13000'. [ 751.404099][ T5920] netlink: 72 bytes leftover after parsing attributes in process `syz.7.13003'. [ 751.513764][ T399] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 751.673869][ T399] usb 2-1: Using ep0 maxpacket: 16 [ 751.680829][ T399] usb 2-1: config 5 has an invalid interface number: 255 but max is 3 [ 751.689172][ T399] usb 2-1: config 5 has an invalid interface number: 58 but max is 3 [ 751.697297][ T399] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 751.706117][ T399] usb 2-1: config 5 has an invalid interface number: 168 but max is 3 [ 751.714394][ T399] usb 2-1: config 5 has an invalid interface number: 66 but max is 3 [ 751.722601][ T399] usb 2-1: config 5 has no interface number 0 [ 751.728730][ T399] usb 2-1: config 5 has no interface number 1 [ 751.734804][ T399] usb 2-1: config 5 has no interface number 2 [ 751.740912][ T399] usb 2-1: config 5 has no interface number 3 [ 751.747016][ T399] usb 2-1: config 5 interface 255 altsetting 3 endpoint 0x83 has invalid maxpacket 959, setting to 64 [ 751.757992][ T399] usb 2-1: config 5 interface 255 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 751.768884][ T399] usb 2-1: config 5 interface 255 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 751.779627][ T399] usb 2-1: config 5 interface 255 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 751.790519][ T399] usb 2-1: config 5 interface 255 altsetting 3 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 751.801427][ T399] usb 2-1: config 5 interface 255 altsetting 3 endpoint 0x9 has invalid maxpacket 1064, setting to 64 [ 751.812476][ T399] usb 2-1: config 5 interface 255 altsetting 3 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 751.823488][ T399] usb 2-1: config 5 interface 255 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 751.834322][ T399] usb 2-1: config 5 interface 255 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 751.845071][ T399] usb 2-1: config 5 interface 255 altsetting 3 endpoint 0xF has invalid wMaxPacketSize 0 [ 751.855003][ T399] usb 2-1: config 5 interface 255 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 751.866255][ T399] usb 2-1: config 5 interface 58 altsetting 173 bulk endpoint 0x8 has invalid maxpacket 1024 [ 751.876452][ T399] usb 2-1: config 5 interface 58 altsetting 173 has an invalid descriptor for endpoint zero, skipping [ 751.887451][ T399] usb 2-1: config 5 interface 58 altsetting 173 has a duplicate endpoint with address 0x9, skipping [ 751.898270][ T399] usb 2-1: config 5 interface 58 altsetting 173 has a duplicate endpoint with address 0x9, skipping [ 751.909081][ T399] usb 2-1: config 5 interface 58 altsetting 173 has a duplicate endpoint with address 0x8, skipping [ 751.919904][ T399] usb 2-1: config 5 interface 58 altsetting 173 has an invalid descriptor for endpoint zero, skipping [ 751.930928][ T399] usb 2-1: config 5 interface 58 altsetting 173 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 751.942110][ T399] usb 2-1: config 5 interface 58 altsetting 173 has a duplicate endpoint with address 0x3, skipping [ 751.952962][ T399] usb 2-1: config 5 interface 58 altsetting 173 has an invalid descriptor for endpoint zero, skipping [ 751.963974][ T399] usb 2-1: config 5 interface 168 altsetting 130 has an invalid descriptor for endpoint zero, skipping [ 751.975060][ T399] usb 2-1: config 5 interface 168 altsetting 130 endpoint 0x86 has invalid maxpacket 552, setting to 64 [ 751.986240][ T399] usb 2-1: config 5 interface 168 altsetting 130 has an invalid descriptor for endpoint zero, skipping [ 751.997312][ T399] usb 2-1: config 5 interface 168 altsetting 130 has a duplicate endpoint with address 0x2, skipping [ 752.008200][ T399] usb 2-1: config 5 interface 168 altsetting 130 has an invalid descriptor for endpoint zero, skipping [ 752.020191][ T399] usb 2-1: config 5 interface 168 altsetting 130 has a duplicate endpoint with address 0x2, skipping [ 752.031136][ T399] usb 2-1: config 5 interface 168 altsetting 130 has a duplicate endpoint with address 0xD, skipping [ 752.032403][ T5945] incfs_lookup_dentry err:-13 [ 752.042051][ T399] usb 2-1: config 5 interface 168 altsetting 130 has an invalid descriptor for endpoint zero, skipping [ 752.047904][ T5945] incfs: Can't find or create .index dir in ./bus [ 752.064599][ T5945] incfs: mount failed -13 [ 752.064791][ T399] usb 2-1: config 5 interface 168 altsetting 130 has a duplicate endpoint with address 0x8, skipping [ 752.081443][ T399] usb 2-1: config 5 interface 168 altsetting 130 has a duplicate endpoint with address 0x2, skipping [ 752.094258][ T399] usb 2-1: config 5 interface 168 altsetting 130 has a duplicate endpoint with address 0xD, skipping [ 752.094497][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13012'. [ 752.105274][ T399] usb 2-1: config 5 interface 168 altsetting 130 has a duplicate endpoint with address 0x2, skipping [ 752.105304][ T399] usb 2-1: config 5 interface 168 altsetting 130 has an invalid descriptor for endpoint zero, skipping [ 752.136476][ T399] usb 2-1: config 5 interface 168 altsetting 130 has a duplicate endpoint with address 0xD, skipping [ 752.147451][ T399] usb 2-1: config 5 interface 168 altsetting 130 has a duplicate endpoint with address 0x4, skipping [ 752.158495][ T399] usb 2-1: config 5 interface 66 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 752.169610][ T399] usb 2-1: config 5 interface 66 altsetting 255 has a duplicate endpoint with address 0x1, skipping [ 752.180541][ T399] usb 2-1: config 5 interface 66 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 752.191421][ T399] usb 2-1: config 5 interface 66 altsetting 255 has a duplicate endpoint with address 0x1, skipping [ 752.202282][ T399] usb 2-1: config 5 interface 255 has no altsetting 0 [ 752.209130][ T399] usb 2-1: config 5 interface 58 has no altsetting 0 [ 752.215850][ T399] usb 2-1: config 5 interface 168 has no altsetting 0 [ 752.222726][ T399] usb 2-1: config 5 interface 66 has no altsetting 0 [ 752.231053][ T399] usb 2-1: New USB device found, idVendor=07b4, idProduct=0f02, bcdDevice=cf.7e [ 752.240178][ T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.248227][ T399] usb 2-1: Product: ᓸ [ 752.252468][ T399] usb 2-1: Manufacturer: 껅㱥懰騹٨ᾒ㛕ㄭ㎆깭ⶔ⹅꽥醐ᜌꞄ듉縊ꇫ凡垔悕鞑썞튧⯸屾렎뚙誟அ畳퀢䢋숥旟褃⃶㐸怜箧쒐췄숒탵銩氃杁ᖃಶᥗ߷䋻秔Ȋ⦔锈룐醆셿͍莢㴄䱊ଫ迂䎂 [ 752.276419][ T399] usb 2-1: SerialNumber: 〥㕙띕뼒Ꙃꢯ咠踗ᶭ吖ᆙ鸚⥻搴ﵹ᥀䀀ᑾၵ㟜ԇ닡积䑈扊ᶴ⛃慻냥扮项 [ 752.292522][ T5907] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 752.461003][ T5981] overlayfs: conflicting options: nfs_export=on,index=off [ 752.483613][ T5983] overlayfs: conflicting options: userxattr,redirect_dir=on [ 752.514933][ T5907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.525702][ T5907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.535505][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 752.535525][ T36] audit: type=1400 audit(2016781960.185:29131): avc: granted { setsecparam } for pid=5906 comm="syz.1.12998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 752.535523][ T5907] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5907 comm=syz.1.12998 [ 752.591531][ T399] zaurus 2-1:5.255: skipping garbage [ 752.598669][ T399] usb 2-1: bad CDC descriptors [ 752.638406][ T399] usb 2-1: USB disconnect, device number 46 [ 753.017247][ T893] usb 1-1: USB disconnect, device number 76 [ 753.035027][ T6005] rust_binder: Read failure Err(EAGAIN) in pid:243 [ 753.204914][ T36] audit: type=1400 audit(2016781960.823:29132): avc: denied { execheap } for pid=6020 comm="syz.1.13037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 753.464300][ T893] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 753.625229][ T893] usb 1-1: No LPM exit latency info found, disabling LPM. [ 753.633280][ T893] usb 1-1: config 64 has an invalid interface number: 174 but max is 2 [ 753.641740][ T893] usb 1-1: config 64 has an invalid interface number: 252 but max is 2 [ 753.650250][ T893] usb 1-1: config 64 has an invalid interface descriptor of length 2, skipping [ 753.659280][ T893] usb 1-1: config 64 has an invalid interface number: 140 but max is 2 [ 753.667587][ T893] usb 1-1: config 64 has no interface number 0 [ 753.673764][ T893] usb 1-1: config 64 has no interface number 1 [ 753.679980][ T893] usb 1-1: config 64 has no interface number 2 [ 753.686203][ T893] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 753.697365][ T893] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 753.708442][ T893] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 753.718724][ T893] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 753.729937][ T893] usb 1-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 753.740753][ T893] usb 1-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 753.751748][ T893] usb 1-1: config 64 interface 174 has no altsetting 0 [ 753.758643][ T893] usb 1-1: config 64 interface 252 has no altsetting 0 [ 753.765583][ T893] usb 1-1: config 64 interface 140 has no altsetting 0 [ 753.774555][ T893] usb 1-1: string descriptor 0 read error: -22 [ 753.780763][ T893] usb 1-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 753.789848][ T893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.800085][ T893] usb-storage 1-1:64.174: USB Mass Storage device detected [ 753.849910][ T893] usb-storage 1-1:64.252: USB Mass Storage device detected [ 753.882153][ T893] usb-storage 1-1:64.140: USB Mass Storage device detected [ 754.016689][ T399] usb 1-1: USB disconnect, device number 77 [ 754.082243][ T6035] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13040'. [ 754.092356][ T6035] rust_binder: Error while translating object. [ 754.092388][ T6035] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 754.098687][ T6035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 754.157612][ T6042] fuse: Bad value for 'fd' [ 754.205276][ T6053] 9pnet_fd: Insufficient options for proto=fd [ 754.211665][ T6052] 9pnet_fd: Insufficient options for proto=fd [ 754.243857][ T6057] /dev/rnullb0: Can't open blockdev [ 754.817935][ T893] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 754.977808][ T893] usb 1-1: Using ep0 maxpacket: 16 [ 754.984051][ T893] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 754.992377][ T893] usb 1-1: config 0 has no interface number 0 [ 754.998530][ T893] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 755.008490][ T893] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 755.018928][ T893] usb 1-1: config 0 interface 41 has no altsetting 0 [ 755.027182][ T893] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 755.036329][ T893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.044454][ T893] usb 1-1: Product: syz [ 755.048662][ T893] usb 1-1: Manufacturer: syz [ 755.053344][ T893] usb 1-1: SerialNumber: syz [ 755.058972][ T893] usb 1-1: config 0 descriptor?? [ 755.064291][ T6071] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 755.071474][ T6071] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 755.293182][ T6071] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 755.300567][ T6071] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 755.345166][ T6080] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 755.345201][ T6080] rust_binder: Error while translating object. [ 755.354035][ T6080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 755.360322][ T6080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235 [ 755.522318][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.540234][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.550063][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.558890][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.567981][ T893] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 755.579408][ T893] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 755.590373][ T893] usb 1-1: USB disconnect, device number 78 [ 756.225694][ T6095] rust_binder: Write failure EINVAL in pid:241 [ 756.374127][ T399] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 756.405977][ T6114] bridge0: entered allmulticast mode [ 756.443655][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13070'. [ 756.558604][ T399] usb 1-1: Using ep0 maxpacket: 8 [ 756.571894][ T399] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 756.587314][ T399] usb 1-1: config 179 has no interface number 0 [ 756.595878][ T399] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 756.610195][ T399] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 756.621665][ T399] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 756.631806][ T399] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 756.645132][ T399] usb 1-1: config 179 interface 65 has no altsetting 0 [ 756.652168][ T399] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 756.661214][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.684350][ T36] audit: type=1400 audit(2016781964.088:29133): avc: denied { accept } for pid=6149 comm="syz.1.13082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 756.894054][ T399] usb 1-1: USB disconnect, device number 79 [ 756.933617][ T6159] serio: Serial port ptm0 [ 756.938062][ T6160] netlink: 'syz.0.13085': attribute type 4 has an invalid length. [ 756.945976][ T6160] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13085'. [ 757.208217][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13090'. [ 757.238024][ T6184] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 757.383154][ T36] audit: type=1400 audit(2016781964.736:29134): avc: denied { execute } for pid=6203 comm="syz.1.13099" path="/memory.events.local" dev="ramfs" ino=135391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 758.198834][ T6226] rust_binder: Write failure EFAULT in pid:283 [ 759.297219][ T6246] overlayfs: failed to clone upperpath [ 759.374033][ T6254] fuse: Bad value for 'rootmode' [ 759.486284][ T6271] netlink: 'syz.1.13125': attribute type 1 has an invalid length. [ 759.507770][ T661] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 759.678335][ T661] usb 1-1: Using ep0 maxpacket: 16 [ 759.685058][ T661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.696360][ T661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.713670][ T661] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 759.733941][ T661] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 759.765870][ T661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.785801][ T661] usb 1-1: config 0 descriptor?? [ 760.244777][ T661] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.002D/input/input65 [ 760.279304][ T661] appleir 0003:05AC:8241.002D: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 760.333602][ T661] usb 1-1: USB disconnect, device number 80 [ 760.580489][ T36] audit: type=1326 audit(2016781967.738:29135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.7.13140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c2638eec9 code=0x0 [ 760.655615][ T6299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 760.655702][ T6299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299 [ 760.709215][ T6330] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 760.718496][ T6330] rust_binder: Error while translating object. [ 760.727659][ T6330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 760.734207][ T6330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 760.810453][ T36] audit: type=1400 audit(2016781967.963:29136): avc: denied { append } for pid=6354 comm="syz.0.13153" name="pfkey" dev="proc" ino=4026532866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 760.880920][ T6360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:319 [ 760.967768][ T6362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:321 [ 761.298434][ T661] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 761.470330][ T661] usb 1-1: Using ep0 maxpacket: 16 [ 761.478459][ T661] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.488790][ T661] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 761.499287][ T661] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 761.508399][ T661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.516447][ T661] usb 1-1: Product: syz [ 761.520627][ T661] usb 1-1: Manufacturer: syz [ 761.525261][ T661] usb 1-1: SerialNumber: syz [ 761.753057][ T661] usb 1-1: USB disconnect, device number 81 [ 762.108519][ T661] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 762.269481][ T661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.279526][ T661] usb 1-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 762.288915][ T661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.305203][ T661] usb 1-1: config 0 descriptor?? [ 762.717906][ T6424] netlink: 'syz.7.13176': attribute type 16 has an invalid length. [ 762.725923][ T6424] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.13176'. [ 762.742600][ T661] sony 0003:12BA:0100.002E: hidraw0: USB HID v0.07 Device [HID 12ba:0100] on usb-dummy_hcd.0-1/input0 [ 762.755067][ T661] sony 0003:12BA:0100.002E: failed to claim input [ 762.945438][ T6431] netlink: 'syz.1.13178': attribute type 1 has an invalid length. [ 762.953389][ T6431] netlink: 'syz.1.13178': attribute type 2 has an invalid length. [ 762.969348][ T6381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6381 comm=syz.0.13161 [ 762.991523][ T6381] netlink: 'syz.0.13161': attribute type 6 has an invalid length. [ 763.088578][ T6446] overlayfs: failed to clone upperpath [ 763.321559][ T661] usb 1-1: USB disconnect, device number 82 [ 763.941808][ T661] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 764.101663][ T661] usb 1-1: Invalid ep0 maxpacket: 64 [ 764.223064][ T6461] netlink: 'syz.7.13187': attribute type 16 has an invalid length. [ 764.231076][ T6461] netlink: 'syz.7.13187': attribute type 4 has an invalid length. [ 764.238982][ T6461] netlink: 64094 bytes leftover after parsing attributes in process `syz.7.13187'. [ 764.248385][ T661] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 764.248692][ T6461] overlayfs: empty lowerdir [ 764.256216][ T6462] overlayfs: empty lowerdir [ 764.331033][ T6468] 9pnet_fd: Insufficient options for proto=fd [ 764.421427][ T661] usb 1-1: Invalid ep0 maxpacket: 64 [ 764.426878][ T661] usb usb1-port1: attempt power cycle [ 764.779218][ T6482] >: renamed from veth0_vlan (while UP) [ 764.794520][ T661] usb 1-1: new low-speed USB device number 85 using dummy_hcd [ 764.800223][ T6484] 9pnet_fd: Insufficient options for proto=fd [ 764.816213][ T661] usb 1-1: Invalid ep0 maxpacket: 64 [ 764.919667][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13199'. [ 764.928738][ T6492] erspan0: default FDB implementation only supports local addresses [ 764.954426][ T661] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 764.976222][ T661] usb 1-1: Invalid ep0 maxpacket: 64 [ 764.981821][ T661] usb usb1-port1: unable to enumerate USB device [ 764.984379][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13201'. [ 765.385787][ T6521] fuse: Bad value for 'fd' [ 765.486884][ T6530] netlink: 328 bytes leftover after parsing attributes in process `syz.1.13210'. [ 765.567084][ T6544] 9pnet_fd: Insufficient options for proto=fd [ 765.660906][ T6559] netlink: 'syz.1.13221': attribute type 4 has an invalid length. [ 765.692693][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13223'. [ 766.033445][ T6579] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13227'. [ 766.245977][ T6593] /dev/loop0: Can't lookup blockdev [ 766.264755][ T6593] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13233'. [ 766.331094][ T36] audit: type=1400 audit(2016781973.142:29137): avc: denied { mount } for pid=6603 comm="syz.1.13237" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 766.903399][ T6614] overlayfs: option "workdir=./file0/../file0" is useless in a non-upper mount, ignore [ 766.913234][ T6614] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 766.924925][ T6614] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 766.955144][ T6622] netlink: 'syz.0.13243': attribute type 13 has an invalid length. [ 767.076118][ T6656] __vm_enough_memory: pid: 6656, comm: syz.0.13253, bytes: 18014402804453376 not enough memory for the allocation [ 767.082566][ T6664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6664 comm=syz.7.13258 [ 767.118182][ T6669] netlink: 'syz.7.13260': attribute type 1 has an invalid length. [ 767.127595][ T36] audit: type=1400 audit(2016781973.883:29138): avc: denied { remove_name } for pid=6670 comm="syz.0.13261" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 767.151258][ T36] audit: type=1400 audit(2016781973.883:29139): avc: denied { unlink } for pid=6670 comm="syz.0.13261" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 767.652143][ T6682] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13266'. [ 767.669124][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13266'. [ 767.701329][ T6687] tc_dump_action: action bad kind [ 767.800164][ T6709] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 767.823278][ T36] audit: type=1326 audit(2016781974.540:29140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.2.13281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x7ffc0000 [ 767.847329][ T36] audit: type=1326 audit(2016781974.540:29141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.2.13281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7e9d8eec9 code=0x7ffc0000 [ 767.874695][ T36] audit: type=1326 audit(2016781974.540:29142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.2.13281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e9d8eec9 code=0x7ffc0000 [ 767.899439][ T36] audit: type=1326 audit(2016781974.540:29143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.2.13281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7e9d90de7 code=0x7ffc0000 [ 767.923627][ T36] audit: type=1326 audit(2016781974.540:29144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.2.13281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff7e9d90d5c code=0x7ffc0000 [ 767.947462][ T36] audit: type=1326 audit(2016781974.540:29145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.2.13281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff7e9d90c94 code=0x7ffc0000 [ 767.949483][ T331] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 767.971498][ T36] audit: type=1326 audit(2016781974.540:29146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.2.13281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff7e9d90c94 code=0x7ffc0000 [ 767.980268][ T6721] overlayfs: failed to clone lowerpath [ 768.163820][ T331] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 768.175563][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 768.186876][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 768.196890][ T331] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 768.210169][ T331] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 768.219501][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.228704][ T331] usb 1-1: config 0 descriptor?? [ 768.515713][ T6754] cgroup: Invalid name [ 768.547811][ T6761] overlayfs: failed to clone upperpath [ 768.648842][ T6768] netlink: 5 bytes leftover after parsing attributes in process `syz.1.13297'. [ 768.668806][ T331] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 768.677281][ T331] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 768.686580][ T331] plantronics 0003:047F:FFFF.002F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 768.963177][ T6684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 768.963213][ T6684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 768.973747][ T331] usb 1-1: USB disconnect, device number 87 [ 769.102115][ T6783] fuseblk: Bad value for 'fd' [ 769.548623][ T6787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=6787 comm=syz.0.13302 [ 769.720988][ T6802] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 769.721016][ T6802] rust_binder: Error while translating object. [ 769.740315][ T6802] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 769.757385][ T6802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:369 [ 769.855046][ T6817] binder: Bad value for 'defcontext' [ 769.903170][ T6824] syz.0.13316: attempt to access beyond end of device [ 769.903170][ T6824] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 769.916538][ T6824] EXT4-fs (loop0): unable to read superblock [ 770.230441][ T331] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 770.394859][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 770.405943][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 253, changing to 7 [ 770.422422][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 25696, setting to 1024 [ 770.445196][ T331] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 770.464905][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.472981][ T331] usb 1-1: Product: syz [ 770.486222][ T331] usb 1-1: Manufacturer: syz [ 770.490872][ T331] usb 1-1: SerialNumber: syz [ 770.508710][ T331] usb 1-1: config 0 descriptor?? [ 770.516793][ T331] usb 1-1: 0:0 : invalid sync pipe. bmAttributes b9, bLength 9, bSynchAddress 64 [ 770.749548][ T331] usb 1-1: USB disconnect, device number 88 [ 770.767998][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 771.302345][ T6841] /dev/rnullb0: Can't open blockdev [ 771.326799][ T6843] /dev/rnullb0: Can't open blockdev [ 771.600583][ T6860] devpts: called with bogus options [ 771.929831][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 771.929851][ T36] audit: type=1326 audit(727.252:29159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.7.13331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c2638eec9 code=0x0 [ 771.967319][ T6870] overlayfs: failed to clone lowerpath [ 772.830575][ T6895] netlink: 124 bytes leftover after parsing attributes in process `syz.0.13339'. [ 773.059897][ T6926] bpf: Bad value for 'mode' [ 773.681954][ T6950] netlink: 'syz.7.13355': attribute type 1 has an invalid length. [ 773.690510][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13355'. [ 773.701024][ T6950] netlink: 104 bytes leftover after parsing attributes in process `syz.7.13355'. [ 774.057747][ T6964] devpts: called with bogus options [ 774.064012][ T6964] netlink: 'syz.1.13360': attribute type 7 has an invalid length. [ 774.072222][ T6964] netlink: 'syz.1.13360': attribute type 5 has an invalid length. [ 774.080200][ T6964] netlink: 17 bytes leftover after parsing attributes in process `syz.1.13360'. [ 774.129225][ T6973] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 774.143393][ T6973] overlayfs: missing 'lowerdir' [ 774.366020][ T399] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 774.470898][ T7017] 9pnet_fd: Insufficient options for proto=fd [ 774.548326][ T399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.559487][ T399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.569523][ T399] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 774.582761][ T399] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 774.592053][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.601254][ T399] usb 1-1: config 0 descriptor?? [ 774.823424][ T399] pantherlord 0003:0810:0002.0030: unknown main item tag 0x1 [ 774.833105][ T399] pantherlord 0003:0810:0002.0030: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.0-1/input0 [ 774.855729][ T399] pantherlord 0003:0810:0002.0030: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 775.035489][ T331] usb 1-1: USB disconnect, device number 89 [ 775.121991][ T7030] syz.1.13382: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 775.136998][ T7030] CPU: 1 UID: 0 PID: 7030 Comm: syz.1.13382 Not tainted syzkaller #0 658fd523d4664e50339751640158cdc1077a64d7 [ 775.137035][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 775.137053][ T7030] Call Trace: [ 775.137061][ T7030] [ 775.137072][ T7030] __dump_stack+0x21/0x30 [ 775.137114][ T7030] dump_stack_lvl+0x10c/0x190 [ 775.137148][ T7030] ? __cfi_dump_stack_lvl+0x10/0x10 [ 775.137182][ T7030] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 775.137215][ T7030] dump_stack+0x19/0x20 [ 775.137264][ T7030] warn_alloc+0x1bc/0x2a0 [ 775.137299][ T7030] ? stack_depot_save_flags+0x38/0x800 [ 775.137328][ T7030] ? __cfi_warn_alloc+0x10/0x10 [ 775.137362][ T7030] ? kasan_save_track+0x4f/0x80 [ 775.137388][ T7030] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 775.137414][ T7030] ? xskq_create+0x68/0x2a0 [ 775.137439][ T7030] ? xsk_init_queue+0xb6/0x120 [ 775.137483][ T7030] ? xsk_setsockopt+0x43f/0x6f0 [ 775.137514][ T7030] ? do_sock_setsockopt+0x26a/0x400 [ 775.137544][ T7030] ? __x64_sys_setsockopt+0x1b8/0x250 [ 775.137566][ T7030] ? x64_sys_call+0x2adc/0x2ee0 [ 775.137591][ T7030] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 775.137619][ T7030] __vmalloc_node_range_noprof+0x135/0x1420 [ 775.137648][ T7030] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 775.137685][ T7030] ? avc_has_perm+0x144/0x220 [ 775.137709][ T7030] ? kasan_save_alloc_info+0x40/0x50 [ 775.137733][ T7030] ? __kasan_kmalloc+0x96/0xb0 [ 775.137752][ T7030] vmalloc_user_noprof+0x77/0x90 [ 775.137776][ T7030] ? xskq_create+0xdb/0x2a0 [ 775.137799][ T7030] xskq_create+0xdb/0x2a0 [ 775.137822][ T7030] xsk_init_queue+0xb6/0x120 [ 775.137844][ T7030] xsk_setsockopt+0x43f/0x6f0 [ 775.137865][ T7030] ? __cfi_xsk_setsockopt+0x10/0x10 [ 775.137887][ T7030] ? do_futex+0x309/0x500 [ 775.137904][ T7030] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 775.137925][ T7030] ? security_socket_setsockopt+0x33/0xd0 [ 775.137942][ T7030] ? __cfi_xsk_setsockopt+0x10/0x10 [ 775.137964][ T7030] do_sock_setsockopt+0x26a/0x400 [ 775.137986][ T7030] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 775.138018][ T7030] __x64_sys_setsockopt+0x1b8/0x250 [ 775.138051][ T7030] x64_sys_call+0x2adc/0x2ee0 [ 775.138080][ T7030] do_syscall_64+0x58/0xf0 [ 775.138099][ T7030] ? clear_bhb_loop+0x50/0xa0 [ 775.138116][ T7030] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 775.138142][ T7030] RIP: 0033:0x7f613d38eec9 [ 775.138157][ T7030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.138172][ T7030] RSP: 002b:00007f613e2e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 775.138190][ T7030] RAX: ffffffffffffffda RBX: 00007f613d5e5fa0 RCX: 00007f613d38eec9 [ 775.138203][ T7030] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 775.138214][ T7030] RBP: 00007f613d411f91 R08: 0000000000000004 R09: 0000000000000000 [ 775.138225][ T7030] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.138237][ T7030] R13: 00007f613d5e6038 R14: 00007f613d5e5fa0 R15: 00007ffe59fa92c8 [ 775.138261][ T7030] [ 775.138527][ T7030] Mem-Info: [ 775.176806][ T7031] devpts: called with bogus options [ 775.180832][ T7030] active_anon:44872 inactive_anon:782 isolated_anon:0 [ 775.180832][ T7030] active_file:10653 inactive_file:17107 isolated_file:0 [ 775.180832][ T7030] unevictable:16449 dirty:100 writeback:0 [ 775.180832][ T7030] slab_reclaimable:5695 slab_unreclaimable:98430 [ 775.180832][ T7030] mapped:40201 shmem:34727 pagetables:1514 [ 775.180832][ T7030] sec_pagetables:0 bounce:0 [ 775.180832][ T7030] kernel_misc_reclaimable:0 [ 775.180832][ T7030] free:1391628 free_pcp:2499 free_cma:0 [ 775.499191][ T7030] Node 0 active_anon:179572kB inactive_anon:3128kB active_file:42612kB inactive_file:68428kB unevictable:65796kB isolated(anon):0kB isolated(file):0kB mapped:160756kB dirty:400kB writeback:0kB shmem:138908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8516kB pagetables:6048kB sec_pagetables:0kB all_unreclaimable? no [ 775.541915][ T7030] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:68kB free_cma:0kB [ 775.555754][ T7046] overlayfs: failed to clone lowerpath [ 775.572414][ T7030] lowmem_reserve[]: 0 3921 3921 [ 775.601733][ T7048] rust_binder: Error while translating object. [ 775.601763][ T7048] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 775.606400][ T7030] Normal free:2605772kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:179428kB inactive_anon:3128kB active_file:42612kB inactive_file:68428kB unevictable:65796kB writepending:400kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:5980kB local_pcp:2848kB free_cma:0kB [ 775.608297][ T7048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:437 [ 775.633786][ T7030] lowmem_reserve[]: 0 0 0 [ 775.663742][ T7030] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 775.679420][ T7030] Normal: 872*4kB (UME) 1503*8kB (UME) 718*16kB (UME) 675*32kB (UE) 80*64kB (UME) 47*128kB (UME) 100*256kB (UME) 66*512kB (UME) 62*1024kB (UME) 23*2048kB (UME) 580*4096kB (UM) = 2605400kB [ 775.706587][ T7030] 81023 total pagecache pages [ 775.723359][ T7030] 991 pages in swap cache [ 775.728058][ T7030] Free swap = 120400kB [ 775.732614][ T7030] Total swap = 124996kB [ 775.736915][ T7030] 2097051 pages RAM [ 775.740822][ T7030] 0 pages HighMem/MovableOnly [ 775.745817][ T7030] 351537 pages reserved [ 775.750034][ T7030] 0 pages cma reserved [ 775.757414][ T7030] Memory allocations: [ 775.761506][ T7030] 0 B 0 init/main.c:1370 func:do_initcalls [ 775.769103][ T7030] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 775.777527][ T7030] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 775.785532][ T7030] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 775.793528][ T7030] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 775.801862][ T7030] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 775.810777][ T7030] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 775.818869][ T7030] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 775.826880][ T7030] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 775.834921][ T7030] 0 B 0 init/initramfs.c:101 func:find_link [ 775.911599][ T7071] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 777.027279][ T7109] overlayfs: unescaped trailing colons in lowerdir mount option. [ 777.488199][ T7117] 9pnet_fd: Insufficient options for proto=fd [ 777.643588][ T7142] 9pnet_fd: Insufficient options for proto=fd [ 777.674735][ T7153] 9pnet_fd: Insufficient options for proto=fd [ 778.291000][ T7174] overlayfs: failed to clone upperpath [ 778.306576][ T7178] netlink: 'syz.7.13430': attribute type 4 has an invalid length. [ 778.359833][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13432'. [ 778.398555][ T7195] overlayfs: missing 'lowerdir' [ 778.417284][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13438'. [ 778.427310][ T7199] 9pnet_fd: Insufficient options for proto=fd [ 779.062394][ T7249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7249 comm=syz.2.13454 [ 779.109494][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.115760][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.122566][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.128807][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.135098][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.141402][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.147590][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.153864][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.160070][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.166341][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.172492][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.178758][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.184984][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.191174][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.197388][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.203622][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.211593][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.217907][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.224094][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.230422][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.236623][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.242825][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.249044][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.255200][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.261410][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.267592][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.273830][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.280112][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.286889][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.293126][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.299562][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.310885][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.313482][ T7268] devpts: called with bogus options [ 779.317177][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 779.966555][ T7310] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13467'. [ 780.333373][ T7343] netlink: 9 bytes leftover after parsing attributes in process `syz.1.13479'. [ 780.342878][ T7343] gretap0: entered promiscuous mode [ 780.434927][ T36] audit: type=1400 audit(735.226:29160): avc: denied { create } for pid=7327 comm="syz.2.13474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 780.547264][ T7373] netlink: 'syz.7.13489': attribute type 20 has an invalid length. [ 780.678219][ T7381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13492'. [ 781.490410][ T7430] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=7430 comm=syz.7.13503 [ 782.912381][ T7495] 9pnet_fd: Insufficient options for proto=fd [ 783.032011][ T36] audit: type=1400 audit(737.667:29161): avc: denied { listen } for pid=7509 comm="syz.7.13535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 783.068773][ T7516] overlayfs: failed to clone lowerpath [ 783.244392][ T7557] overlayfs: failed to clone upperpath [ 783.902920][ T7582] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7582 comm=syz.2.13558 [ 784.188863][ T7615] 9pnet_fd: Insufficient options for proto=fd [ 784.589662][ T36] audit: type=1326 audit(739.131:29162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7633 comm="syz.0.13575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc569d8eec9 code=0x7fc00000 [ 784.719955][ T7645] netlink: 'syz.0.13578': attribute type 15 has an invalid length. [ 784.730676][ T36] audit: type=1326 audit(739.262:29163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.0.13578" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc569d8eec9 code=0x0 [ 785.048783][ T7654] ip6gretap0: mtu less than device minimum [ 785.070749][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13582'. [ 785.418869][ T7678] .N: renamed from veth0_to_bond (while UP) [ 785.423475][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13591'. [ 785.711734][ T7702] 9pnet_fd: Insufficient options for proto=fd [ 786.232318][ T7724] overlayfs: failed to clone lowerpath [ 786.374469][ T7745] fuseblk: Bad value for 'fd' [ 786.382913][ T7746] fuseblk: Bad value for 'fd' [ 787.795947][ T36] audit: type=1326 audit(742.133:29164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.7.13638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c2638eec9 code=0x0 [ 788.012720][ T7812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13639'. [ 789.367520][ T7849] cgroup: Invalid name [ 868.919984][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 936.813478][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 153s! [syz.1.13650:7845] [ 936.813521][ C1] CPU#1 Utilization every 22s during lockup: [ 936.813531][ C1] #1: 100% system, 1% softirq, 1% hardirq, 0% idle [ 936.813547][ C1] #2: 100% system, 1% softirq, 1% hardirq, 0% idle [ 936.813562][ C1] #3: 100% system, 0% softirq, 1% hardirq, 0% idle [ 936.813576][ C1] #4: 100% system, 1% softirq, 1% hardirq, 0% idle [ 936.813590][ C1] #5: 100% system, 1% softirq, 1% hardirq, 0% idle [ 936.813605][ C1] Modules linked in: [ 936.813620][ C1] CPU: 1 UID: 0 PID: 7845 Comm: syz.1.13650 Not tainted syzkaller #0 658fd523d4664e50339751640158cdc1077a64d7 [ 936.813644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 936.813656][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x697/0xcc0 [ 936.813690][ C1] Code: 01 00 00 c6 03 01 bb 00 80 ff ff 66 c7 84 24 90 00 00 00 00 01 48 8b 44 24 28 42 0f b6 04 30 84 c0 75 4c 80 3f 00 74 08 f3 90 c3 75 dd eb 59 be 02 00 00 00 e8 69 05 4d fc 48 8d bc 24 90 00 [ 936.813705][ C1] RSP: 0018:ffffc900068f7ac0 EFLAGS: 00000206 [ 936.813720][ C1] RAX: 0000000000000000 RBX: 00000000ffff9f24 RCX: ffff88812adf0000 [ 936.813733][ C1] RDX: ffff8881f6f50a54 RSI: 0000000000000003 RDI: ffffffff8720d604 [ 936.813745][ C1] RBP: ffffc900068f7bd0 R08: ffffffff8720d604 R09: 1ffffffff0e41ac0 [ 936.813758][ C1] R10: dffffc0000000000 R11: fffffbfff0e41ac1 R12: 0000000000000000 [ 936.813771][ C1] R13: 1ffffffff0e5cd9d R14: dffffc0000000000 R15: 1ffffffff0e41ac0 [ 936.813784][ C1] FS: 000055557d3f9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 936.813799][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.813822][ C1] CR2: 00005578c85b5df0 CR3: 0000000136fac000 CR4: 00000000003526b0 [ 936.813839][ C1] Call Trace: [ 936.813846][ C1] [ 936.813858][ C1] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 936.813883][ C1] ? locks_remove_file+0x346/0x1000 [ 936.813902][ C1] _raw_spin_lock+0x109/0x120 [ 936.813921][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 936.813941][ C1] mntput_no_expire+0x147/0x6c0 [ 936.813963][ C1] ? __cfi_lockref_put_return+0x10/0x10 [ 936.813987][ C1] ? mntput+0xd0/0xd0 [ 936.814007][ C1] ? __kasan_check_write+0x18/0x20 [ 936.814031][ C1] mntput+0x63/0xd0 [ 936.814052][ C1] __fput+0x5c5/0xa00 [ 936.814071][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 936.814092][ C1] ____fput+0x20/0x30 [ 936.814110][ C1] task_work_run+0x1e0/0x250 [ 936.814130][ C1] ? __cfi_task_work_run+0x10/0x10 [ 936.814149][ C1] ? __kasan_check_write+0x18/0x20 [ 936.814175][ C1] resume_user_mode_work+0x36/0x50 [ 936.814195][ C1] syscall_exit_to_user_mode+0x64/0xb0 [ 936.814212][ C1] do_syscall_64+0x64/0xf0 [ 936.814231][ C1] ? clear_bhb_loop+0x50/0xa0 [ 936.814248][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 936.814276][ C1] RIP: 0033:0x7f613d38eec9 [ 936.814291][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.814305][ C1] RSP: 002b:00007ffe59fa9428 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 936.814322][ C1] RAX: 0000000000000000 RBX: 00007f613d5e7da0 RCX: 00007f613d38eec9 [ 936.814334][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 936.814345][ C1] RBP: 00007f613d5e7da0 R08: 0000000000000228 R09: 0000001e59fa971f [ 936.814357][ C1] R10: 00007f613d5e7cb0 R11: 0000000000000246 R12: 00000000000b5b2a [ 936.814368][ C1] R13: 00007f613d5e6090 R14: ffffffffffffffff R15: 00007ffe59fa9540 [ 936.814383][ C1] [ 936.814391][ C1] Sending NMI from CPU 1 to CPUs 0: [ 937.171440][ C0] NMI backtrace for cpu 0 [ 937.171456][ C0] CPU: 0 UID: 0 PID: 7803 Comm: syz.2.13634 Not tainted syzkaller #0 658fd523d4664e50339751640158cdc1077a64d7 [ 937.171478][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 937.171489][ C0] RIP: 0010:change_mnt_propagation+0x13c/0xb00 [ 937.171519][ C0] Code: 49 81 c4 d8 00 00 00 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 48 4e e7 ff 4d 8b 24 24 <49> 01 dc 4c 3b 65 c8 74 66 e8 76 fa 90 ff eb 99 4d 8d 7d 30 48 89 [ 937.171533][ C0] RSP: 0018:ffffc9000674f9c0 EFLAGS: 00000246 [ 937.171549][ C0] RAX: 1ffff11023380f2b RBX: ffffffffffffff28 RCX: dffffc0000000000 [ 937.171562][ C0] RDX: ffffc9001c69e000 RSI: 000000000007ffff RDI: 0000000000080000 [ 937.171573][ C0] RBP: ffffc9000674fa10 R08: ffff8881548c666f R09: 0000000000000000 [ 937.171584][ C0] R10: ffff8881548c6660 R11: ffffed102a918cce R12: ffff888119c067d8 [ 937.171596][ C0] R13: ffff888110404000 R14: ffff888119c078a0 R15: ffff88812f7b48c0 [ 937.171608][ C0] FS: 00007ff7eab6f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 937.171622][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.171633][ C0] CR2: 0000000000000000 CR3: 000000014721e000 CR4: 00000000003526b0 [ 937.171646][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 937.171657][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 937.171668][ C0] Call Trace: [ 937.171674][ C0] [ 937.171684][ C0] umount_tree+0xdfd/0xf70 [ 937.171705][ C0] ? irqentry_exit+0x4a/0x60 [ 937.171720][ C0] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 937.171742][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 937.171758][ C0] ? __detach_mounts+0x610/0x610 [ 937.171779][ C0] attach_recursive_mnt+0x6df/0x21e0 [ 937.171798][ C0] ? __asan_memset+0x39/0x50 [ 937.171821][ C0] ? graft_tree+0x1c0/0x1c0 [ 937.171836][ C0] ? clone_mnt+0xa27/0xc80 [ 937.171856][ C0] graft_tree+0x157/0x1c0 [ 937.171872][ C0] do_loopback+0x364/0x4b0 [ 937.171894][ C0] ? path_mount+0x1050/0x1050 [ 937.171915][ C0] ? security_capable+0xcf/0xf0 [ 937.171936][ C0] ? ns_capable+0x91/0xf0 [ 937.171957][ C0] path_mount+0x582/0x1050 [ 937.171978][ C0] ? putname+0x113/0x150 [ 937.171994][ C0] __se_sys_mount+0x2bd/0x480 [ 937.172008][ C0] ? __x64_sys_mount+0xf0/0xf0 [ 937.172022][ C0] ? __kasan_check_write+0x18/0x20 [ 937.172043][ C0] ? fpregs_restore_userregs+0x11d/0x260 [ 937.172062][ C0] __x64_sys_mount+0xc3/0xf0 [ 937.172075][ C0] x64_sys_call+0x2021/0x2ee0 [ 937.172098][ C0] do_syscall_64+0x58/0xf0 [ 937.172115][ C0] ? clear_bhb_loop+0x50/0xa0 [ 937.172130][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 937.172153][ C0] RIP: 0033:0x7ff7e9d8eec9 [ 937.172166][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.172179][ C0] RSP: 002b:00007ff7eab6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 937.172193][ C0] RAX: ffffffffffffffda RBX: 00007ff7e9fe6180 RCX: 00007ff7e9d8eec9 [ 937.172204][ C0] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000 [ 937.172215][ C0] RBP: 00007ff7e9e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 937.172224][ C0] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000000 [ 937.172234][ C0] R13: 00007ff7e9fe6218 R14: 00007ff7e9fe6180 R15: 00007ffd8845c458 [ 937.172247][ C0]