last executing test programs: 8m5.28173477s ago: executing program 3 (id=471): r0 = userfaultfd(0x80800) r1 = fsopen(&(0x7f00000000c0)='qnx6\x00', 0x0) read(r1, &(0x7f0000000100)=""/72, 0x48) (async) read(r1, &(0x7f0000000100)=""/72, 0x48) socket$xdp(0x2c, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0x2, 0x9}) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) 8m5.220078561s ago: executing program 3 (id=472): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) (async) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) (async, rerun: 64) r4 = socket(0x1e, 0x5, 0x0) (rerun: 64) write$binfmt_misc(r4, &(0x7f0000000080), 0x2000011a) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0xc8c}) 8m5.20340144s ago: executing program 3 (id=474): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10001) read(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x300000f, 0x20010, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='}.\x00') 8m5.20243775s ago: executing program 3 (id=476): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x161142, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) setrlimit(0x3, &(0x7f0000000240)={0xfffffffffffffffe, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rt_cache\x00') copy_file_range(r1, 0x0, r1, &(0x7f0000000100)=0xffffffff, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x6) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9", 0x678) 8m5.191506861s ago: executing program 3 (id=478): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) (async) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) (async, rerun: 32) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="cea2e0e673bfa95adf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8008010) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 64) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r5, 0xa, 0x21) (async) fcntl$setlease(r5, 0x400, 0x1) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0x6, 0xc8}]}, 0x10) (async) r9 = fcntl$dupfd(r7, 0x0, r8) sendmsg$key(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r6, @ANYBLOB="c46b17c40d22de3831bd7ee66c5407babd4e84af552e1623730600fb3fb200a642f1bc158def2d023e29f4bcdbe9a672f8cd0ff5954a2b155a2d188bb9d7a383817b8be799bb7591856806f4e047e2b36f9e4ea31a336cfa28507a19e459b7603ff91e1ac89073b6729c11fe97b54cb1a81600b8cdceef628e459b4a3bcf98279ffc143a6dd4b38c2a58e8fa4f61d710e2688fbec267c1f2bbc0794908dcf222b259e9dde8e8a45f00fc02a12161c5ebafb28432b661deeedfae03e18bf8f444a89d106bce71f8f2b2030b5baf95c35a04620d70121330355f3a2a62d5734bc9fe6c0fa155dfd6f952be2d40946241140753e385b70b063c"], 0x118}}, 0x20000000) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) (async) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 8m5.019252382s ago: executing program 3 (id=479): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="800000001e00210000000000fddbdf250a0000000500020000000000620003"], 0x80}, 0x1, 0x0, 0x0, 0x48}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r3, 0x3, 0x80000}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xe0303, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) io_submit(r8, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, r7, &(0x7f0000000180), 0x0, 0xfffffffffffffffc}]) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f00000de000/0x3000)=nil, 0x3000, 0x19) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000340)={0x0, @multicast2, @dev}, &(0x7f0000000380)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000540)={'sit0\x00', r10, 0x700, 0x8000, 0x0, 0x5, {{0x26, 0x4, 0x1, 0x1, 0x98, 0x64, 0x0, 0x3, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0x10, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x4c, 0xa2, 0x3, 0x5, [{@broadcast, 0xb}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast, 0x1ed13469}, {@multicast2}, {@private=0xa010101, 0xfffffff1}, {@remote, 0x4}]}, @timestamp={0x44, 0x20, 0xc1, 0x0, 0x4, [0x4c31, 0x5, 0x8, 0xfff, 0xb4, 0x7fffffff, 0x0]}, @ssrr={0x89, 0xb, 0x78, [@rand_addr=0x64010101, @local]}]}}}}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), r11) sendmsg$IEEE802154_LLSEC_ADD_KEY(r12, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="794ab820cf1399ad4ffe00a169761f60cf3b15285165970302be82b782e3b0819da264a79478b918454e635570ac28765e67c2c651615f3bc62000"/69, @ANYRES16=r13, @ANYBLOB="01002bbd7000fddbdf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8008010) r14 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r14, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x8, 0x3, 0x0, 0x7, 0x4, 0xd, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x4, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x6000, 0x4000, 0x8, 0x9d, 0x3, 0x5, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x7, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0x8000000, [0x0, 0x401, 0x7, 0xc5]}) close_range(r4, 0xffffffffffffffff, 0x0) 8m4.975950792s ago: executing program 32 (id=479): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="800000001e00210000000000fddbdf250a0000000500020000000000620003"], 0x80}, 0x1, 0x0, 0x0, 0x48}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r3, 0x3, 0x80000}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xe0303, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) io_submit(r8, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, r7, &(0x7f0000000180), 0x0, 0xfffffffffffffffc}]) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f00000de000/0x3000)=nil, 0x3000, 0x19) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000340)={0x0, @multicast2, @dev}, &(0x7f0000000380)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000540)={'sit0\x00', r10, 0x700, 0x8000, 0x0, 0x5, {{0x26, 0x4, 0x1, 0x1, 0x98, 0x64, 0x0, 0x3, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0x10, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x4c, 0xa2, 0x3, 0x5, [{@broadcast, 0xb}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast, 0x1ed13469}, {@multicast2}, {@private=0xa010101, 0xfffffff1}, {@remote, 0x4}]}, @timestamp={0x44, 0x20, 0xc1, 0x0, 0x4, [0x4c31, 0x5, 0x8, 0xfff, 0xb4, 0x7fffffff, 0x0]}, @ssrr={0x89, 0xb, 0x78, [@rand_addr=0x64010101, @local]}]}}}}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), r11) sendmsg$IEEE802154_LLSEC_ADD_KEY(r12, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="794ab820cf1399ad4ffe00a169761f60cf3b15285165970302be82b782e3b0819da264a79478b918454e635570ac28765e67c2c651615f3bc62000"/69, @ANYRES16=r13, @ANYBLOB="01002bbd7000fddbdf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8008010) r14 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r14, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x8, 0x3, 0x0, 0x7, 0x4, 0xd, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x4, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x6000, 0x4000, 0x8, 0x9d, 0x3, 0x5, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x7, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0x8000000, [0x0, 0x401, 0x7, 0xc5]}) close_range(r4, 0xffffffffffffffff, 0x0) 7m57.601974462s ago: executing program 0 (id=577): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2512, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2512, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x6a0d00, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0xf8, r3, 0x1, 0x81}, 0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000004c0)=0x2, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000004c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x7fff, 0x7fff, 0x5d, 0x10001}, 0x10) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x7fff, 0x7fff, 0x5d, 0x10001}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1a0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3930c3, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3930c3, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000300)='\x00', 0x49000) (async) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='\x00', 0x49000) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x0) (async) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, 0x0) 7m57.510052063s ago: executing program 0 (id=578): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/7, 0x7, 0x2, 0x21}, @fda={0x66646185, 0x9, 0x0, 0x29}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death={0x400c630f, 0x1}], 0x56, 0x0, &(0x7f0000000380)="f22439c47e109c6096ea2bae1f7d03b8c44245ee48a8a255e0db445a21505ddddb4f9e2515db95a1de45d524bb52899f326bab2c88053f7a7475b3ec0373c50a7a4d67df5fde31db1a31325bebcf85b344c0596e65b8"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 7m57.508576863s ago: executing program 0 (id=579): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = gettid() stat(&(0x7f0000002340)='./file0\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000044c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000006680)='./file0\x00', &(0x7f00000066c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f0000006740)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xee00, 0xee00, 0x0, 0xee01]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006780)={0x0, 0x0}, &(0x7f00000067c0)=0xc) lstat(&(0x7f0000006800)='./file0\x00', &(0x7f0000006840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() getresgid(&(0x7f00000068c0), &(0x7f0000006900)=0x0, &(0x7f0000006940)) r11 = getuid() statx(0xffffffffffffffff, &(0x7f0000006980)='./file0\x00', 0x400, 0x8, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006ac0)={{{@in6=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f0000006bc0)=0xe8) getresgid(&(0x7f0000006c00)=0x0, &(0x7f0000006c40), &(0x7f0000006c80)) read$FUSE(0xffffffffffffffff, &(0x7f0000006cc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000008d00)='./file0\x00', &(0x7f0000008d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000008dc0)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast1}}, &(0x7f0000008ec0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000008f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000008f80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000000afc0)={0x0, 0x0}, &(0x7f000000b000)=0xc) stat(&(0x7f000000b040)='./file0\x00', &(0x7f000000b080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f000000b100)='./file0\x00', &(0x7f000000b140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(&(0x7f000000b1c0)='./file0\x00', &(0x7f000000b200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f000000b8c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r25 = getegid() r26 = getuid() stat(&(0x7f000000da00)='./file0\x00', &(0x7f000000da40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000040)="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", 0x2000, &(0x7f000000dc00)={&(0x7f0000002040)={0x50, 0x0, 0xa, {0x7, 0x2b, 0x1, 0x2, 0x800, 0x6, 0xfffffc00, 0xfffe0000, 0x0, 0x0, 0x40, 0x3}}, &(0x7f00000020c0)={0x18, 0xfffffffffffffffe, 0x3, {0x2}}, &(0x7f0000002100)={0x18, 0x0, 0x3, {0x9}}, &(0x7f0000002140)={0x18, 0x0, 0x6}, &(0x7f0000002180)={0x18, 0xffffffffffffffda, 0x8, {0x9926}}, &(0x7f00000021c0)={0x28, 0xfffffffffffffffe, 0xf, {{0x0, 0x9, 0x1, r1}}}, &(0x7f0000002200)={0x60, 0x0, 0x8, {{0x9, 0x81, 0xd8, 0x1, 0xefb, 0x4, 0x80cd, 0xfffff4a3}}}, &(0x7f0000002280)={0x18, 0x0, 0x80, {0x9}}, &(0x7f00000022c0)={0x14, 0x0, 0x0, {'#/\xfe\x00'}}, &(0x7f0000002300)={0x20, 0x0, 0x3, {0x0, 0x10}}, &(0x7f0000004440)={0x78, 0x0, 0x8, {0x401, 0x8, 0x0, {0x3, 0x4, 0xfffffffffffffff7, 0xa57, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x8000, 0x7, r2, r3, 0x10, 0x8}}}, &(0x7f0000006500)={0x90, 0x0, 0x3, {0x4, 0x3, 0x2, 0x0, 0x1, 0x3, {0x3, 0x1, 0xf8, 0x80000001, 0xb, 0x4, 0x7, 0x8, 0x80000000, 0x1000, 0x2, r4, 0xffffffffffffffff, 0x94b, 0x401}}}, &(0x7f00000065c0)={0xa8, 0x0, 0x4, [{0x0, 0x800, 0x0, 0x89}, {0x4, 0xe, 0x1, 0x4, '('}, {0x1, 0x7fffffff, 0x1, 0x6, '%'}, {0x5, 0xb, 0x7, 0x8, '\x7f)\\]}-['}, {0x1, 0xfa32, 0x1, 0xa, '!'}]}, &(0x7f000000b280)={0x640, 0xfffffffffffffff5, 0x5, [{{0x0, 0x1, 0x0, 0x2, 0x7, 0xc5c4, {0x4, 0x8, 0x7, 0x8, 0x2, 0x7, 0xb, 0x8, 0x4, 0x4000, 0xffffffff, r5, r6, 0x9, 0xffff6bf5}}, {0x3, 0x3, 0x4, 0x1, '\\:/,'}}, {{0x3, 0x1, 0x3, 0x6, 0x5, 0x10000, {0x4, 0x8001, 0xffffffffcd8c5ea4, 0xd4a, 0x5, 0x8, 0x6, 0x5, 0x81, 0x6000, 0x3, r7, r8, 0x8, 0x8001}}, {0x4, 0x16, 0x6, 0x7, '+^,&%)'}}, {{0x1, 0x2, 0x10001, 0x2, 0x80000000, 0xeaa5, {0x1, 0x8001, 0x18, 0xb7a, 0x0, 0xa, 0xbf96, 0x5, 0x67de, 0xc000, 0x1a76600, r9, r10, 0x1, 0x3}}, {0x3, 0x91, 0x0, 0x6}}, {{0x6, 0x0, 0x6, 0xf62, 0x6, 0x2, {0x1, 0x9, 0x9, 0x4, 0x2, 0x3, 0x2, 0x0, 0x6, 0x2000, 0x6, r11, r12, 0x3, 0x2}}, {0x3, 0x7ff, 0x0, 0x8}}, {{0x5, 0x0, 0x2, 0x4, 0xfffffd2c, 0x800, {0x2, 0x7fffffffffffffff, 0x86e0, 0x5, 0x7f, 0x9, 0x7, 0x5, 0x0, 0xc000, 0xffffffc2, r13, r14, 0xb83f, 0x3}}, {0x1, 0x6, 0x3, 0x2, '{{)'}}, {{0x1, 0x3, 0x0, 0x654, 0x795e, 0x6, {0x2, 0x6, 0x8, 0x0, 0xebb, 0x1, 0xc, 0x4, 0x2, 0x1000, 0x7, r15, r16, 0xffffff81, 0x92cc}}, {0x6, 0x8e, 0x1, 0xd, '['}}, {{0x0, 0x3, 0x3, 0x7, 0x8, 0x2, {0x5, 0x7, 0x12d6, 0x100, 0xc, 0x7, 0x0, 0x5b, 0x2, 0x0, 0xfffff88a, r17, r18, 0x7ff, 0x7}}, {0x1, 0x1}}, {{0x5, 0x0, 0x8, 0x100000001, 0x80000000, 0x9, {0x1, 0x7, 0x95c2, 0xd2f6, 0xa, 0x7b, 0x6, 0x9, 0x8, 0x8000, 0x8000, r19, 0x0, 0x400}}, {0x6, 0xfffffffffffffff9, 0xa, 0xd2, '\x18/,#:^(:^\x18'}}, {{0x1, 0x2, 0xdd, 0x3ff, 0x7f, 0x7, {0x6, 0x7fffffffffffffff, 0x3, 0x0, 0x3, 0x80000000, 0x7, 0x4, 0xcd, 0x8000, 0x9, r20, r21, 0x6, 0x332}}, {0x5, 0xe98, 0xd, 0x80000001, ',+.{^]\'{{@),)'}}, {{0x5, 0x1, 0x800, 0x7f, 0x9, 0x5, {0x6, 0x7ff, 0x5, 0x7, 0x8000, 0x5, 0x7, 0x3, 0x7, 0x8000, 0x80, r22, r23, 0xcc1, 0x200}}, {0x4, 0x0, 0x0, 0x2}}]}, &(0x7f000000d900)={0xa0, 0x0, 0xab, {{0x1, 0x1, 0x1000, 0x1, 0x3, 0x8001, {0x3, 0x83, 0x8001, 0xffffffff00000001, 0x2, 0x6, 0x100, 0x1, 0x3, 0x1000, 0x2, r24, r25, 0x100, 0x2}}}}, &(0x7f000000d9c0)={0x20, 0x0, 0x73b3, {0xd4, 0x0, 0x4, 0x9957}}, &(0x7f000000dac0)={0x130, 0x0, 0x3, {0x67d, 0x6, 0x0, '\x00', {0x8, 0xfffffffb, 0x8, 0x6, r26, r27, 0x1000, '\x00', 0x7f, 0x3, 0x8001, 0x8001, {0x5, 0x69f}, {0x644a, 0x9}, {0x2, 0xf8}, {0x8a4, 0x7}, 0x6, 0x5, 0x1, 0x6}}}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000dcc0), 0x0, 0x800) 7m57.473633043s ago: executing program 0 (id=580): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x120) write$cgroup_devices(r1, &(0x7f00000002c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000140)={0x17fffffd}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x120) (async) write$cgroup_devices(r1, &(0x7f00000002c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) (async) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) (async) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000140)={0x17fffffd}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) (async) 7m57.425787744s ago: executing program 0 (id=583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0ffec575", @ANYRES16=r1, @ANYBLOB="010727bd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x0, 0x0) socket(0x2c, 0x2, 0x4) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b66, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x8a05f664f2838eb, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a940107850000006218c51e44a38300000000ab09007a150b5d8c3dda"], 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x101800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x4, 0x80000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x4, &(0x7f0000000000)=0xa000000, 0x4) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000540)={'syz0\x00', {0xfffc, 0x8, 0x1, 0xba}, 0x3b, [0x0, 0xfffffff8, 0x0, 0x9f3c, 0xad, 0x3, 0x1, 0x5, 0x6d1f, 0xb, 0x24f1150f, 0x3, 0x2, 0x8, 0x80, 0x7, 0x80000001, 0xff, 0x9, 0x3, 0x4, 0x0, 0x80, 0x5, 0x7f, 0x2, 0x49, 0xd, 0xa3d, 0x7f, 0x0, 0x3, 0x66743f1e, 0x6, 0x2, 0x0, 0x6, 0x1, 0x5, 0x3, 0x6, 0xffffffff, 0x1, 0x1ff, 0x8, 0x330, 0x97, 0x1, 0x5, 0x3ff, 0x1, 0xf775, 0x2, 0x8, 0xfff, 0x8752, 0x2, 0x7, 0x2, 0x6, 0xfff, 0x2, 0x2, 0x35], [0x7235, 0x4, 0x3, 0x1, 0x800, 0x2, 0x5, 0x3, 0x4, 0x37, 0x38, 0x6, 0x0, 0x1, 0x80000001, 0x0, 0x6, 0x4, 0x3, 0xd0, 0x39f1, 0x80, 0x5f7, 0x596, 0x8, 0x20000000, 0x7, 0x200, 0x0, 0x6, 0xffffffff, 0x2, 0x8, 0x7, 0x96ca, 0x9, 0x8, 0x2, 0x7, 0x7, 0x4, 0x0, 0x8, 0x8000, 0x60000, 0xb55, 0x40, 0x3ff, 0x1ff, 0x8, 0x44f0, 0xfff, 0x8, 0x200, 0x6e, 0x6b9, 0x7, 0x9, 0xffff0001, 0x6, 0x3, 0x5, 0x6, 0x663ba64e], [0x1, 0x0, 0x4, 0x1, 0x20000000, 0x27, 0x6, 0x1, 0x2, 0x3, 0x1, 0xffffff81, 0x0, 0x9, 0x1, 0x7, 0x2, 0x89, 0x7, 0x7ff, 0x8548, 0x6, 0xf, 0x3, 0xe, 0x2, 0xa, 0x8, 0x7, 0x4, 0x2, 0x9, 0x7, 0x7, 0x7fff, 0x100, 0x7fff, 0x9, 0x10001, 0x59, 0x6, 0x6346, 0xec, 0x5, 0x5, 0xfff, 0x4, 0xc08, 0x3ff, 0x5300, 0x9, 0x6, 0x9, 0x8, 0x31, 0x1, 0x1, 0x4000007, 0x3, 0x2, 0x750d, 0x2, 0x3, 0x6], [0x3, 0xfffffff7, 0x1ff, 0x7, 0x494, 0x9, 0xc678, 0xff, 0xfff, 0x2, 0x314, 0x0, 0x595a, 0x3, 0x4, 0x0, 0x8, 0x2, 0x5, 0xfffeffff, 0x6, 0x9, 0x80000001, 0x81, 0x6, 0x1000, 0x5, 0x9, 0x7682, 0x800, 0x101, 0x80000001, 0x82, 0x6, 0x400, 0xe10, 0xf4b1, 0x5, 0x800, 0x8, 0x9, 0x8001, 0x1, 0x9, 0x10001, 0x80, 0x7, 0x8, 0x0, 0x0, 0x7, 0xfffffff8, 0x0, 0x3, 0x0, 0x529, 0x3, 0xffffff01, 0x1, 0xb6, 0xffffe06a, 0x3, 0x1, 0x9]}, 0x45c) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r7}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) unlink(&(0x7f0000000000)='./file0\x00') syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 7m57.264060535s ago: executing program 0 (id=584): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x27f, @mcast2, 0xffff}, 0x1c, 0x0}}], 0x1, 0x4400c800) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x2}, @enter_looper], 0x84, 0x0, &(0x7f0000000680)="2d1b3d20c0ba29bb62c7bafd0b883bdecd4e7c4490253962d53ff410131869d2e28838fabae049d2498fa4b0b2472d3d992b9af99cbab1ee922264eae6a067c0f22c42361e97a1ec06606f34027fa6d792055a30c58110f81cc191ee683e247ba6f0299f0b140e60b8386a6400f8cf3b39e38d2ad7e5376a690df84ff02b4fb7d0615f6d"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000009a40), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000009b00)={0x0, 0x0, &(0x7f0000009ac0)={&(0x7f0000009a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fbdbdf2501000000000000000c41000000010014"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008004) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 7m57.263729045s ago: executing program 33 (id=584): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x27f, @mcast2, 0xffff}, 0x1c, 0x0}}], 0x1, 0x4400c800) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x2}, @enter_looper], 0x84, 0x0, &(0x7f0000000680)="2d1b3d20c0ba29bb62c7bafd0b883bdecd4e7c4490253962d53ff410131869d2e28838fabae049d2498fa4b0b2472d3d992b9af99cbab1ee922264eae6a067c0f22c42361e97a1ec06606f34027fa6d792055a30c58110f81cc191ee683e247ba6f0299f0b140e60b8386a6400f8cf3b39e38d2ad7e5376a690df84ff02b4fb7d0615f6d"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000009a40), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000009b00)={0x0, 0x0, &(0x7f0000009ac0)={&(0x7f0000009a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fbdbdf2501000000000000000c41000000010014"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008004) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 6m53.837733418s ago: executing program 4 (id=961): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900010000000000fc00000000000100000000000000bb0078c1488b91c9271d3a3e201f9c758e0fc0365514082234066132797710bebeb3bc6cfc53d6802f8dcd5594719d4e5ba0d05f1658558657ca765aebe433d897e81909f9fe60447329b4cafaa3430ddde574b3fa5d4703f0366a626cc9c94d204bedc737b4b7e896dc98f26349", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = epoll_create1(0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000380)={0x0, r5}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000080)={0x3, r5}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'team0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x23, [0x8, 0x1, 0x2, 0xc, 0x9, 0xf94, 0x80000f1, 0x37, 0xc698, 0x80000001, 0x6, 0x6, 0x1, 0x6b, 0x7f, 0x2, 0x80000000, 0x2, 0x20000002, 0x0, 0x0, 0x8, 0x10000, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x4, 0x7fff, 0x4, 0x6, 0x2, 0x1, 0x80000001, 0xc0000, 0x9c, 0x4, 0x3ff, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x4, 0x5, 0x80, 0x0, 0x1, 0xc, 0x8, 0x3, 0x43, 0x7, 0x8, 0x5, 0x80000000, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x3, 0x7, 0x9, 0x8, 0x8, 0x4, 0x101, 0x7, 0x6e, 0x0, 0x6, 0x8, 0x3, 0x7, 0x165, 0x9, 0x6, 0x4, 0x9, 0x8, 0x40, 0x6, 0x5, 0x1, 0x0, 0x3, 0x2, 0x2, 0x40001, 0xa, 0xffffffff, 0x471, 0x4, 0x0, 0x7, 0x3, 0x6, 0x1000, 0x1ff, 0x6, 0xb, 0x8, 0x7, 0x4, 0xffff, 0x6, 0x1, 0xf202, 0xfffffffd, 0x5, 0x7, 0x0, 0x2, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0xa, 0xffff, 0xa1, 0x6, 0x9]}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) r7 = dup(r1) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000dc0)="bbff", 0x6d}], 0x1}, 0x40814) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x4, 0x4ef, 0x6, 0xfffffc01, 0xd, "ea7174ddb80fc70005000000ffffffd2a2d975", 0x4, 0x7}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x4840) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6m53.53596727s ago: executing program 4 (id=962): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r3) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x600140, 0x1, 0x20}, 0x18) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000200)={0x28, 0x4, 0x0, {0x6, 0x5}}, 0x28) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 6m50.516454011s ago: executing program 4 (id=995): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x308, 0x308, 0x110, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="58607b1c69cb", @mac, @multicast2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @local, 0xff000000, 0x0, 0x5, 0x3, {@mac=@local, {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x2, 0x5, 0x8, 0x9, 0xd, 0x6140, '\x00', 'wlan1\x00', {0xff}, {}, 0x0, 0x181}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = syz_usb_connect(0x0, 0x34, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0xef, 0xd2, 0xb, 0x40, 0x499, 0x103e, 0x7a87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0xc0, 0x0, 0xa0, 0x6, [{{0x9, 0x4, 0x38, 0x90, 0x1, 0xc, 0xb9, 0x77, 0x2, [], [{{0x9, 0x5, 0x4, 0x3, 0x400, 0x0, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x3}]}}]}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000080)={0x20, 0x8, 0x9c, {0x9c, 0x11, "6da6f9bf7a2dee5927b8670b41a5406fd0929926f26f1863cfdda35a06e871b205e2d6da4fd4b3210738586940acdf1a8d24d2d65ea7d32c3bd8e5844b0dd9ebf7b6b8e3031546cf3f7364572d28dc38679e9121b6d1e6dad6580396cc3b9229c994294d00fdc89a75a4f90b0c1ff159427c3d565e2e75c5378bdd998cac8be050cedfce4e197d59bce1cec858d2fe87efbccd2958b03d76fefb"}}, &(0x7f00000003c0)={0x0, 0x3, 0xbc, @string={0xbc, 0x3, "e5181938ff51ea2ee85da5a34db07e0db1cc9a150fe770b63022b7cdb9f0d4aecd9f3d12734536f29bfd8c7d87d16438bd41fdaf7e159370d3f6ed22bf0592ab7a5ac4e21ae1390113b2e877e149f89a358f991e5308fa59431deac5d95db0fd59cb32c560276462602fae2361588f609d0d36f308c9d97e122982f492a7889dfad5e3ebea4bb6cf6d6e747a8d866dfe2577a152bb0d15d4c31d7334e9eb6ea5e7f79ddbdf45318e442a1070704313645c3c09917b3e7b9163d7"}}, &(0x7f00000004c0)={0x0, 0xf, 0x132, {0x5, 0xf, 0x132, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x6, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "f7531e99d7565b77626c0061ff8098af"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d0e7f2ae7f9c27d769a3309cbb377975"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x2, 0x8}, @generic={0xf4, 0x10, 0x3, "e2153c8c7ac835197c9e12c291b984947d7d0cc64389a4e7297297475a0fb7792e0a671eb680d089ddda9001c1a82f2d5390b883878c577b13aa6377827b3b85dc433f5a6d96ba754c318a7b85d59cda4e3d7359d1704a9cd8e6cab27512d7cd307ac2fb3bcb7535e6639688c4bb67189dc990897b217499fc607e5a2458bceb2ac4384f17fc2eacce068af0d20335c90ca92cd4b81c3fe2e80d91a5b331dbd3f80866c5d52b5923f6b698e1d9abb81f45b2263915d90e9d3371492717e5406bf51d0b7ce7d039a3e5e430466e1924e46415c667effea32bbfd3ad41e66f781465508302adc2a6c668f6caa23f87f29a63"}, @ptm_cap={0x3}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x3, 0x9, "6a7e94a7", '\bGs+'}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x4, 0x3, 0x0, 0x9, 0x9, 0x5}}}, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x40, 0xa, 0x87, "3f14c446e8a53f59106ce7583116c08dafcb1236da58fa144147b06947bd82851bf0e2ae474fbf930aa26b92450d39f5f1af697cd6ad2442567edffdcb175edaba219723d4a666e74ef7ad5dd725561d1d138f27997ec5208f055e6728fd09f63d92e6273efe3b10d18971ab8c7b971cc51eaed7d4334aa5e7a964b4bd587bfe742c5b86ea5688"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0xe0, 0x8}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, '$$'}, &(0x7f0000000740)={0x40, 0xf, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000800)={0x40, 0x19, 0x2, 'iG'}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x540}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x60}, &(0x7f0000000900)={0x40, 0x1e, 0x1}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0xb0}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) 6m48.947918721s ago: executing program 4 (id=1004): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x6, 0xfffffffe, 0x4, @private1, @private2, 0x1, 0x80, 0x2a, 0x4}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x1, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x1f000801}, 0x40880) pipe(&(0x7f0000000000)) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xffa8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) 6m48.727921923s ago: executing program 4 (id=1007): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000012680)={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) socket$unix(0x1, 0x5, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) (async) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) (async) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) keyctl$reject(0x13, r5, 0x0, 0x200, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0\x00\b}QmE\xdd\xa69!Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) (async) r6 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) dup2(r6, r2) (async) r7 = dup2(r6, r2) close_range(r7, 0xffffffffffffffff, 0x0) 6m48.691284843s ago: executing program 4 (id=1011): futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) accept(r1, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000415000/0x2000)=nil, 0x2000}, 0x6}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) recvmmsg(r4, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40012020, 0x0) fadvise64(r0, 0x81, 0xc, 0x2) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x102}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000080)=""/49, 0x31) getdents(r7, 0xfffffffffffffffd, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 6m48.642892564s ago: executing program 34 (id=1011): futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) accept(r1, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000415000/0x2000)=nil, 0x2000}, 0x6}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) recvmmsg(r4, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40012020, 0x0) fadvise64(r0, 0x81, 0xc, 0x2) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x102}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000080)=""/49, 0x31) getdents(r7, 0xfffffffffffffffd, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 3m37.446427069s ago: executing program 5 (id=3351): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00ffffff840000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac"], 0x184}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8fe69000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m37.411651299s ago: executing program 5 (id=3352): rmdir(&(0x7f0000000000)='./file0\x00') (async) chdir(&(0x7f0000000040)='./file0\x00') getpid() request_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='\'\x00', 0xfffffffffffffffd) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200, 0x1) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) r1 = openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"00ecf6235bb13ae98b894c96d2c62de1", 0x0, 0x0, {0x200, 0x8}, {0x1, 0x4}, 0x0, [0x1, 0x8000000000000001, 0x3, 0x3ff, 0x81, 0x7, 0x3d9, 0x1, 0xffffffffffffffff, 0xabb, 0x5, 0x6, 0x4, 0x0, 0x4f776d10, 0x1ff]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000340)={0x0, 0x2, 0x0, [0xffffffffffffffff, 0x1, 0x7, 0x17b0000000000000, 0x401], [0x2, 0xb, 0xe82, 0x1ed5, 0x4, 0x7, 0x0, 0x853, 0x9, 0x9, 0x7, 0x8000000000000001, 0x4cf, 0xffff, 0xa03, 0xac52, 0x9, 0x6, 0xfffffffffffffffb, 0x2da, 0x2, 0xffffffff, 0x9, 0x1, 0x5, 0x7, 0x10, 0x4, 0x1, 0x8cc, 0x3, 0x8c, 0x2e7, 0x8, 0x5, 0x55, 0x85d, 0x8000000000000000, 0x7fffffffffffffff, 0x7, 0x3, 0x2, 0x80000000, 0x101, 0x21, 0x7ff, 0x2, 0x46a, 0xdf0b, 0x0, 0x1000, 0x0, 0xc, 0x2, 0x7, 0x6, 0x7, 0x4, 0xffffffffffffffff, 0x7, 0x7, 0x8000, 0x7efe5cf6, 0x0, 0xd9eb, 0x8000, 0x0, 0x0, 0x7, 0x1, 0x335c151a, 0x4, 0xbb0, 0x3, 0xd0b, 0xfffffffffffffff7, 0x4, 0x6, 0x7fbc, 0x7, 0xffffffffffffffff, 0x8000, 0x6, 0x401, 0x8, 0x8000000000000000, 0x7fffffffffffffff, 0x1, 0x4, 0x3, 0x5f2, 0x3, 0xcb4, 0x0, 0x2, 0x10, 0x10001, 0x4, 0x101, 0x2, 0x101, 0x81, 0x6, 0x8, 0x8, 0x3ac4800, 0xfffffffffffffe00, 0x51, 0xa91d, 0x5, 0x2, 0x7, 0x3, 0x1ff, 0xfffffffffffffff8, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffff80000000, 0x33, 0x8, 0x4]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000780)={{r1}, r2, 0x0, @inherit={0x48, &(0x7f00000002c0)={0x1, 0x0, 0x71, 0x8, {0x17, 0x1, 0x3c000000000000, 0x100, 0x7}}}, @devid=r3}) pwritev(r1, &(0x7f0000001cc0)=[{&(0x7f0000001780)="aff7b1c808f4c80c9356a569a1365477971fe38c57f23a4178a5341c0b3f0914ae23beb72248ba95a0cde81e2bdddbc0243ba05ed392de6a9c9d568111ac63f3fd943b278c7569f2f77b20068178dfabdf891a20136c5776843051361f8a16a8064547535d7eebb580683c1d4adf15167804b9d17025adbeda386b8f7e6becdf7b86a6873e32a07dde8d8fd78ace15e3c029d9165dcaa1bc699ebae71544a5c1d6e785b1ff4f3227c56f51e6ce0aa903ce55692bc3f5e8f7c4016490b5349a7343903c1557f6", 0xc6}, {&(0x7f0000001880)="d8fbf2151e9a7b1691135e17ab658c52024226738f01038dff4c07b336244f4cefdcbfc4f18b5731dbc0612e31f1c1f0576c0d9f1a90d15ea1dce316900da35cf1872cf48845274132d50649016c7d56f6fdda85533e1ec84aaaf1a432bfdec50ef9d105d638ab88e54e2f820a0565a2e00e25be12642bbbbf09370efdac5a19ffd7b1c2e2276ead8fe85b523a106f8b49c5a6e57eb16d1c18a703b051eab69db85d8ec11bb249df7d091ffab8a7a4436581600b37532f72b73a1236ca155a0697ff4145ad2910177fa05b4fa469ed2a2a1740e55593ded3ff6a15055fac44585696d03bafb63d63422c", 0xea}, {&(0x7f0000001980)="e4615a66fef55ca6691d8bbd640ac2ee473d6fbd089cc5c4c24660134f94c38ed0b79b805368a8468fb8a5c73a5ff834b7a9d885d026934bfbed6986b308cdc04160eb3d41bbcf688a565ae217ece5a35518a22d5014eec553ecd051d7a9f926abbd03463d0049f3c6fe6dc75e4480df3198f7229f4b76658e08135b609d6c6885cffce95ce2f37b04066801137d1d1fefe82ffb894b9599375503efd4fbd37da7d0f5499f962286a8d6655e58f14f1a47a4c530b367dd3af5488dffa4fef5ea92625cd1d468cdca2f616c9d342b68b54e47722c83ad3de6f8786b13150da41435b2f85d1910ee", 0xe7}, {&(0x7f0000001a80)="a452a72cd0b89661684b3198b9c5017268ed1f7d815dd63175aa8cb55b5158bc82aa968a426a9d", 0x27}, {&(0x7f0000001ac0)="8349d571bce121458fd43070ad2275db4d8708b2a33dcc079b8dc6640caf452b58de37bd2a4fe27fde982a99f12048926de56a390dd1d4ef38b35800e706d03d2310c5796b58abc40ddbe2cd9b191906be05488839967c0c672fa0c60e9595fe39531ee36edc90802676efe66c839a394813da78681c08606314d391b8d2bfd9a921d47ed336e2296241af0ee0e03f9b082965266a95f6", 0x97}, {&(0x7f0000001b80)}, {&(0x7f0000001bc0)="04c27c75931f68ade9093a64a1f3bb989e9bc20b38ba1c59be9337f14931b5c857", 0x21}, {&(0x7f0000001c00)="da3e0676b846bacdb7356e1af028805142bfa212b337744a240b506f4fb1cf0edcf215164eb68caef967e12821aa2df216166a331d8b0ff1d0ce6b1374e9d2384dd10e9a37398bca9043e90fe1c94cf78f8128a12f995b57c59f46cab4ba751d923431c2babd6c62ea312f5137d95c6c3e33ca9bfd4e4c94e3f8d7de4976de62a8952077701301b3b89a3c62426dce337fb62f96f7160fcfd0c9290b0ad722a384c90b", 0xa3}], 0x8, 0x5, 0xfffff01b) (async) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000001d40)={{r0}, {@void, @max}}) (async) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfd000/0x400000)=nil) (async) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) symlinkat(&(0x7f0000001d80)='./file0\x00', r4, &(0x7f0000001e00)='./file0\x00') (async) mprotect(&(0x7f0000efc000/0x1000)=nil, 0x1000, 0x2) syz_open_dev$hiddev(&(0x7f0000001e40), 0x7, 0x109000) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000001e80)={0x1, 0x1, 0xdddd1000, 0x1000, &(0x7f0000d7a000/0x1000)=nil}) (async) faccessat2(r0, &(0x7f0000001ec0)='./file0\x00', 0xa, 0xac91486f21c25391) (async) r6 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001fc0)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f00000020c0)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002100)={{{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002240)={{{@in6=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000002340)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002380)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000002480)=0xe8) mount$9p_rdma(&(0x7f0000001f00), &(0x7f0000001f40)='./file0\x00', &(0x7f0000001f80), 0x4, &(0x7f00000024c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@rq={'rq', 0x3d, 0xfffffffffffffff8}}, {@timeout={'timeout', 0x3d, 0xb}}, {@timeout={'timeout', 0x3d, 0x800}}, {@common=@noxattr}, {@rq={'rq', 0x3d, 0x6}}, {@timeout}, {@common=@access_uid={'access', 0x3d, r6}}, {@rq={'rq', 0x3d, 0x2}}, {@sq={'sq', 0x3d, 0x8}}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@hash}, {@uid_gt={'uid>', r7}}, {@euid_gt={'euid>', r8}}, {@uid_gt={'uid>', r9}}, {@euid_gt={'euid>', r10}}, {@audit}]}}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000002640)={0x40}, 0x10) (async) open(&(0x7f0000002680)='./file0\x00', 0xe80c3, 0x68) (async) fspick(r4, &(0x7f00000026c0)='./file1\x00', 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000002740), &(0x7f0000002780)=0x4) 3m37.357074769s ago: executing program 5 (id=3353): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r3, 0x0, 0x0, 0x800, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r3, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) rename(&(0x7f0000002440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80901, 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000180)="b6", 0x1}], 0x1, 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x8, 0x3, 0x0, 0x7, 0x4, 0xd, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x4, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x6000, 0x4000, 0x8, 0x9d, 0x3, 0x5, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x7, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0x8000000, [0x0, 0x401, 0x7, 0xc5]}) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f0000fff000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 3m37.170348141s ago: executing program 5 (id=3355): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000007, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd5', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000083c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f028119400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001fe000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0xfffffffffffffffe, 0x1, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x80) getdents64(r5, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="2a00000006000000000000000000000001000000000000000000000000200000010000ca6da9ab45e468f686cdd20002000000000818f74588419e2cb722fbfbc4c93140c63fddf7f703cb25e0e5d4131819b115f8130872f9c966c50b1f781b9459eea98a6794e1540616a81065e5157ab7995df40d5a14"], 0x2a) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x4e0cdd70e9af79c3, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) chroot(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00') r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f0000000380)={0xe1, 0x0, 0x958}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x580a8, &(0x7f0000000400)=ANY=[@ANYBLOB='mode=00000000000000000000014,mode=00000000000000000003000,gid=', @ANYRESDEC, @ANYRESDEC]) 3m36.732634643s ago: executing program 5 (id=3361): syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYRES8=r1]) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x200000) (async) read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x206e) 3m36.722460383s ago: executing program 5 (id=3363): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) fstatfs(r0, &(0x7f00000000c0)=""/139) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) (async) fstatfs(r0, &(0x7f00000000c0)=""/139) (async) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) (async) 3m36.595091195s ago: executing program 35 (id=3363): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) fstatfs(r0, &(0x7f00000000c0)=""/139) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) (async) fstatfs(r0, &(0x7f00000000c0)=""/139) (async) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) (async) 2m45.860170921s ago: executing program 1 (id=3880): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000300)=[@exit_looper], 0x0, 0x0, 0x0}) 2m45.859796031s ago: executing program 1 (id=3881): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="5c0000000101010300000000000000000a0000020c001980080001000e0000003c0001802c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000bb0c000280050001003a"], 0x5c}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x34, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffeb4, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0xa9}}, 0x400}], 0x0, 0x0, 0x0}) signalfd4(r2, &(0x7f0000000000)={[0x5]}, 0x8, 0x80800) 2m45.780066962s ago: executing program 1 (id=3882): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) getgroups(0x2, &(0x7f0000005e00)=[0x0, 0x0]) setregid(r3, r3) r4 = socket(0x10, 0x803, 0x0) recvmsg(r4, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0}, 0x142) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/fib_triestat\x00') r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x85) sendfile(r7, r6, 0x0, 0x80000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000140)=[@dead_binder_done], 0x5c, 0x0, &(0x7f0000000180)="c4180453b93b525dbdb2855db894976fe7a7758927cb0d04d811258300305341341cd636ee790c3856b3f4196b56a33e24b60cac2d6abe6ecd27bbe55faeb1055292752751bdba665342ea136b557e5ea6c3e19fb6148e3328f42bd5"}) write(r5, &(0x7f0000000880)="f6c2b34f266544a829ba8b1922d319617f612ee1187bf515db27f4ce327c2ef055351e1dfbb7cf8dde2d9ed74476aea13b9741fb84b754c6de47f048b57a8cdb271009d3d3e0f6e3fc4faa3a52ba312f67d359db829c9dc2979991f3b4b304ea04e0226c21ce73589ab0ffdf7fa28e10b829560c8a9bda6c38f51cc925fac45da4ff85d80cbe6e3656d52c220f3b85836bd81fb171a84fbf4ac15e7c67fa4c43c9a414ecb1497138a7e26d7c4b727a08b474b107ec4c8cd028b8178e49487421ad981b9c772b76f33095b2495d103be28962dad6e65aec215a2994a9da3a1339ee9d9f7d02723901", 0xe8) 2m45.730925512s ago: executing program 1 (id=3883): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00010c000000fbdb0400cc000400cc00"], 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x40004) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b7080000001a0000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2, @ANYRES16, @ANYRES16], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) r3 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r3]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000018010040"]) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, 0x0, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001e0021002bbd7000000000000a00000005000000000000001600010085951a710b54d4c53ad875b572426adbc5b30000"], 0x34}}, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x5085040, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='nsfs\x00', 0x0, &(0x7f0000000100)) mount$tmpfs(0x0, 0x0, 0x0, 0x82d404, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='projid_map\x00') read$FUSE(r9, &(0x7f0000006b40)={0x2020}, 0x206e) 2m45.123526006s ago: executing program 1 (id=3886): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m45.108295476s ago: executing program 1 (id=3887): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x20, 0x12, 0x6, "012def8ab5be"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r3, 0xa) ppoll(&(0x7f0000000000)=[{r3, 0x2020}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000007c0)={0x20, 0xe, 0x1, "18"}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, r2, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000000, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r4 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r4, 0x0, 0x400000000000000, 0x2) timer_create(0x9, &(0x7f0000000180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="20e17ef9c8205940824ec9daffdbf5a058751b6b42b4fd68e519187b02eba5ea670223013a942dfe642db4519579b3b89b47"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, &(0x7f0000000100)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x1, 0xf, 0x5, [0xff0000, 0x0, 0xf, 0xf, 0xff00, 0x3eb0]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x5f, 0x8, "5a5dd76b", "54bdfa4d"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x68, 0x2, 0x7, 0x4, 0x8, 0x400, 0x3}}}, &(0x7f0000000bc0)={0x84, &(0x7f00000002c0)={0x0, 0xe, 0x80, "9c35cf0b96fff6c42657635fdcef31737467c697490d1556533c0d98bcabfbf233106ca27af5f7ce39b52780737fa6dd10aeb8be7bc343dceb490f94c9ad297ae76a035422b9017b679c2efe1d34c9f0346d524b3dfbf4b6391b28deb762f78dcdb155e98a76f846826750bf5c98ce1d7bc5d21f3425b9e92ff7d2422354985d"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x0, 0x80}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000980)={0x40, 0xb, 0x2, "ba4c"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a80)={0x40, 0x19, 0x2, '36'}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0xfe}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x8}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc40}], 0x0, 0x0, 0x0}) 2m28.599936959s ago: executing program 36 (id=3887): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x20, 0x12, 0x6, "012def8ab5be"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r3, 0xa) ppoll(&(0x7f0000000000)=[{r3, 0x2020}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000007c0)={0x20, 0xe, 0x1, "18"}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, r2, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000000, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r4 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r4, 0x0, 0x400000000000000, 0x2) timer_create(0x9, &(0x7f0000000180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="20e17ef9c8205940824ec9daffdbf5a058751b6b42b4fd68e519187b02eba5ea670223013a942dfe642db4519579b3b89b47"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, &(0x7f0000000100)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x1, 0xf, 0x5, [0xff0000, 0x0, 0xf, 0xf, 0xff00, 0x3eb0]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x5f, 0x8, "5a5dd76b", "54bdfa4d"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x68, 0x2, 0x7, 0x4, 0x8, 0x400, 0x3}}}, &(0x7f0000000bc0)={0x84, &(0x7f00000002c0)={0x0, 0xe, 0x80, "9c35cf0b96fff6c42657635fdcef31737467c697490d1556533c0d98bcabfbf233106ca27af5f7ce39b52780737fa6dd10aeb8be7bc343dceb490f94c9ad297ae76a035422b9017b679c2efe1d34c9f0346d524b3dfbf4b6391b28deb762f78dcdb155e98a76f846826750bf5c98ce1d7bc5d21f3425b9e92ff7d2422354985d"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x0, 0x80}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000980)={0x40, 0xb, 0x2, "ba4c"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a80)={0x40, 0x19, 0x2, '36'}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0xfe}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x8}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc40}], 0x0, 0x0, 0x0}) 5.763956591s ago: executing program 7 (id=5255): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x1802, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 5.718574831s ago: executing program 7 (id=5257): sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0xe, 0x2}, 0x14) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, '\x00', "01ea8b275be257b91fca01d113de6db0", "33915b02", "b3f5d686491c5629"}, 0x28) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x9, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x12) ptrace$setregs(0xf, r4, 0x4, &(0x7f0000000300)="da3b914de4eb60a9d1d04f96f4c4647dabd32a6137aa837c4258afaab77b06083a056cc289453ae07d53fac377df2d522759cc5bf72e42606da27b75b8e375395781c0c6c01fe93a580c957e72dd1949b79ac2855740c803c488cc0eef00b75568654828d9b6309ba0efb160589ad2dcb7f6b296478243b66899489b9e3c0260da70e9fe4dde70ef7dff5baed8cd35c5c2903f2cfd3c78") 5.115522435s ago: executing program 7 (id=5259): sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x194, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x194}}, 0x48000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x1d, r2}, 0x10, &(0x7f0000000500)={&(0x7f0000000480)={0x1, 0x40, 0xffff, {}, {r3, r4/1000+10000}, {0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x36, 0x2, 0x0, 0x0, "55cf94d798a109f07c92a93a9f3501daac996faef14c2e8acca3a30bc14aea2b28deea7eb0faf29d1e2541b8efd2f70b5cf463ef0dc365cbf8fe35a6b204fd94"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) (async) ppoll(&(0x7f0000000580)=[{r0, 0x108}, {r0, 0x1000}, {r0, 0x2060}, {r0, 0xa0}], 0x4, &(0x7f00000005c0), &(0x7f0000000600)={[0x8]}, 0x8) (async) r5 = syz_open_dev$hidraw(&(0x7f0000000640), 0x0, 0x202a00) ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f0000000680)={0xf73, "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"}) (async) r6 = socket$inet(0x2, 0x0, 0xf6) setsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f0000001600)={@empty, @rand_addr=0x64010100}, 0x8) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) futex(&(0x7f0000001640)=0x1, 0x0, 0x2, &(0x7f0000001680)={0x0, 0x3938700}, &(0x7f00000016c0), 0x2) (async, rerun: 32) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000001740)=0x2, 0x4) fgetxattr(r7, &(0x7f0000001780)=@random={'btrfs.', 'wg0\x00'}, &(0x7f00000017c0)=""/114, 0x72) (async) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000001840)) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r8) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000001bc0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a00)={0x174, r9, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d579b9e0ba8bd3c6ab3ce44806a9981cbc83d2ca57cc65d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "574cf6521bc0488d161445ea669d5b63339ddb3890785616"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "75ab88802b0b1cc80449ab4972b32ed680b363f47fcfdeff"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1e155cd1709fe67dfc3af39378b96fc0f207605845ffa314"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8cd969c07d975dd57979c192cde4294dc62c0b3205b26581"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000024}, 0x8000) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c40), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x34, r11, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x37}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0xc804) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000001d40), r8) (async, rerun: 32) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (rerun: 32) ioctl$FICLONE(r12, 0x40049409, r8) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001dc0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x1c, r13, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$key(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x2, 0x5, 0x3, 0x9, 0xa, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x6, 0x27c8, 0x6, 0x2, 0xf}, @sadb_sa={0x2, 0x1, 0x4d6, 0x55, 0x2, 0x56, 0x3}, @sadb_ident={0x2, 0xb, 0x3, 0x0, 0xff57}]}, 0x50}}, 0x10) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000002300)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002040)={0x270, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x233}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8b0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff01}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xce}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa142}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc8}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x66}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1d5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe411}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f7f92a3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x8891}, 0x4004894) 5.066480876s ago: executing program 7 (id=5260): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file0\x00') fsync(r1) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, &(0x7f0000000080)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 4.982486846s ago: executing program 7 (id=5262): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r1, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x9c, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2d, 0xf4, 0x9f, 0x40, 0x1686, 0xdd, 0x37c4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x2, 0x61, 0x10, 0xe, [{{0x9, 0x4, 0x1, 0xbe, 0x1, 0x3e, 0x4, 0xf2, 0x4, [@generic={0x2, 0x11}, @uac_as], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x8, 0xfc, 0x6}}]}}, {{0x9, 0x4, 0x22, 0x8, 0x3, 0x6b, 0x1b, 0x50, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0xd1df, 0x1}}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0xc, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x5}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x6, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x3, 0xf4c}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x60}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x2, 0x40, 0x90}}]}}, {{0x9, 0x4, 0x2, 0x9, 0x3, 0x19, 0x7d, 0x19, 0x3, [], [{{0x9, 0x5, 0xc, 0x8, 0x400, 0x6, 0xb4, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x8, 0x5, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xc2, 0x1, 0x7}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0x8, 0x6, 0x10, 0x7}, 0x0, 0x0}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, 0xffffffffffffffff, 0x8ee49000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x14c, r5, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6a3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbc32}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x563b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "9959cc90137484d8008ec99555cedd5774dc8ce25c8ba731a71c36cc32ff"}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x901, 0x1}) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f0000000200)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.838351597s ago: executing program 7 (id=5266): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x8000, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, '\x00', "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5cc28f", "b200"}, 0x38) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000240)=@ccm_128={{0x303}, "76187900", "63f24ed54396230e12c062cb61a054dc", "ea673388", "9a4a78884d5c82f5"}, 0x28) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000080)) openat(r2, &(0x7f0000000140)='./bus\x00', 0x410040, 0x10) mount$incfs(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1005802, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000000)='./file0\x00') r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1f) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 4.810029338s ago: executing program 37 (id=5266): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x8000, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, '\x00', "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5cc28f", "b200"}, 0x38) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000240)=@ccm_128={{0x303}, "76187900", "63f24ed54396230e12c062cb61a054dc", "ea673388", "9a4a78884d5c82f5"}, 0x28) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000080)) openat(r2, &(0x7f0000000140)='./bus\x00', 0x410040, 0x10) mount$incfs(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1005802, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000000)='./file0\x00') r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1f) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 2.493088253s ago: executing program 9 (id=5319): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r3, r4}}}], 0x20, 0x40044}}], 0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r2, &(0x7f0000000600)=ANY=[], 0x78) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x41}], 0x1, 0x382, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x56, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x6c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x0, &(0x7f0000000800)=""/153, 0x99, 0x0, 0x23}, @fda={0x66646185, 0x3, 0x0, 0x33}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x28, 0x48}}, 0x400}, @decrefs, @increfs_done, @register_looper], 0x0, 0x0, 0x0}) 2.351418424s ago: executing program 9 (id=5321): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x161142, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000380)="64f3466d2e3e672e452f0f070729d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410069e648b80010000000000000440f01c20f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c249dba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x901, 0xfffffffffffffffd, 0x8, 0x100000000, 0xffffffffffffffff, 0xfffffffffffffffe, 0x10003, 0x400, 0x4, 0x4, 0xe, 0xe2, 0x3d, 0x200000000a, 0x80000001], 0x0, 0x201085}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) write(r0, &(0x7f0000000400)="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", 0x678) 2.119410005s ago: executing program 9 (id=5327): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_clone3(&(0x7f0000000380)={0xc0300100, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x3}, 0x58) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}}], 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, &(0x7f0000000340)='./file0\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, {0x6}, 0x76, {0x2, 0x4e23, @broadcast}, 'ipvlan0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x9c, 0x0, &(0x7f00000007c0)=[@free_buffer={0x40086303, r1}, @acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x3}, @dead_binder_done, @clear_death={0x400c630f, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000780)={0x30, 0x30, 0x30}}}], 0x29, 0x0, &(0x7f00000008c0)="4b30174b442288c3a9def15973bb88f9681daaf870436e821da0bd6350d981151041f99854174eafdb"}) 1.908731787s ago: executing program 9 (id=5329): r0 = epoll_create1(0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000b, 0x12, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) epoll_create1(0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000b, 0x12, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) 1.735889418s ago: executing program 9 (id=5332): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = fsopen(&(0x7f00000002c0)='devpts\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) timer_gettime(r0, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000080)=0xa9) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3e, 0x4, @tid=r6}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, 0x0, &(0x7f0000000080)) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r9 = dup3(r5, r4, 0x0) recvmmsg$unix(r9, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000005140)=""/4111, 0x100f}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000480)=""/131, 0x83}], 0x4}}], 0x1, 0x58ca2280, 0x0) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) 1.239879781s ago: executing program 2 (id=5343): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x201, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x90) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\nV\x00\x00\x00V'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) 999.852193ms ago: executing program 9 (id=5347): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) write$selinux_create(0xffffffffffffffff, &(0x7f00000000c0)=@access={'system_u:object_r:apt_lock_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x5}, 0x44) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001100)={0x4e, 0x1ff, 0x3, 0x0, 0x9, '\a\x00\x00\x00\x00\x00\x00\a'}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x480000, 0x0) r3 = syz_open_pts(r2, 0x414059fe72e74c49) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x688903, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x6) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x2, 0x8, 0x9, 0x0, 0x401, 0x8, 0x8000000000000001, 0x46bf, 0x0, 0x4, 0x8000000000000001, 0x71, 0x9, 0x2, 0x71ad], 0xf000, 0x80800}) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000b, 0x8010, r5, 0x207ca000) 794.309504ms ago: executing program 6 (id=5350): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x8002, 0x10) write$cgroup_pid(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000002080)={'\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r4, &(0x7f0000000740)=""/188, 0xbc, 0x9) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000140)=r5) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0xe) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) 723.548905ms ago: executing program 6 (id=5351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000004200)={0x354, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x2b4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fuse\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@,)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, 'cpuacct.usage_percpu\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x14c, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^!)/.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fuse\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^!)/.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/rnullb0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6f}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '*[[\xef-zP,[[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/]\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff8000}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fuse\x00'}]}]}]}]}, 0x354}}, 0x4004010) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f00003ec000/0x4000)=nil, 0x4000, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x94022, &(0x7f00000001c0)=ANY=[@ANYBLOB="68751a00722c00"/17]) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x28, 0x2, 0x60000002, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x80, 0xfffffffa}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r4, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) rt_sigaction(0x100d, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x202]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) socket$vsock_stream(0x28, 0x1, 0x28) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xb, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000640)={0x1, 0x380, 0x8, 0x2, 0x4, 0x5, 0xffff}, 0xc) readv(r7, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) 658.979806ms ago: executing program 2 (id=5352): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$cgroup(0x0, &(0x7f0000000180)='\x00', &(0x7f0000000240), 0x2128000, &(0x7f0000000300)={[{@name={'name', 0x3d, 'wfdno'}}, {@clone_children}, {@noprefix}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0x22) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) tgkill(r0, r0, 0x1) 567.560506ms ago: executing program 6 (id=5353): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000080000040"]) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) 501.966287ms ago: executing program 2 (id=5354): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x100000, &(0x7f0000001940)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}, {@access_user}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@debug={'debug', 0x3d, 0x1}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '](,'}}, {@euid_gt={'euid>', r4}}, {@obj_type={'obj_type', 0x3d, './binderfs/binder1\x00'}}, {@permit_directio}, {@subj_user={'subj_user', 0x3d, '\\/#'}}]}}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x80) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) r7 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r9 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000c00)="28032000ffffffff00007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8c59096d9ba5747e3", 0x48, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r10, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000001c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffffffffe46, 0x0, 0x0, 0x0}, 0x40}, @enter_looper, @clear_death={0x400c630f, 0x1}, @decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@flat=@weak_binder={0x77622a85, 0x10b, 0x1}, @fd, @fda={0x66646185, 0x3, 0x1, 0x31}}, &(0x7f00000000c0)}, 0x1000}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r5}, @flat=@handle={0x73682a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000940)=""/4096, 0x0, 0x2, 0x3f}}, &(0x7f0000000180)}, 0x1400}, @free_buffer={0x40086303, r7}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x110, 0x0, &(0x7f0000001bc0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@flat=@weak_handle={0x77682a85, 0x1001}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/178, 0xb2, 0x1, 0x34}, @fda={0x66646185, 0x7, 0x2, 0x22}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x1}, @acquire={0x40046305, 0x3}, @register_looper, @acquire={0x40046305, 0x2}, @free_buffer={0x40086303, r7}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000700)={@fda={0x66646185, 0x3, 0x1, 0x3c}, @flat=@weak_handle={0x77682a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000004c0)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/129, 0x81, 0x2, 0x22}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000640)={0x0, 0x28, 0x40}}}, @acquire={0x40046305, 0x2}], 0x56, 0x0, &(0x7f0000000680)="f22439c47e109c6096ea2bae1f7d03b8c44245ee48a8a255e0db445a21505ddddb4f9e2515db95a1de45d524bb52899f3ec0425f88053f7a7475b3ec0373c50a7a4d67df5fde31db1a31325bebcf85b344c0596e65b8"}) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000052000106"], 0x1c}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 501.726927ms ago: executing program 6 (id=5355): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44800, 0x0) (async) readv(r0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3) 493.269396ms ago: executing program 2 (id=5356): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd1000, 0x0, 0xf4, 0x2, 0xfd, 0xd4, 0x1, 0x0, 0x4, 0x3, 0x6}, {0x10102006, 0xffff1000, 0x9, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0xf, 0x3, 0xca}, {0x6000, 0xdddd0000, 0x3, 0x0, 0x4, 0x7, 0x11, 0x21, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x9}, {0xffff1000, 0x4000, 0x9, 0x7f, 0x3, 0x9, 0x9, 0x6, 0x7, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x8, 0x26, 0x3, 0x6e, 0x1, 0xff, 0x3, 0x80, 0x3, 0xfc}, {0xdddd1000, 0x6000, 0xb, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xffff1000, 0x2, 0xd, 0x5, 0x3, 0x3, 0xa, 0xfd, 0x5, 0x6, 0x2, 0x7}, {0x3000, 0x5}, {0xeefee000, 0x9}, 0xc000000b, 0x0, 0xdddd1000, 0x22a0, 0x9, 0x0, 0xe6e70c00, [0x1, 0x401, 0x0, 0xc5]}) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000bc0)={0x2, 0x0, @ioapic={0x33325000, 0xb, 0xa, 0xfffffffc, 0x0, [{0xc, 0x6, 0x7, '\x00', 0xb4}, {0x83, 0x7, 0x4, '\x00', 0x4b}, {0xfc, 0xe, 0x7, '\x00', 0xf8}, {0x0, 0x9, 0x40, '\x00', 0x7}, {0x8, 0x10, 0x8, '\x00', 0xa8}, {0x2, 0x9, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0x8, '\x00', 0x1}, {0x5, 0x7, 0x6, '\x00', 0x4}, {0x2, 0xd, 0x15, '\x00', 0x8}, {0x6, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0xb, '\x00', 0xfd}, {0x6, 0x9b, 0x19, '\x00', 0x5}, {0x7, 0x2, 0x4, '\x00', 0x7}, {0xef, 0x6, 0x9, '\x00', 0x4}, {0xf, 0x6, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0xfe, 0xfd, 0x7, '\x00', 0xff}, {0x92, 0x6, 0xfa}]}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) r5 = open(&(0x7f0000000100)='./file0\x00', 0x141a42, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) socketpair(0x26, 0x80009, 0x9, &(0x7f00000000c0)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x16) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000300)=ANY=[@ANYBLOB="000d00000000239c35102b54985096ae8b56eb54d8b6f22d17dd60b995166d8fa76db208a390a464d018c685d9cf1a611a3ce8e65810adcb0d1865727baccb9df4e3d4fa19f5b991564a5f75f20896d13afa5a86b5bb9c3c2e652208d7ab1693a7a808c0f0cbd83ff09dbb5693f99185e27541f06e3f11f3054d6faf2702be1d5188ff82da0f868b8d4d98c3c58e94b76e475a6e835f3fb4915e01c3373dc88502b2ba385a33a56cc7"]) r6 = socket(0xa, 0x3, 0x87) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x24}, {0x6}]}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448e2, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB='mode=0000']) sendmmsg$unix(r6, &(0x7f0000000a40)=[{{&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000ac0)="925977ad4f23b1a7e895a060423bca9955315665ff0f20749d2e3f394bd5585f538b5f304b26688f0332c470c18d09f52ab66f67e077dc1fef0f4104f67f0009000000489dc541c1e8f9a4962b5776c7ee2ed9735860c2bc5cffdc5eb0f692574ff9519fc46efdff56fb206cc98081bdcef0b18913", 0x75}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c0000000000000001000000020000006f5a3084aa292d26b8f377c5bcf8052fa7fd6420de5949a573e0895ce64ee698ce", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x4001}}, {{&(0x7f0000000780)=@file={0x0, './cgroup\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000540)="62a2ab9c32d77313f475472ce6d20ba7ed2e619a", 0x14}, {&(0x7f0000000800)="5466fdd3fdc0fe42201b71d8cccbeacf8c083926a9a33db845a30f82aa376a90c65b2c477da362e91de0bccd28d3a90cff1487e25ff377d0f7a72e146835e27a0a58de79eaffe4655700e0914540352151efb11e3bce21f096bececb8aa22e06b8963613cc5eef236d41af14c23559929797695543013a63d62ed06a2c0bcc65882f596fbaad11b8108ef125a448e5eb56bc05cf2a47329a877f07715ffdceae9b0e7030c12b5a3b93bc15103c27d774bbfd32c9c229393b3d22c2e5ca781ee71b15da20a3dd59cf661a3c0cee7e758f958010def72a6a79f469a22d783cedd2d889e6cb9bc2944addfdac03e05e897d593985f598c46320ce8876", 0xfb}, {&(0x7f0000000900)="84444bbf05564bab017972aa65a523b84b9a319f04f914a1bce7a909c93784b0cb95438c58e5e3a0d479", 0x2a}, {&(0x7f0000000940)="0b872633c55562227a37e2ea0e8640ecfdb0670b6d144df12dd7b55f3f874f1816bbd2c990d2ac03e41718ad8e832e1ee6f56c88e077fce4291eace8e643c02dec128271b81888256ecc11780d7ee0dee52627e4bfc81fd7d64cc4150bb06fc89e155c537b81d10918199ff4a945285233ddfc8b658d174d95ab52dc6c8ef5b576388d488f3769cb23527c94f14e3c376e7e23e070d63590eeaa3b", 0x9b}], 0x4, 0x0, 0x0, 0x4000}}], 0x2, 0x4040000) sendfile(r0, r0, 0x0, 0xffffffff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="040100001a00210a0000000000000000ac1414bb000000000000000000000000ac1414270000000000000000000000000000000000020000000000006c000000dabeaae546978c17c441b7584280a2c0908fdb279439f46d356ec72e4ac089cdbcb321bb699713a97a596ee7b899627a92bbe1793a781810afe3bc5501f281e453308aad4b8b5a50f446da133561e6123f3d8ac083", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003c000000fc00000000000000000000000000000100000000000000000400000000000000060000000000000000000000000000000000000000000200000000000000000007000000000000000000000000000000000000000000000080000000000000000400000000000000000000000000000000000000000000000000000000000000ffffffff0a000100390000000000000014000e007f00000100"/188], 0x104}}, 0x810) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 492.924327ms ago: executing program 6 (id=5357): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x1cd, 0x8}}, 0x76) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000180)={@rand_addr=0x64010101, @local}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 459.356127ms ago: executing program 6 (id=5358): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) r1 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x150a, 0x1201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0xa1, 0x2, 0x3, 0x1, 0x1, 0x48, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xa71}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x83, 0x3, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x5f, 0xc}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x6, 0x1c, 0xf9, 0x40, 0x9}, 0x37, &(0x7f0000000280)={0x5, 0xf, 0x37, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x0, 0xf000, 0x180, [0xff0000, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x2, 0x7a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "007ab21edbe5f731e2181b7f76132407"}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x813}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000500)={0x24, &(0x7f00000003c0)={0x20, 0x8, 0x45, {0x45, 0x5, "7c0b2fd3fda7e81802ed1a449f1969d10267963c16c3fbf70e40ee35126485d603935f7a8d681d3ee182435b8e9ec175d51427455db319ea4e7aa513b6f2990ae5af8d"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x452}}, &(0x7f0000000480)={0x0, 0x22, 0xe, {[@main=@item_4={0x3, 0x0, 0x8, "c99a5a65"}, @local=@item_012={0x1, 0x2, 0x8, "b0"}, @local=@item_4={0x3, 0x2, 0x2, "b2fd3c99"}, @global=@item_012={0x1, 0x1, 0x5, "01"}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x2, 0x1, {0x22, 0x2a8}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000540)={0x0, 0x0, 0xc6, "9e4d61192564fce060ad5e0b6f4987e4e57f46a94a9c575456fd1d8c752cbfac421aef1c34c92ae32bd091c264c0544e9a2b23cc1ae7a325d1755e82370c4f9f53b388ad30cc6ca9d0bc69356aabe52532e077fccdb0d0c6f5ad56028047ce0c552d44bb941d76373f423638ec377282bd681d0584824369975988f67231f2c26dd7b6e6af6ba45e990ee7cf00e6191be9b86758d847b6886fac283fbebaa7652d09892c86c4ae703ab85e61abae6119154ec178f81d38b82a453e0a441aafc2b33eb0e3848d"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000006c0)={0x20, 0x1, 0x2d, "3cfa4255bca7b98b27383aff25343c367bd527aaa27e6f17d9fb90ee84ce1d27eced5432ffeb3c1158fd1a9446"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x5}}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 387.839297ms ago: executing program 2 (id=5359): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000a80)={'filter\x00', 0xb001, 0x4, 0x408, 0x0, 0x110, 0x0, 0x320, 0x320, 0x320, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010102, @broadcast, 0x4}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x16, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="d82d6bab2c9c", {[0x0, 0x0, 0x0, 0xff]}}, 0x2, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {0xff}}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz1\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) poll(&(0x7f0000000000)=[{r0, 0x40}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x8000}], 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 386.840677ms ago: executing program 2 (id=5360): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000003000), 0x201, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) fallocate(r2, 0x0, 0x800657, 0x40000b7) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0xfffe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r2) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000002440)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002400)={&(0x7f00000010c0)={0x1324, r4, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xb}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "d02c6359c963"}]}, @NL80211_ATTR_NAN_FUNC={0x12e4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x12bc, 0xd, 0x0, 0x1, [{0xc3, 0x0, "221bd06ac3721de1dd84a665d084d52e0da4d8f9ec1d6bb73c0bebb2398adc0cf8a9892db0f73ab51b423b1adeeda3a72dcc6b3e27b5a27c8c4dec93594183d57a525534210159d8a1a32489add57dc0dc26862a0350b2296a7eee46360b5c690559d755dbce848f5f55d4221ba4d9b4261dea7fb9a03f897b55c7da26472fb1518c73fd6c964cfd935171ed3e546f1f0dcd2e5177a487aaa071e183da2866411edfdbc15aef552995c131b83b6cb62d16aa7d4bcc421b5f8aad74ada2c981"}, {0xfe, 0x0, "1e865d147c720a15d91423a7a9643e2252339f8d1597f9970eeb819d2ff933c1c5744c86251b3feddc9dfe80a4dd68ffd2188e79307cdb63305ed838161d7581044ccee6c9e6cb1c09ede708d0c3d2f662928a1270343d50a35b83baf10ccb37d9c373a0a8f785a6c23bff65e0b98291fd61b904a5adc1ac1e4e25b51cba273e3a55df7ba1d2a36a38d1dd451a155c50a0463d3ef991a4cc53ddeb3a691726e2c75a8a4a189c01d5a022420b4f12c50fc3c2eded57058ea2e4df61545531df8eb6779d23a6a331cdbb1d368bf70c54f228be0dd7a8f64f439f62b432cdabf0ca531fca94ec5ddc1aada57f40cf797308856c273e8be7587048a0"}, {0x1004, 0x0, "76527e12eba4a3754ccd93d6fc9871a3a069edb12910f8bb4e921e7d6fe0d9df0f9bae26073187b17953a212f72a7bd7aca47a784b71000f8318ddaf7036a4f036e1b311d7f7c5f05b1bc2fb9cc694da48292d375e5f317384aeb3fe77c287a74aef5fe4170a416d2d3f918a67f0f785c5c8926a71083d1dcbfa4beb2c5e6241248acd8d1d5d6e1197b30e0ed6720ce6a0d70ebc01dd468de0caf091ff61ea801fc3be271ac3a0f77550290bf9de421012003211c655044e3a5f7d2e3ab4d8407606fd77093092206d9087868f20c170064459f32a7193378b0e3ef3b0dd4c4175f38197ae7bcc7ffc181d22915953d6f31b05493413dba313260a0f8499a7cf4fd70afb8693600a73142255853930fdba1791088d406c7e9c94fd4428890c6e0f37b6ea457a82e5faa2013e8b3c0f2b57b42258c778120b8ca1bae431d6053c329cfaa40e0da3b94befce0ac51bb4efbd79fc129c856c7392249d0ba3707e8ef8ce8641b4d06a474d99d25ba7db01a9f97d8fecfaaf03d87b19c12fba6124b84a3a1418908c482afa68f9cc8f0ac661133c1947be9939d142f58c4624f3e88deaeda6f486e7a96296ceb1f962c333e0e3b14dd1984f00f09ad1d3e3fc06aa79ead673d3babedbab10755fe20ff4376a3dd8c0011db7f23f3ebcb63da34948ffaa5c23d495fc14fe6f5cec840dc6399de2bc30c090401f98d3da04588ca97f369d4da65061d014b0443568165e965fb69211c5f8538b2203ee537677abb718bfb432b4b5ae31723a39baca883c34ddfe96ce448e923bcac5855c57340b362dda7e777eb64524552db83220fab3ab490ec29ec3382ff6651301eb4eea50441c2b423b8be8b740fab84026fb99a415131ff8e580b052ad8cb9d96c16423b81bb1144a8a4971e81607c2b1e2bb8593639d15dc5b25f89909bcb42d7176a0234fafd42c74df03f848995ed05f1290cb8ce30b718250554b75b2d1149cc29bbe96a7ed0429665dbd9bc2d302c5c3bd4f48b70417c40e4dcf8dba7a65c608b4171355bf50b66dd5f8cc989f34cca8cafb02fe9d7b91824b2db8af5c860edece5f8465961a0e44b84303794e8fce5fe37cfb99236d05f6ca6661f4e10c163a3ca37d7d6bd9089ce28e6ac8f9376d905986c271f040d26de264269fe4878ae7a65897653f21865f2095ebbc6dea37fe88e5f0d20f684c0b2c920c86853c341a5935a7a98e5cd9a4acc9000d9272341d3248141d742d443192924be974d3d6a2323b1832256aed0c52bd493865cdaaaa17f4aac13c567006b0f318ced1ee5025d8f5f736b6d5769c16c2c4ae6ba11e1dd85b724b7763fdaea76abf71cb98a1095998b46c6ff3d5ad9d6bfffa8c6e3a47404bd9363fc5f2f9014deb13847f25b169df8add6ab5695d0702422d60f9f28f09508d249970f532476995e0b7f7f92ee7f973e1ad67ead9e0c5b3e20c37a5950af19d8290bae717c9a8421d266bcdfe204e248a468a9a41a2b82112fc470a3739802a114ae7e92a7861a25ea4b49b37d4ee06cd27b28e2bbdb3a40d95a35fcbc419f26581022d9f53228f68ea1e3fb0b910d95ab6e9cd52283ded10c9dbcd9a03cf3110caaaac5edd6ee93ee2c9e9aec8b3d41f509f789f24a9b5ef85217c6a65801b019f19b3c6200f59a18e3b30fb5d7ac252b8a441d4690645f451f3fdfb608d86d350a309099b7d23f4bd208fc3221a2e266f30127912a71643842b524b5aaacab3fac7fedad876279d814dd25e0f6c0ced80ba0f64d11755bdd5673aab54cd6c90a9b5db51e610cef65ad27092b2490051510e5ff92a8002e4b1170a89fa64dc8f533fb8302566789506a90a315391997a86ba1144d5556b251fec2f7b3d690528a21a98d80120729b78c25fbe5e4cd5d9620145bf1334fa4183615d5632d7eca438b944d9497652f09394821e1b487f887f9f46e5d266abddf8a86e132da4ba0cc7cce097b88a22de1ce0160a4d713c9cf9d3379eed3827e266506a33358b25c45032fd6af35b499a77000922c2fce55a231568e45c0bbbc78bb629c9d15e5cd1baf4bf7e76659cdb20961e4731182715203a47a5c29b7ac676f13dc20b36379253a371a50b6e908b175add848662dcf02ed7c4418811ae9d5b3be7ea52ba3d4943f0c0c067f9e627ac359d03a14c0423761041f224bacf3aa778f048ee248487b54eacf753ea01ce7d62105412aed14c7328ed559c2551050340f05a8d2cd7d93089b31282c078ef9445ad995ac8366fde0b67afea534dd3856b41691edb717f5a57339d28a915b2497c90455fb6b99a0c2393359efd686f3839398d0fa8cb104366a7108e1483c239c6a69e51423f0087520e834fd99d2f1517275f8a67828784d2fdaff08f96cc9701984f213c485d86de5eab1ea758df4dc6dbcd3cb562765c50a4cc06eb74a5d5bb76e2eabab903cb7846d7ac638666b6fe2022167238f1cfdc891504abca6d9050aff675df558821cc32a65ec14e15ac93c5330491646c09d2ade450e1b32cc89c274565150ce5ed85d529d6bdee382baa310d81382f54c67f29dd6f58af7c5b273c12531c5af3b7d7b7cfae6a2d85e9dfad7afeed52cc147203b5cbc3b2e252d5aeffb69a1a68834fee8439d88e4e56def10266b768e015b96d4dc0a949a8b5f60df3a21f2cc28dba506e2d2b8dc6c944068aaa3c360cc9c463c89c17826f08427a9d2e992351da54ab8c65e94993be5941e3f7567ae11b203a1fa3c27515e174d5759c6030f488da8200e4eac11a3df457cb270dd08116dba7a82171a7ec73dfd4e705bc4de205a3367732b2c97d5e43ce9497a4b770c0ac100f61df319346dcf86d93431f32c5076b665d3c8e30bdfa93d581aba3a5cb1f2725f1986bc525b5b6883ff9eb878172b709f01ca94ee2f2560893b1e6b7daad045b9f63891ece49f16215b84d4f9f0e24ec78da1f267d98f937588aaeae97297cc32e3ef544e0b75423dddbdd71a3d8b39bc76a510e1e3abff1a9e3d35e695410467e1ff02a73f3d2925e6adadf0067ab91f88fd3e111a64efc183696d2012ab1b4582eea0b38e9a829398b88b935a71a0fedfd1c95aff89d07ca067253db8d773e4ceed8ede96bf29cbc3db658fc72c01462f1960a8122ddf4411ddf9b5bcc77bab9fa9d0a96ce39b771d097ecb4aa0136a589d0d025ad6cd49fd0cc8158acb3b49bb684f333f4d22fe6d6a53ed2cf3f6fe90efe56ba7e2c82d525caa405b2a76bf5e40925424649b511da093a7429ca45cd4a77b98bf172e33da26047e8264ecdf574b27f0a59e540b34cb5a2302184b0cf15ca400cfe6c07e45eba1d2c282339984347af772d9f7f16ae12c07ac9cfdb847c44a1d8a5fa58c54237e75441cd147d8a9729aa45801506a6c9c0d44e8de6f46c482bc4a4f163ca7dcf915e2a451aeaa80c3f185dc89208732a5ea9c8fa502e85a4d3dae654a7069c479d2b495cd5c3a0df6f6b4ef85391d46ef5a3ca11a106cb2d3fbcda6e5944152ddc1259c080cdacaa4bf08f1680137dd05d45bc3a94d647c1665e9d58e3e3b7ed61a11872ad5e37e8e922a04a9b7db32296e6043929add55a435c85e8d98661b7b05f0cdee3225e14efcb9fe3c8e3162a537e97c39c56c70e3729aa1160b2f26b10062bc1ebc76536eb8950e888af8b8465eb1ead8170bef210c2d8fe8ce56acd765e5030e68ff0b9011d056c0f4af3818f14879e70662673f5aa0af3112aba53ddefa1ffc173f0317a578f2e3a52b0d9c96a0b5bcd3126d97a2bf04e23c6ed6ea46de8aa1d4a8d7b1665b617172c17cd5eaf7306bde509ce79d80185112ca721b188268c288f23ca959b3f1a3272e41deb65eee5244024befdaa1b4092377522d859b4008fb106f5a1238f6cccb42ef42e33cdfbc910a19dbbf24f7b3eb6ba5fe187f76082c3c052fa4006b6827f6c612318bb18509a6acd98e1bfa80491e0170e245d32760876b333af4f1295174cbaa4332f2131d4c8589602a98434d6b2a1762ff6428d86e3d19505635193415adf1fca07526775a8456c98f63578596c0ced12aed3493805b2260594f8d5538a9990459db019e58e47738f3988312515979741cbf384646f5bc64be3b014eb23f4c807a9e7cd0beba9cd6bda726bdcb308b1ffb8d94141f3a5d3d41140f1708c9faed5f299693304cd7814d1ce0b75d624e976c2bcaef13ca945a76780abcf4f679c8b580210a4d3c5933b9597df74badb623d32f362bed75e59433a30474901360716d79b04fc0932ba5624e3373a73c0424888d8d6611ce0a609bae183a1e10909aa72579f0878a43dd094bdcd2eb7098c7c7590ebf179da28e7da0349e900e5cac835fe494135b6600e1d9866ba3518dd0df3bfeeee7f145915292997b2b71ff7225a8b28d5485a30325e57454b3ecc70283cb4b09f5e81681cd381b33b8c02e2e14bc8812e82490eabfe7e7f371b4af89d1470e2780a6e130363026b474f79162f05584a4b62a675606d5473074643fae3c995bf3242d7231e445311e76118f3d09d3a5a00340468acc29e265c3df2fdff06e91959ec15da8d70d1090ef7553971054312c5752253409a78ab56132d574e8b197600d65e2d2269dfea904e84457d9900348988518a59915e0734a7b5a3efb0f4e592671f98707d4c0f4ef7c26fc55f36cde03f96b8b79ecc0e2ac3a2913036aad6b2d30e3f6ceac730a13ca27f6b51a9e110b0778444286c4abf1bd94f7ed8c5af5036e6d9ff7ada5c95ae535c9af9ccc0907c3b16989057e052029897fe92ed5ee928429a36f8e0c6b1ac51e53b409d5f2b5cf77327c4e813a3528a273013b1d107e1c5e85dce8385cbf1cf8e17ce5655bad09070bc97a7e92df8c5990c7192df3e2d07abe8b1f095ddd6660e0246210b5777bf601953ccbc8df44e2b92b3e6625fb26a1a0d9597f1b0f5ce388baf20de97a15f951405b1f62e968e96f56499a782213b7e3700bf63cf5aeb24f136482561ba93ba07a4d5bc9d990073fe56ea42282f6c359b9a82ce83d4468b96891a27fa5fef246a3e78b1e573d14932720e37fa89753e10383a9b4d92602de932574fba886649d4f4ca3bfb8caeefa26eb458c87f09cabe747fa54bf522e01719edb1a882e14d0ee2a204c055f0abd573d03ded712244c17a1409c15b0c331a4621f5c78d56232ef4c60f8dbb38de5adc3c8ec8f585df4d3b0ed114991d526d3e6d0316be41c405f6253dbad4cecd71d7ad44d4cf29b599e63f5a903deff7f3979a6827885d4a0a30073bc4aa568e3ab706c069d8efcc439b16f84890d73f676b3504f498c116087c14df0d0bfe5b5cfc9198d905b463082660f94597bcbdac5daed51a28969bdb8b83b6ba1345deee96e58a6838ddb20e6ac6bd1da68cd11128a0ea862c9808f829c0eefc76c235928f926404103a6ca53b4777b94abd424e7594d3bd2cecc5d898d390ae7ae9aeb8f2b8681608b598a3a4ef5a8a7fc21c88b2934de129f9535c1c7ba45d019912911bff7018c81b61ba5af1f10c82c5b60b1c31b06d7429d9e39d884ecd63fc3c79b51ce4c8c5ccc30de625773c202a943ff4bd4d4f4089ca07b975cdecedd89c3b22ddbd39fd98414ed042baec1e3169c74e984dc11fe5c255f1c6816d28d5ee8ae0e673906a129442eb06b8e8268f91dec806222d514c07813bbeba4ad2c81753294c3ce6ca811ed49c01e0d0dc8a1619b3424c797976610ab00f8ef21b30c92f4f2cdd0211d48f5ddc21619d101148251f923cf227a8f715cb2754b16bd22f94f79af09ce03695ae902b71e4cabf4de"}, {0x5a, 0x0, "3b55e625731661e47d1b2b6d82d26f4e8ab23d6880ca2eb999fead4f1282a12b9c2cd4d79517cf38ae3b06362f4bb7d4d5f84fdeeeaff88a39d3f9bbb33f9c007fc85a0331cd764ddcbf83809442c49e2b24a121e28d"}, {0x5b, 0x0, "ec0f4d77d3f0fa1c7d82210f3db1fdcf2f45d85bc490b484e776ec1b31fddffa618d486402b4a9723e0e50310dcca16dd977c85bee354a74c79fb97ec696be024bcd6ae00e69d318908ea847410f4da6e0b56df17a3309"}, {0x38, 0x0, "368252555b02c52eb389e871509d9ccc5af9a0bedc6f8171b933f00473a0a9fcce2032450b9b754555f5bdebf5507e60bf3ae5c0"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x400}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}]}, 0x1324}, 0x1, 0x0, 0x0, 0x51c2eb707b5324a9}, 0x4000000) fcntl$lock(r3, 0x6, &(0x7f0000000100)={0x0, 0x2, 0x7, 0xffffffffffff8000}) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, &(0x7f0000001080)={0x0, 0xf, ""/15}) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x2) r5 = syz_usb_connect$hid(0x1, 0xb, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x518, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r6, 0x90044802, &(0x7f0000000380)={0x9a5, "aaa41a472088c4ce2d3878ce1e93dfdd7eb8190756adea8b433e4f053d616807df1c65c7d340421a5dbafec7c320f7b9453d70e62165eb6ed1d7ab5744426eff2dbfa501ace70bfa599c8ce3f62ed19b86fb878d7444e764b4922c4a3c84439c4b88d460840da4c9e1c16a43d6c28080473c6d52a33eba660a01d6324e44af2ac2cb51f08228c6e9788cbb9afc7280132d36ce779b647d73733d7f7b0ddf49a2f8a2d301b2213515b6df20d1827b871124fae0a01baa787570cb4d7ee69663f147dfd7d67c4d617fcdf6462931af423beefd138c222f019d745a2dbfe636da574b4990d15e434d96a2f8aadcfe549cf9904f170df52e6235b6d51650ec0f1f6e871f061ed7d09476f0180f010f6b096148f01127d5781cf0a2a98d905e578f0b2d5c96d42ce9b78e3692820562714b43b39cdf446d4ebe44429e74c9296b8939b96befefd6945ecbfee0f149726af9f28b6e161946c3184e648942fc58947cd8962290ab64390656ac0658a575da2397d7857644901c8292ea5f3d0878dcf8f535a17e9aee082270bb640e18d252fdec1c215088feda602597116b3a830992acf6f0236b1a22e9ed5b83616f15fcdbd3c55442d746948b2fefb73f753a1dfefcf1a948331633c356123e36418a2d7e3afff1e9c01cd7e1a2df949166a761861377fdda0a44d3470dce2dfde9947d1e43deab6e203e488447d64c513108fa6f2da6e19a60733356200b295b70fd8ec964dd944d266e6b77218f0019dfaa1e4e1380277fe1303b9c600f85df19e94974f91b9df7c8006137c08d5c0b2419a1dd1d5f2534ef49840d360b20c951f8edf9b3c999e51f831d75e3e8a9be5de99415a397a6b637a20a924686dd58608f3872fa90b029e7584fc44995fc0b9606dde102b33d4d4984d337df4de92601296f953e32a588a000d977f44766bc535b41512bacc222fd6f09d5bac123f5626855a419a87d7d98b001879d7f88ce9ef35898275c99b4c7e4ea5e6df05afb1537bb9d45395efbec71d19ace57e87184863957410551e16be9e3c0592f9a2e8ed82874b34a4575756fc147bb4b4da90ac9dd2016e5b2ad2041745e3b27f61dd3ad8f0b94278781b50beba8c6eb58a84207617f1143b46bca74d0ea4517d6294b8eed593c1193b3a21132d910bb3d45c54fc4a1c043ab6f550b4ef8d9b837380979b69b6e6c7633291dacb9c40c2270b660175c81d3cfb7bcf0179465fbf8abcdc8f3f55e94a8cd8cb0befb34ef146db6b81f43a057278455d010ddfbdc17016e075221959f9381ba974317797ec2b3506cb3a94faa22945e355fa476d438b02ebe5434dd99c3db69c188583a43041f4df6e52d3b3b3928e2d2b65734a4d82e437917ef70acd2dd45e4677c48cc2e6373f130b1d3e6b7f8eaf494415533660144d78426736256d9df464a09586b9ad5b2976bd46aa36eb18f9859afa23facbcbe07a4b1e56b2889f3b5cda34ef2666c58f0ab8cfc3d6fba98e9cf41bb04219a326f869b7f032c7488a15573cad9a93cd1ac1400d139eb9ef7765840a73eb927da436d077f6bb1ccae9e8f95cf2609684104e9e3424f06d7a65d74cdc4ed67926e442a7c391621f626286739246515d756eb160676851389fec74c1f0abace2d57002c185f3d4eef85b708d06a58e73c1b0fe56f80bbd383cb3ea57a229a4813ab3d666772e98f42187caa428d20929699c3d4f7cb8450fb7e7453cedf179c64af8569e0beeb652081319700ec30af6e35215b1aa3adf91c62181b47ca32f32f8ce3876fe3796f57f9c36c8888bcefba5d8528afd236855449e91c04ca7b61fc3d073c847ce82107619120f72e2b0d4bb0169fcb0d7e20ef6edd133b94a8ed7ca3138ef0c55b395b2b69839e99a376a6206bc6c7a1d1e4985e6b62afa264083714f920c84b16af600eb9bd138bf5e7c3f0b86384ed3118d10e22fccbbdc543dd15d1107d0bc9d1bbe291063ab81d95aa99cfc43cc0ed81eb6af713ac51fa8e6066434452180a39b69b31a05ddb47ff947c1ca1ec5b0bada4fad3b0e188a291f1b5d2ab53dcf7eefda178f86986440afe73c29ae83a42a04b3330100f3e85cb605e8cb9328c7451dcab3c6f88bdf384531dcec90937e570bbf1920f93dc04321e768742f0b9362fb3b4a63094c58ce5439c3f8cd719060dcd8d5868e25cc16d1e78b1ba06499611ee15d2415648ce9baef3233578c0b51103d917e8549b075a51c4c7061078e05c65d3d55a5b08c20b616ed4c462d77d542450bfabd9d100a5ba7da4913a2af8abc4dfa975ba1b3d39bbce7fce8b6cb9c73ff967685f5238b1a6cb946949ef15bb0c86dbc54abe24329bcec05d0dbb7b8369a4b2d3c13fdab8c8191f6b433fed62098cc06add86fa36600c7b44158c03a9312cf372489b946edad8ea2421580cd75b428a697f08920ad2f59eb5eda3e2ce945a1545bd57eed779439e3fd4fe5b38c7749a693475535d214b75932fb89ffe50a3f75c79428c21dc5449e7294786d4f572f9627aebc3404d2e5cf7c2ac8dbafaf25920522e0da0908102a6ffc0a8492549379bf502ef5806e24ca9868a99918f6269a0216ee5334b345c03f36426d693357117d5854b768f721fe2a9bd71fcbe7eee1c248efbf29744f543a8db46d54de7bd483395c1ba0240a6546470b04cf4aefcae3f367c3977c30b044b748ec029d0195f978b608361bd6a6077c80f0529e99a175af3aba0d5af5db12368f4d7aed328506d65b580d833e0e70d152485c175ee6f0d418f324a5a2d438f2c3c64b7ebe907fd3d83585f923c6e115271dee57e3f5526454b7020a3051cc1b6749eb126614ffedbec98714907daffc18047a3be8747bb2e04b3c36590c8ac3af1569982445537c142219ef9f6364234f42acec823dbeb1c7cb4f61fd9afd3b99b8b5b72eac2a797390c13531beae14261f47c565a47d97bcd4fb6939b7f35fadc753dccd2f15e15f338511afe653ad8d4e1c8254504f3d9b76aec17b4109be0ec25b064ae83e1b1733f8fd7d1cd5cafe81462a6509fa4f503df32b4faac9dfb829e62c7ef53f60ed22b2c9bf883c50186929a40b86efa9ee5b14729c37ad8572475d9ff44f51f1dfe0d0ea974bf89a1bc19286e7e01216e0a70fd7dc51b1105c0e8656aeaa98b4a7b4b01ca28b9b049f47b5e1f54495a36ef2a23f4fb855e270d7d65c1438a134a77e73ee10112d73c39de4363fa228fd893b4b291b54b19ec2489d3632964ceb66564bf3ea9a655b0e323828cf48cf0cc301cf9881d178e4f0b506c5832a2e37e274eaa94d5c653b6882fe670b8a819956fb34fb192efe93d7a286817bf8ebc2cd8ef9b2c27cb37d5f82d1935284b33eb36cf8d9a0127acc0adca54c188bfefb71a0598480f77bc299ae718098501b2ef5104c0917dd18d04f90e5d9a4245a1944d09c27f5e8137378c1201cb6811c1dc421d5f899eece7ebd719c70b578ef346147523670b6c384a53e3f4c81b"}) close_range(r0, r2, 0x2) 286.774228ms ago: executing program 8 (id=5362): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=""/61, 0x132a000, 0x1000, 0xc}, 0x26) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00009d6000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000165000/0x2000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') readv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/72, 0x48}, {0x0}], 0x2) 123.976669ms ago: executing program 8 (id=5363): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x5, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) gettid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r0, r0) syz_fuse_handle_req(r2, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x1, 0x7, 0x5d}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xffffffffffffffff) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000440)='\xa1\xc4\xe8g\bv\xe3\x90\x8e\x14c\xfew\xd3J\xb2\n\xe7\xb37\xb4K\xd4+\xd7Mz\x9d;iC\xc3\xefV\xcf\xe7\x0f\xeaR4\xebh\xe2\xd4') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x85b83000) 123.366939ms ago: executing program 8 (id=5364): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x27, 0x1, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) ptrace(0x4208, r0) ptrace(0x4208, r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) timer_settime(r2, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x1b) timer_delete(r2) rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 103.664059ms ago: executing program 8 (id=5365): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x25}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) epoll_create1(0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 73.32738ms ago: executing program 8 (id=5366): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x79, 0xc0002) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x5}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r2 = socket(0xb, 0x2, 0x6) bind$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$SIOCGETLINKNAME(r2, 0x89e0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000140), 0x79, 0xc0002) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x5}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) (async) socket(0xb, 0x2, 0x6) (async) bind$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) ioctl$SIOCGETLINKNAME(r2, 0x89e0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 0s ago: executing program 8 (id=5367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'macvlan0\x00', 0x84aebfbd6349b7f2}) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x4, 0x1) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000100)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000080)) read$eventfd(r2, &(0x7f0000000080), 0x8) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000140)={0x1052, 0x16, [{0x3, 0x1}, {0x7, 0x1}, {0x8}, {0x7, 0x1}, {0x5}, {}, {0x2, 0x1}, {0xf}, {0x5, 0x1}, {0x6}, {0xa, 0x1}, {0x5}, {}, {0x9, 0x1}, {0xd, 0x1}, {0xc}, {0x9, 0x1}, {0x1, 0x1}, {0xa}, {0x6}, {0xe}, {0x5}]}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1802, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r5, 0x1, 0x2d, 0x0, &(0x7f0000000080)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="4de39bf6000000"], 0x14}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 9 (id=5373): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0xffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r4, r4, 0x0, 0x4) read$FUSE(r4, &(0x7f0000001940)={0x2020}, 0x2020) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='}.\x00') r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f00000000c0)={0x7fffffff, 0xc9, "64c8107a5e472a8d8adef4d3adf57dbbee300351590bfa107843789099e9b0034f54997f001c700b26ef9bc7da63eec6a32552d00d761bffe8290fc43fc9910c314a147216b7813369cdf71fd2c58902f6b1c21df6322f98928cb99f7ef610763855f93d22eaa8ed4950591b8f10277c494c3370e63e02d24522c43e7c23fa11f4923f5a084f1b8dba31d724653558ee449f38d270fc245112a72cc2731b34ca64a946243f4b8a3dc499e000ee30e3e9d086b4377206cfc6d5b0e46c5ddd68c60fb23b7bc9af8ae83d"}) kernel console output (not intermixed with test programs): bject_r:device_t tclass=chr_file permissive=1 [ 428.952145][ T36] audit: type=1400 audit(2016782355.010:56098): avc: denied { read write } for pid=9421 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 428.976538][ T36] audit: type=1400 audit(2016782355.010:56099): avc: denied { read write open } for pid=9421 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.001750][ T36] audit: type=1400 audit(2016782355.010:56100): avc: denied { ioctl } for pid=9421 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.028296][ T36] audit: type=1400 audit(2016782355.029:56101): avc: denied { read } for pid=13004 comm="syz.2.4165" name="binder1" dev="binder" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 429.051246][ T388] usb 9-1: Using ep0 maxpacket: 16 [ 429.073157][ T36] audit: type=1400 audit(2016782355.029:56102): avc: denied { read open } for pid=13004 comm="syz.2.4165" path="/dev/binderfs/binder1" dev="binder" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 429.100234][ T36] audit: type=1400 audit(2016782355.038:56103): avc: denied { ioctl } for pid=13004 comm="syz.2.4165" path="/dev/binderfs/binder1" dev="binder" ino=30 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 429.126021][ T388] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 429.136027][ T388] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 429.160177][ T388] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.176144][ T388] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.184371][ T36] audit: type=1400 audit(2016782355.048:56104): avc: denied { read write } for pid=9421 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.218454][ T388] usb 9-1: Product: syz [ 429.223642][ T388] usb 9-1: Manufacturer: syz [ 429.238886][ T388] usb 9-1: SerialNumber: syz [ 429.468969][T12997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.477695][T12997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.500971][ T388] usb 9-1: failed to enable PITCH for EP 0x82 [ 429.521699][ T388] usb 9-1: 2:1: cannot set freq 3624486 to ep 0x82 [ 429.551653][ T388] usb 9-1: USB disconnect, device number 6 [ 429.553908][T13024] rust_binder: Write failure EFAULT in pid:119 [ 429.573133][ T10] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 429.685873][ T9233] udevd[9233]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 429.765733][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 429.777331][ T10] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 429.786924][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.796446][ T10] usb 3-1: config 0 descriptor?? [ 429.803077][T13019] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 430.028951][ T388] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 430.188830][ T388] usb 9-1: Using ep0 maxpacket: 32 [ 430.196266][ T388] usb 9-1: config 0 has an invalid interface descriptor of length 8, skipping [ 430.205205][ T388] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.215332][ T388] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 430.224336][ T388] usb 9-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 430.233467][ T388] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.243919][ T388] usb 9-1: config 0 descriptor?? [ 430.320090][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 430.326096][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 430.339174][ T10] usb 3-1: USB disconnect, device number 87 [ 430.894114][T13030] rust_binder: Error while translating object. [ 430.894162][T13030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 430.900541][T13030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:832 [ 431.055839][T13037] /dev/rnullb0: Can't lookup blockdev [ 431.251354][T13048] rust_binder: Got transaction with invalid offset. [ 431.251398][T13048] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 431.258079][T13048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:850 [ 431.659777][ T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 431.819660][ T10] usb 3-1: device descriptor read/64, error -71 [ 432.075490][ T10] usb 3-1: device descriptor read/64, error -71 [ 432.331273][ T10] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 432.450876][T13060] fuse: Unknown parameter 'oroup_id' [ 432.469856][ T10] usb 3-1: device descriptor read/64, error -71 [ 432.554779][T13070] /dev/rnullb0: Can't lookup blockdev [ 432.736291][ T10] usb 3-1: device descriptor read/64, error -71 [ 432.820967][ T31] usb 9-1: USB disconnect, device number 7 [ 432.875711][ T10] usb usb3-port1: attempt power cycle [ 433.259154][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 433.283420][ T10] usb 3-1: device descriptor read/8, error -71 [ 433.431831][ T10] usb 3-1: device descriptor read/8, error -71 [ 433.467019][T13096] rust_binder: 533: no such ref 3 [ 433.686114][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 433.699710][T13111] rust_binder: Write failure EFAULT in pid:537 [ 433.722425][ T10] usb 3-1: device descriptor read/8, error -71 [ 433.885528][ T10] usb 3-1: device descriptor read/8, error -71 [ 434.004766][ T10] usb usb3-port1: unable to enumerate USB device [ 434.161160][ T36] kauditd_printk_skb: 545 callbacks suppressed [ 434.161181][ T36] audit: type=1400 audit(2016782359.973:56650): avc: denied { execmem } for pid=13129 comm="syz.8.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 434.244460][ T36] audit: type=1400 audit(2016782360.048:56651): avc: denied { create } for pid=13134 comm="syz.8.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 434.264243][ T36] audit: type=1400 audit(2016782360.058:56652): avc: denied { setopt } for pid=13134 comm="syz.8.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 434.286090][ T36] audit: type=1400 audit(2016782360.058:56653): avc: denied { map } for pid=13134 comm="syz.8.4205" path="socket:[57201]" dev="sockfs" ino=57201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 434.310502][ T36] audit: type=1400 audit(2016782360.058:56654): avc: denied { read } for pid=13134 comm="syz.8.4205" path="socket:[57201]" dev="sockfs" ino=57201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 434.343888][ T36] audit: type=1400 audit(2016782360.142:56655): avc: denied { create } for pid=13141 comm="syz.8.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 434.428384][ T36] audit: type=1400 audit(2016782360.217:56656): avc: denied { name_bind } for pid=13150 comm="syz.8.4209" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 434.450332][ T36] audit: type=1400 audit(2016782360.217:56657): avc: denied { node_bind } for pid=13150 comm="syz.8.4209" saddr=::e0:0:0:0:1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 434.473447][ T36] audit: type=1400 audit(2016782360.236:56658): avc: denied { create } for pid=13150 comm="syz.8.4209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.566745][ T36] audit: type=1400 audit(2016782360.349:56659): avc: denied { create } for pid=13158 comm="syz.8.4213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.706666][T13163] SELinux: security_context_str_to_sid () failed with errno=-22 [ 434.872114][T13172] rust_binder: 865: no such ref 0 [ 434.996742][T13176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 434.996778][T13176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:547 [ 435.020880][T13178] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 435.068001][T13181] netlink: 'syz.7.4220': attribute type 2 has an invalid length. [ 435.083851][T13182] binder: Unknown parameter 'fscontext?}' [ 436.045097][T13214] __vm_enough_memory: pid: 13214, comm: syz.6.4229, bytes: 18014402804453376 not enough memory for the allocation [ 436.076690][T13217] rust_binder: 572: no such ref 1 [ 436.081786][T13217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:572 [ 436.424196][ T10] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 436.609169][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.626684][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 436.640270][ T10] usb 3-1: language id specifier not provided by device, defaulting to English [ 436.655200][ T10] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 436.675588][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.684496][ T10] usb 3-1: Product: syz [ 436.689549][ T10] usb 3-1: Manufacturer: ޿ṕ즒꡴婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻╝㈺﵁債隥굄糶䵎孜 [ 436.703767][ T10] usb 3-1: SerialNumber: syz [ 436.757042][T13234] Invalid logical block size (6) [ 436.943317][T13221] /dev/rnullb0: Can't lookup blockdev [ 436.968862][ T10] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 436.987108][ T10] usb 3-1: USB disconnect, device number 92 [ 436.997324][T13252] 9pnet_fd: Insufficient options for proto=fd [ 437.810035][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 437.867324][T13284] @0: renamed from bond_slave_1 [ 437.912540][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4251'. [ 437.984666][ T10] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 438.003835][ T10] usb 3-1: config 0 has no interface number 0 [ 438.024176][ T10] usb 3-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 438.038910][ T10] usb 3-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 438.060123][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 438.070653][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.079649][ T10] usb 3-1: Product: syz [ 438.083969][ T10] usb 3-1: Manufacturer: syz [ 438.089891][ T10] usb 3-1: SerialNumber: syz [ 438.096891][ T10] usb 3-1: config 0 descriptor?? [ 438.110414][T13273] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 438.140743][T13273] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 438.162241][ T10] ums-usbat 3-1:0.23: USB Mass Storage device detected [ 438.241021][T13302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=13302 comm=syz.8.4255 [ 438.417994][ T10] ums-usbat 3-1:0.23: probe with driver ums-usbat failed with error -5 [ 438.441304][ T10] usb 3-1: USB disconnect, device number 93 [ 438.468862][ T8822] udevd[8822]: setting owner of /dev/bus/usb/003/093 to uid=0, gid=0 failed: No such file or directory [ 438.867948][T13345] overlayfs: missing 'workdir' [ 439.101684][ T2338] Bluetooth: hci0: Frame reassembly failed (-84) [ 439.505521][ T36] kauditd_printk_skb: 738 callbacks suppressed [ 439.505540][ T36] audit: type=1400 audit(430.357:57398): avc: denied { ioctl } for pid=13377 comm="syz.8.4282" path="socket:[59682]" dev="sockfs" ino=59682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 439.560159][T13378] syz.8.4282: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0 [ 439.592732][T13378] CPU: 0 UID: 0 PID: 13378 Comm: syz.8.4282 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 439.592767][T13378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 439.592788][T13378] Call Trace: [ 439.592796][T13378] [ 439.592809][T13378] __dump_stack+0x21/0x30 [ 439.592845][T13378] dump_stack_lvl+0x10c/0x190 [ 439.592876][T13378] ? __cfi_dump_stack_lvl+0x10/0x10 [ 439.592907][T13378] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 439.592939][T13378] dump_stack+0x19/0x20 [ 439.592976][T13378] warn_alloc+0x1bc/0x2a0 [ 439.593006][T13378] ? kasan_save_free_info+0x4a/0x60 [ 439.593038][T13378] ? __cfi_warn_alloc+0x10/0x10 [ 439.593068][T13378] ? __get_vm_area_node+0x1dc/0x3a0 [ 439.593098][T13378] ? packet_set_ring+0x735/0x2850 [ 439.593128][T13378] __vmalloc_node_range_noprof+0x68e/0x1420 [ 439.593160][T13378] ? packet_set_ring+0x669/0x2850 [ 439.593188][T13378] ? do_sock_setsockopt+0x26d/0x400 [ 439.593221][T13378] ? __x64_sys_setsockopt+0x1b8/0x250 [ 439.593257][T13378] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 439.593289][T13378] ? __asan_memset+0x39/0x50 [ 439.593308][T13378] ? __alloc_pages_noprof+0xbf/0x7b0 [ 439.593338][T13378] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 439.593368][T13378] ? packet_set_ring+0x735/0x2850 [ 439.593396][T13378] vzalloc_noprof+0xfd/0x1d0 [ 439.593426][T13378] ? packet_set_ring+0x735/0x2850 [ 439.593455][T13378] ? __cfi_vzalloc_noprof+0x10/0x10 [ 439.593497][T13378] ? packet_set_ring+0x669/0x2850 [ 439.593526][T13378] packet_set_ring+0x735/0x2850 [ 439.593555][T13378] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 439.593584][T13378] ? packet_mmap+0x570/0x570 [ 439.593611][T13378] ? __check_object_size+0xe0/0x810 [ 439.593631][T13378] ? plist_del+0x3e3/0x400 [ 439.593658][T13378] ? __cfi___check_object_size+0x10/0x10 [ 439.593678][T13378] ? avc_has_perm_noaudit+0x21c/0x360 [ 439.593709][T13378] ? __kasan_check_write+0x18/0x20 [ 439.593758][T13378] ? _copy_from_user+0x8b/0xb0 [ 439.593787][T13378] packet_setsockopt+0xc5d/0x12a0 [ 439.593816][T13378] ? __cfi_packet_setsockopt+0x10/0x10 [ 439.593845][T13378] ? selinux_socket_setsockopt+0x2ea/0x390 [ 439.593879][T13378] ? kmem_cache_alloc_noprof+0x1ee/0x430 [ 439.593900][T13378] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 439.593937][T13378] ? do_futex+0x356/0x500 [ 439.593969][T13378] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 439.593997][T13378] ? security_socket_setsockopt+0x33/0xd0 [ 439.594019][T13378] ? __cfi_packet_setsockopt+0x10/0x10 [ 439.594048][T13378] do_sock_setsockopt+0x26d/0x400 [ 439.594080][T13378] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 439.594116][T13378] __x64_sys_setsockopt+0x1b8/0x250 [ 439.594149][T13378] x64_sys_call+0x2adc/0x2ee0 [ 439.594182][T13378] do_syscall_64+0x58/0xf0 [ 439.594209][T13378] ? clear_bhb_loop+0x50/0xa0 [ 439.594236][T13378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 439.594261][T13378] RIP: 0033:0x7f65cc58f6c9 [ 439.594287][T13378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.594318][T13378] RSP: 002b:00007f65cd465038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 439.594342][T13378] RAX: ffffffffffffffda RBX: 00007f65cc7e5fa0 RCX: 00007f65cc58f6c9 [ 439.594359][T13378] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004 [ 439.594372][T13378] RBP: 00007f65cc611f91 R08: 000000000000001c R09: 0000000000000000 [ 439.594388][T13378] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 439.594402][T13378] R13: 00007f65cc7e6038 R14: 00007f65cc7e5fa0 R15: 00007ffdc8d341f8 [ 439.594422][T13378] [ 439.594436][T13378] Mem-Info: [ 439.696448][ T36] audit: type=1400 audit(430.441:57399): avc: denied { create } for pid=13388 comm="syz.6.4284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 439.705031][T13389] /dev/nbd6: Can't lookup blockdev [ 439.716854][ T36] audit: type=1400 audit(430.535:57400): avc: denied { create } for pid=13388 comm="syz.6.4284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 439.720489][T13378] active_anon:45545 inactive_anon:182 isolated_anon:0 [ 439.720489][T13378] active_file:6734 inactive_file:17815 isolated_file:0 [ 439.720489][T13378] unevictable:15420 dirty:65 writeback:0 [ 439.720489][T13378] slab_reclaimable:5486 slab_unreclaimable:74113 [ 439.720489][T13378] mapped:37199 shmem:38757 pagetables:1072 [ 439.720489][T13378] sec_pagetables:0 bounce:0 [ 439.720489][T13378] kernel_misc_reclaimable:0 [ 439.720489][T13378] free:1449525 free_pcp:2273 free_cma:0 [ 439.735693][ T36] audit: type=1400 audit(430.535:57401): avc: denied { setopt } for pid=13388 comm="syz.6.4284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 439.741753][T13378] Node 0 active_anon:182180kB inactive_anon:728kB active_file:26936kB inactive_file:71260kB unevictable:61680kB isolated(anon):0kB isolated(file):0kB mapped:148796kB dirty:260kB writeback:0kB shmem:155028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5688kB pagetables:4288kB sec_pagetables:0kB all_unreclaimable? no [ 439.752267][ T36] audit: type=1400 audit(430.535:57402): avc: denied { getopt } for pid=13388 comm="syz.6.4284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 439.768870][T13378] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:5724kB free_cma:0kB [ 439.775004][ T36] audit: type=1400 audit(430.535:57403): avc: denied { mounton } for pid=13388 comm="syz.6.4284" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 439.792414][T13378] lowmem_reserve[]: [ 439.802848][ T36] audit: type=1400 audit(430.629:57404): avc: denied { read write } for pid=9834 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.814303][T13378] 0 [ 439.834976][ T36] audit: type=1400 audit(430.648:57405): avc: denied { read write open } for pid=9834 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.849182][T13378] 3921 [ 440.016208][ T36] audit: type=1400 audit(430.648:57406): avc: denied { ioctl } for pid=9834 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.039920][T13378] 3921 [ 440.111631][ T36] audit: type=1400 audit(430.920:57407): avc: denied { read write } for pid=9834 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.162228][T13378] [ 440.193817][T13396] incfs: Error accessing: ./file0. [ 440.230022][T13378] Normal free:2812148kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:206444kB inactive_anon:728kB active_file:26936kB inactive_file:71260kB unevictable:61680kB writepending:260kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:5008kB local_pcp:3284kB free_cma:0kB [ 440.283987][T13396] incfs: mount failed -20 [ 440.314040][T13378] lowmem_reserve[]: 0 0 0 [ 440.321756][T13378] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 440.340532][T13378] Normal: 5*4kB (UE) 41*8kB (UE) 2*16kB (UE) 60*32kB (UME) 34*64kB (UE) 12*128kB (UME) 20*256kB (UME) 41*512kB (ME) 24*1024kB (UME) 13*2048kB (UME) 666*4096kB (UM) = 2811260kB [ 440.358987][T13378] 85969 total pagecache pages [ 440.363697][T13378] 274 pages in swap cache [ 440.369027][T13378] Free swap = 123396kB [ 440.373258][T13378] Total swap = 124996kB [ 440.377430][T13378] 2097051 pages RAM [ 440.382437][T13378] 0 pages HighMem/MovableOnly [ 440.387180][T13378] 351537 pages reserved [ 440.415236][T13378] 0 pages cma reserved [ 440.423774][T13378] Memory allocations: [ 440.427851][T13378] 0 B 0 init/main.c:1370 func:do_initcalls [ 440.436063][T13378] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 440.444820][T13378] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 440.453737][T13378] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 440.461729][T13378] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 440.474495][T13378] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 440.483135][T13378] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 440.497233][T13378] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 440.505186][T13378] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 440.514053][T13378] 0 B 0 init/initramfs.c:101 func:find_link [ 441.273905][ T1038] Bluetooth: hci0: command 0x1003 tx timeout [ 441.279990][ T1039] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 441.283634][T13414] cgroup: Unknown subsys name 'measure' [ 441.606142][T13426] netlink: 'syz.8.4294': attribute type 2 has an invalid length. [ 442.137275][ T330] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 442.159039][T13448] /dev/rnullb0: Can't lookup blockdev [ 442.246450][T13450] kvm: Disabled LAPIC found during irq injection [ 442.309942][ T330] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 442.330307][ T330] usb 3-1: config 0 has no interface number 0 [ 442.344371][ T330] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 442.378398][ T330] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 442.393468][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.401558][ T330] usb 3-1: Product: syz [ 442.407181][ T330] usb 3-1: Manufacturer: syz [ 442.411818][ T330] usb 3-1: SerialNumber: syz [ 442.419896][ T330] usb 3-1: config 0 descriptor?? [ 442.668946][ T330] usb 3-1: invalid MIDI out EP 0 [ 442.699263][ T330] snd-usb-audio 3-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 442.755533][ T330] usb 3-1: USB disconnect, device number 94 [ 442.808774][T13466] rust_binder: Write failure EFAULT in pid:582 [ 442.892394][ T8686] udevd[8686]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 443.035623][T13475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket pid=13475 comm=syz.7.4309 [ 443.121427][T13475] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 443.219063][T13482] __vm_enough_memory: pid: 13482, comm: syz.7.4311, bytes: 18014402804453376 not enough memory for the allocation [ 443.246632][T13481] __vm_enough_memory: pid: 13481, comm: syz.7.4311, bytes: 18014402804453376 not enough memory for the allocation [ 443.281425][T13484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 443.281731][T13484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 443.310476][T13484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 443.310799][T13484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 443.342387][T13484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.258347][ T31] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 444.407570][ T31] usb 3-1: device descriptor read/64, error -71 [ 444.465578][T13526] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551269) [ 444.465615][T13526] rust_binder: Error while translating object. [ 444.477860][T13526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 444.484111][T13526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:608 [ 444.674072][ T31] usb 3-1: device descriptor read/64, error -71 [ 444.877131][ T36] kauditd_printk_skb: 468 callbacks suppressed [ 444.877152][ T36] audit: type=1400 audit(435.395:57876): avc: denied { ioctl } for pid=13522 comm="syz.2.4324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.907862][ T36] audit: type=1400 audit(435.395:57877): avc: denied { create } for pid=13530 comm="syz.8.4327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 444.927064][ T36] audit: type=1400 audit(435.395:57878): avc: denied { read } for pid=13530 comm="syz.8.4327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 444.946140][ T31] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 444.952061][ T36] audit: type=1400 audit(435.461:57879): avc: denied { mounton } for pid=13532 comm="syz.8.4328" path="/96" dev="tmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 444.977382][ T36] audit: type=1400 audit(435.470:57880): avc: denied { ioctl } for pid=13522 comm="syz.2.4324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 445.003244][ T36] audit: type=1400 audit(435.470:57881): avc: denied { ioctl } for pid=13522 comm="syz.2.4324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 445.031357][ T36] audit: type=1400 audit(435.470:57882): avc: denied { ioctl } for pid=13522 comm="syz.2.4324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 445.056778][ T36] audit: type=1400 audit(435.470:57883): avc: denied { ioctl } for pid=13522 comm="syz.2.4324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 445.082132][ T36] audit: type=1400 audit(435.470:57884): avc: denied { ioctl } for pid=13522 comm="syz.2.4324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 445.089749][ T31] usb 3-1: device descriptor read/64, error -71 [ 445.108222][ T36] audit: type=1400 audit(435.470:57885): avc: denied { ioctl } for pid=13522 comm="syz.2.4324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 445.377529][ T31] usb 3-1: device descriptor read/64, error -71 [ 445.494809][ T31] usb usb3-port1: attempt power cycle [ 445.857200][ T31] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 445.881350][ T31] usb 3-1: device descriptor read/8, error -71 [ 446.019393][ T31] usb 3-1: device descriptor read/8, error -71 [ 446.272875][ T31] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 446.296475][ T31] usb 3-1: device descriptor read/8, error -71 [ 446.436045][ T31] usb 3-1: device descriptor read/8, error -71 [ 446.551462][ T31] usb usb3-port1: unable to enumerate USB device [ 447.243634][T13567] rust_binder: 908: no such ref 1 [ 447.250677][T13568] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 447.250744][T13569] rust_binder: 908: no such ref 1 [ 447.298774][T13571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 447.298808][T13571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:912 [ 447.349006][T13573] /dev/rnullb0: Can't lookup blockdev [ 447.576639][T13589] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 447.585362][T13589] rust_binder: Write failure EINVAL in pid:926 [ 448.596905][T13601] overlayfs: failed to get inode (-116) [ 448.609318][T13600] overlayfs: failed to get inode (-116) [ 448.615144][T13601] overlayfs: failed to get inode (-116) [ 448.621603][T13600] overlayfs: failed to get inode (-116) [ 448.850245][T13609] binder: Unknown parameter 'defcontext01777777777777777777777' [ 449.058184][T13617] __vm_enough_memory: pid: 13617, comm: syz.2.4355, bytes: 18014402804453376 not enough memory for the allocation [ 449.148993][T13624] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 449.149020][T13624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:958 [ 449.534408][ T330] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 449.704938][ T330] usb 3-1: Using ep0 maxpacket: 8 [ 449.717757][ T330] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 449.728571][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.737214][ T330] usb 3-1: Product: syz [ 449.741475][ T330] usb 3-1: Manufacturer: syz [ 449.746355][ T330] usb 3-1: SerialNumber: syz [ 450.028759][ T330] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 99 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 450.242261][ T36] kauditd_printk_skb: 576 callbacks suppressed [ 450.242282][ T36] audit: type=1400 audit(440.424:58462): avc: denied { read write } for pid=13632 comm="syz.2.4360" name="lp0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 450.271784][ T36] audit: type=1400 audit(440.424:58463): avc: denied { read write open } for pid=13632 comm="syz.2.4360" path="/dev/usb/lp0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 450.296165][ T36] audit: type=1400 audit(440.424:58464): avc: denied { ioctl } for pid=13632 comm="syz.2.4360" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.618008][ T36] audit: type=1400 audit(440.780:58465): avc: denied { map } for pid=13632 comm="syz.2.4360" path="/dev/binderfs/binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 450.641732][ T36] audit: type=1400 audit(440.780:58466): avc: denied { read } for pid=13632 comm="syz.2.4360" path="/dev/binderfs/binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 450.665477][ T36] audit: type=1400 audit(440.780:58467): avc: denied { create } for pid=13632 comm="syz.2.4360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 450.684700][ T36] audit: type=1400 audit(440.780:58468): avc: denied { write } for pid=13632 comm="syz.2.4360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 450.703776][ T36] audit: type=1400 audit(440.780:58469): avc: denied { map } for pid=13632 comm="syz.2.4360" path="/dev/binderfs/binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 450.727299][ T36] audit: type=1400 audit(440.780:58470): avc: denied { read } for pid=13632 comm="syz.2.4360" path="/dev/binderfs/binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 450.773636][ T36] audit: type=1400 audit(440.930:58471): avc: denied { create } for pid=13656 comm="syz.8.4366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 451.076429][T13668] __vm_enough_memory: pid: 13668, comm: syz.7.4369, bytes: 18014402804453376 not enough memory for the allocation [ 451.268426][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4371'. [ 452.490876][ T10] usb 3-1: USB disconnect, device number 99 [ 452.498864][ T10] usblp0: removed [ 453.154559][ C1] af_packet: tpacket_rcv: packet too big, clamped from 63 to 4294967272. macoff=96 [ 453.495228][T13707] netlink: 182 bytes leftover after parsing attributes in process `syz.2.4384'. [ 453.797929][ T330] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 453.967352][ T330] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.977656][ T330] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 453.989392][ T330] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 454.007447][ T330] usb 3-1: New USB device found, idVendor=0525, idProduct=0008, bcdDevice= 0.40 [ 454.017207][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 454.025259][ T330] usb 3-1: SerialNumber: syz [ 454.493042][ T330] usb 3-1: USB disconnect, device number 100 [ 454.563996][T13725] rust_binder: 627: no such ref 2 [ 455.528649][T13777] overlayfs: failed to clone upperpath [ 455.647821][ T36] kauditd_printk_skb: 259 callbacks suppressed [ 455.647840][ T36] audit: type=1400 audit(445.499:58731): avc: denied { execmem } for pid=13780 comm="syz.8.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 455.673102][ T36] audit: type=1400 audit(445.499:58732): avc: denied { execute } for pid=13780 comm="syz.8.4409" path="/dev/rnullb0" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 455.836147][ T36] audit: type=1400 audit(445.678:58733): avc: denied { read write } for pid=9421 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.861098][ T36] audit: type=1400 audit(445.678:58734): avc: denied { read write open } for pid=9421 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.885794][ T36] audit: type=1400 audit(445.678:58735): avc: denied { ioctl } for pid=9421 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.910930][ T36] audit: type=1400 audit(445.724:58736): avc: denied { read write } for pid=13783 comm="syz.2.4410" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 455.934008][ T36] audit: type=1400 audit(445.724:58737): avc: denied { read write open } for pid=13783 comm="syz.2.4410" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 455.957826][ T36] audit: type=1400 audit(445.724:58738): avc: denied { mounton } for pid=13783 comm="syz.2.4410" path="/331/file0" dev="tmpfs" ino=1833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 455.980816][ T36] audit: type=1400 audit(445.724:58739): avc: denied { mount } for pid=13783 comm="syz.2.4410" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 456.024573][ T36] audit: type=1400 audit(445.846:58740): avc: denied { name_bind } for pid=13783 comm="syz.2.4410" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 456.936363][T13801] rust_binder: Write failure EFAULT in pid:998 [ 457.097081][T13809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1005 [ 458.199933][ T330] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 458.373123][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 458.384077][ T330] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 458.393708][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.413605][ T330] usb 3-1: config 0 descriptor?? [ 458.419947][T13819] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 458.655200][T13819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.663887][T13819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.104378][ T330] usbhid 3-1:0.0: can't add hid device: -71 [ 459.110427][ T330] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 459.124255][ T330] usb 3-1: USB disconnect, device number 101 [ 459.682330][T13875] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 459.867034][T13880] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4440'. [ 459.938515][ T31] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 460.097187][ T31] usb 3-1: device descriptor read/64, error -71 [ 460.189095][T13897] syz.8.4447: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0 [ 460.204012][T13897] CPU: 0 UID: 0 PID: 13897 Comm: syz.8.4447 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 460.204046][T13897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 460.204059][T13897] Call Trace: [ 460.204066][T13897] [ 460.204074][T13897] __dump_stack+0x21/0x30 [ 460.204107][T13897] dump_stack_lvl+0x10c/0x190 [ 460.204163][T13897] ? __cfi_dump_stack_lvl+0x10/0x10 [ 460.204194][T13897] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 460.204224][T13897] dump_stack+0x19/0x20 [ 460.204251][T13897] warn_alloc+0x1bc/0x2a0 [ 460.204282][T13897] ? __cfi_warn_alloc+0x10/0x10 [ 460.204311][T13897] ? kasan_save_track+0x4f/0x80 [ 460.204335][T13897] ? __kasan_kmalloc+0x96/0xb0 [ 460.204359][T13897] ? __kmalloc_cache_noprof+0x24c/0x490 [ 460.204389][T13897] ? do_sock_setsockopt+0x26d/0x400 [ 460.204420][T13897] ? __x64_sys_setsockopt+0x1b8/0x250 [ 460.204451][T13897] ? x64_sys_call+0x2adc/0x2ee0 [ 460.204483][T13897] ? do_syscall_64+0x58/0xf0 [ 460.204511][T13897] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 460.204537][T13897] __vmalloc_node_range_noprof+0x135/0x1420 [ 460.204575][T13897] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 460.204608][T13897] ? kasan_save_alloc_info+0x40/0x50 [ 460.204641][T13897] ? __kasan_kmalloc+0x96/0xb0 [ 460.204667][T13897] ? __kmalloc_cache_noprof+0x24c/0x490 [ 460.204689][T13897] ? futex_setup_timer+0xb4/0xd0 [ 460.204711][T13897] vmalloc_user_noprof+0x77/0x90 [ 460.204742][T13897] ? xskq_create+0xdb/0x2a0 [ 460.204779][T13897] xskq_create+0xdb/0x2a0 [ 460.204811][T13897] xsk_init_queue+0xb6/0x120 [ 460.204844][T13897] xsk_setsockopt+0x43f/0x6f0 [ 460.204876][T13897] ? __cfi_xsk_setsockopt+0x10/0x10 [ 460.204907][T13897] ? do_futex+0x309/0x500 [ 460.204931][T13897] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 460.204961][T13897] ? security_socket_setsockopt+0x33/0xd0 [ 460.204983][T13897] ? __cfi_xsk_setsockopt+0x10/0x10 [ 460.205014][T13897] do_sock_setsockopt+0x26d/0x400 [ 460.205046][T13897] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 460.205083][T13897] __x64_sys_setsockopt+0x1b8/0x250 [ 460.205116][T13897] x64_sys_call+0x2adc/0x2ee0 [ 460.205149][T13897] do_syscall_64+0x58/0xf0 [ 460.205177][T13897] ? clear_bhb_loop+0x50/0xa0 [ 460.205201][T13897] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 460.205224][T13897] RIP: 0033:0x7f65cc58f6c9 [ 460.205244][T13897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.205263][T13897] RSP: 002b:00007f65cd465038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 460.205287][T13897] RAX: ffffffffffffffda RBX: 00007f65cc7e5fa0 RCX: 00007f65cc58f6c9 [ 460.205305][T13897] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 460.205319][T13897] RBP: 00007f65cc611f91 R08: 0000000000000004 R09: 0000000000000000 [ 460.205333][T13897] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.205348][T13897] R13: 00007f65cc7e6038 R14: 00007f65cc7e5fa0 R15: 00007ffdc8d341f8 [ 460.205377][T13897] [ 460.205386][T13897] Mem-Info: [ 460.248970][T13898] overlayfs: failed to resolve './bus': -2 [ 460.253445][T13897] active_anon:42644 inactive_anon:182 isolated_anon:0 [ 460.253445][T13897] active_file:6734 inactive_file:17823 isolated_file:0 [ 460.253445][T13897] unevictable:15420 dirty:90 writeback:0 [ 460.253445][T13897] slab_reclaimable:5705 slab_unreclaimable:72889 [ 460.253445][T13897] mapped:29756 shmem:35165 pagetables:1158 [ 460.253445][T13897] sec_pagetables:0 bounce:0 [ 460.253445][T13897] kernel_misc_reclaimable:0 [ 460.253445][T13897] free:1453746 free_pcp:2491 free_cma:0 [ 460.363644][ T31] usb 3-1: device descriptor read/64, error -71 [ 460.369475][T13897] Node 0 active_anon:170576kB inactive_anon:728kB active_file:26936kB inactive_file:71292kB unevictable:61680kB isolated(anon):0kB isolated(file):0kB mapped:119024kB dirty:360kB writeback:0kB shmem:140660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:5888kB pagetables:4632kB sec_pagetables:0kB all_unreclaimable? no [ 460.595340][T13897] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:0kB free_cma:0kB [ 460.626333][T13897] lowmem_reserve[]: 0 3921 3921 [ 460.626380][ T31] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 460.632920][T13897] Normal free:2854772kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:170576kB inactive_anon:728kB active_file:26936kB inactive_file:71292kB unevictable:61680kB writepending:360kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4092kB local_pcp:1472kB free_cma:0kB [ 460.670831][T13897] lowmem_reserve[]: 0 0 0 [ 460.675268][T13897] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 460.691202][T13897] Normal: 15*4kB (E) 37*8kB (ME) 31*16kB (UE) 496*32kB (UME) 279*64kB (UME) 55*128kB (UME) 66*256kB (UME) 31*512kB (UME) 15*1024kB (UME) 4*2048kB (ME) 673*4096kB (UM) = 2854548kB [ 460.709032][T13897] 75412 total pagecache pages [ 460.713719][T13897] 274 pages in swap cache [ 460.718320][T13897] Free swap = 123468kB [ 460.722546][T13897] Total swap = 124996kB [ 460.726740][T13897] 2097051 pages RAM [ 460.730557][T13897] 0 pages HighMem/MovableOnly [ 460.735227][T13897] 351537 pages reserved [ 460.739474][T13897] 0 pages cma reserved [ 460.745558][T13897] Memory allocations: [ 460.749616][T13897] 0 B 0 init/main.c:1370 func:do_initcalls [ 460.756848][T13897] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 460.764960][T13897] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 460.772635][T13897] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 460.780560][T13897] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 460.788478][T13897] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 460.797199][T13897] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 460.800659][ T31] usb 3-1: device descriptor read/64, error -71 [ 460.805142][T13897] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 460.819564][T13897] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 460.827592][T13897] 0 B 0 init/initramfs.c:101 func:find_link [ 461.014420][ T36] kauditd_printk_skb: 527 callbacks suppressed [ 461.014440][ T36] audit: type=1400 audit(450.537:59268): avc: denied { ioctl } for pid=13874 comm="syz.2.4438" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 461.062823][ T36] audit: type=1400 audit(450.575:59269): avc: denied { mounton } for pid=13908 comm="syz.8.4451" path="/165/file0" dev="tmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 461.085394][ T31] usb 3-1: device descriptor read/64, error -71 [ 461.118521][ T36] audit: type=1400 audit(450.631:59270): avc: denied { read write } for pid=9834 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.167936][ T36] audit: type=1400 audit(450.631:59271): avc: denied { read write open } for pid=9834 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.208683][ T31] usb usb3-port1: attempt power cycle [ 461.225441][ T36] audit: type=1400 audit(450.631:59272): avc: denied { ioctl } for pid=9834 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.251276][ T36] audit: type=1400 audit(450.659:59273): avc: denied { create } for pid=13911 comm="syz.6.4452" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 461.294066][ T36] audit: type=1400 audit(450.659:59274): avc: denied { create } for pid=13911 comm="syz.6.4452" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 461.362795][ T36] audit: type=1400 audit(450.659:59275): avc: denied { create } for pid=13911 comm="syz.6.4452" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 461.400987][T13918] audit: audit_backlog=65 > audit_backlog_limit=64 [ 461.407728][T13918] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 461.473912][T13922] netlink: 388 bytes leftover after parsing attributes in process `syz.6.4455'. [ 461.496669][T13920] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 461.578735][ T31] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 461.624545][ T31] usb 3-1: device descriptor read/8, error -71 [ 461.641691][T13930] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4457'. [ 461.668489][T13930] netlink: 'syz.7.4457': attribute type 15 has an invalid length. [ 461.695974][T13930] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4457'. [ 461.719484][T13930] netlink: 'syz.7.4457': attribute type 16 has an invalid length. [ 461.727355][T13930] netlink: 64122 bytes leftover after parsing attributes in process `syz.7.4457'. [ 461.791885][ T31] usb 3-1: device descriptor read/8, error -71 [ 462.047701][ T31] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 462.082562][ T31] usb 3-1: device descriptor read/8, error -71 [ 462.113725][T13957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=13957 comm=syz.8.4466 [ 462.232006][ T31] usb 3-1: device descriptor read/8, error -71 [ 462.346672][ T31] usb usb3-port1: unable to enumerate USB device [ 463.008178][T13982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.009071][T13982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.028682][T13982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.042411][T13982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.062324][T13982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.090116][T13982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.091445][T13982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.125827][T13982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.129397][T13982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.156590][T13982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.156928][T13982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.163712][T13982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.227046][T13995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 463.227080][T13995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1025 [ 463.550598][ T31] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 463.628856][T14000] rust_binder: 898: no such ref 3 [ 463.633997][T14000] rust_binder: inc_ref_done called when no active inc_refs [ 463.634022][T14000] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 463.650334][T14000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:898 [ 463.731777][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 463.766201][ T31] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 463.774904][ T31] usb 3-1: config 0 has no interface number 0 [ 463.781254][ T31] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.794049][ T31] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.804580][ T31] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 463.814305][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.824881][ T31] usb 3-1: config 0 descriptor?? [ 464.479305][ T31] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0022/input/input39 [ 464.494474][ T31] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0022/input/input40 [ 464.510553][ T31] uclogic 0003:28BD:0071.0022: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1 [ 464.698744][T13999] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 464.710245][ T31] usb 3-1: USB disconnect, device number 106 [ 464.753467][ T8822] udevd[8822]: setting mode of /dev/input/event3 to 020660 failed: No such file or directory [ 464.764621][ T8822] udevd[8822]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 464.912398][T14025] veth1: entered allmulticast mode [ 465.044409][T14028] veth1: left allmulticast mode [ 465.481604][T14038] tmpfs: Unknown parameter '' [ 465.530559][T14040] usb usb9: usbfs: process 14040 (syz.2.4494) did not claim interface 8 before use [ 465.616845][T14042] binder: Unknown parameter 'context[7' [ 465.847204][T14051] rust_binder: Error while translating object. [ 465.847253][T14051] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 465.854241][T14051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1044 [ 465.971347][T14055] /dev/rnullb0: Can't lookup blockdev [ 466.122017][T14065] /dev/rnullb0: Can't lookup blockdev [ 466.227129][T14070] rust_binder: Write failure EFAULT in pid:1054 [ 466.355501][T14079] batadv_slave_0: mtu less than device minimum [ 466.368020][ T36] kauditd_printk_skb: 807 callbacks suppressed [ 466.368041][ T36] audit: type=1400 audit(16777900.550:60061): avc: denied { read write } for pid=10570 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 466.417818][T14082] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4509'. [ 466.439159][ T36] audit: type=1400 audit(16777900.550:60062): avc: denied { read write open } for pid=10570 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 466.477701][ T36] audit: type=1400 audit(16777900.550:60063): avc: denied { ioctl } for pid=10570 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 466.516487][ T36] audit: type=1400 audit(16777900.597:60064): avc: denied { create } for pid=14078 comm="syz.2.4509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 466.546769][ T36] audit: type=1400 audit(16777900.597:60065): avc: denied { read write } for pid=14081 comm="syz.7.4511" name="binder1" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 466.588348][ T36] audit: type=1400 audit(16777900.597:60066): avc: denied { read write open } for pid=14081 comm="syz.7.4511" path="/dev/binderfs/binder1" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 466.638435][ T36] audit: type=1400 audit(16777900.616:60067): avc: denied { read } for pid=14081 comm="syz.7.4511" dev="nsfs" ino=4026532531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 466.672751][ T36] audit: type=1400 audit(16777900.616:60068): avc: denied { read open } for pid=14081 comm="syz.7.4511" path="net:[4026532531]" dev="nsfs" ino=4026532531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 466.700149][ T36] audit: type=1400 audit(16777900.616:60069): avc: denied { create } for pid=14081 comm="syz.7.4511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 466.722488][ T36] audit: type=1400 audit(16777900.616:60070): avc: denied { read } for pid=14081 comm="syz.7.4511" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 466.756723][T14093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1065 [ 466.804269][T14098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.822413][T14098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.836089][T14095] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 466.843469][T14095] rust_binder: Write failure EINVAL in pid:662 [ 466.906447][T14102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:665 [ 467.945261][T14169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 467.954671][T14169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:692 [ 468.368333][ T31] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 468.549523][ T31] usb 3-1: Invalid ep0 maxpacket: 32 [ 468.588143][T14191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=14191 comm=syz.8.4544 [ 468.688108][ T31] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 468.848018][ T31] usb 3-1: Invalid ep0 maxpacket: 32 [ 468.853954][ T31] usb usb3-port1: attempt power cycle [ 469.221033][ T31] usb 3-1: new low-speed USB device number 110 using dummy_hcd [ 469.254596][ T31] usb 3-1: Invalid ep0 maxpacket: 32 [ 469.391608][ T31] usb 3-1: new low-speed USB device number 111 using dummy_hcd [ 469.413744][ T31] usb 3-1: Invalid ep0 maxpacket: 32 [ 469.419231][ T31] usb usb3-port1: unable to enumerate USB device [ 469.980171][T14201] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4548'. [ 470.738123][T14250] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4563'. [ 470.747188][T14250] z00X: renamed from gretap0 (while UP) [ 470.753834][T14250] z00X: entered allmulticast mode [ 471.410389][T14259] netlink: 'syz.2.4566': attribute type 1 has an invalid length. [ 471.622401][T14270] 9pnet_fd: Insufficient options for proto=fd [ 471.705285][ T36] kauditd_printk_skb: 846 callbacks suppressed [ 471.705304][ T36] audit: type=1400 audit(16777905.569:60917): avc: denied { create } for pid=14272 comm="syz.2.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 471.736770][ T36] audit: type=1400 audit(16777905.588:60918): avc: denied { create } for pid=14272 comm="syz.2.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 471.757516][ T36] audit: type=1400 audit(16777905.588:60919): avc: denied { setopt } for pid=14272 comm="syz.2.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 471.779102][ T36] audit: type=1400 audit(16777905.588:60920): avc: denied { setopt } for pid=14272 comm="syz.2.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 471.811898][ T36] audit: type=1400 audit(16777905.588:60921): avc: denied { write } for pid=14272 comm="syz.2.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 471.844002][ T36] audit: type=1400 audit(16777905.588:60922): avc: denied { write } for pid=14272 comm="syz.2.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 471.865594][ T36] audit: type=1400 audit(16777905.644:60923): avc: denied { read } for pid=14272 comm="syz.2.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 471.886504][T14273] audit: audit_backlog=65 > audit_backlog_limit=64 [ 471.892596][ T36] audit: type=1400 audit(16777905.654:60924): avc: denied { write } for pid=14272 comm="syz.2.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 471.912902][T14273] audit: audit_lost=17 audit_rate_limit=0 audit_backlog_limit=64 [ 471.922216][ T2311] Bluetooth: hci0: Frame reassembly failed (-84) [ 473.581030][T14327] rust_binder: Error while translating object. [ 473.581096][T14327] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 473.596631][T14327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:729 [ 473.773640][T14340] binder: Unknown parameter 'context[7' [ 474.102734][ T1039] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 474.102737][T14326] Bluetooth: hci0: command 0x1003 tx timeout [ 474.200765][T14345] /dev/rnullb0: Can't lookup blockdev [ 474.311922][T14349] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 474.312708][T14349] overlayfs: empty lowerdir [ 474.346973][T14349] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 474.354281][T14349] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 475.547580][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4609'. [ 475.722843][ T1038] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 475.729034][ T1039] Bluetooth: hci1: command 0x1003 tx timeout [ 475.783271][T14406] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4612'. [ 476.007464][T14411] rust_binder: 919: no such ref 3 [ 476.016206][T14411] rust_binder: 919: no such ref 0 [ 476.028016][T14411] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 476.042603][T14411] rust_binder: 919: no such ref 3 [ 476.047694][T14411] rust_binder: 919: no such ref 0 [ 476.571091][T14440] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 476.648210][T14443] batadv_slave_1: entered promiscuous mode [ 476.793726][T14443] netlink: 'syz.6.4627': attribute type 4 has an invalid length. [ 476.816436][T14443] netlink: 'syz.6.4627': attribute type 4 has an invalid length. [ 476.841120][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4627'. [ 476.934106][T14442] batadv_slave_1: left promiscuous mode [ 477.050012][ T36] kauditd_printk_skb: 769 callbacks suppressed [ 477.050033][ T36] audit: type=1400 audit(16777910.579:61687): avc: denied { read write } for pid=10570 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 477.122433][ T36] audit: type=1400 audit(16777910.607:61688): avc: denied { read write open } for pid=10570 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 477.189921][ T36] audit: type=1400 audit(16777910.607:61689): avc: denied { ioctl } for pid=10570 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 477.216165][ T36] audit: type=1400 audit(16777910.626:61690): avc: denied { create } for pid=14451 comm="syz.2.4630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 477.239426][ T36] audit: type=1400 audit(16777910.635:61691): avc: denied { read write } for pid=14454 comm="syz.6.4631" name="binder1" dev="binder" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 477.255739][T14461] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=14461 comm=syz.7.4633 [ 477.263861][ T36] audit: type=1400 audit(16777910.635:61692): avc: denied { read write open } for pid=14454 comm="syz.6.4631" path="/dev/binderfs/binder1" dev="binder" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 477.284749][T14461] Unsupported ieee802154 address type: 0 [ 477.352378][ T36] audit: type=1400 audit(16777910.645:61693): avc: denied { ioctl } for pid=14454 comm="syz.6.4631" path="/dev/binderfs/binder1" dev="binder" ino=39 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 477.378636][ T36] audit: type=1400 audit(16777910.673:61694): avc: denied { read } for pid=14456 comm="syz.7.4632" name="binder1" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 477.405001][ T36] audit: type=1400 audit(16777910.673:61695): avc: denied { read open } for pid=14456 comm="syz.7.4632" path="/dev/binderfs/binder1" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 477.429849][T14460] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 477.452699][T14465] rust_binder: Error while translating object. [ 477.456304][ T36] audit: type=1400 audit(16777910.673:61696): avc: denied { ioctl } for pid=14456 comm="syz.7.4632" path="/dev/binderfs/binder1" dev="binder" ino=33 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 477.464957][T14465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 477.490970][T14465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:746 [ 477.652200][ T2311] Bluetooth: hci0: Frame reassembly failed (-84) [ 477.934674][T14480] vlan1: entered promiscuous mode [ 477.940018][T14480] vlan1: entered allmulticast mode [ 477.945235][T14480] veth0_vlan: entered allmulticast mode [ 478.865081][T14510] rust_binder: Write failure EFAULT in pid:1145 [ 479.105766][ T2338] Bluetooth: hci1: Frame reassembly failed (-84) [ 479.126268][T14520] binder: Unknown parameter 'defcontext01777777777777777777777' [ 479.815792][ T1039] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 479.815788][T14326] Bluetooth: hci0: command 0x1003 tx timeout [ 481.055761][T14605] SELinux: Context system_u:object_r:traceroute_exec_t:s0 is not valid (left unmapped). [ 481.265396][ T1038] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 481.265429][ T1039] Bluetooth: hci1: command 0x1003 tx timeout [ 481.328207][T14610] overlayfs: failed to resolve './file0': -2 [ 481.687080][T14623] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 481.687114][T14623] rust_binder: Error while translating object. [ 481.713235][T14623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 481.719490][T14623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1172 [ 482.022126][ T432] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 482.171371][ T432] usb 3-1: device descriptor read/64, error -71 [ 482.427176][ T432] usb 3-1: device descriptor read/64, error -71 [ 482.545504][ T36] kauditd_printk_skb: 380 callbacks suppressed [ 482.545523][ T36] audit: type=1400 audit(16777915.739:62077): avc: denied { ioctl } for pid=14626 comm="syz.2.4689" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.576924][ T36] audit: type=1400 audit(16777915.739:62078): avc: denied { ioctl } for pid=14626 comm="syz.2.4689" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.620378][ T36] audit: type=1400 audit(16777915.805:62079): avc: denied { ioctl } for pid=14626 comm="syz.2.4689" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.682992][ T432] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 482.691333][ T36] audit: type=1400 audit(16777915.871:62080): avc: denied { ioctl } for pid=14626 comm="syz.2.4689" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.719336][ T36] audit: type=1400 audit(16777915.871:62081): avc: denied { ioctl } for pid=14626 comm="syz.2.4689" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.744930][ T36] audit: type=1400 audit(16777915.899:62082): avc: denied { ioctl } for pid=14626 comm="syz.2.4689" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.770482][ T36] audit: type=1400 audit(16777915.899:62083): avc: denied { ioctl } for pid=14626 comm="syz.2.4689" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.772003][T14640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=14640 comm=syz.8.4693 [ 482.796416][ T36] audit: type=1400 audit(16777915.899:62084): avc: denied { ioctl } for pid=14626 comm="syz.2.4689" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.834054][ T36] audit: type=1400 audit(16777915.899:62085): avc: denied { ioctl } for pid=14626 comm="syz.2.4689" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.861617][ T36] audit: type=1400 audit(16777915.899:62086): avc: denied { ioctl } for pid=14626 comm="syz.2.4689" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.864186][ T432] usb 3-1: device descriptor read/64, error -71 [ 482.982929][T14651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14651 comm=syz.8.4697 [ 483.025223][T14654] /dev/loop0: Can't lookup blockdev [ 483.141309][ T432] usb 3-1: device descriptor read/64, error -71 [ 483.259145][ T432] usb usb3-port1: attempt power cycle [ 483.620988][ T432] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 483.644992][ T432] usb 3-1: device descriptor read/8, error -71 [ 483.783815][ T432] usb 3-1: device descriptor read/8, error -71 [ 484.036640][ T432] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 484.060808][ T432] usb 3-1: device descriptor read/8, error -71 [ 484.199348][ T432] usb 3-1: device descriptor read/8, error -71 [ 484.314255][ T432] usb usb3-port1: unable to enumerate USB device [ 484.489543][T14691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 484.494012][T14691] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 485.096706][T14723] /dev/md0: Can't lookup blockdev [ 485.401598][T14734] input: syz0 as /devices/virtual/input/input41 [ 485.460564][T14736] netlink: 'syz.8.4728': attribute type 4 has an invalid length. [ 485.563512][T14740] syzkaller0: entered allmulticast mode [ 485.579979][T14740] syzkaller0: entered promiscuous mode [ 485.616318][T14740] syzkaller0: left promiscuous mode [ 485.629950][T14740] syzkaller0: left allmulticast mode [ 485.797042][T14752] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 485.843245][T14752] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 485.843285][T14752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:788 [ 485.900019][T14757] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4734'. [ 486.006328][T14759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:790 [ 486.279506][T14771] rust_binder: 797: no such ref 0 [ 486.325639][T14771] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 486.338703][T14771] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 486.352918][T14771] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 486.361103][T14771] rust_binder: 797: no such ref 0 [ 488.044277][ T36] kauditd_printk_skb: 889 callbacks suppressed [ 488.044299][ T36] audit: type=1400 audit(16777920.881:62976): avc: denied { read write } for pid=9834 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 488.080072][ T36] audit: type=1400 audit(16777920.890:62977): avc: denied { read write open } for pid=9834 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 488.106860][ T36] audit: type=1400 audit(16777920.890:62978): avc: denied { ioctl } for pid=9834 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 496.322784][ T36] audit: type=1400 audit(16777928.658:62979): avc: denied { read write } for pid=14779 comm="syz.2.4742" name="binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 496.374426][T14784] netlink: 'syz.8.4741': attribute type 15 has an invalid length. [ 496.390039][ T36] audit: type=1400 audit(16777928.686:62980): avc: denied { read write } for pid=10570 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 496.415814][T14784] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4741'. [ 496.462151][ T36] audit: type=1400 audit(16777928.686:62982): avc: denied { read write open } for pid=14779 comm="syz.2.4742" path="/dev/binderfs/binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 496.522431][ T36] audit: type=1400 audit(16777928.686:62981): avc: denied { read write open } for pid=10570 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 496.614034][ T36] audit: type=1400 audit(16777928.686:62983): avc: denied { ioctl } for pid=10570 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 496.718160][ T36] audit: type=1400 audit(16777928.686:62984): avc: denied { read write } for pid=14778 comm="syz.6.4743" name="binder1" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 496.743530][T14797] netlink: 'syz.6.4746': attribute type 64 has an invalid length. [ 496.785539][ T36] audit: type=1400 audit(16777928.686:62985): avc: denied { read write open } for pid=14778 comm="syz.6.4743" path="/dev/binderfs/binder1" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 496.819826][T14797] fuse: Bad value for 'fd' [ 496.880858][ T36] audit: type=1400 audit(16777928.696:62986): avc: denied { create } for pid=14778 comm="syz.6.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 496.945320][ T36] audit: type=1400 audit(16777928.696:62987): avc: denied { read } for pid=14778 comm="syz.6.4743" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 496.984966][T14802] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.034989][T14808] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 497.089234][T14804] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 497.532360][T14783] x_tables: duplicate entry at hook 1 [ 497.872867][T14837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 497.872902][T14837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1197 [ 498.208843][T14840] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 498.227608][T14840] overlayfs: missing 'lowerdir' [ 498.684172][T14847] rust_binder: Error while translating object. [ 498.684207][T14847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 498.690467][T14847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1201 [ 498.822668][T14851] rust_binder: 14850 RLIMIT_NICE not set [ 498.832281][T14851] rust_binder: 1204: no such ref 0 [ 499.137247][ T2338] Bluetooth: hci0: Frame reassembly failed (-84) [ 500.720156][T14901] loop7: detected capacity change from 0 to 7 [ 500.740723][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 500.749932][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.766536][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 500.775761][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.784089][T14793] loop7: unable to read partition table [ 500.797684][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 500.806909][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.822778][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 500.832023][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.841067][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 500.850302][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.860554][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 500.869782][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.877404][T14901] loop7: unable to read partition table [ 500.884220][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 500.893429][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.894266][T14901] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 500.916436][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 500.925659][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.941380][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 500.950714][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 501.303700][ T1039] Bluetooth: hci0: command 0x1003 tx timeout [ 501.303781][ T1038] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 501.320148][T14928] incfs: Error accessing: ./file0. [ 501.341086][T14928] incfs: mount failed -20 [ 501.361047][T14928] overlayfs: failed to clone upperpath [ 501.478817][T14932] SELinux: failed to load policy [ 501.669885][ T36] kauditd_printk_skb: 455 callbacks suppressed [ 501.669905][ T36] audit: type=1400 audit(16777933.678:63405): avc: denied { create } for pid=14943 comm="syz.8.4798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 501.696580][ T36] audit: type=1400 audit(16777933.678:63406): avc: denied { write } for pid=14943 comm="syz.8.4798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 501.716834][ T36] audit: type=1400 audit(16777933.678:63407): avc: denied { nlmsg_write } for pid=14943 comm="syz.8.4798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 501.744676][ T36] audit: type=1400 audit(16777933.678:63408): avc: denied { write } for pid=14943 comm="syz.8.4798" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 501.765161][ T36] audit: type=1400 audit(16777933.696:63409): avc: denied { read } for pid=14944 comm="syz.7.4797" dev="nsfs" ino=4026532531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 501.786741][ T36] audit: type=1400 audit(16777933.696:63410): avc: denied { read open } for pid=14944 comm="syz.7.4797" path="net:[4026532531]" dev="nsfs" ino=4026532531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 501.811111][ T36] audit: type=1400 audit(16777933.696:63411): avc: denied { create } for pid=14944 comm="syz.7.4797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 501.837687][ T36] audit: type=1400 audit(16777933.696:63412): avc: denied { bind } for pid=14944 comm="syz.7.4797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 501.879327][ T36] audit: type=1400 audit(16777933.790:63413): avc: denied { read write } for pid=10570 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 501.915114][ T36] audit: type=1400 audit(16777933.790:63414): avc: denied { read write open } for pid=10570 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 502.199059][ T10] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 502.337620][ T10] usb 3-1: device descriptor read/64, error -71 [ 502.593457][ T10] usb 3-1: device descriptor read/64, error -71 [ 502.849248][ T10] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 502.987852][ T10] usb 3-1: device descriptor read/64, error -71 [ 503.243654][ T10] usb 3-1: device descriptor read/64, error -71 [ 503.360943][ T10] usb usb3-port1: attempt power cycle [ 503.662258][T14963] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4803'. [ 503.723273][ T10] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 503.746940][ T10] usb 3-1: device descriptor read/8, error -71 [ 503.885838][ T10] usb 3-1: device descriptor read/8, error -71 [ 504.138945][ T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 504.162690][ T10] usb 3-1: device descriptor read/8, error -71 [ 504.301675][ T10] usb 3-1: device descriptor read/8, error -71 [ 504.376738][T14971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.388670][T14971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.416949][ T10] usb usb3-port1: unable to enumerate USB device [ 504.670802][T14971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.681706][T14971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.693213][T14977] syzkaller0: entered allmulticast mode [ 504.701419][T14977] syzkaller0: entered promiscuous mode [ 504.711175][T14977] syzkaller0 (unregistering): left promiscuous mode [ 504.718843][T14977] syzkaller0 (unregistering): left allmulticast mode [ 504.769808][T14978] overlayfs: missing 'lowerdir' [ 504.920494][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4809'. [ 504.930572][T14985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14985 comm=syz.8.4809 [ 505.217365][T14993] binder: Unknown parameter 'cOntext' [ 505.556551][ T384] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 505.578532][T15000] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4816'. [ 505.716426][ T384] usb 3-1: Using ep0 maxpacket: 32 [ 505.724191][ T384] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 505.733521][ T384] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 505.742172][ T384] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 505.751193][ T384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 505.760880][ T384] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 505.770582][ T384] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 505.783620][ T384] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 505.792710][ T384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.802491][ T384] usb 3-1: config 0 descriptor?? [ 506.027876][ T384] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 120 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 506.044045][ T384] usb 3-1: USB disconnect, device number 120 [ 506.054028][ T384] usblp0: removed [ 506.558500][ T10] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 506.707694][ T10] usb 3-1: device descriptor read/64, error -71 [ 506.964006][ T10] usb 3-1: device descriptor read/64, error -71 [ 507.016232][ T36] kauditd_printk_skb: 389 callbacks suppressed [ 507.016253][ T36] audit: type=1400 audit(16777938.688:63804): avc: denied { mounton } for pid=15030 comm="syz.8.4826" path="/355/file0" dev="tmpfs" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 507.081153][ T36] audit: type=1400 audit(16777938.753:63805): avc: denied { ioctl } for pid=14997 comm="syz.2.4815" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 507.106475][ T36] audit: type=1400 audit(16777938.753:63806): avc: denied { ioctl } for pid=14997 comm="syz.2.4815" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 507.139659][ T36] audit: type=1400 audit(16777938.810:63807): avc: denied { create } for pid=15037 comm="syz.8.4828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 507.161365][ T36] audit: type=1400 audit(16777938.810:63808): avc: denied { write } for pid=15037 comm="syz.8.4828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 507.181942][ T36] audit: type=1400 audit(16777938.828:63809): avc: denied { ioctl } for pid=14997 comm="syz.2.4815" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 507.219348][ T10] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 507.227987][ T36] audit: type=1400 audit(16777938.885:63810): avc: denied { ioctl } for pid=14997 comm="syz.2.4815" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 507.252984][ T36] audit: type=1400 audit(16777938.885:63811): avc: denied { ioctl } for pid=14997 comm="syz.2.4815" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 507.278166][ T36] audit: type=1400 audit(16777938.885:63812): avc: denied { ioctl } for pid=14997 comm="syz.2.4815" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 507.303205][ T36] audit: type=1400 audit(16777938.885:63813): avc: denied { ioctl } for pid=14997 comm="syz.2.4815" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 507.389851][ T10] usb 3-1: device descriptor read/64, error -71 [ 507.645665][ T10] usb 3-1: device descriptor read/64, error -71 [ 507.763420][ T10] usb usb3-port1: attempt power cycle [ 508.125323][ T10] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 508.149822][ T10] usb 3-1: device descriptor read/8, error -71 [ 508.291305][ T10] usb 3-1: device descriptor read/8, error -71 [ 508.323548][T15052] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 508.323583][T15052] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:843 [ 508.554674][ T10] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 508.589375][T15061] rust_binder: Error while translating object. [ 508.589421][T15061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 508.595768][T15061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1230 [ 508.657835][T15063] rust_binder: Write failure EFAULT in pid:1232 [ 509.031288][ T10] usb 3-1: device not accepting address 124, error -71 [ 509.044644][ T10] usb usb3-port1: unable to enumerate USB device [ 511.029681][T15139] rust_binder: Write failure EFAULT in pid:1006 [ 511.077959][ T31] hid (null): unknown global tag 0xc [ 511.090109][ T31] hid (null): unknown global tag 0xc [ 511.095449][ T31] hid (null): invalid report_count 12816 [ 511.102947][ T31] hid (null): invalid report_size 41804 [ 511.109434][ T31] hid (null): unknown global tag 0xe [ 511.115204][ T31] hid (null): unknown global tag 0xd [ 511.120567][ T31] hid (null): report_id 40722 is invalid [ 511.127236][ T31] hid (null): report_id 0 is invalid [ 511.136555][ T31] hid-generic 0002:03FF:0003.0023: unknown main item tag 0x0 [ 511.144287][ T31] hid-generic 0002:03FF:0003.0023: unknown global tag 0xc [ 511.151435][ T31] hid-generic 0002:03FF:0003.0023: item 0 4 1 12 parsing failed [ 511.159430][ T31] hid-generic 0002:03FF:0003.0023: probe with driver hid-generic failed with error -22 [ 511.228366][T15143] netlink: 'syz.6.4861': attribute type 1 has an invalid length. [ 512.281503][T15156] rust_binder: Error in use_page_slow: ESRCH [ 512.281522][T15156] rust_binder: use_range failure ESRCH [ 512.287624][T15156] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 512.293279][T15156] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 512.301035][T15156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:851 [ 512.359679][ T36] kauditd_printk_skb: 527 callbacks suppressed [ 512.359699][ T36] audit: type=1400 audit(16777943.707:64341): avc: denied { read write } for pid=9834 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 512.463384][ T36] audit: type=1400 audit(16777943.716:64342): avc: denied { read write open } for pid=9834 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 512.495810][ T36] audit: type=1400 audit(16777943.716:64343): avc: denied { ioctl } for pid=9834 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 512.528932][T15162] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 512.528969][T15162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1015 [ 512.547902][ T36] audit: type=1400 audit(16777943.745:64344): avc: denied { create } for pid=15157 comm="syz.7.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 512.580960][T15164] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 512.591762][T15163] rust_binder: Error in use_page_slow: ESRCH [ 512.619844][T15163] rust_binder: use_range failure ESRCH [ 512.624523][ T36] audit: type=1400 audit(16777943.763:64345): avc: denied { write } for pid=15157 comm="syz.7.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 512.643302][T15163] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 512.656872][T15168] cgroup: Need name or subsystem set [ 512.661449][T15169] fuse: Invalid rootmode [ 512.680404][T15163] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 512.680442][T15163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:855 [ 512.715841][ T36] audit: type=1400 audit(16777943.773:64346): avc: denied { read } for pid=15159 comm="syz.6.4869" name="binder1" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 512.749144][ T36] audit: type=1400 audit(16777943.773:64347): avc: denied { read open } for pid=15159 comm="syz.6.4869" path="/dev/binderfs/binder1" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 512.836192][ T36] audit: type=1400 audit(16777943.791:64348): avc: denied { ioctl } for pid=15159 comm="syz.6.4869" path="/dev/binderfs/binder1" dev="binder" ino=42 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 512.866717][ T36] audit: type=1400 audit(16777943.791:64349): avc: denied { set_context_mgr } for pid=15159 comm="syz.6.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 512.887684][ T36] audit: type=1400 audit(16777943.791:64350): avc: denied { read write } for pid=15159 comm="syz.6.4869" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 513.010669][T15185] rust_binder: Got transaction with invalid offset. [ 513.010758][T15185] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 513.024185][T15185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1023 [ 513.059237][T15192] overlayfs: failed to clone upperpath [ 513.083741][T15191] rust_binder: Error while translating object. [ 513.083786][T15191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 513.090450][T15191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:864 [ 515.912010][T15207] netlink: 'syz.8.4883': attribute type 4 has an invalid length. [ 515.928964][T15207] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.4883'. [ 515.940888][T15208] netlink: 'syz.8.4883': attribute type 4 has an invalid length. [ 515.948675][T15208] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.4883'. [ 516.042578][T15214] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4885'. [ 516.051674][T15214] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4885'. [ 516.064207][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4885'. [ 516.075439][T15214] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4885'. [ 516.085740][T15214] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4885'. [ 516.124530][T15216] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4886'. [ 516.139175][T15219] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4886'. [ 516.211949][T15230] netlink: 'syz.2.4890': attribute type 16 has an invalid length. [ 516.219872][T15230] netlink: 'syz.2.4890': attribute type 4 has an invalid length. [ 516.227815][T15230] netlink: 64094 bytes leftover after parsing attributes in process `syz.2.4890'. [ 516.678815][T15243] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 516.902734][T15257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 516.909787][T15257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:883 [ 516.962207][T15259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 516.972472][T15259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 517.018794][T15261] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 517.034325][T15261] rust_binder: Error while translating object. [ 517.040906][T15261] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 517.047376][T15261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:887 [ 517.203726][T15263] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 517.232232][T15263] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 517.245585][T15263] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 517.254066][T15263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:889 [ 517.542464][T15292] cgroup: fork rejected by pids controller in /syz8 [ 517.769355][ T36] kauditd_printk_skb: 339 callbacks suppressed [ 517.769375][ T36] audit: type=1400 audit(16777948.773:64687): avc: denied { create } for pid=15524 comm="syz.8.4913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 517.795198][ T36] audit: type=1400 audit(16777948.773:64688): avc: denied { create } for pid=15524 comm="syz.8.4913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 517.814923][ T36] audit: type=1400 audit(16777948.773:64689): avc: denied { ioctl } for pid=15524 comm="syz.8.4913" path="socket:[68963]" dev="sockfs" ino=68963 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 517.839841][ T36] audit: type=1400 audit(16777948.773:64690): avc: denied { connect } for pid=15524 comm="syz.8.4913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 517.859452][ T36] audit: type=1400 audit(16777948.783:64691): avc: denied { create } for pid=15524 comm="syz.8.4913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 517.878871][ T36] audit: type=1400 audit(16777948.783:64692): avc: denied { getopt } for pid=15524 comm="syz.8.4913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 517.898500][ T36] audit: type=1400 audit(16777948.848:64693): avc: denied { create } for pid=15529 comm="syz.8.4914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 517.918864][ T36] audit: type=1400 audit(16777948.848:64694): avc: denied { write } for pid=15529 comm="syz.8.4914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 517.939095][ T36] audit: type=1400 audit(16777948.848:64695): avc: denied { nlmsg_write } for pid=15529 comm="syz.8.4914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 517.959753][ T36] audit: type=1400 audit(16777948.886:64696): avc: denied { create } for pid=15531 comm="syz.8.4915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 518.025146][T15540] 9p: Unknown uid 00000000004294967295 [ 518.720158][T15551] netlink: 'syz.2.4922': attribute type 4 has an invalid length. [ 519.054063][T15579] netlink: 'syz.2.4931': attribute type 12 has an invalid length. [ 519.784816][T15582] fuse: Bad value for 'fd' [ 520.471035][T15622] SELinux: Context system_u:object_r:user_cron_spool_t:s0 is not valid (left unmapped). [ 521.083672][T15665] veth0_to_team: entered promiscuous mode [ 521.089559][T15665] veth0_to_team: entered allmulticast mode [ 522.243648][T15729] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 522.243686][T15729] rust_binder: Error in use_page_slow: EBUSY [ 522.254299][T15729] rust_binder: use_range failure EBUSY [ 522.260418][T15729] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 522.266000][T15729] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 522.273860][T15729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:1058 [ 523.012845][T15784] overlayfs: failed to clone upperpath [ 523.039079][T15783] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 523.057405][T15783] overlayfs: failed to set xattr on upper [ 523.063946][T15783] overlayfs: ...falling back to redirect_dir=nofollow. [ 523.070955][T15783] overlayfs: ...falling back to uuid=null. [ 523.077967][T15783] overlayfs: overlapping lowerdir path [ 523.139572][ T36] kauditd_printk_skb: 494 callbacks suppressed [ 523.139593][ T36] audit: type=1400 audit(16777953.821:65191): avc: denied { create } for pid=15791 comm="syz.8.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 523.178412][ T36] audit: type=1400 audit(16777953.849:65192): avc: denied { read } for pid=15791 comm="syz.8.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 523.198758][ T36] audit: type=1400 audit(16777953.849:65193): avc: denied { sys_module } for pid=15791 comm="syz.8.5003" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 523.220883][ T36] audit: type=1400 audit(16777953.858:65194): avc: denied { create } for pid=15791 comm="syz.8.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 523.242359][ T36] audit: type=1400 audit(16777953.858:65195): avc: denied { write } for pid=15791 comm="syz.8.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 523.263709][ T36] audit: type=1400 audit(16777953.858:65196): avc: denied { read } for pid=15791 comm="syz.8.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 523.285003][ T36] audit: type=1400 audit(16777953.858:65197): avc: denied { read } for pid=15791 comm="syz.8.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 523.671314][ T36] audit: type=1400 audit(16777954.318:65198): avc: denied { create } for pid=15793 comm="syz.2.5004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 523.692110][ T36] audit: type=1400 audit(16777954.318:65199): avc: denied { write } for pid=15793 comm="syz.2.5004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 523.713989][ T36] audit: type=1400 audit(16777954.318:65200): avc: denied { create } for pid=15793 comm="syz.2.5004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 523.764041][T15796] __nla_validate_parse: 6 callbacks suppressed [ 523.764061][T15796] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5005'. [ 523.809216][T15802] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5007'. [ 524.047823][T15823] x_tables: duplicate underflow at hook 1 [ 525.189030][T15849] tmpfs: Unknown parameter 'tmpfs' [ 525.804185][T15857] binder: Bad value for 'stats' [ 525.999305][T15867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=15867 comm=syz.2.5030 [ 526.020911][T15869] __vm_enough_memory: pid: 15869, comm: syz.6.5031, bytes: 18014402804453376 not enough memory for the allocation [ 526.621484][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5034'. [ 527.054729][T15901] 9pnet_fd: Insufficient options for proto=fd [ 527.972317][T15937] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5054'. [ 527.993140][ T1038] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 527.993211][ T1039] Bluetooth: hci0: command 0x1003 tx timeout [ 528.148608][T15949] overlayfs: failed to clone upperpath [ 528.156678][T15947] overlayfs: failed to clone upperpath [ 528.550039][ T36] kauditd_printk_skb: 577 callbacks suppressed [ 528.550055][ T36] audit: type=1400 audit(16777958.897:65778): avc: denied { read write } for pid=10570 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 528.605070][ T36] audit: type=1400 audit(16777958.897:65779): avc: denied { read write open } for pid=10570 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 528.631130][ T36] audit: type=1400 audit(16777958.897:65780): avc: denied { ioctl } for pid=10570 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 528.657499][ T36] audit: type=1400 audit(16777958.925:65781): avc: denied { read } for pid=15962 comm="syz.7.5064" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 528.681687][ T36] audit: type=1400 audit(16777958.925:65782): avc: denied { read open } for pid=15962 comm="syz.7.5064" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 528.707518][ T36] audit: type=1400 audit(16777958.934:65783): avc: denied { ioctl } for pid=15962 comm="syz.7.5064" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 528.734345][ T36] audit: type=1400 audit(16777958.943:65784): avc: denied { read write } for pid=10570 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 528.759311][ T36] audit: type=1400 audit(16777958.943:65785): avc: denied { read write open } for pid=10570 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 528.791407][ T36] audit: type=1400 audit(16777958.943:65786): avc: denied { ioctl } for pid=10570 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 528.817844][ T36] audit: type=1400 audit(16777959.018:65787): avc: denied { write } for pid=15964 comm="syz.7.5065" name="mcfilter" dev="proc" ino=4026532552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 529.002021][T15972] netlink: 'syz.8.5068': attribute type 20 has an invalid length. [ 529.035888][T15969] loop7: detected capacity change from 0 to 7 [ 529.042470][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.051698][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 529.059815][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.069072][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 529.077045][T15969] loop7: unable to read partition table [ 529.084104][T15969] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 529.102667][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.119261][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.128509][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 529.137195][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.146476][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 529.165265][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.174497][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 529.188428][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.197653][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 529.206440][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.215683][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 529.289400][T15988] tipc: New replicast peer: 255.255.255.255 [ 529.296087][T15988] tipc: Enabled bearer , priority 10 [ 529.355773][T15993] overlay: Unknown parameter '/' [ 529.400585][T15993] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5076'. [ 529.631552][T16003] /dev/rnullb0: Can't lookup blockdev [ 530.657001][T16023] overlayfs: conflicting lowerdir path [ 530.801751][T16031] rust_binder: Error while translating object. [ 530.801795][T16031] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 530.808862][T16031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1099 [ 530.822145][T16031] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 530.907117][T16037] usb usb8: usbfs: process 16037 (syz.6.5089) did not claim interface 0 before use [ 530.939139][T16037] rust_binder: Error while translating object. [ 530.939177][T16037] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 530.945431][T16037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1101 [ 531.007642][T16040] binder: Bad value for 'defcontext' [ 531.411279][T16051] rust_binder: Failed to allocate buffer. len:208, is_oneway:false [ 531.476764][T16057] netlink: 'syz.8.5096': attribute type 27 has an invalid length. [ 532.897702][T16094] 8021q: VLANs not supported on tunl0 [ 532.904888][T16094] 9pnet_fd: Insufficient options for proto=fd [ 533.479224][T16096] tmpfs: Unknown parameter 'eid' [ 534.672256][ T36] kauditd_printk_skb: 335 callbacks suppressed [ 534.672280][ T36] audit: type=1400 audit(16777964.638:66123): avc: denied { read write } for pid=9834 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 534.722040][ T36] audit: type=1400 audit(16777964.638:66124): avc: denied { read write open } for pid=9834 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 534.748116][ T36] audit: type=1400 audit(16777964.638:66125): avc: denied { ioctl } for pid=9834 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 534.753925][T16125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 534.774006][ T36] audit: type=1400 audit(16777964.713:66126): avc: denied { read } for pid=16122 comm="syz.6.5119" name="binder1" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 534.775785][T16125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1120 [ 534.783465][ T36] audit: type=1400 audit(16777964.713:66127): avc: denied { read open } for pid=16122 comm="syz.6.5119" path="/dev/binderfs/binder1" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 534.846073][ T36] audit: type=1400 audit(16777964.713:66128): avc: denied { ioctl } for pid=16122 comm="syz.6.5119" path="/dev/binderfs/binder1" dev="binder" ino=42 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 534.875957][ T36] audit: type=1400 audit(16777964.713:66129): avc: denied { set_context_mgr } for pid=16122 comm="syz.6.5119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 534.896925][ T36] audit: type=1400 audit(16777964.713:66130): avc: denied { ioctl } for pid=16122 comm="syz.6.5119" path="/dev/binderfs/binder1" dev="binder" ino=42 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 534.930805][ T36] audit: type=1400 audit(16777964.713:66131): avc: denied { call } for pid=16122 comm="syz.6.5119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 534.950573][ T36] audit: type=1400 audit(16777964.817:66132): avc: denied { read write } for pid=9834 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 534.957134][T16129] /dev/rnullb0: Can't lookup blockdev [ 534.986236][T16131] /dev/rnullb0: Can't lookup blockdev [ 535.301777][T16151] tipc: Enabling of bearer rejected, failed to enable media [ 535.326836][T16153] netlink: 'syz.8.5127': attribute type 12 has an invalid length. [ 537.632067][T16200] tipc: Enabling not permitted [ 537.637697][T16200] tipc: Enabling of bearer rejected, failed to enable media [ 538.787365][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.798719][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.805585][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.812867][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.821412][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.828810][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.835936][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.843063][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.849940][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.857780][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.864907][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.871893][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.879086][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.885790][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.892804][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.899593][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.906288][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.913356][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.920085][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.926772][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.933896][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.940917][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.947587][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.954606][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.961476][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.968282][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.975243][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.982009][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.988986][T16246] /dev/rnullb0: Can't lookup blockdev [ 538.995682][T16246] /dev/rnullb0: Can't lookup blockdev [ 539.002356][T16246] /dev/rnullb0: Can't lookup blockdev [ 539.009471][T16246] /dev/rnullb0: Can't lookup blockdev [ 539.016396][T16246] /dev/rnullb0: Can't lookup blockdev [ 539.516856][T16278] overlayfs: missing 'lowerdir' [ 539.566112][T16285] rust_binder: 946: no such ref 2 [ 539.777405][T16291] binder: Unknown parameter 'defcontext01777777777777777777777' [ 540.163367][ T36] kauditd_printk_skb: 261 callbacks suppressed [ 540.163385][ T36] audit: type=1400 audit(16777969.789:66394): avc: denied { read write } for pid=9834 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 540.193896][ T36] audit: type=1400 audit(16777969.789:66395): avc: denied { read write open } for pid=9834 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 540.225602][ T36] audit: type=1400 audit(16777969.789:66396): avc: denied { ioctl } for pid=9834 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 540.262182][ T36] audit: type=1400 audit(16777969.883:66397): avc: denied { execmem } for pid=16295 comm="syz.6.5171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 540.281604][ T36] audit: type=1400 audit(16777969.883:66398): avc: denied { execute } for pid=16295 comm="syz.6.5171" path="/361/cpuacct.usage_percpu" dev="tmpfs" ino=1977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 540.306659][ T36] audit: type=1400 audit(16777969.883:66399): avc: denied { read write } for pid=16295 comm="syz.6.5171" name="binder1" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 540.336790][ T36] audit: type=1400 audit(16777969.883:66400): avc: denied { read write open } for pid=16295 comm="syz.6.5171" path="/dev/binderfs/binder1" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 540.364416][ T36] audit: type=1400 audit(16777969.883:66401): avc: denied { read } for pid=16295 comm="syz.6.5171" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 540.387252][ T36] audit: type=1400 audit(16777969.883:66402): avc: denied { read open } for pid=16295 comm="syz.6.5171" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 540.412464][ T36] audit: type=1400 audit(16777969.883:66403): avc: denied { ioctl } for pid=16295 comm="syz.6.5171" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 540.759969][T16315] incfs: Backing dir is not set, filesystem can't be mounted. [ 540.781454][T16315] incfs: mount failed -2 [ 540.817102][T16324] .N: renamed from veth0_to_bond (while UP) [ 541.742631][T16379] overlayfs: failed to resolve './bus': -2 [ 541.749313][T16379] overlayfs: failed to resolve './bus': -2 [ 541.756098][T16379] overlayfs: failed to resolve './bus': -2 [ 541.763004][T16379] overlayfs: failed to resolve './bus': -2 [ 541.770473][T16379] overlayfs: failed to resolve './bus': -2 [ 541.777287][T16379] overlayfs: failed to resolve './bus': -2 [ 541.784209][T16379] overlayfs: failed to resolve './bus': -2 [ 541.791470][T16379] overlayfs: failed to resolve './bus': -2 [ 542.080923][T16397] tipc: Enabling of bearer rejected, already enabled [ 542.145245][T16401] netlink: 'syz.8.5213': attribute type 12 has an invalid length. [ 544.887505][T16478] netlink: 'syz.2.5236': attribute type 11 has an invalid length. [ 545.567171][ T36] kauditd_printk_skb: 264 callbacks suppressed [ 545.567191][ T36] audit: type=1400 audit(16777974.855:66668): avc: denied { mounton } for pid=16480 comm="syz.8.5237" path="/504/file0" dev="tmpfs" ino=2751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 545.721595][ T36] audit: type=1400 audit(16777975.005:66669): avc: denied { create } for pid=16485 comm="syz.8.5239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 545.743542][ T36] audit: type=1400 audit(16777975.005:66670): avc: denied { create } for pid=16485 comm="syz.8.5239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 545.768461][ T36] audit: type=1400 audit(16777975.005:66671): avc: denied { write } for pid=16485 comm="syz.8.5239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 545.814676][ T36] audit: type=1400 audit(16777975.005:66672): avc: denied { read } for pid=16485 comm="syz.8.5239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 545.845949][ T36] audit: type=1400 audit(16777975.005:66673): avc: denied { read } for pid=16485 comm="syz.8.5239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 545.867796][ T36] audit: type=1400 audit(16777975.005:66674): avc: denied { write } for pid=16485 comm="syz.8.5239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 545.914623][ T36] audit: type=1400 audit(16777975.052:66675): avc: denied { mounton } for pid=16487 comm="syz.8.5240" path="/507/file0" dev="tmpfs" ino=2768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 545.963674][ T36] audit: type=1400 audit(16777975.052:66676): avc: denied { create } for pid=16487 comm="syz.8.5240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 545.986903][ T36] audit: type=1400 audit(16777975.052:66677): avc: denied { write } for pid=16487 comm="syz.8.5240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 546.030243][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5246'. [ 546.295326][T16530] overlayfs: failed to clone lowerpath [ 546.411507][T16541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 547.056775][T16554] rust_binder: Error while translating object. [ 547.063383][T16554] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 547.069636][T16554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:971 [ 547.440928][T16585] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5272'. [ 547.488584][T16583] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.495869][T16583] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.503179][T16583] bridge_slave_0: entered allmulticast mode [ 547.509736][T16583] bridge_slave_0: entered promiscuous mode [ 547.517432][T16583] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.525042][T16583] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.534375][T16583] bridge_slave_1: entered allmulticast mode [ 547.540921][T16583] bridge_slave_1: entered promiscuous mode [ 547.654952][T16583] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.662053][T16583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.669387][T16583] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.676528][T16583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.731308][ T2339] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.738712][ T2339] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.753703][ T2338] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.760825][ T2338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.776424][ T2339] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.783524][ T2339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.863359][T16583] veth0_vlan: entered promiscuous mode [ 547.901571][T16583] veth1_macvtap: entered promiscuous mode [ 547.942951][T16604] overlayfs: failed to resolve './file1/file0': -2 [ 548.047282][T16611] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5279'. [ 548.442855][T16642] netlink: 'syz.8.5288': attribute type 28 has an invalid length. [ 548.930716][T16701] 9pnet_fd: Insufficient options for proto=fd [ 549.208380][T16715] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5309'. [ 549.697774][T16749] rust_binder: 16745 RLIMIT_NICE not set [ 549.697810][T16749] rust_binder: 25: no such ref 0 [ 549.810740][T16756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5323'. [ 549.829960][T16756] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5323'. [ 549.840048][T16756] netlink: 'syz.2.5323': attribute type 3 has an invalid length. [ 549.854147][T16756] netlink: 'syz.2.5323': attribute type 2 has an invalid length. [ 549.871807][T16756] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5323'. [ 550.134600][T16771] rust_binder: 31: no such ref 3 [ 550.139679][T16771] rust_binder: inc_ref_done called when no active inc_refs [ 550.139703][T16771] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 550.155560][T16771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31 [ 550.249261][T16778] rust_binder: Error while translating object. [ 550.258393][T16778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 550.271559][T16778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:34 [ 550.284188][T16785] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 550.553953][T16797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5334'. [ 550.857045][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5344'. [ 550.930665][ T36] kauditd_printk_skb: 746 callbacks suppressed [ 550.930686][ T36] audit: type=1400 audit(16777979.884:67424): avc: denied { create } for pid=16829 comm="syz.8.5346" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 551.042120][ T36] audit: type=1400 audit(16777979.997:67425): avc: denied { execmem } for pid=16827 comm="syz.6.5345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 551.069187][ T36] audit: type=1400 audit(16777979.997:67426): avc: denied { read write } for pid=16583 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 551.107858][ T36] audit: type=1400 audit(16777980.015:67427): avc: denied { read write open } for pid=16583 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 551.135006][ T36] audit: type=1400 audit(16777980.015:67428): avc: denied { ioctl } for pid=16583 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 551.174638][T16838] fuse: Unknown parameter 'uid' [ 551.185541][ T36] audit: type=1400 audit(16777980.119:67429): avc: denied { read write } for pid=16835 comm="syz.9.5347" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 551.215039][ T36] audit: type=1400 audit(16777980.119:67430): avc: denied { read write open } for pid=16835 comm="syz.9.5347" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 551.240092][ T36] audit: type=1400 audit(16777980.119:67431): avc: denied { mounton } for pid=16837 comm="syz.8.5348" path="/549/file0" dev="tmpfs" ino=2992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 551.262961][ T36] audit: type=1400 audit(16777980.128:67432): avc: denied { mounton } for pid=16835 comm="syz.9.5347" path="/12/file0" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 551.286229][ T36] audit: type=1400 audit(16777980.128:67433): avc: denied { mount } for pid=16835 comm="syz.9.5347" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 551.611098][T16863] /dev/loop0: Can't lookup blockdev [ 551.627090][T16863] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5356'. [ 552.309844][T16913] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 552.322493][T16913] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 552.330939][T16913] CPU: 0 UID: 0 PID: 16913 Comm: syz.9.5373 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 552.342626][T16913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 552.352718][T16913] RIP: 0010:iter_file_splice_write+0xace/0x11b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 552.359021][T16913] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 552.378678][T16913] RSP: 0000:ffffc90002ebf820 EFLAGS: 00010202 [ 552.384797][T16913] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888114181300 [ 552.392808][T16913] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffb [ 552.400817][T16913] RBP: ffffc90002ebfa40 R08: ffff8881f6e72240 R09: 1ffff1103edce448 [ 552.408830][T16913] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 552.416839][T16913] R13: 7ffffffffffffffb R14: ffff88812f424038 R15: ffff88812f424028 [ 552.424855][T16913] FS: 00007fd4160fa6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 552.433825][T16913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.440447][T16913] CR2: 000055557dec14a8 CR3: 000000011cbea000 CR4: 00000000003526b0 [ 552.448453][T16913] Call Trace: [ 552.451758][T16913] [ 552.454719][T16913] ? __cfi_iter_file_splice_write+0x10/0x10 [ 552.460675][T16913] ? __kmalloc_noprof+0x271/0x530 [ 552.465764][T16913] ? activate_task+0x38b/0x3d0 [ 552.470555][T16913] ? __kasan_check_write+0x18/0x20 [ 552.475737][T16913] ? __cfi_iter_file_splice_write+0x10/0x10 [ 552.481669][T16913] direct_splice_actor+0x279/0x4b0 [ 552.486818][T16913] splice_direct_to_actor+0x4fb/0xbc0 [ 552.492228][T16913] ? __cfi_direct_splice_actor+0x10/0x10 [ 552.497900][T16913] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 552.503840][T16913] do_splice_direct+0x182/0x270 [ 552.508736][T16913] ? __cfi_do_splice_direct+0x10/0x10 [ 552.514150][T16913] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 552.520095][T16913] ? security_file_permission+0x2e/0xc0 [ 552.525686][T16913] ? rw_verify_area+0xac/0x230 [ 552.530498][T16913] do_sendfile+0x5c8/0xfb0 [ 552.534968][T16913] ? vfs_writev+0xcf0/0xcf0 [ 552.539511][T16913] ? __se_sys_futex+0x28f/0x300 [ 552.544397][T16913] __x64_sys_sendfile64+0x193/0x1f0 [ 552.549642][T16913] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 552.555412][T16913] ? switch_fpu_return+0x12/0x20 [ 552.560399][T16913] x64_sys_call+0xa26/0x2ee0 [ 552.565036][T16913] do_syscall_64+0x58/0xf0 [ 552.569493][T16913] ? clear_bhb_loop+0x50/0xa0 [ 552.574206][T16913] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 552.580142][T16913] RIP: 0033:0x7fd41518f6c9 [ 552.584654][T16913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.604297][T16913] RSP: 002b:00007fd4160fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 552.612845][T16913] RAX: ffffffffffffffda RBX: 00007fd4153e5fa0 RCX: 00007fd41518f6c9 [ 552.620854][T16913] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 552.628861][T16913] RBP: 00007fd415211f91 R08: 0000000000000000 R09: 0000000000000000 [ 552.636872][T16913] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 552.644882][T16913] R13: 00007fd4153e6038 R14: 00007fd4153e5fa0 R15: 00007ffea0aedaf8 [ 552.652901][T16913] [ 552.655953][T16913] Modules linked in: [ 552.660387][T16913] ---[ end trace 0000000000000000 ]--- [ 552.667527][T16913] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 552.673865][T16913] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 552.693538][T16913] RSP: 0000:ffffc90002ebf820 EFLAGS: 00010202 [ 552.699669][T16913] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888114181300 [ 552.707705][T16913] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffb [ 552.715734][T16913] RBP: ffffc90002ebfa40 R08: ffff8881f6e72240 R09: 1ffff1103edce448 [ 552.748307][T16913] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 552.777348][T16913] R13: 7ffffffffffffffb R14: ffff88812f424038 R15: ffff88812f424028 [ 552.817215][T16913] FS: 00007fd4160fa6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 552.826575][T16913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.833251][T16913] CR2: 000055557dec14a8 CR3: 000000011cbea000 CR4: 00000000003526b0 [ 552.842054][T16913] Kernel panic - not syncing: Fatal exception [ 552.848906][T16913] Kernel Offset: disabled [ 552.853242][T16913] Rebooting in 86400 seconds..