last executing test programs: 3m33.994289133s ago: executing program 32 (id=292): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e457bae75"], 0x15) r3 = dup(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 2m16.956014505s ago: executing program 2 (id=1351): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x6c, 0x20000) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0xffffe000) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') r2 = dup3(r0, r0, 0x0) mlockall(0x7) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 2m16.902341715s ago: executing program 2 (id=1352): ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x5) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)={0x1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f0000004100)={0x90, 0x0, r2, {0x6, 0x2, 0x2, 0x6, 0x2, 0x6, {0x5, 0x4, 0x0, 0x8000000000000000, 0x70430000, 0xe3d, 0x30f1, 0x8, 0xc, 0x0, 0x3a, r3, 0x0, 0x84, 0x3ff}}}, 0x90) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000041c0), 0x280101, 0x0) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000004200), 0x4) sendmsg$key(r4, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000004240)={0x2, 0x9, 0x6, 0x9, 0x5, 0x0, 0x70bd25, 0x41, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd2d, 0x3504}]}, 0x28}}, 0x4805) r5 = socket$key(0xf, 0x3, 0x2) r6 = getpid() ptrace$getregset(0x4204, r6, 0x3, &(0x7f0000004340)={&(0x7f0000004300)=""/35, 0x23}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0xde3, &(0x7f0000004380)=0x0) r9 = eventfd(0xfffffff8) io_submit(r8, 0xa, &(0x7f0000005b40)=[&(0x7f0000004400)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f00000043c0)="e71f0accd2122377af8de8e0d1cc9b11dd85b7c36b8e2baab594cbf05167c958d0092f1c2a", 0x25, 0xd, 0x0, 0x1}, &(0x7f00000044c0)={0x0, 0x0, 0x0, 0x5, 0xc4, r0, &(0x7f0000004440)="cc6cd9729c938f45250ae8d394a9e81bed986a7a38c0e0a14fba635a94522f637fbcfbcdc08399f4bae4b110144acdf6e73302f55845149d93a31004fcf12cc905d50decbe6475ade32352f695050881203592176adcd7d9e2314cc7cec4b012f1ef6654f7d762c4ea703565886c58226f4c1e3912e69c84f08b7786", 0x7c, 0x5, 0x0, 0x3}, &(0x7f0000004600)={0x0, 0x0, 0x0, 0x3, 0x200, r1, &(0x7f0000004500)="198d1a5e9f8a274772afb1b6aab78abd318c08a744af0212137865985a37660ed929b6b883fbe3d360d5666ec2b6091000a9e797d4f97b75700e8d0ecbb2fff866f0b5a44352696546a2980fcf8a39e8e4cceebd95e1d4a383a6a3b129c890ec15753c814564e68d0c84748c6b97162109907284b6346c1cb8198cfe5917ca56aadc9391ec12c80a9a318ffd9634f5f939eabeee6c5f658d333877c4b6c13f39a23d9eac1d69f0add595d55b71643abeccbaf2909bf629c8b7baac2c7c31b92c3353bcc5dd2dccf33693fce774dbae41afab1716", 0xd4, 0x3}, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0xfffd, r5, &(0x7f0000004640)="501bc03586121ac0304765f0ec3fafe1133fe1c623d93cd3a2af90c8233bacec7a81697ffe5d4ea55c3b9a1561a32742319cc20e", 0x34, 0xef5, 0x0, 0x1, r9}, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x6, 0x9, r5, &(0x7f00000046c0)="f560f8470b088d822ebd15655970c0aa2408fb418a3cdca34b15b14a03636c08927a6a4c0598d95787afe247a409ea623e1fc712f1d37b851a2a04cc", 0x3c, 0x4}, &(0x7f00000047c0)={0x0, 0x0, 0x0, 0xa, 0x4, r0, &(0x7f0000004740)="50cf69424732664a7b91c44e0aeeb78b3994652c2f866feec2a27fc02619d519ccbe36fe9d0e6e42f0f6577cc70a11c06ba6e4d6d5c49b228d6ef9595caf3c48e94c41feb4", 0x45, 0x2, 0x0, 0x2}, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x6, 0x2ef1, r7, &(0x7f0000004800)="41da142a12407159cb43e9ce840be5a7f337d0ef457b44825f93c2dc40345e851bc511d76a3fbc82580d5338f72ac2b23b8b07b802633270adac4f47487cc800e8d71b5349db808740b9bbb9432de647d297e67868eed30b0d5503a174fe837bbf232d1a258b8d5e3eacdbfe47193db8f2474e", 0x73, 0xde7c, 0x0, 0x1}, &(0x7f0000004980)={0x0, 0x0, 0x0, 0x5, 0x9, r1, &(0x7f00000048c0)="66a3ef187f406539d2ee1db772ab82d115ce29d43febbe08fc5c652cf748fdbd4b99994b3f897ac0fb978b7cc4b2ad5daa49c6a7a89fd1ed8d8c72c044fc7f5913443b62f8d39a5225ba9995517ae69569aaef6287afba93040d333805f251e4d1173848ec9e1662eae87f78a1c6c93a1f274b0fef3303f3fd761fb5f0852c41646b18c17500d11396ed2b08a8811c96b318c0d3f41566d9c941ccdf9aed452885fff2086b2814683e90b39e7b3be8cb4144f89487e822eaf70c902323", 0xbd, 0x0, 0x0, 0x0, r4}, &(0x7f00000059c0)={0x0, 0x0, 0x0, 0x7, 0x81, r4, &(0x7f00000049c0)="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", 0x1000, 0x0, 0x0, 0x3}, &(0x7f0000005b00)={0x0, 0x0, 0x0, 0x8, 0xa, 0xffffffffffffffff, &(0x7f0000005a00)="32ad4c3b79d3ba7ab7a46a93e68991ee9b9f4a21b777cd884532cfe9859d85c4654f1a08c9b9df5a9019d3695d7383ec0371626c6cd0704db57931f917c08e12aa554d8979f013e3a40b443e1ca18f1144b89c19602c8021213d6d0ad13c7af6b47feb3b163191cce7010332741cfca82f493831cb8fb5133d3304baf63a15c995e1330976ee09bdec68e29203e0f3a7d3be9c3bc75168b4791ed6170a6cf13a5623ff4ad00e70deb571bfa9bc4728ffe6a83a5247e37815f779f940339629843c125220e57c8fdb47fdc4f274", 0xcd, 0x81, 0x0, 0x2}]) getsockopt$bt_hci(r7, 0x0, 0x3, &(0x7f0000005bc0)=""/200, &(0x7f0000005cc0)=0xc8) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000005d00)={r4, 0x6, {0x0, 0x0, 0x0, 0x64, 0x4, 0x0, 0x4, 0x6, 0xc, "b592908c2d254ac53664f43d1ecaf407e4192ebf25dc37a882c5aad303200f4822031d8d178f86a2682ce5fe7aab2ece30fca0e0f27f4cbd7b1ff6148e4bdb57", "fc131a32eb29c6a1fed7493a01e0a96d3031854db79c6a0a4998f8127ddaaead3cc2f713edaad57131960db69e3c7c7bfb2b7ff5e6210d9977d7b059fc6a8340", "ca13791bb01d7e58146bedb337c0b1e981a7afd7f0872f0cabb271277cbb150b", [0x5ca1, 0x1]}}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000005e40)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x3}) clock_gettime(0x0, &(0x7f0000005f80)={0x0, 0x0}) io_getevents(r8, 0x1, 0x7, &(0x7f0000005e80)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000005fc0)={r10, r11+60000000}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x20010, r12, 0xc1b55000) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000006000)={0x0, 0x47c3, 0xcad, 0x8238b430449fef5f}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000006400)={r13, 0x5, 0x1, [0x0, 0x81, 0xfffffffffffffff9, 0x1, 0x5], [0xebd1, 0x0, 0xe5, 0x0, 0x1, 0xffffffff, 0xa, 0x7fe, 0x7, 0x6, 0x2, 0x3, 0x3, 0x7, 0x80, 0xfffffffffffffffb, 0x2, 0x8f44, 0x1, 0x57b, 0x6, 0xfffffffffffffe01, 0x9, 0xff, 0x6, 0x1, 0x7, 0x5, 0x3, 0x80, 0x1f50, 0x1, 0x40, 0x9, 0x200, 0x4e66, 0x9, 0x6, 0x1, 0x2, 0x3, 0x0, 0x7, 0x5, 0x6, 0x1800000000000000, 0x3, 0xf4, 0x7fff, 0x401, 0x10, 0x4, 0x1, 0x1, 0x1, 0x9, 0x7, 0x6ae8, 0x4, 0xfffffffffffeffff, 0x4, 0xffffffffffffcb71, 0x9, 0x9, 0x40, 0x7, 0x5, 0x8000000000000001, 0x4, 0x4, 0x80000000, 0xe29, 0x1, 0x9, 0x3, 0x80000000, 0x81, 0x8, 0x9, 0x33eb, 0x2, 0x1, 0x0, 0xd60, 0x3, 0x9, 0x1, 0x3000000000000000, 0x7, 0x8, 0xb, 0xfffffffffffffff9, 0x400, 0x5, 0x7, 0x4, 0x3, 0x2, 0x7, 0xffffffffffffffff, 0x100, 0x1d7, 0x6, 0x2, 0x9, 0x4, 0x9, 0x6, 0x2, 0x2e, 0x0, 0x8000000000000000, 0x9, 0x3, 0x3, 0x3, 0x8, 0x8, 0x100000000, 0x8000000000000000, 0x2]}) clock_gettime(0x0, &(0x7f0000006900)={0x0, 0x0}) pselect6(0x40, &(0x7f0000006840)={0x4, 0x8, 0x9, 0xffff, 0x7, 0x3, 0x6, 0x81}, &(0x7f0000006880)={0x4, 0x8, 0x10, 0xcc000000, 0xf0be, 0x1, 0x7, 0x80000001}, &(0x7f00000068c0)={0xb, 0x29, 0x0, 0x3, 0x1ff, 0x3d4, 0x3, 0xff9}, &(0x7f0000006940)={r14, r15+10000000}, &(0x7f00000069c0)={&(0x7f0000006980)={[0x1]}, 0x8}) read$FUSE(r4, &(0x7f0000006a00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000008a40)={0x28, 0x2, 0x0, {0x2, 0x9, 0xe1}}, 0x28) 2m16.036451879s ago: executing program 2 (id=1368): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x0, 0x1}) 2m16.025780028s ago: executing program 2 (id=1369): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(0x0, 0x182) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4607dc0103f9ffffffffffffff03003e0001100000010100000800ecff3f00000000000000df01200000000000000000003b003800010027000500ff000300000000000000ffffffffffffff7f02000000000000000600000000000000fc0f000000000000b4590008400000000800000000000000"], 0x78) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2a05004, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r0, 0x0, 0x80000000) 2m15.965019029s ago: executing program 2 (id=1370): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) r3 = socket$inet6(0xa, 0x80002, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r3, r4, 0xfffffffffffffc01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x12, 0x0, &(0x7f0000000080)=0x3e) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @remote}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_gettime(r9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b0402, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1395, 0x2}) r11 = epoll_create1(0x80000) close_range(r7, r10, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x6) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r0, &(0x7f0000000000)={0x2000000a}) 2m15.964763709s ago: executing program 2 (id=1371): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xa884) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) sigaltstack(&(0x7f00000000c0)={&(0x7f0000002400)=""/4095, 0x0, 0xfff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 2m15.882441451s ago: executing program 33 (id=1371): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xa884) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) sigaltstack(&(0x7f00000000c0)={&(0x7f0000002400)=""/4095, 0x0, 0xfff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 2m12.581264041s ago: executing program 1 (id=1407): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) syz_io_uring_setup(0x1727, &(0x7f00000002c0)={0x0, 0x7f9d, 0x4000, 0x1, 0xba}, 0x0, 0x0) (async) syz_io_uring_setup(0x1727, &(0x7f00000002c0)={0x0, 0x7f9d, 0x4000, 0x1, 0xba}, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r0, &(0x7f0000000740), 0xff67) (async) write$binfmt_misc(r0, &(0x7f0000000740), 0xff67) fcntl$addseals(r0, 0x409, 0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@isdn, &(0x7f0000000000)=0x80, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_LABELS_MASK={0x14, 0x17, [0x0, 0x1dd, 0xc28e, 0x200]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x8801) 2m12.581039091s ago: executing program 1 (id=1408): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pread64(r0, 0x0, 0x0, 0x7ffffffffffffffd) (async) ioctl$sock_bt_hci(r2, 0x400448e3, 0x0) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 2m12.580344201s ago: executing program 1 (id=1409): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca14aa75183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aacd602000000000000002944de604d849a1e3b32905b0d26e9ff30b83f38a2ae8b1c6748ef8b87ef2a359249c3e2949314", 0x6f, 0x7b997c24170cb9b4, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)='}', 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 2m11.764852113s ago: executing program 1 (id=1416): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x4, 0x0, 0x2, 0x2}, 0x10}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000001340)={'ip6_vti0\x00', 0x686c}) r5 = dup(r3) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}, {@access_any}, {@afid={'afid', 0x3d, 0x8}}]}}) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000300)={0xc, {0x1000, "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"}}, 0x1006) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) sendfile(r6, r0, 0x0, 0x80000000) 2m11.721489864s ago: executing program 1 (id=1417): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x23, 0x1, 0x70bd28, 0x0, {{@in6=@remote, @in=@local, 0x0, 0xd9de, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f}, 0x80004}}, 0x50}}, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) (async) eventfd2(0x9, 0x800) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 2m11.665179805s ago: executing program 1 (id=1421): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1501000065ffff001050323030302e750000000020"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d6d6d61702c66736e616d653d265d5d40682c7065726d69745f646972656374696f2c66736e616d653d6970365f76746930002c7065726d69745f646972656374696f1fb4626a5f747970653d3950323030302e752c736d61636b6673726f6f743d5c2c6b"]) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r5 = fcntl$getown(r0, 0x9) ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000080)={&(0x7f00000001c0)=""/176, 0xb0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async) pipe2$9p(&(0x7f0000000000), 0x0) (async) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1501000065ffff001050323030302e750000000020"], 0x15) (async) dup(r3) (async) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) (async) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d6d6d61702c66736e616d653d265d5d40682c7065726d69745f646972656374696f2c66736e616d653d6970365f76746930002c7065726d69745f646972656374696f1fb4626a5f747970653d3950323030302e752c736d61636b6673726f6f743d5c2c6b"]) (async) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) (async) fcntl$getown(r0, 0x9) (async) ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000080)={&(0x7f00000001c0)=""/176, 0xb0}) (async) 1m56.310347596s ago: executing program 34 (id=1421): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1501000065ffff001050323030302e750000000020"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d6d6d61702c66736e616d653d265d5d40682c7065726d69745f646972656374696f2c66736e616d653d6970365f76746930002c7065726d69745f646972656374696f1fb4626a5f747970653d3950323030302e752c736d61636b6673726f6f743d5c2c6b"]) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r5 = fcntl$getown(r0, 0x9) ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000080)={&(0x7f00000001c0)=""/176, 0xb0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async) pipe2$9p(&(0x7f0000000000), 0x0) (async) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1501000065ffff001050323030302e750000000020"], 0x15) (async) dup(r3) (async) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) (async) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d6d6d61702c66736e616d653d265d5d40682c7065726d69745f646972656374696f2c66736e616d653d6970365f76746930002c7065726d69745f646972656374696f1fb4626a5f747970653d3950323030302e752c736d61636b6673726f6f743d5c2c6b"]) (async) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) (async) fcntl$getown(r0, 0x9) (async) ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000080)={&(0x7f00000001c0)=""/176, 0xb0}) (async) 1m51.632380046s ago: executing program 3 (id=1736): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x16, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="403051000000490eec968422e1a71937d854938590f9c9b79d6563728444435b42f26e2cae000000005e11c200bf9656b921bfa606a6d7ed1c4d7cf8ffffffffffffff632939d0400460be3eb52ff0"], 0x0, 0x0, 0x0}, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000600)='(\x00') 1m51.141119274s ago: executing program 3 (id=1737): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x101f}) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) r5 = dup(r4) open(&(0x7f0000000180)='./file0\x00', 0x440, 0x0) (async) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000002c0)=ANY=[@ANYRES64=r5], 0xb0) (async) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) (async) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r6, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) (async, rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) (rerun: 64) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x200000000000000, &(0x7f0000000280)="0a6419"}) 1m51.109225545s ago: executing program 3 (id=1738): mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2c726f6f74636f6e746578741d"]) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 1m51.061221635s ago: executing program 3 (id=1739): openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000bc0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) (async) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async) dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) shutdown(r4, 0x1) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x4, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r3}, @flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2f}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) getresgid(&(0x7f0000007a40), 0x0, 0x0) 1m51.060736465s ago: executing program 3 (id=1740): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) unshare(0x20000400) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42440, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f00000005c0)={0xce, 0x0, r3}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) (async, rerun: 64) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2a, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x5a, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x1000, 0x71, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x5, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0xe, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x0, 0x6, 0x7, 0x8000, 0x0, 0xfe000004, 0xffff, 0x2, 0x7f, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x142, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x8, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x401, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x6d01, 0x5, 0x9, 0x800000, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xfffffebc, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x3, 0x4, 0x1c, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x0, 0xa, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x148, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x7, 0xfffff000, 0xffff, 0x3, 0x6261dfa2, 0x20100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x4, 0x5, 0xb1e, 0xc, 0x200, 0xffff3440, 0x7]}, 0x45c) (async, rerun: 64) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 64) bind$unix(r1, &(0x7f0000000000)=@abs={0x1}, 0x6e) (rerun: 64) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) (async) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f0000000340)={0x77359400}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) r7 = socket$nl_audit(0x10, 0x3, 0x9) (async) syz_clone(0x2090080, &(0x7f0000000140)="e36d3298b1989e9e088928a4e3536a8d483d6958e1b674021b6cb9596685eb37", 0x20, &(0x7f0000000180), &(0x7f00000003c0), &(0x7f00000002c0)="fad521d7eb9ef96aa2324271b206f9ad48d491bd79f3069cd9b81dbdaa77d2bc8c917295d05596746394c337fb") (async) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') syz_open_dev$rtc(&(0x7f0000000080), 0x2896, 0x100) (async) writev(r8, &(0x7f0000000800)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f00000007c0)="fe", 0x1}], 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_perm_addr}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 1m51.037584766s ago: executing program 3 (id=1741): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca14aa75183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aacd602000000000000002944de604d849a1e3b32905b0d26e9ff30b83f38a2ae8b1c6748ef8b87ef2a359249c3e2949314", 0x6f, 0x7b997c24170cb9b4, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)='}', 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 1m51.012548266s ago: executing program 35 (id=1741): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca14aa75183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aacd602000000000000002944de604d849a1e3b32905b0d26e9ff30b83f38a2ae8b1c6748ef8b87ef2a359249c3e2949314", 0x6f, 0x7b997c24170cb9b4, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)='}', 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 1m30.124551921s ago: executing program 4 (id=2149): setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffff5, 0x8, 0x2) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x442000, 0x1) r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r1, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[@cpuid={0x2, 0x18, {0x8}}, @uexit={0x0, 0x18, 0xc5}, @cpuid={0x2, 0x18, {0xd, 0x8}}, @cpuid={0x2, 0x18, {0x800, 0x5}}, @uexit={0x0, 0x18, 0x65}, @uexit={0x0, 0x18, 0xa6}, @cpuid={0x2, 0x18, {0xc, 0x1}}, @code={0x1, 0x41, {"b8010000000f01d9f30fc772000f38cc5a00470f011964f4c4410171e7a1260fc76ce100c481fdf54f290f09458b5e02"}}], 0xe9}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000240)) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f0000000280), 0x4) r3 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000f07000/0x1000)=nil, 0x1000}, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000340)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x60, r4}) r5 = openat(r0, &(0x7f0000000380)='./file0\x00', 0x20000, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast2, @in=@broadcast}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) close(r6) timer_create(0x1, &(0x7f0000000580)={0x0, 0xf, 0x4}, &(0x7f00000005c0)=0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(r7, 0x0, &(0x7f0000000640)={{r8, r9+10000000}, {0x0, 0x3938700}}, &(0x7f0000000680)) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) timer_settime(r7, 0x1, &(0x7f0000000700)={{0x77359400}, {r10, r11+60000000}}, &(0x7f0000000740)) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000007c0)={0x5, &(0x7f0000000780)=[{0x4a, 0xe5, 0x10, 0x7}, {0x28, 0x4, 0xf, 0x1000}, {0x4, 0x8, 0xf9, 0x794}, {0x7, 0x5, 0x80, 0x1}, {0x8, 0x4, 0xfe, 0x40}]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r6, 0x5000940e, &(0x7f0000000800)={{r12}, "22be1cec01bb352e1b944f2fd0c1e643498592859ef0cf572cd3215db1e878114805f5d98afc61f159cc1d054220f99cdec07195958b1406b72814fd509e4fb1d1fd786d33f6269bbebd28d9587d10e51e15df697120d561f6f512eda9ea056484ee3ce7137349236b9ed95d81093844ea4cbdf632f7d2c08913a57b4a1dc70f0795408f2fa61682d32cd66d960d589fc25e6f898c75d81ffa90128412986f6d8e1c412cde5a10ffef706e95fb239cb9d46c48b6220360c31f4ed197c8b9054a2ec1802c81b3e38953c75a29ed4279afeba2934bf58de9e01f20f502208d6d23cdbaf2296ef21099846e8b4a3f48cb62d3d3e5956478ea019e5c70797eeae2c47c9ea2adbb82c5c0a3c537a4777334fd1695d99c25473ec5346184bdab66e3a6968f1143a3d5f0d4526ea62927635132a230a972853e7d77349830364dde5d72dcf3bc536305de40d34a1368d5cdae77a93249e3c681d05052c9ad1e41284f8f5f60338d81343a4658d05ce2c0c9e79d787bc577c7842224946e796db7cfe51405b7fb4dca35222fe2d07e528c3cf382feb19b224fb7dd97a1e28fccaec2c4dc19e5fca06a1fdf089416bef9dd43d24c9ccb599f723a3a04e7cfdd90845812a09af65c1b0670973b2266be73bc8aecc2062bcbb737b6dd7a35de8fec06970d7a471b96d1e8b3fa8ed8ea775a7c888d740f130d5749ced0df7f711d28c43c664b050c9a3c853d226a927d3e990aa175f9130e1426d73bbe66f23e9e76f658bf82aef009f1a702a1bbb8fe4085084821b6794159a02d164863047d5f9910a467f18e317bd50a94108ceea02cc7db77830e7361e7df6bd52fb8276f6b58b1a49ed036c61f4b9ffcb0ebe4a1f87ddf276b9914f1e6d17d508c66197a2d0dcb38db30a26d554f7429767cf1b174bc8db16bc4d4764d90d8df3bd957f6cdcff1dbedc480771ece1875529c54c9bce749bea7e3f2f84f6ec03f80d5fda60468e3e3a8573bd9b36c12bc5da5a3c12d5f9abd9dfded57ed8e12d830214fc8e108908499f45746bbfa5d4d39b1a70c4b26fa5e36cfd9b7a52246c1d3f41eea6e89f2ecf61b91503fecb159cdbf4fed07184b60f53ab84ec2bc40e50141b9631507530feba3bb933a95dabac5112d4d688bb97008ab25413cfe7f90e3c1dbad006013756bee706b6ac8933db0cdd28fc79ee2dc063ac573c7e04ef596afe85e19aab2be3c00ad150ea2623196d37d5f14e3cce6a2b56610624592ddc1e54c695fa3e3c3ce022925358aa76e25ded4bfa354711c6b7d604bdfda8ef1a1aa1421e7c19beb2347b891c9b096b7200f246a5fa39c9f5397f7ca5ae44fe9c6a46502e8fd10994d07442685d1a3fb86d9a55a89c432ca8020d200507bf135e0f1131d2fe42e7fd1a2b4e8a4b8c4340712f1cd1b6e45840798a5f3680ab23be4da9436d8f9e8bf3b50b5d6570f4126c9670adde44ccdc53893e7eaefb227ec5eb58e2d7e8c715d0190311469c92cd82123a778d7d1913fd1f1cf864a714bb834fbefbd3a6e22c6eb4fc7bc1325b2791ebbab53087ce9a0ea7b017ec3b496631d2f3eefb88cda48280c4760af4c1d7060282c27f8244b27b74f0fc13ce5de209788111cd60a3c8c6950a56f020a47349979e38def67eb0579474382c663a1efd2295c3459b4f9d90ef9aedc21ea6f9f7e8f4b41e9c3381ffa97a99f713585c56f477f90c310483b708a5d1615f9e100d5ab465d7fc7247c3262f92af803212f629f53d36854fd0dfa228d2750c4a567b2d2a288d9bd969944a51902797d97000e5f09bf9c0d4a3249870fc3c1818005d739a4501e21b890a22e490544184fc2fcc70e0f45c730751d736c9b57026e84910176bc8c18490e5aefe71ea37ba25df970ec898168562a3329378a81a7be856adc073ae334cc5996c4076cde59e6856d3da61adcfb68dfbc7bcb416b750e64226d1d450803edd083e05a0a1cf0321eb2198c412e4b3436cb73e24a5617a0a432c5d579a78f7b44388e92e16e829a2bf57427e3ed02dc57f3eab3ae4b59a151bda4b924d23c900014d46c75bc6fe0064e66ee65eb9b817420a7acb742d3671b98eda6937490f6eaf0d79bc05ba8d7a2e52215a500638af27e5b882eb49f72470e375ff727d971688b5b6e6d01dfb64611c7f38a4975a8bae1fc37e2b20f34b71032ca686239ad9dca41516aa8116a47aa3c3b8c4e2fba0697e654cfd6e813d59ba12197d37791b096ef74bc1748384f76a51ea6a1bb981bb10fd88cd668afa970eb3d07f7c6ed5dc2d81ca09533e3a35ffe13e034ccf308aa4c9a5f7b207fb0ed781a8a67aac1a173a465bbf392616c19b19a9cd27a61ef60b4f4c3d349c8534259916413c08a06279af92dbba2d0d59f22830fe8c9566694ff4ba50620fcb9e7a1c82f60d6a3c7d2f5697662e1bcbe81fb9471b0ad85b80c5c341cc2dadf402f7a8ee68937c339c32f69e99d20f4ffa4aa097c9db01d5f3b95469dcaa3dc701bc8af040cec68043ac2de4e91568f45706a6bb9ab20b3806139388f58717e34d55d08dd4e8194a2518a9ca81838d5a4fe8fc28e78ab751e2827576764891140f2f09aba5472abed6890114dd3f8177575ef758aebd1858cd32417c581bcafea21192df8633755ddc0ca1252096e69bd0979aada1441f936e4d29cde221538badc044f3201ed5d9536f351df77cbe37b77fb885f529720de15df40bdbd6117f36d906d27b41b89bcde48d3983e76a6c2c32fe312cd6aeabe2f5f257ad47a273ab1a75d6743b523ed2b9c6b2affeca669f68dbba42bc9b660429d37d4eb7146df2b9e419d749e7d08986666510df4f9915abcbcbd31be6e8eaca679bf003dc527c57a24b10c19f555eece76b51f65ced1e543ac9c07e9435cefed7029a833a74ce9298e3df53c20c754ceaff5fe3877cc9bc3c2f478cff6b54afe42de7c7f546e92a522371f6f9565f5c4e7b3103c2bf76208959b1edf652a49f1bfc6ec454025acd4e69c635d3910e8419119a43702c1b114a3776d0bf136daf8adc5623e2579f0d3e10d14c2dfc377363c44ef8d5ce3f718919d61bcf3f47c8bc228c78aa07e1d99925bd7e448b6cd899c5705f6b08d998c360ee24d363accb6d4aa01ee1f17ad0137dbd9bac7ad974c00bbadb81e8639c487923337bdcd39c5fbe74a7e9d93e21018234fec6b2904a7592a674ddd5f91c53a1317d68ddebc8d293a9ad6473cebeb20d07dbcc49629a5d33561d112644948890c7a637f8a543a737dd61c1eb573ad730d73aab015515864d30b65f128477e9b3fea7af42d2389eb71cfde79a64729aa4c2b3b09b9e4b3e8e0ff717ff9199c22c0e73ccfd1fb3c61b157ecac47bf110ca28786e49fec2740511c7b8ab090178d91bd17dd9b4a20d1e98a226cd81fb9f1f1f802ae43c176a1c6fd37e32408b3625ab889e008eacf9ea1ce00cd4fd392d3e5100caa5c858dd89621de00156d92237e2d5d711bdae54e1d13b5e0d1a6c7849a46372bf705de08de186aac299058dc4b1dd2f1ac80332a23d1e673fa8b88f6897f90ccf4c08ba572b32efa148e6a706bbb6fca80094465178c7e404bf0feedef2fa0926b26902668b041980b6bcffeed3a687bf4f64f20a8b0880bc30ca6afcdc19e51aa26c064726a7d8515432f529ed72a0af2b3882d504451451dc7891b10dd68828d938adaf865c870d36204e6dc0a9acab5605e73e81dc49944733d4d2fd9dd91be9f71f1811725be928b6cae148ccae2d38d5d51e884c4c774da1e5583cddede326af916d02201ef079ce1ae6ac1efb7f94203541d4652a676c92aea81ca4eeed5ccd283aeddf9f72f58692df1c57536f34d4554c4db6104acea532f87db666e595c6bfef355167791e64a3ef1a6386e05efb2a36b1d3de49dfd7265f00efd9568e3bc781ab02eca6b131c2557467285497f83b46cfd53ac18ae20c6484f03259809a69b6b0d3d0cd9d7270dcf3d65db5e22fb3a2757d058460da2abd7a802151240f60ace60ce0f44889339e3057f6b8b7022a8aff1071068265c52a18b42540f9a0db3949d22b1d6e3019c33e66a473f1abdc475cead055cbf83d46498cf30f45b3394d4b93029e28cfd4ac8925968e6f812efc89d35db313ffe7a22be3de0342cf1315d4e76ec0ff2765d3ffdc20b02bb556be5ae9ba83630462ed9a6caa89cac2ae3548fc54bbf12ecead2bd991fea112e84da9a8a41b741650bb478a915231a8d977040661295c477e5ed9eb902b87a2d558816c1ee964bd83c37f4557b2f7b9178a1a20061ed505fcc1e7aee058038815e461a7e7d9dfde6023564f0ce0bd65819d54bfd691aaad19ff3a6c01fff7d58c3af20ed0fb3a15cc15407685de03c2bda529204f9e99ee9eec8aa99ae95466b19dbb5d3c99bcd7e1db873d1732c1615945bddec1c9fd397c70e1056c25d5400244013de6da2d5d0f1ccd378d66ecf412675b766b9702bbe710fcc13c327447bdb455dc5f436893ccb0c66e4048ea75c855945234b1e61929d514cc93094bc594175ae9393b4980e863ba8804f9f8d964dd0ae1e6f0b3a17223974718008fb1f1201192809bffd601bc4b04f57be5c03b09bff591ccd24f079987f5a7ca2806c761b3507dbedb419fab3cc7deb6cb290fd778a05c98a78f942fe26ab4ebd33d0afbef349762b173be0966c69c3d252bb2f3b4012aed5062ad8c7ab9be31c502b1df53750a9536eda597a5a141a7b6b7c4c19c5987ff5fedf4e688c756d4d92df96f78f77a1f65b04dafcc63f029152be85ca097f3fdcb7f2d6632bf91af3afcb8292af8904cac09adf171136efcc03f06b317d20b845c9e29f2f32aed7f86909697e4510acc613d6961911e226031d4e493c136d0a7cc9c21fd08bd16f74b1500b7760568c717bb3332893a0d8cba170eede98606976b635416ca5f0c06a5d520c1b7eb37a2f8e0f7bba08a565db3c8ff4cc32420b96bc4728ae1d18364fd14bcb4ed1da8b5ccb9e1237d55f8ea894b1c9c5922117cd631259f875d880a7c21d76ac13323bfad0a7d3e9c8cf47fae717243e833f098917020e9e308c53d501d795cac582caef3b12de5070c1befeaae79b5d5c49e56dcb53c7f7335dcc94a9c00462dbb32fcbce3a1642bd07a5e8de0b8039f7f164f256282255ebccc03a12b005a048871c3cc3ba283a53f904f14bc9a1cd8f19a4af9c5f8e86d730356d25c79f8c1f8cd359a18b36a6978f8f1324435cfb823ff94bb0029f40b2bf786c6f372afe10dc09d7fbe67b93a2fffd868a45abe8637cf5600842c2447f55fd2dcbc6b002bc06023e46a70114e47b5e90ab84c7c4823724a6ee001e48cecbcca95718d45292267895d287538f9221a7ddac56a411721cf9ecee69f05e0105f44b02d527785925d5afdce94d0179c5770d3e0fed24cb833e7611f2e0475a48d8421afa193d678dff06e933c6beee874aafd8b2729524e14fefe0b4aa5eabed643e6b2103d06537369987c60794751fca7e25a7388e67a43da8c411383ded0bc5d9b88dc974836e1c7c2d37be8fbeaf9e13f641ec45b3f75d23669b81d4d53716541c69bed81d396c1289f6d9e99af2aca0e971e164259e82d138eff3c21c05dd21f3bb3beb732336554f8bff657fb451ca2bf502347d4fb9c1c9d149a68cbdf3ad510cd75b726747b5fbe859d47b6e22011d36f72e22744bcb21e6d733c3bb74c89914020dd42ffe387d84192f2af4cfeaf8a154e8c09ca34258f158df610196582db7ce0567ff8e74a0229283ffdad096bbf1b4c0d8c39b8be51d"}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000001800)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x3d, r4}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001880), r6) sendmsg$SEG6_CMD_SETHMAC(r13, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x38, r14, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xb6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x10010}, 0x8000) timer_getoverrun(r7) sendto$inet(r5, &(0x7f0000001980)="8c6ec353cf990cf610844dce7aaf3a1cc4ccefa2613f21239f64c4c9739e29d384fadf5f87219ed9a031815c6097b7626711d9fd079b5c6cf370c6db01e233e7323a6e50c9da59270faea3fceca0cca3d67cb4b9697b2ca6", 0x58, 0x2, &(0x7f0000001a00)={0x2, 0x4e23, @private=0xa010101}, 0x10) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000001a40)="42e403049c89c01fcfff1ab00130e0554ae47721a70a1a33dab393e16745fac37667c15d525c223093166dc74de1a398dffad2a1e23f89", 0x37}, {&(0x7f0000001a80)="9c2efe6de5632c10e5abfe997c3b6156fd2e62448c1fbc8f9ba749f6e877a1fa5344c33c029f99d053e5a5687548421abef218fcc7e1d4b6e4cba834caf8a0e129a0daee720923b151c4b8aa21e7b63dc706dd4a1ba974a0", 0x58}, {&(0x7f0000001b00)="47e283a88323c93a39814480406d8c3424581db47e8a3d6f737a10b7d30cd92e76351399c9125b801136e27ffcfe24d2549a15e512a623c80a1bf6f6e31863ef5b35e3dda2356a25e6d3017184a3621d818e22f6", 0x54}, {&(0x7f0000001b80)="e79c8103759cd6303b41a41d72eedf3c4e160250c85549418981d88503565411fed8ebd37172b96350c8f5986682cc9f3eae19cd156ff949306f559aa6fd6fe1f44829d1e84e83bb01539f92dfd231fbb9396161d275f2c3d5c9d47ca757f2480e", 0x61}, {&(0x7f0000001c00)="59f29d814752e53edf00644dc65d469954c33c8c8415439c04982ed280992b1eb11e703d71b21a3dc629b2f53705ee5c750b7720846e4fecfb471990f2c8fbb970aa08b2b28c66393c1f8ed3550ffbe56b", 0x51}, {&(0x7f0000001c80)="36497abf5bbe10a13c1b24b3846fa4e9bcc96f14b83ffb05307b101aa1661283cb09dda92ab1ad27e5ef433b935b43c7e1956c550bb3fffe7b5579de49c57c2459ffe082b157516f86e9b2c2a4d2c3c585bde553ec6ab364356c966162fdbe7409dc73257ad285969fb627dc4dcff1a5ae7df29e61053988f8301359243a4d138a5f76999553239943152ace867eeb26f092c9c793aff3b38396bc2f4fead1f65ab7", 0xa2}], 0x6) 1m30.065162372s ago: executing program 4 (id=2150): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f0000000740)=[@clear_death={0x400c630f, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) r1 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ftruncate(r2, 0x309c000000000) syz_clone(0x80000400, 0x0, 0x63, 0x0, 0x0, 0x0) 1m30.051592432s ago: executing program 4 (id=2151): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x8e0543c867e29c12, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x3, 0x80000) sendto(r1, &(0x7f0000000040)="db7809dc059fbb79d418620d0db9b4fb2be004f481be8d4eee1966ee0ad6cc", 0x1f, 0x800, &(0x7f00000000c0)=@caif=@rfm={0x25, 0x1, "4aee3f4d1db60397cf01bc37510bc04b"}, 0x80) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x40000002) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r2, 0x45809000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x54, 0x1, 0x400, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x8e0543c867e29c12, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000080), 0x3, 0x80000) (async) sendto(r1, &(0x7f0000000040)="db7809dc059fbb79d418620d0db9b4fb2be004f481be8d4eee1966ee0ad6cc", 0x1f, 0x800, &(0x7f00000000c0)=@caif=@rfm={0x25, 0x1, "4aee3f4d1db60397cf01bc37510bc04b"}, 0x80) (async) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x40000002) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r2, 0x45809000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x54, 0x1, 0x400, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) (async) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) (async) 1m30.043436232s ago: executing program 4 (id=2152): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m30.009080033s ago: executing program 4 (id=2153): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000600)='(\x00') setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x1, 0x1}, {0x4}}, {{0x0, 0x0, 0x0, 0x1}, {0x2}}], 0x10) 1m29.941215114s ago: executing program 4 (id=2154): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x21d, 0x0, &(0x7f0000000600)="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"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x400006}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 1m14.179224122s ago: executing program 36 (id=2154): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x21d, 0x0, &(0x7f0000000600)="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"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x400006}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 58.901056341s ago: executing program 8 (id=2781): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r2) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec90806fb", 0xf}], 0x1) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r3 = epoll_create1(0x80000) (async) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r6, &(0x7f0000000a80)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) (async) recvmmsg(r6, &(0x7f0000000800), 0x62, 0x12141, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x4e22, 0x0, 0x2}, {0x0, 0x9, 0x0, 0x2}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x34ff, 0x4, 0x0, 0xb7}}, 0x400) (async) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x20000009, 0xa1, &(0x7f0000000240)={0x0, 0x1, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x6) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x3000000a}) 58.841348502s ago: executing program 8 (id=2786): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x7, 0x0, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/51, 0x33, 0x2, 0xb}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @clear_death={0x400c630f, 0x3}, @register_looper], 0x0, 0x0, 0x0}) 58.833626553s ago: executing program 8 (id=2788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x900, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 58.773192824s ago: executing program 8 (id=2790): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x38a100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x167) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x10000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 58.665205646s ago: executing program 8 (id=2793): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x20008000) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = dup(r1) bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc) r4 = socket$inet6(0xa, 0x3, 0xb) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0x0, 0xf42, 0x8}, {0x0, 0x0, 0x0, 0xfffefffffffffffd}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22051, r0, 0x3c3f7000) r5 = socket$can_raw(0x1d, 0x3, 0x1) splice(r5, 0x0, r0, &(0x7f00000000c0)=0x8000000000000000, 0x62, 0xc) 58.594760997s ago: executing program 8 (id=2796): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) (rerun: 64) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r1) r2 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r2, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, 0x0) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r4, 0x400454cc, 0x1) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x1}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x115180, 0x0) mprotect(&(0x7f0000018000/0x3000)=nil, 0x3000, 0x7) (async) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xfccc0, 0x0, 0x1}, 0x18) utimensat(r6, 0x0, &(0x7f0000000880)={{0x77359400}, {0x0, 0x3ffffffe}}, 0x100) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async, rerun: 32) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x1) (async, rerun: 32) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,') (async, rerun: 32) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) (async, rerun: 64) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000600)='(\x00') (rerun: 64) 58.530392337s ago: executing program 37 (id=2796): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) (rerun: 64) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r1) r2 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r2, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, 0x0) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r4, 0x400454cc, 0x1) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x1}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x115180, 0x0) mprotect(&(0x7f0000018000/0x3000)=nil, 0x3000, 0x7) (async) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xfccc0, 0x0, 0x1}, 0x18) utimensat(r6, 0x0, &(0x7f0000000880)={{0x77359400}, {0x0, 0x3ffffffe}}, 0x100) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async, rerun: 32) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x1) (async, rerun: 32) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,') (async, rerun: 32) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) (async, rerun: 64) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000600)='(\x00') (rerun: 64) 30.360236452s ago: executing program 5 (id=3345): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000480)) recvfrom$inet6(r1, &(0x7f0000000040)=""/41, 0x29, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22051, r0, 0x3c3f7000) r5 = socket$can_raw(0x1d, 0x3, 0x1) splice(r5, 0x0, r0, &(0x7f00000000c0)=0x8000000000000000, 0x62, 0xc) 30.257179374s ago: executing program 5 (id=3346): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x10003, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0x10034) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002600)={0x2020}, 0x2020) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async, rerun: 32) close(r7) (async, rerun: 32) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x38}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 30.219036544s ago: executing program 5 (id=3347): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x184862) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc004ae0a, &(0x7f0000000080)={0x15}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0xfffffe00, {0x0, 0x0, 0x0, 0x4000006, 0x4000000000000ffc, 0x0, 0x9, 0x1e, 0x7, "faf98317e5a1149989fc8dbe43eacc96e3a2503dc3bd3fe37d58128bbad0229cebdc25f5ab0800e6d680f9a5881a7beda9d69098c8b534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) pwritev2(r0, &(0x7f0000001600)=[{&(0x7f0000000280)="f880", 0x2}], 0x1, 0x739, 0xe2, 0x1f) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x97, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0xc7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000180)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000380)={0x24, &(0x7f00000002c0)={0x20, 0x5, 0x8e, {0x8e, 0x4, "72253b1d86dd488f42e2442da0703d8606ad9e8e41fcd8aa8bd5bbf98f322800d3c93bfe9928c42202bc6bf6be0d5c8ea9d95f98f512c47307edbe6e0c61007db0ddd4902a32e8d665874f4f3742e531fef04f81b39c614d4683fa38393ef3052571e4b056617b50e64eab63f945b56cae991545ce06b6abb7e4a55fe545a33d8b8f13b41f38490516a9f10f"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}, &(0x7f00000001c0)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x4, "813f61bd"}, @main=@item_012={0x1, 0x0, 0xc, '7'}, @global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x2, "fa01ab91"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc, 0x4, 0x1, {0x22, 0x6a8}}}}, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x40, 0xa, 0xa, "858d2769ad8304699f6a"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000480)={0x20, 0x1, 0x7e, "6b586e5efef7998aa9c96420b78fe99dcb672f3dd410d1611548c0f1edc13b68d8ce27d18e009732b8ea5014fbc702730865ad46e167599aa316eb72a79acb373f87a2c2c979880eae12faf0507ef88de6e04f1528f3e79a529f321765bcef04485db3244dd0dbec70750834eaace6fc1b6a0114a34780e5d9d48790ec5b"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x5}}) 27.662147983s ago: executing program 5 (id=3364): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(0x0, 0x182) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x8, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000012201"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2a05004, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x400000, 0x14b}, &(0x7f0000000000), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x51f303, 0x67) sendfile(r3, r0, 0x0, 0x80000000) 26.594181809s ago: executing program 5 (id=3367): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async) setuid(0xee00) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)={0x3, 'vlan1\x00', {0x200}, 0xfff}) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async) unshare(0x26020480) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000000, 0x490420, 0x2}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x88004200, 0x0, 0xfffffffffffffc83, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x8) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) (async) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) r9 = dup3(r0, 0xffffffffffffffff, 0x6700000000000000) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e24, @loopback}, {0x6, @multicast}, 0x14, {0x2, 0x4e21, @private=0xa010101}, 'wlan1\x00'}) 26.116088617s ago: executing program 5 (id=3373): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0xfffffffffffffffb}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x8000000, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0, 0x0, 0x1, 0x3, 0x40}]}]}, 0x17c}}, 0x0) r3 = userfaultfd(0x80001) r4 = gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x480100, 0x0) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f0000000200)={r6, r7, 0xf3b}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc0}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f9, &(0x7f0000000a40)={'ip6gre0\x00', 0x0}) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 26.066774047s ago: executing program 38 (id=3373): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0xfffffffffffffffb}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x8000000, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0, 0x0, 0x1, 0x3, 0x40}]}]}, 0x17c}}, 0x0) r3 = userfaultfd(0x80001) r4 = gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x480100, 0x0) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f0000000200)={r6, r7, 0xf3b}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc0}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f9, &(0x7f0000000a40)={'ip6gre0\x00', 0x0}) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 3.864905721s ago: executing program 0 (id=3757): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000005}) epoll_pwait(r1, &(0x7f0000000300)=[{}], 0x1, 0xc, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00"], 0x1c}], 0x1}, 0x4000080) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) 3.863977622s ago: executing program 0 (id=3758): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010b0500000010ac05690200000000000109022d00010000c04009040000010300000009210900004afe3052087495b54000000000090502032000046309306de7ad79a92d029e184a6c883ff6c88083cd0ef52cd922c216eb94f6d8c3bde3463b23c028803dbd59defb10368ed21af8692286c8abf76c476fbc5fdb73a13f20c0015ca00a1c5bc3c93e3e2e2e5a10f74d585f824bf266cdb62912ca30eab350cf52"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) write(r3, &(0x7f0000000240)="da9dff2d2e2a3d08c8ce133037b0c452d1892d6130", 0x15) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$can_bcm(0x1d, 0x2, 0x2) timer_create(0x0, 0x0, &(0x7f0000000440)=0x0) timer_settime(r7, 0x0, &(0x7f0000000400)={{}, {0x0, 0x3938700}}, &(0x7f0000002840)) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffef7}, 0xc03e}], 0x1, 0x40010121, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRESOCT, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x1000c001}, 0x2000c000) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f00000000c0)=0x7fffffff, 0x4) r8 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x6) fcntl$lock(r5, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x1002005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000380)={{}, {0x77359400}}, 0x0) write(r8, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 3.092245693s ago: executing program 7 (id=3765): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x184862) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xff4c79af8a5b5e82}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x57e, 0x2017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x83, @string={0x83, 0x3, "697d285cebe6f85f487ac63a15e4fc8f1a2ad023673aa93f15e551dedf418c9ee60d36c2bb9e674de2874d398a6e1dd0cd36fe1b62a96e3d1b4e82c7dde365b81b2aff4796acfbc9871abb1ac914db54cd1a9ba306e0c493bbe833b5437871ac988c9253d72e918400086126782bfdc60704884064256b3e45c4d6e3b5bf6d42f7"}}, &(0x7f0000000000)={0x0, 0x22, 0x10, {[@main=@item_4={0x3, 0x0, 0xa, "dccdf844"}, @main=@item_4={0x3, 0x0, 0xb, "827c04e9"}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_4={0x3, 0x2, 0xa, "d0c9e92e"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0x9a7}}}}, 0x0) r6 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, 0x0, 0x48) splice(r6, &(0x7f0000000040)=0x8, r0, &(0x7f00000001c0)=0x7, 0x2, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pwritev2(r0, &(0x7f0000001600)=[{&(0x7f0000000280)="f880", 0x2}], 0x1, 0x739, 0xe2, 0x1f) 2.300255795s ago: executing program 7 (id=3780): r0 = syz_io_uring_setup(0x751e, &(0x7f0000000000)={0x0, 0x5a2e, 0x40, 0x2, 0x164}, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x8010, r0, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, r2, 0x1000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 2.282085535s ago: executing program 7 (id=3781): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) (async) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x7, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000e9ffff014d564b000000eccd"]) close_range(r0, 0xffffffffffffffff, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1280, 0x3}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 2.023570569s ago: executing program 6 (id=3792): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x72c}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000380)={{&(0x7f00000a2000/0x1000)=nil, 0x1000}, 0x6}) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000056c0)=[{{&(0x7f0000000240)=@generic={0x8, "2e1e9bbc6379e38d03861a3419f1b2334839fee3c2eebc821893b4338c44c8a137f8910d957638d73d62d276da07310c078afa399ffef3594e06428b42040d8648c14939919e6d0173061943a96b308332ba013e24cdbfe8aeafe6aba4f6124c2aa2ae0cc3848b80b457ea8b8ef758e72fb5c3abe2bcc4dff185a94166a0"}, 0x80, 0x0}}], 0x1, 0x20080000) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f00000011c0)) (async) chdir(0x0) (async, rerun: 32) r3 = getpid() (rerun: 32) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) (async, rerun: 64) syz_pidfd_open(r3, 0x0) (async, rerun: 64) link(&(0x7f0000000080)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0/file0/file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r5) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async, rerun: 32) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="89e7eeb473fee6655800000000", 0xd}, {&(0x7f0000000280)="9ea43f4cd77195ed000801108658b5642451b372f42df3168ccba82fb82567cd8d556f8a9b6b985b9a8222a6d5580b665896578b79879694f40eddb14d558e6c02c737de81b3f6f9e254f9804f413ffad5161e3a5a020000000000000094fbaed97607f77c93c4ab0c348ed6e1b352c3c60fe07f45f725353137cd53a4ddf9381376d63f7fd5aba1c27afcd7b2a3258f0c5e6e3148166ef8654f1aab7bf5ec", 0x9f}], 0x2) (rerun: 32) mount$bind(&(0x7f0000000340)='./file0/file0/file0\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0xa00002, 0x0) (async) mkdirat(r1, &(0x7f0000000480)='./file0/file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00', 0x0, 0x1808485, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) 1.99695746s ago: executing program 6 (id=3797): syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100032cb93f7301174ba4162601021201090212000106f610000904af6800ff412404"], &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) getpgrp(0xffffffffffffffff) (async, rerun: 32) r0 = gettid() sched_setscheduler(r0, 0x1, 0x0) unshare(0x12040480) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async, rerun: 32) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) unshare(0x64000600) (async) syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x1d39, &(0x7f0000000180)={0x0, 0x2079d9, 0x0, 0x1, 0x29d}, 0x0, 0x0) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010019000011d6c3993f750b4070bcf0ffdf0100206a053f0040000102030009022400010105200108ff1007010301010bf72168ed93585540d379c400000000000000"], 0x0) (async) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) (async) unshare(0x32000c80) mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',dfltuid=', @ANYRESHEX=r4, @ANYBLOB="0017"]) (async) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x99b33000) r6 = socket$inet6(0xa, 0x3, 0xff) close_range(r6, 0xffffffffffffffff, 0x2) 1.98201867s ago: executing program 6 (id=3798): syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) 953.778195ms ago: executing program 7 (id=3800): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48d4}, 0x4040000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x201) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 950.928255ms ago: executing program 6 (id=3801): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x88143) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000000c0)={r3, 0x0, {0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x80, 0x87]}}) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="522db4798e9d8bd8f4507c8b88d086c58bd2439a6b906e14ccd1ac170ecbc069002ccb5f70b8675111efa29a6b344b561a136ab2e7c40fe7b40b871b6cd9adfb65c58abe32b2854889fdf4ee1e98388898b7cc5ab0b699c039179a91a40b604157491a4d56e1730e27cb4dc4402ca346aed566c2bd350212913862df7e3c0a4401a84952f6d79c6c178b4e2c511014632c13a1a65b374cbb9898f3740125ed20e4b3372eee10f2ff8e68c2f6f73a04fd5d38b41278893dbbae8727f998a958c147cf9fdee5bb41922ecf60626f8286ca1400ab2fdec9dadb73842ffad32037795ab4dbdede02d96d876603757e41827dd8ad3a7dbd1979c995c6cf431eb2fe7f869b5646882775ed42dfc9fdaa8709a6f2a521c4df056cbd57511f9ee8eca50f4a1a341f5d470e702b64af0e05b00481ea86db9c8c2c2b7c1de717f0b1ff816838c2d6a189a18864421a889cf87068b49c940139d235830f6b98d4ca2676669cae6367286549ad73981ab3edf7bd6c51796f2d1682958146", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf250c00000000000b0011000700aff03fec2e9c8db53cc6e29f390000000800090005ac0f0000000a0081b50116239e37a8becfe6b4ff0000000a00060008021100000100000e000b0010000a00e938054d42d6cd3581845500"], 0x64}}, 0x44000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000180)={[{0xc6, 0x9, 0x3, 0x8, 0x4d, 0x1, 0x4, 0x8, 0x1, 0x6, 0xa, 0x0, 0x3}, {0xfffe, 0xa, 0x9c, 0x4, 0x4, 0xfa, 0x0, 0x7, 0xa6, 0x1, 0x53, 0xff, 0x25f4ec2f}, {0x8, 0x7, 0xa5, 0x2, 0x2b, 0x6, 0x5, 0x9, 0x6, 0x7, 0x4, 0x1, 0xac81}], 0x9}) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000100)={[{0x5, 0x7, 0x3, 0x9, 0x4, 0x4, 0x3, 0x0, 0xf8, 0x1, 0x42, 0xf8, 0xfffffffffffffff7}, {0x7, 0x4, 0x8, 0xdb, 0x9, 0x9, 0x1, 0x9, 0x9, 0x1, 0x9, 0xf2, 0xc27e}, {0x401, 0x9, 0x40, 0x9, 0x7, 0x2, 0xc0, 0x6, 0x4, 0x36, 0x1, 0xd, 0x6b}], 0x5f}) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) recvmmsg(r10, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f0000000200)=""/10, 0xa}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000002f40)=""/89, 0x59}, {&(0x7f00000019c0)=""/228, 0xe4}], 0x7}, 0x40}], 0x1, 0x40010020, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r8, 0x0, r9, 0x0, 0x2000000002ffff, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x2958028, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r9, @ANYRES32=0x0]) 915.508396ms ago: executing program 7 (id=3803): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, 0x0, 0x40080) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x40880) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001240)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x54, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x1ff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xb5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005240000000d240f0100000000000000000007241400000000042412"], 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0xdc, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x22, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0xa, 0x0, 0x19}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x6, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}, 0x400}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001400)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/4096, 0x1000, 0x2, 0x31}, @flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000001200)={0x0, 0x28, 0x40}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001180)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x4, 0x0, 0xc}, @fda={0x66646185, 0x6, 0x1, 0x2a}}, &(0x7f00000012c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, 0x0, 0x40080) (async) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x40880) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r0) (async) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001240)={'wpan4\x00'}) (async) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x54, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x1ff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xb5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005240000000d240f0100000000000000000007241400000000042412"], 0x0) (async) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0xdc, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x22, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0xa, 0x0, 0x19}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x6, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}, 0x400}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001400)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/4096, 0x1000, 0x2, 0x31}, @flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000001200)={0x0, 0x28, 0x40}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001180)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x4, 0x0, 0xc}, @fda={0x66646185, 0x6, 0x1, 0x2a}}, &(0x7f00000012c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (async) 809.071468ms ago: executing program 0 (id=3804): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x400000f5, 0x0, 0x1}]}) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x10ae) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) (async) pipe2(&(0x7f0000000000), 0x0) (async) fcntl$setpipe(r2, 0x407, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x400000f5, 0x0, 0x1}]}) (async) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) (async) fcntl$setpipe(r2, 0x407, 0x10ae) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) (async) 644.6829ms ago: executing program 0 (id=3805): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 612.42655ms ago: executing program 0 (id=3806): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c1000000a000000000000", 0x58}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000005c0)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1, 0x0, 0xc08, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000180), 0x10) syz_open_procfs(0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f00000000c0)={0x1, 0x7}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000300)='./cgroup\x00', 0x100) lsetxattr$security_evm(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000200), &(0x7f0000000280)=@sha1={0x1, "13127f07ed48ecba2bd263f35da156cf818a1078"}, 0x15, 0x3) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000083c0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x80, r2}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000004c40)={@private0={0xfc, 0x0, '\x00', 0x1}, r8}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r9, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) pipe2$9p(&(0x7f0000001900), 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x5, 0x978d}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) signalfd(r5, &(0x7f0000000080)={[0x10000]}, 0x8) 346.011605ms ago: executing program 9 (id=3807): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x201) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 345.664705ms ago: executing program 9 (id=3809): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000006480)={0x30, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}]}, 0x30}], 0x1}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) futex(0x0, 0xb, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0, 0x2) umount2(&(0x7f0000000040)='.\x00', 0x2) 289.133385ms ago: executing program 9 (id=3810): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f00000000c0)=0xce7, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='\x00', &(0x7f0000000200)='/dev/cpu/#/msr\x00', 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) mkdir(&(0x7f0000000440)='./file1\x00', 0x92) accept4$tipc(r6, 0x0, &(0x7f0000000040), 0x800) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000002c0)={0x43, 0x6, 0x2}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fbdbdf251d0000ed0b009900000000804a0000000c009900100000001a0000000c009900040000002f0000000480238008000300", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="07b48e0beb2bd00d17000000"], 0x58}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x40800) syz_clone3(&(0x7f00000018c0)={0x40000000, 0x0, 0x0, &(0x7f0000001780), {0x2b}, &(0x7f00000017c0)=""/11, 0xb, 0x0, &(0x7f0000001880)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_clone3(&(0x7f0000002200)={0x1300100, &(0x7f0000002080), 0x0, 0x0, {0x1}, &(0x7f0000002140)=""/62, 0x3e, &(0x7f0000002180)=""/54, &(0x7f00000021c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xc000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x10) 278.900435ms ago: executing program 9 (id=3811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x43d}, 0x0) 259.581106ms ago: executing program 9 (id=3812): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) r1 = eventfd(0x7fd4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs$userns(r2, &(0x7f0000000040)) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3#\x82\xf7\x92\x10\x02k!i\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,{\xd3:`G\x81oN\xbd\x0f\xb8\xb7\xc0\xb8\"T0Z\xb1\x18\xe2\xd4&\xdb\x19\xb1\xbe\xcc}\x9d\x84\x10\x0e8^.d\xe1wSJ\xcf\xec\t\x12\x8b\xe1\x92\xf9hq\xbbs\x80x\xd5\xee~\xef\xea\x018\xec\xc3t\x992\xea\x93\x92\xdb\xb0|sdK\n\x8eN\x9a\x02\xe2\xdd\xf7Ho\x0f\"\f\xaf\xd7hb\a\x00\x00$\x1a\xc9\x06\x12Bg\x1a\xc8$v\xa2\xa1\xad\xed{\x8a\x0fn\xa8U0B\b\xc3Y=\xa6\xe9=m\xdc\xd9\x03\xa8\x93\x9c\xb6\xf8\xfc\xbb\n\xd9\xc8{\x1cs\xf5\xbd^\xb1\xda\x0f\xcb\xc5R\xe7b\xdf\xae\x7fo\x98\xc9\xf2\xa6\xa8\xaa)~\xa7\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x83\xd8\rX@\xa2JA\x84\xcc6\xc8\x05r\xb0\xbe\xf5\\\xfc\xb0\xa1\xb1\xa1`%\x18\x8d$\x89\x1cVD\xc9\x04\x1d\xc4#\xe9m\xa1\x82\x9a\x1e\x9c\xd1\"?4c7\x00Jf\x8a:X\xe1u\xb14.tf\xbd\x9b\xac\xa7\xb0o\x0e\xac!\x1f\x91+\xe2w\"\xf8\x9b\xe4\x8e\xcf#>\xbfi!\xc0\xc5\xd6\xab\xe2\xb8\x8e\x99}\x00j\x8d\xa7Z') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 40.545389ms ago: executing program 0 (id=3813): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48d4}, 0x4040000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x201) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 40.015429ms ago: executing program 7 (id=3814): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x1}, @release={0x40046306, 0x2}, @enter_looper, @acquire_done={0x40106309, 0x3}], 0x806, 0x0, &(0x7f0000000600)="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"}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001e40)={0xe0, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x101}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0xfffffffffffffff7, 0xa}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @request_death, @dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/65, 0x41, 0x1, 0x38}, @flat=@weak_binder={0x77622a85, 0x110a}, @fda={0x66646185, 0x6, 0x2, 0x15}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x1000}, @release, @acquire, @dead_binder_done, @acquire={0x40046305, 0x1}], 0x1000, 0x0, &(0x7f0000000e40)="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"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioperm(0x1, 0x3, 0x163f) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x201, &(0x7f00000001c0)={0x0, 0x300}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 37.079109ms ago: executing program 9 (id=3821): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = eventfd2(0x58, 0x80000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000250001002bbd7000fcdbdf2526dd187513000000002e"], 0xa0}], 0x1, 0x0, 0x0, 0x4050}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xfc) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x39000, 0x2) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000200)="ac", 0xfffffdef}], 0x1) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000300)="65650f019900000400640f35baf80c66b894170c8466efbafc0c66b82c0f000066ef66b90b0000000f01c10f320f10f20f01cb0f01c9b83c000f00d066e0e3", 0x3f}], 0x1, 0x62, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r10 = socket(0x28, 0x5, 0x0) r11 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r11, 0x4) connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) write$eventfd(r1, &(0x7f0000000000)=0x5, 0x8) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 36.805749ms ago: executing program 6 (id=3815): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x810, r0, 0x5980e000) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, 0x0, &(0x7f0000000080)) 0s ago: executing program 6 (id=3816): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) kernel console output (not intermixed with test programs): s 0 [ 166.010325][ T6818] Buffer I/O error on dev loop7, logical block 0, async page read [ 166.041892][ T6818] loop7: unable to read partition table [ 166.058804][ T6812] overlay: ./bus is not a directory [ 166.064295][ T6818] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 166.129169][ T6826] overlayfs: failed to clone upperpath [ 166.282022][ T36] audit: type=1326 audit(1753232708.775:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.5.2133" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f362df8e9a9 code=0x0 [ 166.305023][ T36] audit: type=1326 audit(1753232708.785:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.5.2133" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f362df8e9a9 code=0x0 [ 166.366188][ T6850] veth0_vlan: entered allmulticast mode [ 166.480407][ T6858] rust_binder: Write failure EFAULT in pid:700 [ 166.486841][ T36] audit: type=1400 audit(1753232708.975:682): avc: denied { bind } for pid=6855 comm="syz.5.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.554672][ T6866] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.620437][ T36] audit: type=1400 audit(1753232709.115:683): avc: denied { relabelfrom } for pid=6870 comm="syz.4.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 166.647486][ T36] audit: type=1400 audit(1753232709.145:684): avc: denied { relabelto } for pid=6870 comm="syz.4.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 166.676244][ T6871] syzkaller0: entered promiscuous mode [ 166.681879][ T6871] syzkaller0: entered allmulticast mode [ 166.751673][ T6876] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.803196][ T6877] rust_binder: Error in use_page_slow: ESRCH [ 166.809677][ T6877] rust_binder: use_range failure ESRCH [ 166.815734][ T6877] rust_binder: Failed to allocate buffer. len:5144, is_oneway:false [ 166.821263][ T6877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 166.829499][ T6877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:713 [ 166.839510][ T6877] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 166.849129][ T6877] rust_binder: Read failure Err(EFAULT) in pid:713 [ 167.258718][ T346] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 167.275407][ T346] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 167.285676][ T346] asix 8-1:0.0: probe with driver asix failed with error -71 [ 167.294357][ T346] usb 8-1: USB disconnect, device number 5 [ 167.355320][ T6884] SELinux: Context system_u:object_r:event_device_t:s0 is not valid (left unmapped). [ 167.709608][ T6903] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.020181][ T6927] veth0_vlan: entered allmulticast mode [ 168.039188][ T6927] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 168.048375][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 168.048391][ T36] audit: type=1326 audit(1753232710.535:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.7.2162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb4658e9a9 code=0x0 [ 168.097568][ T36] audit: type=1400 audit(1753232710.585:688): avc: denied { sqpoll } for pid=6934 comm="syz.6.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 168.907737][ T36] audit: type=1400 audit(1753232711.395:689): avc: denied { accept } for pid=6948 comm="syz.7.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.405279][ T6985] bpf: Bad value for 'mode' [ 169.758998][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2193'. [ 169.769000][ T36] audit: type=1326 audit(1753232712.255:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.5.2193" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f362df8e9a9 code=0x0 [ 169.958533][ T880] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 170.108523][ T880] usb 8-1: Using ep0 maxpacket: 16 [ 170.114857][ T880] usb 8-1: config 1 interface 0 has no altsetting 0 [ 170.123464][ T880] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 170.132955][ T880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.141191][ T880] usb 8-1: Product: syz [ 170.145510][ T880] usb 8-1: Manufacturer: syz [ 170.150398][ T880] usb 8-1: SerialNumber: syz [ 170.354239][ T7020] 9pnet_fd: Insufficient options for proto=fd [ 170.373857][ T880] usbhid 8-1:1.0: can't add hid device: -71 [ 170.382644][ T880] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 170.393785][ T880] usb 8-1: USB disconnect, device number 6 [ 170.448048][ T7028] batadv_slave_1: entered promiscuous mode [ 170.454943][ T7028] tc_dump_action: action bad kind [ 170.461049][ T7027] batadv_slave_1: left promiscuous mode [ 170.608124][ T36] audit: type=1326 audit(1753232713.095:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.5.2198" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f362df8e9a9 code=0x0 [ 171.027688][ T7051] overlayfs: failed to clone upperpath [ 171.115867][ T7060] 9pnet_fd: Insufficient options for proto=fd [ 171.730695][ T7095] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2218'. [ 171.939374][ T36] audit: type=1400 audit(1753232714.435:692): avc: denied { watch } for pid=7124 comm="syz.5.2230" path="/253/bus" dev="tmpfs" ino=1424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 172.439884][ T7166] incfs: Can't find or create .index dir in ./bus [ 172.452185][ T7166] incfs: mount failed -1 [ 172.467206][ T36] audit: type=1326 audit(1753232714.955:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.6.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x7ffc0000 [ 172.528353][ T36] audit: type=1326 audit(1753232714.955:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.6.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7ff62118e9a9 code=0x7ffc0000 [ 172.564831][ T36] audit: type=1326 audit(1753232714.995:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.6.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x7ffc0000 [ 172.588845][ T36] audit: type=1326 audit(1753232714.995:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.6.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff62118e9a9 code=0x7ffc0000 [ 172.672452][ T7185] overlayfs: failed to clone upperpath [ 172.928545][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 173.089884][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.100972][ T10] usb 8-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 173.119608][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.139326][ T10] usb 8-1: config 0 descriptor?? [ 173.193665][ T7215] 9pnet_fd: Insufficient options for proto=fd [ 173.549286][ T7220] binder: Unknown parameter 'defcontext' [ 173.559431][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 173.565428][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 173.579432][ T10] usb 8-1: USB disconnect, device number 7 [ 174.318514][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 174.488539][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 174.494936][ T10] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 174.503583][ T10] usb 8-1: config 0 has no interface number 0 [ 174.509924][ T10] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 174.520164][ T10] usb 8-1: config 0 interface 196 has no altsetting 0 [ 174.538711][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 174.547844][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.556278][ T10] usb 8-1: Product: syz [ 174.560649][ T10] usb 8-1: Manufacturer: syz [ 174.565297][ T10] usb 8-1: SerialNumber: syz [ 174.578716][ T10] usb 8-1: config 0 descriptor?? [ 174.584069][ T7231] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 174.596290][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 174.596312][ T36] audit: type=1326 audit(1753232717.085:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.6.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x7fc00000 [ 174.658549][ T36] audit: type=1326 audit(1753232717.085:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.6.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff62118e9a9 code=0x7fc00000 [ 174.682468][ T36] audit: type=1326 audit(1753232717.085:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.6.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x7fc00000 [ 174.706789][ T36] audit: type=1326 audit(1753232717.085:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.6.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x7fc00000 [ 174.732043][ T36] audit: type=1326 audit(1753232717.085:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.6.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x7fc00000 [ 174.755671][ T36] audit: type=1326 audit(1753232717.085:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.6.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x7fc00000 [ 174.788544][ T36] audit: type=1326 audit(1753232717.085:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.6.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x7fc00000 [ 174.812486][ T36] audit: type=1326 audit(1753232717.085:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.6.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x7fc00000 [ 174.837509][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2265'. [ 174.848394][ T36] audit: type=1326 audit(1753232717.085:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.6.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x7fc00000 [ 174.871812][ T36] audit: type=1326 audit(1753232717.085:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.6.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x7fc00000 [ 175.357113][ T10] ipheth 8-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 175.378750][ T10] ipheth 8-1:0.196: probe with driver ipheth failed with error -71 [ 175.393515][ T10] usb 8-1: USB disconnect, device number 8 [ 175.743730][ T7251] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2273'. [ 176.148522][ T880] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 176.278535][ T880] usb 8-1: device descriptor read/64, error -71 [ 176.528529][ T880] usb 8-1: device descriptor read/64, error -71 [ 176.768546][ T880] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 176.898509][ T880] usb 8-1: device descriptor read/64, error -71 [ 176.919151][ T7299] devpts: called with bogus options [ 176.929219][ T7299] tipc: Enabling of bearer rejected, failed to enable media [ 177.016697][ T7310] overlayfs: failed to clone upperpath [ 177.158522][ T880] usb 8-1: device descriptor read/64, error -71 [ 177.202281][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2304'. [ 177.212238][ T7337] fuse: Unknown parameter 'vd' [ 177.289082][ T880] usb usb8-port1: attempt power cycle [ 177.629137][ T880] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 177.659607][ T880] usb 8-1: device descriptor read/8, error -71 [ 177.705048][ T7341] Invalid ELF header len 16 [ 177.789545][ T880] usb 8-1: device descriptor read/8, error -71 [ 177.970321][ T7364] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2315'. [ 177.988333][ T7365] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2315'. [ 178.028556][ T880] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 178.049648][ T880] usb 8-1: device descriptor read/8, error -71 [ 178.179510][ T880] usb 8-1: device descriptor read/8, error -71 [ 178.288662][ T880] usb usb8-port1: unable to enumerate USB device [ 178.557787][ T7390] overlayfs: failed to clone upperpath [ 178.722161][ T7405] syz.6.2330 (7405): attempted to duplicate a private mapping with mremap. This is not supported. [ 178.839840][ T7426] fuse: Unknown parameter '3 HID v63.cf Device [syz0] on syz1 [ 191.021163][ T8107] fido_id[8107]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 191.250444][ T36] audit: type=1326 audit(1753232733.745:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.5.2574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f362df8e9a9 code=0x0 [ 191.346064][ T346] usb 8-1: USB disconnect, device number 17 [ 191.425766][ T8127] 9pnet_fd: Insufficient options for proto=fd [ 191.733321][ T8157] /dev/nullb0: Can't lookup blockdev [ 191.931061][ T8179] rust_binder: Read failure Err(EAGAIN) in pid:93 [ 192.078541][ T8188] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 192.141005][ T8199] 9pnet_fd: p9_fd_create_tcp (8199): problem connecting socket to 127.0.0.1 [ 192.170785][ T36] audit: type=1400 audit(1753232734.665:745): avc: denied { setattr } for pid=8198 comm="syz.8.2600" name="ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 192.318998][ T8197] overlayfs: failed to clone upperpath [ 192.459650][ T8213] rust_binder: 123: no such ref 3 [ 192.496743][ T8215] 9pnet_fd: Insufficient options for proto=fd [ 192.538990][ T36] audit: type=1400 audit(1753232735.035:746): avc: denied { ioctl } for pid=8225 comm="syz.7.2610" path="/" dev="configfs" ino=499 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.621970][ T8233] netlink: 'syz.7.2612': attribute type 4 has an invalid length. [ 192.629783][ T8233] netlink: 'syz.7.2612': attribute type 5 has an invalid length. [ 192.637605][ T8233] netlink: 'syz.7.2612': attribute type 1 has an invalid length. [ 192.646605][ T8233] /dev/rnullb0: Can't open blockdev [ 192.678298][ T8237] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 192.687236][ T8237] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 192.695849][ T8237] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 192.705688][ T8237] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 193.076946][ T8257] /dev/rnullb0: Can't lookup blockdev [ 193.077580][ T8254] overlayfs: conflicting options: metacopy=off,verity=require [ 193.322592][ T8288] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.359906][ T8292] x_tables: duplicate entry at hook 2 [ 193.386015][ T8295] binder: Unknown parameter '' [ 193.444167][ T36] audit: type=1326 audit(1753232736.937:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8291 comm="syz.5.2633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f362df8e9a9 code=0x0 [ 193.496584][ T36] audit: type=1400 audit(1753232736.987:748): avc: denied { relabelfrom } for pid=8305 comm="syz.8.2638" name="UDPv6" dev="sockfs" ino=39737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 193.520803][ T8307] SELinux: Context system_u:object_r:public_content_t:s0 is not valid (left unmapped). [ 193.534915][ T36] audit: type=1400 audit(1753232737.027:749): avc: denied { relabelto } for pid=8305 comm="syz.8.2638" name="UDPv6" dev="sockfs" ino=39737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:public_content_t:s0" [ 193.536235][ T8307] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 193.593652][ T8311] rust_binder: 143: no such ref 3 [ 193.636246][ T8314] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2097155 [ 193.644927][ T8314] rust_binder: Write failure EINVAL in pid:145 [ 193.646316][ T8315] 9pnet_fd: Insufficient options for proto=fd [ 193.718854][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2643'. [ 193.719415][ T36] audit: type=1326 audit(1753232737.217:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.6.2643" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff62118e9a9 code=0x0 [ 194.203537][ T8331] rust_binder: Write failure EFAULT in pid:152 [ 194.203669][ T8331] rust_binder: 152: no such ref 0 [ 194.215879][ T8331] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 194.223376][ T8331] rust_binder: Write failure EINVAL in pid:152 [ 194.223551][ T8331] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 194.237184][ T8331] rust_binder: Write failure EINVAL in pid:152 [ 194.394497][ T8346] EXT4-fs: Ignoring removed check option [ 194.408554][ T8346] No source specified [ 194.609591][ T8363] syz.8.2656: attempt to access beyond end of device [ 194.609591][ T8363] loop8: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 194.622842][ T8363] EXT4-fs (loop8): unable to read superblock [ 194.636249][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2656'. [ 194.770424][ T8368] 9pnet_fd: Insufficient options for proto=fd [ 194.820455][ T36] audit: type=1400 audit(1753232738.317:751): avc: denied { mounton } for pid=8367 comm="syz.8.2658" path="/57/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 194.850975][ T8370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8370 comm=syz.8.2658 [ 194.881654][ T36] audit: type=1326 audit(1753232738.377:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.5.2663" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f362df8e9a9 code=0x0 [ 195.352383][ T8398] netlink: 'syz.7.2669': attribute type 4 has an invalid length. [ 195.782299][ T8419] /dev/rnullb0: Can't lookup blockdev [ 195.788581][ T8422] /dev/rnullb0: Can't lookup blockdev [ 195.886156][ T8433] /dev/rnullb0: Can't lookup blockdev [ 196.023510][ T8447] binder: Bad value for 'defcontext' [ 196.189898][ T8469] overlayfs: failed to clone upperpath [ 196.280002][ T8488] rust_binder: Error in use_page_slow: ESRCH [ 196.280036][ T8488] rust_binder: use_range failure ESRCH [ 196.287019][ T8488] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 196.292840][ T8488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 196.301331][ T8488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:198 [ 196.328731][ T8498] netlink: 'syz.8.2706': attribute type 27 has an invalid length. [ 196.377063][ T8504] netlink: 'syz.6.2711': attribute type 32 has an invalid length. [ 196.478510][ T346] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 196.650644][ T346] usb 8-1: Using ep0 maxpacket: 8 [ 196.670583][ T346] usb 8-1: unable to get BOS descriptor or descriptor too short [ 196.683421][ T346] usb 8-1: config 8 has an invalid interface number: 216 but max is 1 [ 196.694239][ T346] usb 8-1: config 8 has an invalid interface number: 231 but max is 1 [ 196.703886][ T346] usb 8-1: config 8 has an invalid descriptor of length 36, skipping remainder of the config [ 196.717457][ T346] usb 8-1: config 8 has no interface number 0 [ 196.724813][ T346] usb 8-1: config 8 has no interface number 1 [ 196.731570][ T346] usb 8-1: config 8 interface 216 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 8 [ 196.742869][ T346] usb 8-1: config 8 interface 231 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 196.756487][ T346] usb 8-1: config 8 interface 216 has no altsetting 0 [ 196.763512][ T346] usb 8-1: config 8 interface 231 has no altsetting 0 [ 196.772494][ T346] usb 8-1: New USB device found, idVendor=0c52, idProduct=2813, bcdDevice=be.66 [ 196.781874][ T346] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.790106][ T346] usb 8-1: Product: syz [ 196.794353][ T346] usb 8-1: Manufacturer: syz [ 196.799197][ T346] usb 8-1: SerialNumber: syz [ 196.810305][ T8472] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 197.024250][ T346] ftdi_sio 8-1:8.216: FTDI USB Serial Device converter detected [ 197.032946][ T346] ftdi_sio ttyUSB0: unknown device type: 0xbe66 [ 197.040930][ T346] ftdi_sio 8-1:8.231: FTDI USB Serial Device converter detected [ 197.048907][ T346] ftdi_sio ttyUSB1: unknown device type: 0xbe66 [ 197.056680][ T346] usb 8-1: USB disconnect, device number 18 [ 197.065226][ T346] ftdi_sio 8-1:8.216: device disconnected [ 197.071494][ T346] ftdi_sio 8-1:8.231: device disconnected [ 197.104528][ T8544] fuseblk: Unknown parameter 'Z0x0000000000000003' [ 197.118968][ T8547] bpf: Bad value for 'mode' [ 197.144155][ T8556] overlayfs: failed to resolve './file2': -2 [ 197.175731][ T8560] overlayfs: failed to resolve './file2': -2 [ 197.182749][ T8560] SELinux: Context system_u:object_r:auditd_initrc_exec_t:s0 is not valid (left unmapped). [ 197.194223][ T36] audit: type=1400 audit(1753232740.687:753): avc: denied { relabelto } for pid=8559 comm="syz.5.2731" name="file1" dev="tmpfs" ino=2366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auditd_initrc_exec_t:s0" [ 197.221882][ T36] audit: type=1400 audit(1753232740.687:754): avc: denied { associate } for pid=8559 comm="syz.5.2731" name="file1" dev="tmpfs" ino=2366 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:auditd_initrc_exec_t:s0" [ 197.261251][ T36] audit: type=1400 audit(1753232740.717:755): avc: denied { unlink } for pid=4582 comm="syz-executor" name="file1" dev="tmpfs" ino=2366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auditd_initrc_exec_t:s0" [ 197.298043][ T8570] overlayfs: failed to clone lowerpath [ 197.304893][ T8569] overlayfs: failed to resolve './file1': -2 [ 197.511830][ T8605] cgroup: fork rejected by pids controller in /syz5 [ 197.609788][ T8594] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2743'. [ 197.624577][ T8735] bpf: Bad value for 'gid' [ 197.631061][ T8737] /dev/rnullb0: Can't open blockdev [ 197.637725][ T8615] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2743'. [ 197.837079][ T8773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8773 comm=syz.6.2759 [ 197.885759][ T8774] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3742998066 (479103752448 ns) > initial count (440160584064 ns). Using initial count to start timer. [ 198.060146][ T36] audit: type=1400 audit(1753232741.557:756): avc: denied { map } for pid=8787 comm="syz.5.2764" path="socket:[41275]" dev="sockfs" ino=41275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.352638][ T8811] overlayfs: failed to clone upperpath [ 198.735917][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2774'. [ 198.774503][ T8829] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 198.863465][ T8850] overlayfs: failed to clone upperpath [ 198.876473][ T8852] rust_binder: Error while translating object. [ 198.876508][ T8852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 198.883064][ T8852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246 [ 198.895632][ T8854] overlayfs: failed to clone upperpath [ 199.091343][ T8871] netlink: 'syz.7.2794': attribute type 3 has an invalid length. [ 199.100948][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2794'. [ 199.112207][ T8871] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 199.123882][ T8873] sit0: entered promiscuous mode [ 199.124671][ T8871] overlayfs: missing 'lowerdir' [ 199.131199][ T8873] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2795'. [ 199.146136][ T8873] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2795'. [ 199.273203][ T36] audit: type=1400 audit(1753232742.767:757): avc: denied { accept } for pid=8888 comm="syz.6.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 199.321051][ T8896] fuseblk: Bad value for 'fd' [ 199.325948][ T8896] fuseblk: Bad value for 'fd' [ 199.330987][ T8896] fuseblk: Bad value for 'fd' [ 199.335756][ T8896] fuseblk: Bad value for 'fd' [ 199.340597][ T8896] fuseblk: Bad value for 'fd' [ 199.346045][ T8896] fuseblk: Bad value for 'fd' [ 199.350863][ T8896] fuseblk: Bad value for 'fd' [ 199.356793][ T8896] fuseblk: Bad value for 'fd' [ 199.361984][ T8896] fuseblk: Bad value for 'fd' [ 199.366796][ T8896] fuseblk: Bad value for 'fd' [ 199.369636][ T8899] binder: Unknown parameter 'obje' [ 199.371661][ T8896] fuseblk: Bad value for 'fd' [ 199.381621][ T8896] fuseblk: Bad value for 'fd' [ 199.386482][ T8896] fuseblk: Bad value for 'fd' [ 199.391380][ T8896] fuseblk: Bad value for 'fd' [ 199.396157][ T8896] fuseblk: Bad value for 'fd' [ 199.400941][ T8896] fuseblk: Bad value for 'fd' [ 199.405732][ T8896] fuseblk: Bad value for 'fd' [ 199.410709][ T8896] fuseblk: Bad value for 'fd' [ 199.415576][ T8896] fuseblk: Bad value for 'fd' [ 199.420439][ T8896] fuseblk: Bad value for 'fd' [ 199.425242][ T8896] fuseblk: Bad value for 'fd' [ 199.430062][ T8896] fuseblk: Bad value for 'fd' [ 199.435299][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.442832][ T8897] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.450333][ T8897] bridge_slave_0: entered allmulticast mode [ 199.457308][ T8897] bridge_slave_0: entered promiscuous mode [ 199.464227][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.471333][ T8897] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.478546][ T8897] bridge_slave_1: entered allmulticast mode [ 199.484837][ T8897] bridge_slave_1: entered promiscuous mode [ 199.530320][ T8918] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2809'. [ 199.567394][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.574748][ T8897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.582098][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.589227][ T8897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.630225][ T8926] __vm_enough_memory: pid: 8926, comm: syz.7.2812, bytes: 8589934592 not enough memory for the allocation [ 199.644163][ T8897] veth0_vlan: entered promiscuous mode [ 199.670361][ T8897] veth1_macvtap: entered promiscuous mode [ 200.192086][ T8971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 200.192115][ T8971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:31 [ 200.532674][ T8998] rust_binder: Write failure EINVAL in pid:49 [ 200.546648][ T8998] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 148) [ 200.555014][ T8998] rust_binder: Error while translating object. [ 200.569455][ T8998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 200.577817][ T8998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 200.581940][ T8994] binder: Unknown parameter '-&:{-]{' [ 200.675539][ T9015] netlink: 'syz.5.2837': attribute type 2 has an invalid length. [ 200.908529][ T346] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 200.972016][ T36] audit: type=1326 audit(1753232744.467:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.5.2846" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f362df8e9a9 code=0x0 [ 201.080634][ T346] usb 8-1: config index 0 descriptor too short (expected 4114, got 18) [ 201.090456][ T346] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 48, using maximum allowed: 30 [ 201.101786][ T346] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 201.116530][ T346] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09 [ 201.128170][ T346] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.136803][ T346] usb 8-1: Product: syz [ 201.142325][ T346] usb 8-1: Manufacturer: syz [ 201.147523][ T346] usb 8-1: SerialNumber: syz [ 201.153514][ T346] usb 8-1: config 0 descriptor?? [ 201.389391][ T346] usb 8-1: USB disconnect, device number 19 [ 201.401977][ T3301] udevd[3301]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 201.744854][ T9225] fuseblk: Unknown parameter '`w!ͭq)󂥧70x0000000000000004' [ 201.851040][ T308] bridge_slave_1: left allmulticast mode [ 201.859123][ T308] bridge_slave_1: left promiscuous mode [ 201.867176][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.889688][ T308] bridge_slave_0: left allmulticast mode [ 201.918512][ T308] bridge_slave_0: left promiscuous mode [ 201.928674][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.031277][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2866'. [ 202.078150][ T308] veth1_macvtap: left promiscuous mode [ 202.088822][ T308] veth0_vlan: left promiscuous mode [ 202.249528][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2872'. [ 202.271446][ T36] audit: type=1400 audit(1753232745.767:759): avc: denied { map } for pid=9255 comm="syz.9.2872" path="socket:[44048]" dev="sockfs" ino=44048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.299233][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2872'. [ 202.310304][ T9256] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2872'. [ 202.328795][ T45] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 202.436914][ T9264] overlayfs: failed to clone upperpath [ 202.452588][ T9268] fuse: Bad value for 'fd' [ 202.457479][ T36] audit: type=1400 audit(1753232745.947:760): avc: denied { remount } for pid=9267 comm="syz.5.2876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 202.478180][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2876'. [ 202.487941][ T45] usb 8-1: Using ep0 maxpacket: 16 [ 202.494851][ T45] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 202.504436][ T45] usb 8-1: config 1 has no interface number 0 [ 202.510954][ T45] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 202.521955][ T45] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 202.533017][ T45] usb 8-1: config 1 interface 105 has no altsetting 0 [ 202.539577][ T9274] overlay: Unknown parameter 'fsname' [ 202.542162][ T45] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 202.555080][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.558749][ T36] audit: type=1326 audit(1753232746.047:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9273 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362df8e9a9 code=0x7ffc0000 [ 202.563655][ T45] usb 8-1: Product: syz [ 202.592419][ T45] usb 8-1: Manufacturer: syz [ 202.597443][ T45] usb 8-1: SerialNumber: syz [ 202.599702][ T36] audit: type=1326 audit(1753232746.047:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9273 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f362df8e9a9 code=0x7ffc0000 [ 202.626923][ T36] audit: type=1326 audit(1753232746.047:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9273 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362df8e9a9 code=0x7ffc0000 [ 202.648839][ T9241] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 202.652296][ T36] audit: type=1326 audit(1753232746.047:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9273 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362df8e9a9 code=0x7ffc0000 [ 202.663711][ T9241] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 202.683731][ T36] audit: type=1326 audit(1753232746.047:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9273 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f362df8e9a9 code=0x7ffc0000 [ 202.715214][ T36] audit: type=1326 audit(1753232746.047:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9273 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362df8e9a9 code=0x7ffc0000 [ 202.741483][ T36] audit: type=1326 audit(1753232746.047:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9273 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f362df85967 code=0x7ffc0000 [ 202.794685][ T36] audit: type=1326 audit(1753232746.047:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9273 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f362df2ab89 code=0x7ffc0000 [ 202.912854][ T45] aqc111 8-1:1.105: probe with driver aqc111 failed with error -71 [ 202.935049][ T45] usb 8-1: USB disconnect, device number 20 [ 203.340226][ T9323] overlayfs: failed to clone upperpath [ 203.342341][ T9324] 9pnet_fd: Insufficient options for proto=fd [ 203.354907][ T9323] tc_dump_action: action bad kind [ 203.496296][ T9332] input: syz1 as /devices/virtual/input/input20 [ 203.718892][ T9353] 9pnet_fd: Insufficient options for proto=fd [ 203.849472][ T9375] __nla_validate_parse: 1 callbacks suppressed [ 203.849495][ T9375] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2917'. [ 203.946573][ T9383] /dev/rnullb0: Can't lookup blockdev [ 204.429502][ T9420] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 204.739063][ T9441] overlay: Unknown parameter 'uid<00000000000000000000' [ 204.767281][ T9446] overlayfs: cannot append lower layer [ 204.908534][ T64] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 204.998247][ T9463] bpf: Bad value for 'mode' [ 205.009415][ T9465] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 205.079591][ T64] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.108723][ T64] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 205.118986][ T64] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.130471][ T64] usb 10-1: config 0 descriptor?? [ 205.339921][ T64] usbhid 10-1:0.0: can't add hid device: -71 [ 205.347116][ T64] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 205.362867][ T64] usb 10-1: USB disconnect, device number 2 [ 205.640080][ T9527] /dev/rnullb0: Can't open blockdev [ 205.828496][ T64] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 205.948554][ T45] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 205.989958][ T64] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.001656][ T64] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 206.011496][ T64] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.020670][ T64] usb 10-1: config 0 descriptor?? [ 206.088649][ T45] usb 8-1: device descriptor read/64, error -71 [ 206.328638][ T45] usb 8-1: device descriptor read/64, error -71 [ 206.428193][ T9568] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 206.568825][ T45] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 206.698563][ T45] usb 8-1: device descriptor read/64, error -71 [ 206.850983][ T64] usbhid 10-1:0.0: can't add hid device: -71 [ 206.857565][ T64] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 206.869880][ T64] usb 10-1: USB disconnect, device number 3 [ 206.876064][ T9579] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 206.948600][ T45] usb 8-1: device descriptor read/64, error -71 [ 207.058689][ T45] usb usb8-port1: attempt power cycle [ 207.398741][ T45] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 207.419553][ T45] usb 8-1: device descriptor read/8, error -71 [ 207.549552][ T45] usb 8-1: device descriptor read/8, error -71 [ 207.562218][ T9603] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 207.573993][ T9603] overlayfs: conflicting options: userxattr,redirect_dir=on [ 207.599654][ T9610] overlayfs: missing 'lowerdir' [ 207.611435][ T9613] binder: Unknown parameter 'Q9 !7?u8\`' [ 207.653544][ T9617] fuseblk: Bad value for 'fd' [ 207.808518][ T45] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 207.810857][ T9622] netlink: 'syz.9.2995': attribute type 4 has an invalid length. [ 207.829806][ T45] usb 8-1: device descriptor read/8, error -71 [ 207.960181][ T45] usb 8-1: device descriptor read/8, error -71 [ 208.078625][ T45] usb usb8-port1: unable to enumerate USB device [ 208.258561][ T31] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 208.388542][ T31] usb 10-1: device descriptor read/64, error -71 [ 208.638518][ T31] usb 10-1: device descriptor read/64, error -71 [ 208.687104][ T9656] /dev/rnullb0: Can't lookup blockdev [ 208.697573][ T9656] sock: sock_set_timeout: `syz.5.3007' (pid 9656) tries to set negative timeout [ 208.715213][ T9656] /dev/rnullb0: Can't lookup blockdev [ 208.816285][ T9680] 9pnet_fd: Insufficient options for proto=fd [ 208.855169][ T9687] incfs: Options parsing error. -22 [ 208.860905][ T9687] incfs: mount failed -22 [ 208.898523][ T31] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 208.920056][ T9698] overlay: Unknown parameter 'obj_user' [ 208.948736][ T9702] netlink: 'syz.5.3022': attribute type 4 has an invalid length. [ 209.048527][ T31] usb 10-1: device descriptor read/64, error -71 [ 209.104217][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 209.104345][ T36] audit: type=1400 audit(1753232752.597:781): avc: denied { watch_reads } for pid=9712 comm="syz.5.3025" path="/508/file0" dev="tmpfs" ino=2827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 209.142457][ T9713] 9pnet_fd: Insufficient options for proto=fd [ 209.185109][ T9715] tc_dump_action: action bad kind [ 209.232558][ T9722] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3029'. [ 209.318502][ T31] usb 10-1: device descriptor read/64, error -71 [ 209.407513][ T9732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=9732 comm=syz.5.3031 [ 209.420623][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3031'. [ 209.430868][ T31] usb usb10-port1: attempt power cycle [ 209.431986][ T9732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=9732 comm=syz.5.3031 [ 209.768532][ T31] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 209.789866][ T31] usb 10-1: device descriptor read/8, error -71 [ 209.919943][ T31] usb 10-1: device descriptor read/8, error -71 [ 210.168556][ T31] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 210.190457][ T31] usb 10-1: device descriptor read/8, error -71 [ 210.330101][ T31] usb 10-1: device descriptor read/8, error -71 [ 210.348027][ T9748] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3037'. [ 210.366314][ T9748] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.376534][ T9748] bridge_slave_1 (unregistering): left allmulticast mode [ 210.391163][ T9748] bridge_slave_1 (unregistering): left promiscuous mode [ 210.399355][ T9748] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.449168][ T31] usb usb10-port1: unable to enumerate USB device [ 210.466483][ T36] audit: type=1400 audit(1753232753.957:782): avc: denied { append } for pid=9756 comm="syz.7.3039" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.494415][ T9754] 9pnet_fd: Insufficient options for proto=fd [ 210.517898][ T9764] netlink: 'syz.5.3041': attribute type 5 has an invalid length. [ 210.528600][ T9764] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3041'. [ 210.591521][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3044'. [ 210.605576][ T36] audit: type=1326 audit(1753232754.097:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9772 comm="syz.5.3044" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f362df8e9a9 code=0x0 [ 211.390319][ T9788] overlayfs: missing 'lowerdir' [ 211.396625][ T9788] fuseblk: Bad value for 'fd' [ 211.463375][ T9792] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3050'. [ 211.475474][ T64] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 211.550781][ T36] audit: type=1400 audit(1753232755.047:784): avc: denied { execute } for pid=9800 comm="syz.7.3054" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 211.554421][ T9803] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 211.638700][ T64] usb 10-1: device descriptor read/64, error -71 [ 211.888764][ T64] usb 10-1: device descriptor read/64, error -71 [ 212.129881][ T64] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 212.177715][ T9811] /dev/rnullb0: Can't lookup blockdev [ 212.203757][ T36] audit: type=1400 audit(1753232755.697:785): avc: denied { shutdown } for pid=9812 comm="syz.5.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 212.278658][ T64] usb 10-1: device descriptor read/64, error -71 [ 212.358578][ T9829] /dev/nbd6: Can't lookup blockdev [ 212.407369][ T36] audit: type=1326 audit(1753232755.897:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9831 comm="syz.6.3066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x0 [ 212.528562][ T64] usb 10-1: device descriptor read/64, error -71 [ 212.638746][ T64] usb usb10-port1: attempt power cycle [ 212.653384][ T36] audit: type=1400 audit(1753232756.147:787): avc: denied { audit_read } for pid=9853 comm="syz.7.3073" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 212.679255][ T36] audit: type=1400 audit(1753232756.147:788): avc: denied { nlmsg_read } for pid=9853 comm="syz.7.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 212.806400][ T9868] /dev/rnullb0: Can't lookup blockdev [ 212.856806][ T9876] 9pnet_fd: Insufficient options for proto=fd [ 212.910658][ T9883] loop7: detected capacity change from 0 to 7 [ 212.918945][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.930159][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.939536][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.950228][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.960551][ T9883] loop7: unable to read partition table [ 212.970574][ T9883] loop_reread_partitions: partition scan of loop7 (Cj̖P=}Xp %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 212.991217][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.001533][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.010487][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.020374][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.031013][ T64] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 213.031066][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.050163][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.059838][ T64] usb 10-1: device descriptor read/8, error -71 [ 213.080528][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 213.092316][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.105556][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.114929][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.126671][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.137849][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.148590][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.159533][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.170099][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.178541][ T9884] loop7: unable to read partition table [ 213.184748][ T9884] loop_reread_partitions: partition scan of loop7 (Cj̖P=}Xp %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 213.202152][ T64] usb 10-1: device descriptor read/8, error -71 [ 213.212001][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.236805][ T9886] 9pnet_fd: Insufficient options for proto=fd [ 213.458520][ T64] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 213.479934][ T64] usb 10-1: device descriptor read/8, error -71 [ 213.620254][ T64] usb 10-1: device descriptor read/8, error -71 [ 213.657886][ T9914] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3093'. [ 213.667152][ T9914] netlink: 21 bytes leftover after parsing attributes in process `syz.5.3093'. [ 213.676391][ T9914] netlink: 'syz.5.3093': attribute type 2 has an invalid length. [ 213.684824][ T9914] netlink: 21 bytes leftover after parsing attributes in process `syz.5.3093'. [ 213.730232][ T64] usb usb10-port1: unable to enumerate USB device [ 213.775319][ T9921] input: syz1 as /devices/virtual/input/input21 [ 213.964728][ T9945] /dev/rnullb0: Can't open blockdev [ 214.135257][ T9957] SELinux: security_context_str_to_sid () failed with errno=-22 [ 214.156655][ T9959] SELinux: security_context_str_to_sid () failed with errno=-22 [ 214.461649][ T9974] 9pnet_fd: Insufficient options for proto=fd [ 214.545036][ T9983] overlayfs: failed to clone upperpath [ 214.551724][ T9985] tipc: Enabled bearer , priority 10 [ 214.585103][ T9985] netlink: 'syz.6.3114': attribute type 27 has an invalid length. [ 214.610438][ T9985] tipc: Resetting bearer [ 214.631689][ T9997] overlayfs: failed to clone upperpath [ 214.641240][ T9985] sit0: left promiscuous mode [ 214.660541][ T9985] bridge0: port 2(2N) entered disabled state [ 214.666916][ T9985] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.750179][T10000] binder: Unknown parameter '00000000000000000000006' [ 215.008613][ T31] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 215.148507][ T31] usb 10-1: device descriptor read/64, error -71 [ 215.255407][T10035] fuseblk: Bad value for 'fd' [ 215.368058][T10046] binder: Unknown parameter '01777777777777777777777' [ 215.398833][ T31] usb 10-1: device descriptor read/64, error -71 [ 215.403002][T10049] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3134'. [ 215.453639][T10053] sock: sock_timestamping_bind_phc: sock not bind to device [ 215.522901][ T36] audit: type=1400 audit(1753232759.017:789): avc: denied { create } for pid=10054 comm="syz.6.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 215.591860][T10061] netlink: 'syz.6.3142': attribute type 13 has an invalid length. [ 215.615284][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3145'. [ 215.638600][ T31] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 215.788556][ T31] usb 10-1: device descriptor read/64, error -71 [ 215.850181][T10092] netlink: 348 bytes leftover after parsing attributes in process `syz.6.3154'. [ 216.038550][ T31] usb 10-1: device descriptor read/64, error -71 [ 216.148589][ T31] usb usb10-port1: attempt power cycle [ 216.390554][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3166'. [ 216.422404][T10122] netlink: 'syz.7.3163': attribute type 5 has an invalid length. [ 216.428577][ T36] audit: type=1400 audit(1753232759.917:790): avc: denied { shutdown } for pid=10131 comm="syz.5.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 216.453064][T10132] netlink: 'syz.5.3167': attribute type 4 has an invalid length. [ 216.465463][T10132] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3167'. [ 216.487197][T10136] fuse: Bad value for 'rootmode' [ 216.498540][ T31] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 216.519936][ T31] usb 10-1: device descriptor read/8, error -71 [ 216.649569][ T31] usb 10-1: device descriptor read/8, error -71 [ 216.699989][ T36] audit: type=1326 audit(1753232760.197:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10152 comm="syz.6.3174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x0 [ 216.800409][T10154] fuse: Bad value for 'fd' [ 216.888746][ T31] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 216.909973][ T31] usb 10-1: device descriptor read/8, error -71 [ 217.039935][ T31] usb 10-1: device descriptor read/8, error -71 [ 217.127118][T10160] 9pnet_fd: Insufficient options for proto=fd [ 217.148757][ T31] usb usb10-port1: unable to enumerate USB device [ 217.283909][T10168] binder: Bad value for 'max' [ 217.402843][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3183'. [ 217.541348][T10180] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3186'. [ 217.721576][T10213] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3196'. [ 217.756478][ T36] audit: type=1326 audit(1753232761.247:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.6.3197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff62118e9a9 code=0x0 [ 217.905254][T10234] overlay: Unknown parameter 'fsmagic' [ 217.928008][T10237] __vm_enough_memory: pid: 10237, comm: syz.7.3204, bytes: 8589934592 not enough memory for the allocation [ 218.177276][T10247] 9pnet_fd: Insufficient options for proto=fd [ 218.218525][ T10] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 218.350297][ T10] usb 8-1: device descriptor read/64, error -71 [ 218.409657][ T36] audit: type=1400 audit(1753232761.907:793): avc: denied { create } for pid=10264 comm="syz.5.3214" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 218.433944][T10265] overlayfs: failed to resolve './file1': -2 [ 218.588608][ T10] usb 8-1: device descriptor read/64, error -71 [ 218.666684][T10288] 9pnet_fd: Insufficient options for proto=fd [ 218.829188][ T10] usb 8-1: new low-speed USB device number 26 using dummy_hcd [ 218.972340][ T10] usb 8-1: device descriptor read/64, error -71 [ 218.980142][T10292] rust_binder: Error while translating object. [ 218.981074][T10292] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 218.989773][T10292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:202 [ 219.033163][T10296] x_tables: duplicate entry at hook 2 [ 219.132022][T10311] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=56 sclass=netlink_audit_socket pid=10311 comm=syz.5.3230 [ 219.173964][T10313] /dev/rnullb0: Can't lookup blockdev [ 219.218521][ T10] usb 8-1: device descriptor read/64, error -71 [ 219.258581][ T489] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 219.332305][T10334] overlayfs: failed to clone upperpath [ 219.339624][ T10] usb usb8-port1: attempt power cycle [ 219.421357][T10294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.433419][T10294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.451096][ T489] usb 10-1: unable to get BOS descriptor or descriptor too short [ 219.468625][ T489] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 219.481885][ T489] usb 10-1: can't read configurations, error -71 [ 219.640322][ T36] audit: type=1326 audit(1753232763.137:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.6.3239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x0 [ 219.686269][ T10] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 219.719496][ T10] usb 8-1: device descriptor read/8, error -71 [ 219.859817][ T10] usb 8-1: device descriptor read/8, error -71 [ 220.099543][ T10] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 220.134521][ T10] usb 8-1: device descriptor read/8, error -71 [ 220.279505][ T10] usb 8-1: device descriptor read/8, error -71 [ 220.321283][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.321315][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.338603][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.345346][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.361948][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.373991][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.381742][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.388020][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.397649][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.404564][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.412098][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.412545][ T10] usb usb8-port1: unable to enumerate USB device [ 220.423863][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.438519][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.439040][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.445587][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.453931][T10357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.472306][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.483197][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.496366][T10359] bridge_slave_0: entered allmulticast mode [ 220.507344][T10359] bridge_slave_0: entered promiscuous mode [ 220.514777][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.522366][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.530569][T10359] bridge_slave_1: entered allmulticast mode [ 220.538126][T10359] bridge_slave_1: entered promiscuous mode [ 220.650246][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.657585][T10359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.665205][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.669892][T10391] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3253'. [ 220.673233][T10359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.713101][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.723632][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.736048][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.743821][T10393] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3254'. [ 220.745016][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.756355][T10393] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3254'. [ 220.773417][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.780773][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.837281][T10359] veth0_vlan: entered promiscuous mode [ 220.864250][T10359] veth1_macvtap: entered promiscuous mode [ 221.082920][T10412] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3259'. [ 221.368565][ T45] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 221.518524][ T45] usb 8-1: device descriptor read/64, error -71 [ 221.758504][ T45] usb 8-1: device descriptor read/64, error -71 [ 221.900759][T10468] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000009' [ 221.998512][ T45] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 222.128859][ T45] usb 8-1: device descriptor read/64, error -71 [ 222.234579][ T36] audit: type=1326 audit(1753232765.727:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.9.3284" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a1358e9a9 code=0x0 [ 222.278512][ T36] audit: type=1400 audit(1753232765.727:796): avc: denied { connect } for pid=10482 comm="syz.5.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 222.388857][ T45] usb 8-1: device descriptor read/64, error -71 [ 222.463869][T10499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.481484][T10502] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 222.510616][ T45] usb usb8-port1: attempt power cycle [ 222.519658][T10507] rust_binder: 31: no such ref 2 [ 222.522620][T10505] fuse: Bad value for 'group_id' [ 222.530047][T10505] fuse: Bad value for 'group_id' [ 222.613174][ T36] audit: type=1400 audit(1753232766.107:797): avc: denied { create } for pid=10535 comm="syz.5.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 222.783096][T10546] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 222.858570][ T45] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 222.879733][ T45] usb 8-1: device descriptor read/8, error -71 [ 223.009772][ T45] usb 8-1: device descriptor read/8, error -71 [ 223.248526][ T45] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 223.269974][ T45] usb 8-1: device descriptor read/8, error -71 [ 223.277873][T10560] 9pnet_virtio: no channels available for device syz [ 223.400067][ T45] usb 8-1: device descriptor read/8, error -71 [ 223.508634][ T45] usb usb8-port1: unable to enumerate USB device [ 223.548651][ T10] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 223.689107][ T10] usb 10-1: device descriptor read/64, error -71 [ 223.928569][ T10] usb 10-1: device descriptor read/64, error -71 [ 223.958553][ T489] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 224.023550][T10571] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3314'. [ 224.034075][T10572] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3314'. [ 224.050092][ T36] audit: type=1400 audit(1753232767.547:798): avc: denied { mounton } for pid=10570 comm="syz.7.3314" path="/284/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 224.098496][ T489] usb 6-1: device descriptor read/64, error -71 [ 224.168697][ T10] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 224.308682][ T10] usb 10-1: device descriptor read/64, error -71 [ 224.338552][ T489] usb 6-1: device descriptor read/64, error -71 [ 224.408543][ T493] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 224.548535][ T10] usb 10-1: device descriptor read/64, error -71 [ 224.560473][ T493] usb 8-1: not running at top speed; connect to a high speed hub [ 224.570912][ T493] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 224.585412][ T489] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 224.594228][ T493] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 224.608947][ T493] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.618314][ T493] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.629624][ T493] usb 8-1: Product: І [ 224.634681][ T493] usb 8-1: Manufacturer: Э [ 224.639471][ T493] usb 8-1: SerialNumber: Ћ [ 224.647618][T10571] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 224.658681][ T10] usb usb10-port1: attempt power cycle [ 224.728639][ T489] usb 6-1: device descriptor read/64, error -71 [ 224.968666][ T489] usb 6-1: device descriptor read/64, error -71 [ 224.998499][ T10] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 225.019657][ T10] usb 10-1: device descriptor read/8, error -71 [ 225.078616][ T489] usb usb6-port1: attempt power cycle [ 225.114991][ T493] cdc_ncm 8-1:1.0: bind() failure [ 225.123041][ T493] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 225.133395][T10576] /dev/rnullb0: Can't open blockdev [ 225.137598][ T493] cdc_ncm 8-1:1.1: bind() failure [ 225.149791][ T10] usb 10-1: device descriptor read/8, error -71 [ 225.160100][ T493] usb 8-1: USB disconnect, device number 33 [ 225.211539][T10579] /dev/rnullb0: Can't open blockdev [ 225.398554][ T10] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 225.418563][ T489] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 225.430714][ T10] usb 10-1: device descriptor read/8, error -71 [ 225.439783][ T489] usb 6-1: device descriptor read/8, error -71 [ 225.559809][ T10] usb 10-1: device descriptor read/8, error -71 [ 225.570069][ T489] usb 6-1: device descriptor read/8, error -71 [ 225.668869][ T10] usb usb10-port1: unable to enumerate USB device [ 225.808650][ T489] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 225.830587][ T489] usb 6-1: device descriptor read/8, error -71 [ 225.959866][ T489] usb 6-1: device descriptor read/8, error -71 [ 226.078671][ T489] usb usb6-port1: unable to enumerate USB device [ 226.246586][ T36] audit: type=1400 audit(1753232769.737:799): avc: denied { map } for pid=10589 comm="syz.6.3320" path="socket:[47703]" dev="sockfs" ino=47703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.272658][ T36] audit: type=1400 audit(1753232769.747:800): avc: denied { setattr } for pid=10589 comm="syz.6.3320" name="TIPC" dev="sockfs" ino=47702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.341023][ T36] audit: type=1326 audit(1753232769.837:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.9.3324" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a1358e9a9 code=0x0 [ 226.504782][T10619] tipc: Enabling of bearer rejected, failed to enable media [ 226.594883][T10623] input: syz0 as /devices/virtual/input/input22 [ 226.718493][T10634] 9pnet: Could not find request transport: xen [ 226.720193][T10631] SELinux: failed to load policy [ 226.978864][ T10] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 227.118888][ T10] usb 10-1: device descriptor read/64, error -71 [ 227.243765][T10649] tipc: Started in network mode [ 227.250009][T10649] tipc: Node identity ac14142f, cluster identity 4711 [ 227.258284][T10649] tipc: New replicast peer: 0.0.0.0 [ 227.264644][T10649] tipc: Enabled bearer , priority 10 [ 227.274770][T10649] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3343'. [ 227.288369][T10650] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3343'. [ 227.301472][T10649] rust_binder: 65: no such ref 1 [ 227.306874][T10649] rust_binder: 65: no such ref 2 [ 227.313423][T10650] rust_binder: 65: no such ref 1 [ 227.318562][ T489] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 227.318776][T10650] rust_binder: 65: no such ref 2 [ 227.368665][ T10] usb 10-1: device descriptor read/64, error -71 [ 227.478948][ T489] usb 8-1: Using ep0 maxpacket: 16 [ 227.485830][ T489] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.498020][ T489] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.507786][ T489] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.522957][ T489] usb 8-1: Product: syz [ 227.527519][ T489] usb 8-1: Manufacturer: syz [ 227.534033][ T489] usb 8-1: SerialNumber: syz [ 227.548876][ T489] cdc_ncm 8-1:1.0: skipping garbage [ 227.555307][ T489] cdc_ncm 8-1:1.0: NCM or ECM functional descriptors missing [ 227.564976][ T489] cdc_ncm 8-1:1.0: bind() failure [ 227.595840][T10673] devpts: called with bogus options [ 227.608513][ T10] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 227.748506][ T10] usb 10-1: device descriptor read/64, error -71 [ 227.756573][T10642] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3340'. [ 227.766662][T10642] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3340'. [ 227.808496][ T31] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 227.870244][ T489] usb 8-1: USB disconnect, device number 34 [ 227.924345][T10689] fuseblk: Bad value for 'fd' [ 227.978533][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 227.987160][ T31] usb 6-1: New USB device found, idVendor=056a, idProduct=0097, bcdDevice= 0.00 [ 227.997186][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.998487][ T10] usb 10-1: device descriptor read/64, error -71 [ 228.006871][ T31] usb 6-1: config 0 descriptor?? [ 228.128869][ T10] usb usb10-port1: attempt power cycle [ 228.388533][ T489] tipc: Node number set to 2886997039 [ 228.460513][T10703] overlayfs: conflicting options: userxattr,verity=on [ 228.468608][ T10] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 228.500076][ T10] usb 10-1: device descriptor read/8, error -71 [ 228.541370][T10715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.550505][T10715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.706008][ T10] usb 10-1: device descriptor read/8, error -71 [ 228.888627][ T31] wacom 0003:056A:0097.000A: hidraw0: USB HID vff.ff Device [HID 056a:0097] on usb-dummy_hcd.5-1/input0 [ 228.986052][ T31] usb 6-1: USB disconnect, device number 17 [ 229.127899][ T880] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 229.149057][ T10] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 229.345850][ T10] usb 10-1: device descriptor read/8, error -71 [ 230.084687][ T10] usb 10-1: device descriptor read/8, error -71 [ 230.107853][T10719] fido_id[10719]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 230.319304][ T10] usb usb10-port1: unable to enumerate USB device [ 231.604765][ T13] bridge_slave_1: left allmulticast mode [ 231.621124][ T13] bridge_slave_1: left promiscuous mode [ 231.626941][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.651975][ T13] bridge_slave_0: left allmulticast mode [ 231.657879][ T13] bridge_slave_0: left promiscuous mode [ 231.671142][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.728575][ T36] audit: type=1400 audit(1753232775.207:802): avc: denied { map } for pid=10751 comm="syz.7.3377" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 231.846717][T10762] /dev/rnullb0: Can't open blockdev [ 231.871523][T10762] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 231.883597][ T13] tipc: Disabling bearer [ 231.895354][ T13] tipc: Left network mode [ 231.927840][ T13] veth1_macvtap: left promiscuous mode [ 231.938564][ T13] veth0_vlan: left promiscuous mode [ 232.050675][T10778] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 232.120622][T10767] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.127876][T10767] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.140063][T10767] bridge_slave_0: entered allmulticast mode [ 232.147083][T10767] bridge_slave_0: entered promiscuous mode [ 232.163899][T10767] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.172250][T10767] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.184025][T10767] bridge_slave_1: entered allmulticast mode [ 232.192765][T10767] bridge_slave_1: entered promiscuous mode [ 232.394053][T10767] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.401364][T10810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.401857][T10767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.416793][T10767] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.417300][T10813] input: syz1 as /devices/virtual/input/input27 [ 232.424500][T10767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.511526][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.529183][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.540227][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.548181][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.567703][ T36] audit: type=1326 audit(1753232776.057:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10803 comm="syz.6.3394" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x0 [ 232.595907][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.604070][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.604987][ T36] audit: type=1326 audit(1753232776.097:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10803 comm="syz.6.3394" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x0 [ 232.660974][T10767] veth0_vlan: entered promiscuous mode [ 232.682209][T10767] veth1_macvtap: entered promiscuous mode [ 232.688903][ T36] audit: type=1326 audit(1753232776.107:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10803 comm="syz.6.3394" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x0 [ 232.740179][ T489] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 232.777472][T10823] fuse: Unknown parameter '' [ 232.807581][T10827] overlayfs: failed to resolve './file1': -2 [ 232.853195][ T36] audit: type=1400 audit(1753232776.347:806): avc: denied { map } for pid=10830 comm="syz.0.3402" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.909639][ T489] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.926407][ T489] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.940492][ T489] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.950963][ T489] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 232.961606][ T489] usb 10-1: SerialNumber: syz [ 233.138521][ T31] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 233.182759][ T489] usb 10-1: 0:2 : does not exist [ 233.198976][ T489] usb 10-1: unit 5 not found! [ 233.210974][ T489] usb 10-1: USB disconnect, device number 26 [ 233.288735][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 233.295811][ T31] usb 8-1: config 0 has an invalid descriptor of length 85, skipping remainder of the config [ 233.312459][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.329028][ T31] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 233.346991][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.358742][ T31] usb 8-1: config 0 descriptor?? [ 233.413608][ T36] audit: type=1400 audit(1753232776.907:807): avc: denied { setopt } for pid=10845 comm="syz.6.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 233.442275][ T36] audit: type=1400 audit(1753232776.917:808): avc: denied { ioctl } for pid=10845 comm="syz.6.3409" path="socket:[49516]" dev="sockfs" ino=49516 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 233.473835][ T36] audit: type=1400 audit(1753232776.917:809): avc: denied { accept } for pid=10845 comm="syz.6.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 233.505646][T10849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3410'. [ 233.518744][T10849] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3410'. [ 233.530041][T10849] netlink: 'syz.0.3410': attribute type 2 has an invalid length. [ 233.539792][T10849] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3410'. [ 233.555326][T10849] 9pnet_fd: Insufficient options for proto=fd [ 233.775333][ T31] usb 8-1: string descriptor 0 read error: -71 [ 233.786399][ T31] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 233.801690][ T31] usb 8-1: USB disconnect, device number 36 [ 233.974399][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3416'. [ 234.019246][ T36] audit: type=1326 audit(1753232777.517:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.0.3416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3956f8e9a9 code=0x0 [ 234.115536][T10882] overlayfs: failed to clone upperpath [ 234.422924][T10897] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 234.440615][T10897] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 234.452656][T10897] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 234.462492][T10897] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 234.494747][T10903] veth0_vlan: entered allmulticast mode [ 234.574560][T10911] netlink: 148 bytes leftover after parsing attributes in process `syz.9.3428'. [ 234.619578][T10916] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 234.658538][ T10] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 234.674493][T10923] overlayfs: conflicting options: userxattr,verity=require [ 234.818559][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 234.825753][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.839392][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.849289][ T10] usb 8-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 234.858652][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.873530][ T10] usb 8-1: config 0 descriptor?? [ 234.917695][T10932] fuseblk: Bad value for 'fd' [ 235.149685][T10935] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 235.153854][ T489] rust_binder: 10933: removing orphan mapping 0:1048 [ 235.181306][T10939] rust_binder: Write failure EFAULT in pid:37 [ 235.238834][T10941] /dev/rnullb0: Can't open blockdev [ 235.350883][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 235.357471][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 235.368844][ T10] usb 8-1: USB disconnect, device number 37 [ 235.548493][ T489] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 235.678504][ T489] usb 1-1: device descriptor read/64, error -71 [ 235.918525][ T489] usb 1-1: device descriptor read/64, error -71 [ 236.158557][ T489] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 236.288563][ T489] usb 1-1: device descriptor read/64, error -71 [ 236.528634][ T489] usb 1-1: device descriptor read/64, error -71 [ 236.638759][ T489] usb usb1-port1: attempt power cycle [ 236.978513][ T489] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 237.000582][ T489] usb 1-1: device descriptor read/8, error -71 [ 237.139660][ T489] usb 1-1: device descriptor read/8, error -71 [ 237.378535][ T489] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 237.410009][ T489] usb 1-1: device descriptor read/8, error -71 [ 237.513076][T11031] binder: Unknown parameter 'context' [ 237.561146][ T489] usb 1-1: device descriptor read/8, error -71 [ 237.579427][T11038] overlayfs: workdir and upperdir must be separate subtrees [ 237.678622][ T489] usb usb1-port1: unable to enumerate USB device [ 238.431368][T11049] input: syz0 as /devices/virtual/input/input28 [ 238.563750][T11053] 9pnet_fd: Insufficient options for proto=fd [ 238.585718][T11055] netlink: 'syz.6.3478': attribute type 12 has an invalid length. [ 238.662579][T11067] fuseblk: Bad value for 'group_id' [ 238.662983][T11070] fuse: Bad value for 'fd' [ 238.668646][T11067] fuseblk: Bad value for 'group_id' [ 238.678549][ T36] audit: type=1326 audit(1753232782.167:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11069 comm="syz.7.3483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb4658e9a9 code=0x0 [ 238.708703][ T489] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 238.732285][T11074] tmpfs: Unsupported parameter 'mpol' [ 238.752541][T11079] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3486'. [ 238.868540][ T489] usb 1-1: Using ep0 maxpacket: 16 [ 238.875101][ T489] usb 1-1: config index 0 descriptor too short (expected 256, got 36) [ 238.886285][ T489] usb 1-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 238.897885][ T489] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 238.907682][ T489] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 238.917202][ T489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.927081][ T489] usb 1-1: config 0 descriptor?? [ 239.489913][ T45] usb 1-1: USB disconnect, device number 16 [ 239.571507][T11117] IPv6: Can't replace route, no match found [ 239.575797][T11116] overlayfs: missing 'lowerdir' [ 239.618981][ T36] audit: type=1326 audit(1753232783.117:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.6.3500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff62118e9a9 code=0x0 [ 239.693931][T11129] netlink: 'syz.9.3502': attribute type 30 has an invalid length. [ 239.901722][T11143] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3505'. [ 239.911745][ T36] audit: type=1326 audit(1753232783.407:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.9.3505" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a1358e9a9 code=0x0 [ 240.506729][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3516'. [ 240.988627][T11173] cgroup: fork rejected by pids controller in /syz0 [ 241.777186][T11309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=11309 comm=syz.0.3534 [ 241.837858][ T36] audit: type=1326 audit(1753232786.320:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.0.3539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3956f8e9a9 code=0x0 [ 242.031557][T11343] netlink: 'syz.7.3546': attribute type 4 has an invalid length. [ 242.044094][ T36] audit: type=1326 audit(1753232786.530:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11340 comm="syz.7.3546" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb4658e9a9 code=0x0 [ 242.075980][T11343] input: syz1 as /devices/virtual/input/input29 [ 242.241614][T11355] binder: Unknown parameter 'staXސ2Lts' [ 242.287652][T11372] bpf: Bad value for 'mode' [ 242.340062][T11384] overlayfs: failed to clone lowerpath [ 242.696170][T11391] overlayfs: failed to clone upperpath [ 242.900233][T11411] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 242.971835][T11411] 9pnet_fd: Insufficient options for proto=fd [ 243.037802][T11414] overlayfs: failed to clone upperpath [ 243.066636][T11419] fuse: Unknown parameter 'default_b20-ons' [ 243.682883][T11451] 9pnet_fd: Insufficient options for proto=fd [ 243.744881][ T36] audit: type=1400 audit(1753232788.230:816): avc: denied { getopt } for pid=11454 comm="syz.0.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 243.766027][ T36] audit: type=1400 audit(1753232788.230:817): avc: denied { ioctl } for pid=11454 comm="syz.0.3583" path="socket:[51405]" dev="sockfs" ino=51405 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 243.814439][ T36] audit: type=1400 audit(1753232788.230:818): avc: denied { setopt } for pid=11454 comm="syz.0.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 243.854554][T11453] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.865625][T11453] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.872305][T11466] 9pnet_fd: Insufficient options for proto=fd [ 243.873463][T11453] bridge_slave_0: entered allmulticast mode [ 243.889639][T11453] bridge_slave_0: entered promiscuous mode [ 243.898090][T11233] 2N: left allmulticast mode [ 243.904210][T11233] 2N: left promiscuous mode [ 243.910356][T11233] bridge0: port 2(2N) entered disabled state [ 243.919607][T11233] bridge_slave_0: left allmulticast mode [ 243.926728][T11233] bridge_slave_0: left promiscuous mode [ 243.934443][T11233] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.959908][T11233] tipc: Disabling bearer [ 244.011914][T11453] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.020324][T11453] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.028320][T11453] bridge_slave_1: entered allmulticast mode [ 244.037240][T11453] bridge_slave_1: entered promiscuous mode [ 244.075196][T11233] tipc: Disabling bearer [ 244.088545][T11233] tipc: Left network mode [ 244.243874][T11453] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.252128][T11453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.261978][T11453] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.279319][T11453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.334598][T11234] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.349295][T11234] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.369178][T11227] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.378466][T11227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.388170][T11227] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.397542][T11227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.412458][ T31] rust_binder: 11492: removing orphan mapping 0:120 [ 244.433272][T11503] /dev/rnullb0: Can't open blockdev [ 244.495971][T11453] veth0_vlan: entered promiscuous mode [ 244.503632][T11507] overlayfs: workdir and upperdir must be separate subtrees [ 244.529632][T11453] veth1_macvtap: entered promiscuous mode [ 244.535174][T11508] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 244.565875][T11508] overlayfs: workdir and upperdir must be separate subtrees [ 244.615049][T11511] overlayfs: failed to clone upperpath [ 244.627184][T11511] tipc: Enabling of bearer rejected, failed to enable media [ 244.654652][T11508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.668402][T11508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.858493][ T493] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 244.901557][T11526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 244.998521][ T493] usb 8-1: device descriptor read/64, error -71 [ 245.248559][ T493] usb 8-1: device descriptor read/64, error -71 [ 245.488562][ T493] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 245.628526][ T493] usb 8-1: device descriptor read/64, error -71 [ 245.665590][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3611'. [ 245.675715][ T36] audit: type=1326 audit(1753232790.160:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.0.3611" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3956f8e9a9 code=0x0 [ 245.868682][ T493] usb 8-1: device descriptor read/64, error -71 [ 245.978835][ T493] usb usb8-port1: attempt power cycle [ 245.980138][T11547] rust_binder: Error while translating object. [ 245.985366][T11547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 245.992721][T11547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 246.192454][T11233] Bluetooth: hci0: Frame reassembly failed (-84) [ 246.318503][ T493] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 246.351413][ T493] usb 8-1: device descriptor read/8, error -71 [ 246.500245][ T493] usb 8-1: device descriptor read/8, error -71 [ 246.657844][ T36] audit: type=1326 audit(1753232791.140:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11625 comm="syz.9.3644" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a1358e9a9 code=0x0 [ 246.748561][ T493] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 246.769532][ T493] usb 8-1: device descriptor read/8, error -71 [ 246.856817][T11638] overlayfs: failed to clone lowerpath [ 246.900016][ T493] usb 8-1: device descriptor read/8, error -71 [ 247.009201][ T493] usb usb8-port1: unable to enumerate USB device [ 247.393812][T11644] overlayfs: failed to clone upperpath [ 247.556402][T11657] rust_binder: 1051: no such ref 0 [ 247.562606][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.570781][T11658] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 247.570796][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.578668][T11658] rust_binder: Write failure EINVAL in pid:1051 [ 247.590144][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.607348][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.607420][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.623691][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.623744][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.639067][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.639121][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.655808][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.655855][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.671283][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.671326][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.687457][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.687522][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.703730][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.703812][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.718033][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.718093][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.734475][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.734528][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.752269][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.752315][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.767447][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.767491][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.782148][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.782222][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.798050][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.798110][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.812982][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.813031][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.828168][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.828271][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.842066][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.842111][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.857690][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.857737][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.871485][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.871527][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.887686][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.887744][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.902429][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.902479][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.917623][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.917667][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.934406][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.934455][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.950766][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.950811][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.966801][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.966851][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.985325][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 247.985370][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.003390][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.003469][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.024686][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.024894][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.041482][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.041535][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.045325][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3656'. [ 248.048821][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.058240][ T36] audit: type=1326 audit(1753232792.540:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11660 comm="syz.0.3656" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3956f8e9a9 code=0x0 [ 248.066004][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.107495][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.107550][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.122360][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.122411][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.137382][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.137459][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.151983][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.152036][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.166112][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.166154][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.181210][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.181257][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.196468][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.196529][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.211614][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.211662][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.226951][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.226999][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.242999][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.243057][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.257574][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 248.258632][ T4667] Bluetooth: hci0: command 0x1003 tx timeout [ 248.263981][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.270313][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.292343][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.292400][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.311874][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.311966][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.326618][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.326662][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.341457][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.341515][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.355632][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.355685][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.370701][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.370756][T11657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 248.389534][T11657] rust_binder: Write failure EINVAL in pid:1051 [ 248.801327][T11670] rust_binder: Error while translating object. [ 248.809627][T11670] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 248.817201][T11670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31 [ 249.390576][T11690] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 249.492927][T11698] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.504386][T11698] rust_binder: Write failure EFAULT in pid:1082 [ 249.534977][T11700] tmpfs: Unknown parameter 'fscontehm' [ 249.558062][T11700] 9pnet_fd: Insufficient options for proto=fd [ 249.756572][T11721] overlayfs: failed to clone upperpath [ 249.764455][T11721] 9pnet_fd: Insufficient options for proto=fd [ 249.905008][T11735] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 250.119618][T11752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.129377][T11752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.358506][ T489] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 250.518672][ T489] usb 8-1: Using ep0 maxpacket: 16 [ 250.527235][ T489] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.539570][ T489] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.552689][ T489] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.563085][ T489] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.572272][ T489] usb 8-1: Product: syz [ 250.576954][ T489] usb 8-1: Manufacturer: syz [ 250.582386][ T489] usb 8-1: SerialNumber: syz [ 250.790837][ T489] usb 8-1: 0:2 : does not exist [ 250.798908][ T489] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 250.812251][ T489] usb 8-1: USB disconnect, device number 42 [ 250.822888][ T3301] udevd[3301]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 250.935656][T11783] fuse: Bad value for 'fd' [ 251.150047][T11812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3703'. [ 251.190344][T11824] lo: entered promiscuous mode [ 251.198213][T11825] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 251.200486][ T36] audit: type=1326 audit(1753232795.690:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11826 comm="syz.0.3708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3956f8e9a9 code=0x0 [ 251.240770][T11823] lo: left promiscuous mode [ 251.318506][T11834] rust_binder: 1117: no such ref 2 [ 251.325085][T11834] rust_binder: Write failure EINVAL in pid:1117 [ 251.359287][T11842] rust_binder: 1124: no such ref 1 [ 251.371447][T11842] rust_binder: 1124: no such ref 2 [ 251.432667][T11850] /dev/rnullb0: Can't open blockdev [ 251.498849][T11866] __vm_enough_memory: pid: 11866, comm: syz.7.3719, bytes: 8589934592 not enough memory for the allocation [ 251.538895][T11875] binder: Bad value for 'max' [ 251.539514][T11873] overlayfs: upper fs does not support tmpfile. [ 251.551309][ T36] audit: type=1400 audit(1753232796.030:823): avc: denied { getattr } for pid=11872 comm="syz.6.3722" name="/" dev="incremental-fs" ino=53333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 251.838548][ T45] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 251.998540][ T45] usb 8-1: Using ep0 maxpacket: 32 [ 252.006639][ T45] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 252.014969][ T45] usb 8-1: config 0 has no interface number 0 [ 252.021370][ T45] usb 8-1: config 0 interface 184 has no altsetting 0 [ 252.030251][ T45] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 252.040013][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.048667][ T45] usb 8-1: Product: syz [ 252.053139][ T45] usb 8-1: Manufacturer: syz [ 252.057757][ T45] usb 8-1: SerialNumber: syz [ 252.063361][ T45] usb 8-1: config 0 descriptor?? [ 252.069431][ T45] smsc75xx v1.0.0 [ 252.142449][T11913] overlayfs: upper fs does not support tmpfile. [ 252.149091][ T36] audit: type=1400 audit(1753232796.630:824): avc: denied { rmdir } for pid=11912 comm="syz.0.3734" name="work" dev="incremental-fs" ino=53339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.515529][T11943] netlink: 'syz.0.3752': attribute type 46 has an invalid length. [ 252.670444][ T45] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 252.682165][ T45] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 252.892781][T11881] fuse: Bad value for 'user_id' [ 252.898778][T11881] fuse: Bad value for 'user_id' [ 252.905895][ T45] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 252.918022][ T45] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 252.928052][ T45] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 252.937971][ T45] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 252.947455][ T45] usb 8-1: USB disconnect, device number 43 [ 253.429654][T11954] overlayfs: failed to clone upperpath [ 253.432599][T11955] overlayfs: upper fs does not support tmpfile. [ 253.445265][T11954] overlayfs: failed to clone upperpath [ 253.458849][T11954] overlayfs: failed to clone upperpath [ 253.482011][T11954] overlayfs: failed to clone upperpath [ 253.490873][T11954] overlayfs: failed to clone upperpath [ 253.502150][T11954] overlayfs: failed to clone upperpath [ 253.507132][T11960] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 253.517606][T11954] overlayfs: failed to clone upperpath [ 253.526258][T11954] overlayfs: failed to clone upperpath [ 253.533372][T11954] overlayfs: failed to clone upperpath [ 253.539595][T11954] overlayfs: failed to clone upperpath [ 253.546261][T11954] overlayfs: failed to clone upperpath [ 253.553123][T11954] overlayfs: failed to clone upperpath [ 253.560352][T11954] overlayfs: failed to clone upperpath [ 253.566931][T11954] overlayfs: failed to clone upperpath [ 253.573691][T11954] overlayfs: failed to clone upperpath [ 253.580506][T11954] overlayfs: failed to clone upperpath [ 253.587693][T11954] overlayfs: failed to clone upperpath [ 253.594498][T11954] overlayfs: failed to clone upperpath [ 253.600748][T11954] overlayfs: failed to clone upperpath [ 253.607065][T11954] overlayfs: failed to clone upperpath [ 253.613794][T11954] overlayfs: failed to clone upperpath [ 253.620687][T11954] overlayfs: failed to clone upperpath [ 253.626819][T11954] overlayfs: failed to clone upperpath [ 253.633272][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3751'. [ 253.646849][T11954] overlayfs: failed to clone upperpath [ 253.653616][T11954] overlayfs: failed to clone upperpath [ 253.663405][T11954] overlayfs: failed to clone upperpath [ 253.672065][ T36] audit: type=1326 audit(1753232798.160:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.7.3751" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb4658e9a9 code=0x0 [ 253.701292][T11954] overlayfs: failed to clone upperpath [ 253.708050][T11954] overlayfs: failed to clone upperpath [ 253.715089][T11954] overlayfs: failed to clone upperpath [ 253.722304][T11954] overlayfs: failed to clone upperpath [ 253.731162][T11954] overlayfs: failed to clone upperpath [ 253.737812][T11954] overlayfs: failed to clone upperpath [ 253.744733][T11954] overlayfs: failed to clone upperpath [ 254.026183][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3759'. [ 254.491399][T11987] netlink: 'syz.7.3762': attribute type 5 has an invalid length. [ 254.501528][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3762'. [ 254.599467][T11992] overlayfs: upper fs does not support tmpfile. [ 254.672083][T11998] overlayfs: failed to clone upperpath [ 254.875045][T11994] loop4: detected capacity change from 0 to 7 [ 254.882116][ C1] blk_print_req_error: 5 callbacks suppressed [ 254.882134][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 254.901045][ C1] buffer_io_error: 4 callbacks suppressed [ 254.901068][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.923101][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 254.933119][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.941685][T11994] loop4: unable to read partition table [ 254.956050][ T36] audit: type=1326 audit(1753232799.440:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.6.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3638e9a9 code=0x7fc00000 [ 254.961340][T11994] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 255.002119][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.012207][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.038785][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.048342][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.057500][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.067151][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.076422][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.086505][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.095214][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.105025][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.144301][T12010] netlink: 'syz.6.3772': attribute type 1 has an invalid length. [ 255.280116][T12016] overlayfs: upper fs does not support tmpfile. [ 255.325890][T12018] overlayfs: upper fs does not support tmpfile. [ 255.601427][T12042] overlayfs: failed to clone upperpath [ 255.624409][T12044] overlayfs: failed to clone upperpath [ 255.651547][T12054] overlayfs: upper fs does not support tmpfile. [ 255.716944][T12074] overlayfs: failed to clone upperpath [ 255.744121][T12082] overlayfs: failed to clone upperpath [ 255.758632][ T489] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 255.908665][ T489] usb 8-1: Using ep0 maxpacket: 32 [ 255.915345][ T489] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 255.923931][ T489] usb 8-1: config 0 has no interface number 0 [ 255.930264][ T489] usb 8-1: config 0 interface 184 has no altsetting 0 [ 255.938452][ T489] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 255.947511][ T489] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.955538][ T489] usb 8-1: Product: syz [ 255.959719][ T489] usb 8-1: Manufacturer: syz [ 255.964393][ T489] usb 8-1: SerialNumber: syz [ 255.970126][ T489] usb 8-1: config 0 descriptor?? [ 255.975988][ T489] smsc75xx v1.0.0 [ 256.177851][ T489] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 256.191878][ T489] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 256.202208][ T489] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 256.213408][ T489] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -32 [ 256.731674][ T489] usb 8-1: USB disconnect, device number 44 [ 256.798798][T12097] overlayfs: upper fs does not support tmpfile. [ 256.822745][T12100] mmap: syz.9.3802 (12100): VmData 29077504 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 256.841258][T12100] 9pnet_fd: Insufficient options for proto=fd [ 257.110682][T12110] overlayfs: failed to clone upperpath [ 257.125687][T12112] batadv_slave_1: entered promiscuous mode [ 257.148529][ T489] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 257.173839][T12111] batadv_slave_1: left promiscuous mode [ 257.298538][ T489] usb 8-1: Using ep0 maxpacket: 32 [ 257.305183][ T489] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.317522][ T489] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 257.327482][ T489] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.336002][ T489] usb 8-1: Product: syz [ 257.340546][ T489] usb 8-1: Manufacturer: syz [ 257.345608][ T489] usb 8-1: SerialNumber: syz [ 257.351331][ T489] usb 8-1: config 0 descriptor?? [ 257.357459][ T489] cdc_ether 8-1:0.0: probe with driver cdc_ether failed with error -22 [ 257.366877][ T489] usb 8-1: unsupported MDLM descriptors [ 257.376064][T12114] overlayfs: failed to clone upperpath [ 257.409525][T12118] overlayfs: conflicting options: nfs_export=on,index=off [ 257.557409][T12102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1170 [ 257.558776][T12123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.579281][T12123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.593220][ T31] usb 8-1: USB disconnect, device number 45 [ 257.703212][T12128] rust_binder: 1175: no such ref 1 [ 257.706268][T12131] overlayfs: upper fs does not support tmpfile. [ 257.709432][T12128] rust_binder: 1175: no such ref 2 [ 257.718754][T12133] netlink: 124 bytes leftover after parsing attributes in process `syz.9.3821'. [ 257.748840][T12135] incfs: mount failed -22 [ 257.754021][T12136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1175 [ 257.754616][T12135] ------------[ cut here ]------------ [ 257.769521][T12135] WARNING: CPU: 0 PID: 12135 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 257.777987][T12135] Modules linked in: [ 257.782448][T12135] CPU: 0 UID: 0 PID: 12135 Comm: syz.6.3816 Not tainted 6.12.30-syzkaller-g88813c11dc64 #0 d54adf55d921c39fb7151a4c54847246e47052b7 [ 257.797253][T12135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.807786][T12135] RIP: 0010:drop_nlink+0xce/0x110 [ 257.812940][T12135] Code: 04 00 00 be 08 00 00 00 e8 df 52 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e2 54 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 257.821596][T12138] rust_binder: 12136 RLIMIT_NICE not set [ 257.835417][T12135] RSP: 0018:ffffc90002bff0d0 EFLAGS: 00010283 [ 257.848153][T12135] RAX: ffffffff81ed563e RBX: ffff88811115a080 RCX: 0000000000080000 [ 257.856251][T12135] RDX: ffffc90003228000 RSI: 0000000000000ba3 RDI: 0000000000000ba4 [ 257.864657][T12135] RBP: ffffc90002bff0f8 R08: 0000000000000003 R09: 0000000000000004 [ 257.873034][T12135] R10: dffffc0000000000 R11: fffff5200057fe10 R12: dffffc0000000000 [ 257.881535][T12135] R13: 1ffff1102222b419 R14: ffff88811115a0c8 R15: 0000000000000000 [ 257.889982][T12135] FS: 00007ffb372a86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 257.900668][T12135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.907612][T12135] CR2: 0000200000001000 CR3: 0000000129956000 CR4: 00000000003526b0 [ 257.915982][T12135] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.924355][T12135] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.932967][T12135] Call Trace: [ 257.936268][T12135] [ 257.939328][T12135] simple_rmdir+0x153/0x260 [ 257.943962][T12135] vfs_rmdir+0x3dd/0x560 [ 257.948576][T12135] dir_rmdir+0x236/0x320 [ 257.952938][T12135] ? __cfi_dir_rmdir+0x10/0x10 [ 257.957708][T12135] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 257.963114][T12135] vfs_rmdir+0x3dd/0x560 [ 257.967571][T12135] dir_rmdir+0x236/0x320 [ 257.971948][T12135] ? __cfi_dir_rmdir+0x10/0x10 [ 257.976952][T12135] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 257.982302][T12135] vfs_rmdir+0x3dd/0x560 [ 257.987519][T12135] ovl_workdir_cleanup+0x192/0x780 [ 257.993232][T12135] ? dentry_revalidate+0x2e0/0x370 [ 257.998693][T12135] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 258.004777][T12135] ? lookup_one+0x2d2/0x2e0 [ 258.009413][T12135] ? __cfi_lookup_one+0x10/0x10 [ 258.014410][T12135] ? kasan_save_alloc_info+0x40/0x50 [ 258.020308][T12135] ovl_workdir_create+0x2af/0x750 [ 258.025711][T12135] ? __kasan_check_write+0x18/0x20 [ 258.031760][T12135] ? ovl_statfs+0x2d0/0x2d0 [ 258.036470][T12135] ? _raw_spin_lock+0x8c/0x120 [ 258.043025][T12135] ? _raw_spin_unlock+0x45/0x60 [ 258.048951][T12135] ? mnt_want_write+0x321/0x510 [ 258.054949][T12135] ovl_get_workdir+0x328/0x1650 [ 258.060881][T12135] ? ovl_fill_super+0x36f0/0x36f0 [ 258.066241][T12135] ? __kasan_check_write+0x18/0x20 [ 258.074325][T12135] ? _raw_spin_lock+0x8c/0x120 [ 258.081271][T12135] ? __cfi__raw_spin_lock+0x10/0x10 [ 258.087328][T12135] ? __kasan_check_write+0x18/0x20 [ 258.093541][T12135] ? _raw_spin_lock+0x8c/0x120 [ 258.098791][T12135] ? __cfi__raw_spin_lock+0x10/0x10 [ 258.104172][T12135] ? __kasan_check_write+0x18/0x20 [ 258.109413][T12135] ? up_read+0x26/0x1d0 [ 258.113773][T12135] ? _raw_spin_unlock+0x45/0x60 [ 258.118747][T12135] ? ovl_inuse_trylock+0xbd/0x110 [ 258.124060][T12135] ovl_fill_super+0x133f/0x36f0 [ 258.129237][T12135] ? xas_nomem+0x71/0x2d0 [ 258.133803][T12135] ? ida_alloc_range+0xa12/0xa50 [ 258.138993][T12135] ? __cfi_ovl_fill_super+0x10/0x10 [ 258.144311][T12135] ? __kasan_kmalloc+0x96/0xb0 [ 258.149539][T12135] ? __kasan_check_write+0x18/0x20 [ 258.154777][T12135] ? mutex_unlock+0x8b/0x240 [ 258.159511][T12135] ? __cfi_mutex_unlock+0x10/0x10 [ 258.164577][T12135] ? __kasan_check_write+0x18/0x20 [ 258.170077][T12135] ? _raw_spin_lock+0x8c/0x120 [ 258.174878][T12135] ? sget_fc+0x9ce/0xad0 [ 258.179392][T12135] ? __cfi_set_anon_super_fc+0x10/0x10 [ 258.185152][T12135] get_tree_nodev+0xcb/0x170 [ 258.190220][T12135] ? __cfi_ovl_fill_super+0x10/0x10 [ 258.195789][T12135] ovl_get_tree+0x20/0x30 [ 258.200432][T12135] vfs_get_tree+0x9e/0x290 [ 258.204874][T12135] do_new_mount+0x251/0xb40 [ 258.209698][T12135] ? security_capable+0xcf/0xf0 [ 258.214827][T12135] path_mount+0x688/0x1050 [ 258.219322][T12135] ? putname+0x113/0x150 [ 258.223584][T12135] __se_sys_mount+0x2bd/0x480 [ 258.228579][T12135] ? __x64_sys_mount+0xf0/0xf0 [ 258.233377][T12135] ? __kasan_check_write+0x18/0x20 [ 258.238542][T12135] ? fpregs_restore_userregs+0x11d/0x260 [ 258.244385][T12135] __x64_sys_mount+0xc3/0xf0 [ 258.249567][T12135] x64_sys_call+0x2021/0x2ee0 [ 258.254540][T12135] do_syscall_64+0x58/0xf0 [ 258.259300][T12135] ? clear_bhb_loop+0x50/0xa0 [ 258.264635][T12135] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 258.270652][T12135] RIP: 0033:0x7ffb3638e9a9 [ 258.275185][T12135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.295543][T12135] RSP: 002b:00007ffb372a8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 258.304322][T12135] RAX: ffffffffffffffda RBX: 00007ffb365b5fa0 RCX: 00007ffb3638e9a9 [ 258.312434][T12135] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 258.320748][T12135] RBP: 00007ffb36410d69 R08: 0000200000000100 R09: 0000000000000000 [ 258.329043][T12135] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 258.337384][T12135] R13: 0000000000000000 R14: 00007ffb365b5fa0 R15: 00007ffcf678fe08 [ 258.346095][T12135] [ 258.349477][T12135] ---[ end trace 0000000000000000 ]--- [ 258.355463][T12135] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 258.364990][T12135] overlayfs: maximum fs stacking depth exceeded