last executing test programs: 31m31.078440738s ago: executing program 32 (id=373): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000080)) write(r2, &(0x7f0000000100)="c893063d0cbb19f83da0e4c2a44eb30b8780be6ea99c85c7531f04", 0x1b) r3 = syz_open_pts(r2, 0x2000) io_setup(0x6, &(0x7f00000001c0)=0x0) r5 = eventfd2(0x40, 0x801) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8b42, r3, &(0x7f0000000200)='7', 0x1, 0xb15, 0x0, 0x1, r5}]) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0xffff, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x4, 0x9], 0x0, 0x2280}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x7}, 0x0) r8 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r11, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r11, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xe35068f1393efcd0}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r10, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004051}, 0x8000800) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xe35068f1393efcd0}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r10, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004051}, 0x8000800) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 31m13.380472226s ago: executing program 33 (id=593): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) (async, rerun: 64) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000100)=0xffffffffffffffe3, 0x80800) (async, rerun: 64) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r3) (async) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) 29m30.594807155s ago: executing program 34 (id=1559): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 29m4.662962644s ago: executing program 35 (id=1801): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4021) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x5) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101}, 0x0, 0x0, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="b9800000c00f3235000800000f30670f78050f01dfb8010000000f01c166ba61000f080f00d066baf80cb85d93728def66bafc0cec0f015f50b30f01c9c9df7428", 0x41}], 0x1, 0x11, 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x140, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6eabb4bf28d3f6b5a6545b4a9591ac0384dd07d931c2c1bd"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "998095e7f981cc98ae36db42f03ecfa4b6e11abd5a847683"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e1faaf8c24ba0f7bd2e2c81734b991ca9104ba21c0db6abd"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cbbd7472a0ce1ab80a6bf026a63c5084cd636219148c43c7"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "65d9d19721d12a71b80d17ba3ea56df1199cd7ba7e667556"}]]}, 0x140}}, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (rerun: 64) 17m44.164621804s ago: executing program 36 (id=8452): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) (async) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1, &(0x7f0000000140)={[{@read_timeout_ms={'read_timeout_ms', 0x3d, 0x2}}, {@rlog_pages={'rlog_pages', 0x3d, 0x20000000000000}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}], [{@smackfsfloor}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, '$$%(:,'}}]}) 17m40.470444226s ago: executing program 37 (id=8367): mkdir(&(0x7f0000000200)='./file0\x00', 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'xfrm0\x00', {0x1}, 0xff7f}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {0xffe}, 0x6}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080)=0x5, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, &(0x7f00000003c0)=0xfffffffffffffc52) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}, {@debug={'debug', 0x3d, 0x9}}, {@cache_readahead}]}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x1, 0x4, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r6) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x8884) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r6) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000050300000009210500000122050009e8800320000000070905020310"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r9, 0xc4fc9e906872338b, 0x24, 0x25dfdbff, {{0x15}, {@void, @val={0xc, 0x99, {0xa, 0x2}}}}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000840)={0x98, r9, 0x100, 0x40000005, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x73}}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x7, 0xd, 0x0, 0xae, 0xf8, 0x6, 0xf6bb, 0xa2, 0x4, 0x10, 0x1, 0x1ff, 0x3, 0x7, 0x9, 0x7]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="77697337b760"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_SSID={0x18, 0x34, @random="65de5d4ada4f81cf498e1b55a39ed00c5a231f57"}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x884) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 17m14.098915705s ago: executing program 38 (id=8581): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x4, 0x0, 0x1, 0x8, 0x8, 0x7}, 0x20) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x8141, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/64, 0xd}, {&(0x7f0000000200)=""/77, 0x9c}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000000160001000080"]) (async) syz_clone(0x40000000, &(0x7f0000001fc0)="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", 0x1000, &(0x7f00000000c0), &(0x7f0000000300), &(0x7f0000000400)="63fa9967e406fde9d6347f43cff0c5449779b1ab34c462209ddeefc3197e526cc2c6543627126ce7bdc5a652323fa6f305f4572740847242e0a5fbd6fa5b69df3a032409bc1bd24199872a0d52be0b5895a8") ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010141, 0x0, 0xffff}]}) readahead(r1, 0x5, 0x0) (async, rerun: 64) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) (rerun: 64) r6 = socket$inet6(0xa, 0x2, 0x0) (async) rt_sigaction(0x8, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x61ae, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xa0, 0x94, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x1, 0x4a, 0x1, {0x22, 0x66b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x9, 0x1d}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x8, 0x7}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x300, 0x0, 0x9, 0xfb, 0x8, 0x1}, 0xc, &(0x7f0000000780)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xf, 0x0, 0x1ff}]}}) (async) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) (async, rerun: 64) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async, rerun: 64) dup3(r0, r1, 0x80000) epoll_pwait(0xffffffffffffffff, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xffffffc0, &(0x7f0000000340)={[0xffffffff00000001]}, 0x8) 15m57.6005059s ago: executing program 39 (id=9387): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x13) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x8, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x8011) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = gettid() r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001200010000000000000000001d00000000004e2300000000ffffffffff0700000000000000000000000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="0100000003000000000000000000000008000301"], 0x54}}, 0x20004010) rt_sigqueueinfo(r6, 0x21, &(0x7f0000000300)={0x4b, 0x1004, 0xfffffffe}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe2, 0x40, 0x7, 0x0, 0x2e, 0x19, 0x7}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x4, 0x42, 0xd, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x66, 0x83, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xf000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x5000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) close_range(r1, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) 13m52.570391489s ago: executing program 40 (id=10750): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) setresgid(0xee00, 0xee01, 0x0) (async) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x40900a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, 0x50) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000080)={{0x0, 0x2}, {0xfffffffffffffff7, 0x101}, 0x10, 0x6}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) write$nbd(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="460ed03b1a775f778be661f344", @ANYRESDEC=r2, @ANYBLOB="e3a14a17b93161dae062ab1e2df4a9c373965ea35a7f4054236ffe6a4af80177a9820f067633a2e20eeec6997c5ebe1ff0963015656e0f02e9863b8a8a96654c2af423bab1a99c716d28a51b9ee49a5a7ee51fc7e26e357d1fd3fc3e39d6e69e4c88bc351a7b297a08e1345562357a197ea5cdb2f61b31", @ANYRESDEC=r7], 0x10) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0xc0) ioctl$KVM_GET_STATS_FD_vm(r8, 0xaece) 13m51.48401635s ago: executing program 41 (id=10759): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_usb_connect(0x0, 0x54, &(0x7f00000023c0)={{0x12, 0x1, 0x310, 0x45, 0xae, 0x46, 0x8, 0x17ef, 0x7203, 0xaaf8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x2, 0x8f, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0xd5, 0x2, 0x2, 0xc7, 0xbc, 0x57, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x2}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x5}]}], [{{0x9, 0x5, 0x3, 0x1, 0x200, 0xc, 0x0, 0xc9, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x2, 0xa5}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x0, 0x1, 0x8}}]}}, {{0x9, 0x4, 0x4c, 0x7f, 0x0, 0xff, 0x1, 0x35, 0xf8}}]}}]}}, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (async) sendto$packet(r1, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 13m49.764295564s ago: executing program 42 (id=10768): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee7001, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x9, 0x0, 0x2e, 0x19}, {0x4000, 0xeeee6001, 0x10, 0x0, 0x40, 0x4, 0x7d, 0x7f, 0x5, 0x3, 0x3}, {0xeeee0000, 0xdddd0000, 0xa, 0x15, 0x3, 0x7, 0x0, 0x9, 0x1, 0xb7, 0x6, 0x81}, {0x6000, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0x3, 0xff, 0x8, 0xaf, 0xe, 0x1}, {0xeeee0000, 0x0, 0xa, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x8, 0x17, 0x7, 0x9, 0x1, 0x9f, 0x80, 0xf, 0x1}, {0x2000, 0x8000000, 0x10, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x8080000, 0x1000, 0xc, 0xd, 0xf, 0x7, 0x1, 0x34, 0xa6, 0x40, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x1, 0x7}, 0x80000031, 0x0, 0x4, 0x2024, 0xe, 0x1003, 0x3000, [0x6800000000000200, 0x4, 0x3, 0xff]}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000041c0)=[{0x6}]}, 0x10) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r4, &(0x7f0000000400)="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", 0x1f000) (async) write(r4, &(0x7f0000000400)="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", 0x1f000) 13m37.122360643s ago: executing program 43 (id=10882): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00008c4000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000184000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x0, 0x2}) r2 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='iocharset', &(0x7f0000000080)='\xe0^@&&}\'\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRES8=r3, @ANYRESDEC=0x0, @ANYBLOB="2c67816f75705f6907b7c2372b6b19c26a45aba3c840643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)}, 0x2400c045) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000100)=ANY=[@ANYBLOB="68020000270013"], 0x268}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x12, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_4={0x3, 0x1, 0x5, "40d6055d"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f00000000c0)={0x2, 0x3, 0x10, 0x10001, 0xffffffff, 0x7fffffff}) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x1f}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1e, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 13m33.060166572s ago: executing program 44 (id=10927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1004, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1004, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r2, r1, 0x0, 0x20000023893) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) (async) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x218002, 0x0) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f0000ffe000/0x1000)=nil) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x3, @remote}}, 0x1e) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000000000006b000000000000000600000000000000", @ANYRES32=r0, @ANYBLOB="00000000710300"/28, @ANYRES32=r0, @ANYBLOB="000000000400"/28, @ANYRES32=r0, @ANYBLOB="000000000600"/28, @ANYRES32=r0, @ANYBLOB="0000000000000100"/28, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="000000000100"/28]) (async) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000000000006b000000000000000600000000000000", @ANYRES32=r0, @ANYBLOB="00000000710300"/28, @ANYRES32=r0, @ANYBLOB="000000000400"/28, @ANYRES32=r0, @ANYBLOB="000000000600"/28, @ANYRES32=r0, @ANYBLOB="0000000000000100"/28, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="000000000100"/28]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3ad"}) 13m31.244027178s ago: executing program 45 (id=10936): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x4, 0x6, 0xfffffffd, 0x8}) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) 13m29.974816913s ago: executing program 46 (id=10947): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x400041, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000ca24f4e3ad79ec857da9660db85807754d53a412d4c8d5d583658e28ae3a55a4f552449049380800d1720ecd6e09d420e11dee28565a617be1922da9ad1f0f0842e9a61ab9d8992b32a455a775dc7f2ab53a891f95d11db7f547a3599e76c64d3d4ec6f94a48981774fbd3005f14f40077aba4ee0112a032bd4e3e43b152b87bf0ed98a29e2a0b2359fd2fcf8e5624bc8f1e8221fe8370ca30b1bc4368785cc9c2372cb5", @ANYRES16=r3, @ANYBLOB="0100fcffffff0000000003000000100001800b0001006574683a6c6f0000"], 0x24}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000080)) sendto$packet(r4, 0x0, 0x0, 0x20000081, &(0x7f0000000240)={0x6, 0x3, r2, 0x1, 0xa6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x4000001, 0x0, 0x4, 0x0, "0022ffffffffffffffffeb2bda00df00000080"}) r6 = syz_open_pts(r0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r7, &(0x7f0000006e80)={0x2020}, 0x2082) dup3(r6, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0xd) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r8 = socket(0x2, 0x2, 0x0) epoll_create1(0x80000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) shutdown(r8, 0x0) 13m27.894849104s ago: executing program 47 (id=10971): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000100)) 13m25.649591459s ago: executing program 48 (id=11000): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x400002, 0xffffffffffffffff, 0x20000}) (async) fcntl$notify(r2, 0x402, 0x80000011) (async) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000040)) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x240, 0x108, 0x37}, 0x18) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) (async) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) 13m25.117067699s ago: executing program 49 (id=11006): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[@uexit={0x0, 0x18, 0x1}], 0x18}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000040)) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x10, r3, 0x22e7b000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000002d3a00"], 0x6c}}, 0x0) r4 = socket(0x200000100000011, 0x803, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000640)="4d01000000000000002f00e566a5dea20414090b1412fda17f173e512d0e32bccf6d159b3f72249cb43e3bbed229cdc288c9f37404dd6e92", 0x38, 0x0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x3, 0x6, @local}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x2, 0x4) write(r8, &(0x7f00000000c0)="1c0000001d005f0214ffffffffffffe8070000000d00000000005e2c", 0x1c) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, &(0x7f0000000b80)) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a40000005400010000000000000080000700"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, r1, 0x1, 0x2, 0x100, 0xe}) 13m22.950391452s ago: executing program 50 (id=11028): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x13fd, 0xd6, 0xfa, 0xcba9}]}) ioctl(r3, 0x5, &(0x7f0000000200)="bbe37ad0fd67f96bd2ef2f0956f1653e5cf29f8d0e7acee173e27a2ebaf6a2f02fa414451811ca4e7bb7d8971786dd9355e9c2de48c619e09ef5281ea2fc65a583373f7e7549b96be96dde1304efea67885d6d12237762c0906edce3d1007c304c77c74db3c53f1d02ab469d3b89e6241707d2bc96f7bb46cd0e88316421920f4e19c55dccc8839e3e5700e77cea5a1feeace5f72ea1f44357b18e6882390794c029536f43c3bb4056de4e9f873b1207b3ad2e1b0c5d68876227e79e73766dc495083e3c34c8c7d186b2b8009fc628061146722c4bc4da9a8ccb13e47623b87b4f65c30a457d7bfa135a9f66b51aa1") ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000300)={0x81, 0xb6, 0x6, 0x4, 0x6, 0x0, [{0x101, 0x9, 0x6, '\x00', 0x844}, {0x9, 0xffffffffffffff09, 0x36, '\x00', 0x6}, {0xc4, 0x7, 0x1, '\x00', 0x84}, {0x2, 0x81, 0x5, '\x00', 0x980}, {0x2, 0x69f5, 0x2, '\x00', 0x1800}, {0x5, 0xfffffffffffffff7, 0x1, '\x00', 0x1000}]}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6000, 0x10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x400, 0x100, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x20000, &(0x7f0000000800)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions}], [{@appraise}, {@context={'context', 0x3d, 'root'}}]}}) r8 = fspick(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0406618, &(0x7f0000000940)={@desc={0x1, 0x0, @desc3}}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000980)=""/170) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000a40)=0x5, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', 0x4) r9 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000ac0), 0x1, 0x0) ioctl(r9, 0x10001, &(0x7f0000000b00)="815685e928da1df26f61216e9fff45a91bdf8f58cad3ab822a9d7bd33983a8b2951feebde89456be693b5c19f47fca57b2515e69d168d8c8e470506a87c586e8791ef9c00f157c648c") quotactl_fd$Q_QUOTAON(r9, 0xffffffff80000202, r6, &(0x7f0000000b80)='./file0\x00') r10 = syz_open_dev$hiddev(&(0x7f0000000bc0), 0x4, 0xc000) ioctl$HIDIOCGPHYS(r10, 0x80404812, &(0x7f0000000c00)) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000c40)={0x2, 0x0, [{0xa1d, 0x0, 0xd}, {0x94e, 0x0, 0xfffffffffffffffb}]}) syz_clone(0xa0150800, &(0x7f0000000c80)="9cec85116b78b8dd69d50b877ec4d921ce31c3720d56a5ece5afa26251b0696d5d314206169f90270c6236dcef733ca47feb61a4987d62774c246760c3078afbc8609056f6430423cffcc3112bd85bf39cc11c00095c28be0bfece3ba33be5dbf56427d06f87f2503dcf9c278246af2f697e9769bd7fff50235c7b40f370a81889e0217d2a986c565765284daa4f2cba2e9c58c1d750c087", 0x98, &(0x7f0000000d40), &(0x7f0000000d80), &(0x7f0000000dc0)="1f108d5769a970c7") r12 = fspick(r11, &(0x7f0000000e00)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r12, 0x3, &(0x7f0000000e40)='\xa4\xa8Z\xf8#[!-\x00', &(0x7f0000000e80)='./file0\x00', 0xffffffffffffffff) 13m21.460747601s ago: executing program 51 (id=11039): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x50, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x16, 0x76, 0xf1, 0x8, 0x4c5, 0x1330, 0xabae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x6, 0xbd, 0x20, 0xf, [{{0x9, 0x4, 0xdf, 0x8, 0x0, 0x3a, 0x54, 0x1e, 0x5, [@hid_hid={0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x642}}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "e2586711326e"}, {0x5, 0x24, 0x0, 0x6b23}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x6, 0x1}, {0x6, 0x24, 0x1a, 0x6, 0x4}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1004}}]}) 13m20.058083428s ago: executing program 52 (id=11051): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000180)={'gretap0\x00', r1, 0x20, 0x1, 0xff, 0x0, {{0x1b, 0x4, 0x2, 0x4, 0x6c, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x28, 0xfd, 0x0, 0x1, [0x2, 0x6, 0x5, 0x4, 0x9, 0x9, 0x8, 0x53ccb426, 0x10f40000]}, @ssrr={0x89, 0x1b, 0xeb, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @local, @multicast2]}, @cipso={0x86, 0xb, 0xffffffffffffffff, [{0x6, 0x5, "08ebfc"}]}, @ssrr={0x89, 0x7, 0xf5, [@broadcast]}]}}}}}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000280)=[{{0x4, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r4 = socket$unix(0x1, 0x5, 0x0) accept$unix(r4, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) (async) accept(r3, &(0x7f00000002c0)=@generic, &(0x7f0000000340)=0x80) 13m17.809672723s ago: executing program 53 (id=11070): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 13m16.336884901s ago: executing program 54 (id=11078): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x100}, @flat, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0xfffffffffffffd6a}}}, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) 13m15.083493156s ago: executing program 55 (id=11087): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r0 = syz_io_uring_setup(0x2cd2, &(0x7f0000000040)={0x0, 0x9214, 0x2, 0x0, 0x1a3}, &(0x7f0000001400), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f00002c8000/0x2000)=nil, 0x2000, 0x100000f, 0x80010, r0, 0x8000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unshare(0x62040200) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) setreuid(0x0, 0xee01) syz_clone3(&(0x7f0000000340)={0x204010000, 0x0, 0x0, 0x0, {0x3f}, 0x0, 0x0, 0x0, 0x0, 0xffc4, {r2}}, 0x58) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) r6 = socket(0x1e, 0x6, 0xff) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f00000000c0)=0x3, 0x4) recvfrom$inet(r6, 0x0, 0x0, 0x10140, 0x0, 0x5a) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r7, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0xa0001, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x29) 13m9.941651817s ago: executing program 56 (id=11144): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) ioctl$USBDEVFS_CONNECTINFO(r1, 0x8108551b, &(0x7f0000002a40)) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) userfaultfd(0x801) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x1, r2}) 13m9.765688711s ago: executing program 57 (id=11147): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da5"], 0x310) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=']) lsetxattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x2) r3 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) fcntl$addseals(r3, 0x409, 0x20) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x5, 0xa1b7, 0xfed}) 13m9.29392456s ago: executing program 58 (id=11153): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x22020600) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ecf65c839b24264cdf878effeeefb1d4cfa02c461fd9386673bc2f22d37235ee937da7473e8d647fe659e17c3651fbf99a4175c0311ad25df502cc87f13879c7f068479d07ccbe4f9e363cd906fdd3972b8524573ec853", 0x57}, {&(0x7f0000000100)="6984205477f82d0581aadef2dc15a99ebb6b628a8a615437001b14270fa979e7d6", 0x21}, {&(0x7f0000000280)="635dad778653b1c51172708866f166caa374fbd28f26a4cd3af2abb7a2e0b567aad7d6b5e982896b79b450b03c91306d261f6408b52bd2d0e55f412c63a7b16587ec0043c633dfd3", 0x48}], 0x3, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}], 0x18}, 0x8010) recvmmsg(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40, 0xc1) execve(&(0x7f0000004700)='./file0\x00', &(0x7f0000004800)={[], 0x23}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) gettid() (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000080)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) unshare(0x22020600) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ecf65c839b24264cdf878effeeefb1d4cfa02c461fd9386673bc2f22d37235ee937da7473e8d647fe659e17c3651fbf99a4175c0311ad25df502cc87f13879c7f068479d07ccbe4f9e363cd906fdd3972b8524573ec853", 0x57}, {&(0x7f0000000100)="6984205477f82d0581aadef2dc15a99ebb6b628a8a615437001b14270fa979e7d6", 0x21}, {&(0x7f0000000280)="635dad778653b1c51172708866f166caa374fbd28f26a4cd3af2abb7a2e0b567aad7d6b5e982896b79b450b03c91306d261f6408b52bd2d0e55f412c63a7b16587ec0043c633dfd3", 0x48}], 0x3, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}], 0x18}, 0x8010) (async) recvmmsg(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x40, 0xc1) (async) execve(&(0x7f0000004700)='./file0\x00', &(0x7f0000004800)={[], 0x23}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) (async) 13m2.873622367s ago: executing program 59 (id=11219): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3d29) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x8002, 0x10) write$cgroup_pid(r1, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)={0x5, 0x0, [{0x1, 0x67, &(0x7f0000000040)=""/103}, {0x80a0000, 0xe3, &(0x7f00000000c0)=""/227}, {0xeeee0000, 0xa0, &(0x7f00000001c0)=""/160}, {0xf000, 0xde, &(0x7f0000000280)=""/222}, {0xffff1000, 0x4b, &(0x7f0000000380)=""/75}]}) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 13m2.293096928s ago: executing program 60 (id=11228): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x0, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x7, 0x0, 0x26}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x1, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x3, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x0, 0xfffffffe], [0x10, 0xffffffff, 0x7, 0x0, 0xfffffffb, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x8, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x0, 0xfffffffc, 0x0, 0x100, 0x0, 0x3, 0xec6b, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x2, 0x5, 0x0, 0x18c, 0x0, 0x0, 0x2, 0x5, 0x0, 0xf99c, 0xfffffffc, 0x100004, 0x0, 0x0, 0x4, 0x4000000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x800000, 0x7], [0x10000, 0xab, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x9, 0xffff7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x3, 0x10000, 0x4, 0x0, 0x520, 0x9, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2af, 0x0, 0xfe2f, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x400, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x100, 0x8, 0x0, 0xb], [0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x1, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x5, 0x7fff, 0x0, 0xd, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0xc000000, 0x0, 0x9, 0x3, 0x0, 0x0, 0x6, 0x8, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x4, 0x6, 0x3, 0x6e, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x5, 0x1]}, 0x45c) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) 13m0.636827691s ago: executing program 61 (id=11248): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200000, 0x2, 0x0, 0x1, 0x3}, 0x20) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 12m59.559948472s ago: executing program 62 (id=11262): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/4091, &(0x7f0000001040)=0xffb) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001000), 0x14bac2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) creat(&(0x7f0000000080)='./file0\x00', 0xac) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',access=', @ANYRESDEC=0x0]) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r6, &(0x7f00000003c0)={0x2020}, 0x2020) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') getdents64(r7, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000001080)=0xa) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r9, 0x6, 0x18, &(0x7f00000000c0)=0x6, 0x4) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x14, r10, 0x6e78340ffdda27db, 0x70bd2d, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x40) sendfile(r1, r1, 0x0, 0x7ffff000) 12m6.497189475s ago: executing program 63 (id=11901): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x204002, 0x0) memfd_secret(0x80000) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000003c0)="c61c010ba000", 0x6}], 0x1, 0xa) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000b00)=0x1, 0x8, 0x1, 0x0, 0x0, 0x2) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000065060d5ae50d302e4c"], 0x15) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 12m0.217003749s ago: executing program 64 (id=12000): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x0, 0x3}}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 11m37.902340708s ago: executing program 65 (id=12162): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0xe, 0x4, 0xe, 0xf2, 0x15, "383f770676266dd9"}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000580)=[@register_looper], 0x50, 0x0, &(0x7f0000000380)="1fce63e57ef79da5feeb549048569f9df0394db3281f6b0f06fea102cf5823cb8bf2ddf7a9aa367892054588c9ec71273f3ec2d052603bc34a8e1189f9a6a89a075121723d0dd79a5f4e6bb9e847d571"}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000a0000000400000014000100ff01000000000000000000000000000115000680"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x50, 0x0, &(0x7f0000000200)="a8832123c58aac3a631568ab441028aa1a71f0a9f5830a3e477b57d2adaf922a3eacb90ab8d5cc186bc9e5b38d8b6a53c223d36084148dd58e1206ce9cb71180679443bbd2414212f2331328545a3f69"}) syz_open_dev$rtc(0x0, 0x4, 0x2080) prlimit64(0x0, 0x7, 0x0, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 9m45.637826306s ago: executing program 66 (id=13154): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) fdatasync(0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8000000004000004) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x3800000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r1, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r2, 0x1000) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xe) 9m16.624445187s ago: executing program 8 (id=13643): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffff8000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00006eb000/0x1000)=nil, &(0x7f0000215000/0x2000)=nil, 0x1000, 0x6}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 9m16.600305378s ago: executing program 8 (id=13645): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3#\x82\xf7\x92\x10\x02k!i\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\x99\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdbv\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,{\xd3:`G\x81oN\xbd\x0f\xb8\xb7\xc0\xb8\"T0Z\xb1\x18\xe2\xd4&\xdb\x19\xb1\xbe\xcc}\x9d\x84\x10\x0e8^.d\xe1wSJ\xcf\xec\t\x12\x8b\xe1\x92\xf9hq\xbbs\x80x\xd5\xee~\xef\xea\x018\xec\xc3t\x992\xea\x93\x92\xdb\xb0|sdK\n\x8eN\x9a\x02\xe2\xdd\xf7Ho\x0f\"\f\xaf\xd7hb\a\x00\x00$\x1a\xc9\x06\x12Bg\x1a\xc8$v\xa2\xa1\xad\xed{\x8a\x0fn\xa8U0B\b\xc3Y=\xa6\xe9=m\xdc\xd9\x03\xa8\x93\x9c\xb6\xf8\xfc\xbb\n\xd9\xc8{\x1cs\xf5\xbd^\xb1\xda\x8f\xcb\xc5R\xe7b\xdf\xae\x7fo\x98\xc9\xf2\xa6\xa8\xaa)\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x83\xd8\rX@\xa2JA\x84\xcc6\xc8\x05r\xb0\xbe\xf5\\\xfc\xb0\xa1\xb1\xa1`%S\xbe\xf4\xf3\x1cVD\xc9\x04\x1d\xc4#\xe9m\xa1\x82\x9a\x1e\x9c\xd1\"?4c7\x00Jf\x8a:X\xe1u\xb14.tf\xbd\x9b\xac\xa7\xb0o\x0e\xac!\x1f\x91+\xe2w\"\xf8\x9b\xe4\x8e\xcf#>\xbfi!\xc0\xc5\xd6\xab\xe2\xb8\x8e\x99}\x00j\x8d\xa7Z\xf3\xde%D\xe6U\'\\\xe8\xd6UV\x1f%\x0f\r^\xd1\xe8e3\xaa\x0f\xbf\xfc\x05\xd6\xe2\xc2\xbeN\xa9\xa4J\xd4~iK\"\xe6\xda0\x87\xe3\b3c\xd9ox\xecP\xc3\x81\xd2\x1aC\xb0\xed\xf8}\x18\xce\xe9\x86\xc9\xb4\xc8K<,\v\xac\xdc\xd6\xb8u\x01\xa9NQ\x9c\xa0\re\x13\xbdM\x8e\xf1\xc7h\xd3f\x8b\x10\xce\x91\xd4\x97\xfbt\xae\r^\xd7q\xea\x02\xc00\x10\x9a\xb1k\x8e%\xe1\x13\x9d') write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200000006) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200ff"], 0xa0}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffff8000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 9m16.46021215s ago: executing program 8 (id=13646): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') (async) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000040)='pipefs\x00', 0x189, 0x0) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x8}, 0x8) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x9, 0x7fff7ffc}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async, rerun: 32) mount(0x0, 0x0, 0x0, 0x80c0a1, 0x0) (async, rerun: 32) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x9080) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r5, 0x45809000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setpriority(0x1, 0x0, 0xe) (async) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x1000000000007) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) (async, rerun: 32) write(r4, &(0x7f0000000400)="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", 0xfffffee5) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) (async, rerun: 64) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (rerun: 64) 9m16.331645423s ago: executing program 8 (id=13647): socket(0x8000000010, 0x3, 0x0) (async) r0 = socket(0x8000000010, 0x3, 0x0) socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02"], 0x4, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02"], 0x4, 0x0) socketpair(0x27, 0x5, 0x2, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) mkdir(0x0, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r5 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0xc058671e, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x2) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3, 0x3}, 0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000004c0)) write(r0, &(0x7f00000002c0)="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", 0xfc) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310d2dbd7000ffdbdf252500000008000100", @ANYRES32=r9, @ANYBLOB="0a00340001010101010100000800350000000000080026006c0900000a0006005050505050500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="02002cbd7000fddbdf252c00000008000300", @ANYRES32=r10, @ANYBLOB="0c00990d030000849352d500"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}) 9m16.120696217s ago: executing program 8 (id=13648): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0xff, 0xffffffff, 0xfffffffd, 0x7, "ff00"}) r2 = syz_open_pts(r1, 0x802) clock_gettime(0xfffffffffffffff1, 0x0) readv(r2, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/175, 0xaf}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') rt_sigaction(0x1e, &(0x7f00000001c0)={&(0x7f0000000140)="0f18d5c401f8ae95adec000066660f3a40cc0bc4c2753664df00c4c1c9149a9078fffff3410f5ac98f69b092ae995ca410400f38f037c481fc514c7902c402f91dba4db00000", 0x98000001, 0x0, {[0x118d]}}, 0x0, 0x8, &(0x7f0000000300)) read$FUSE(r3, &(0x7f0000003240)={0x2020}, 0x2020) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000040)=0x42, 0x4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x0, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10) r6 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfa, 0x140, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0xbe}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x1, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0x1, 0x58}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x9, 0x1, 0x1, 0x8, 0x6}, 0x32, &(0x7f0000000200)={0x5, 0xf, 0x32, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x4, 0xe0, 0xffff, 0xd}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xc, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "987eba5aaf9f299e0cf8d63dad41a468"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x2}]}, 0x1, [{0xdf, &(0x7f0000000540)=@string={0xdf, 0x3, "f0283ead795411cdb0026f8662a48f01df597ac98566e462de40fccb992c37236033b1f154639a994dd774e80e481548b313a6f52c783fc31990c062aa546695676850dfb6bef3eab262abc55bdbf69e15ee607d0d329b6c769e5dd5d94cc73c319b296f8a88ac2d071b4ae768b4457b10e01da13df5e8b09b7a0a3430e50e637ce8a7042f72b01fbaf4b23b9779c846bf46c9636a7ccea1e3b3407ba3c799b061666628c8917c43cc73fb6f8a56cdc85c2117131a1635016ed65c9ccc6ce775aee7496430f8d0e272fd6b80f7a0b46b0c6699467d21293f53de4c2cb9"}}]}) syz_usb_control_io$hid(r6, &(0x7f0000000480)={0x24, &(0x7f0000000640)={0x40, 0x7, 0xb8, {0xb8, 0x22, "4bb2c39574439e85c839dc886e374753426926cd410fd63aae6ffcdf6ccb62c330bae20bdc3ebacd621335c912f15bdecaf1171f353f31acd29828ff37a819c5045dec5c10630317c473afa8a768a8f0f304302206a40966c706428c3c816687671beba3a6e565b318501967f88ceb29620e95a6596b68207b608a70b0735006d34550b69ba5b117565aff6d78a65567b483b416903355742cff56dfd273003f5a4336b4af89711f97e811752113462e0fee70d9a397"}}, &(0x7f0000000700)={0x0, 0x3, 0xca, @string={0xca, 0x3, "622c1ecd2251270c41a0015d1c13fd967a00e841e4839991bde52f48be647dd07cc6535b275321b55e4d49f65621cb4429fe644b302d8416c33c49b40ba620367278c4dc460f4d355f2e677f2769c3aa04a9b060300c29401b877a9d0a4e85cf5b6fbb9611e341634b61e805823f084cdb0639aec24423cbb7b72b9181b7164c5c7c3c68e00c02ebaf9ef09ae04cfc3634f80ee5c607a8c5aea84f5ec6c3f6e3edca08618c56534e5d3d037f7ac5d6089473b7d85678905a991dfbf733641bbfa0ca9d1bed08bb89"}}, &(0x7f0000000380)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x7, "aa736707"}, @local=@item_012={0x1, 0x2, 0x8, "e8"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0xe80}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000800)={0x0, 0xf, 0x6c, "d0fd0ae444fd4feee7d6323648eb6f863b78e50953ed517ccc29ae8b232f477ee3b42ebcf464b733fadb17f859df8705adab61bea43bc8ba8ec0fa1611167d80c1782d91f0744e7a2eb81855ee5961b216405e8ca775b35e27bfe3c3f3dcbe198fff7d288d2d4153369db09f"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000900)={0x20, 0x1, 0xc3, "73cdd2a7ee19cfaabd1234d954d1d595627915fa0123769b2442236377289dc4c9a98093983179ca3e3af147d427ff9f7f5225125ca4f57c21906d143d2ee9c1b57560d67a09105a9b36d7d7c85a4699e5d191257ce6de1fdabe9e5d6c226227bb94fe23a1afd0546307a50e1703be14d5765025b1aea24bea2f4d4c703a1fd049fc3bf0af41b192663bfacf2195abeb628c62bc266cf3d9a4a8594ff7ad97d25b1ff98b7eb94fa4a3ed227e4004e5229cc024381ce340a87b4767505044f7b0be5978"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x8}}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r8 = dup(r4) r9 = socket$tipc(0x1e, 0x5, 0x0) getsockname$tipc(r9, 0x0, &(0x7f00000000c0)) shutdown(r8, 0x1) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000040)=0x4, 0x4) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000a80)=0x6a, &(0x7f0000000ac0)=0x4) openat(r3, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0x7706, 0x2) 9m15.98612817s ago: executing program 8 (id=13650): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x4008000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r2 = dup(r1) getpeername$unix(r2, 0x0, &(0x7f0000000100)) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r3, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 9m15.930980581s ago: executing program 67 (id=13650): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x4008000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r2 = dup(r1) getpeername$unix(r2, 0x0, &(0x7f0000000100)) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r3, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 8m28.959442554s ago: executing program 1 (id=14276): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x8, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xf1, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0) (async) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x8, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xf1, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) (async) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.log\x00', 0x2003, 0x70) ppoll(&(0x7f0000000000)=[{r2, 0x4000}], 0x1, 0x0, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) (async) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) 8m28.526686123s ago: executing program 1 (id=14284): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe67000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) openat$rnullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) fchown(r1, 0x0, 0xee01) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0) (async) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe67000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) (async) 8m28.339415777s ago: executing program 1 (id=14287): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000010104009ca85d490000000200000004001880240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f8008000140000000030800014000000008080002"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000100)={0x1a, 0x0, [{0xc0000001, 0xfff, 0x0, 0x9, 0x5, 0x9, 0x8}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000080), 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@binder={0x73622a85, 0x100, 0x2}, @fda={0x66646185, 0xa, 0x2, 0x7}, @fd}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 8m28.213817459s ago: executing program 1 (id=14292): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x90080, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000500)=ANY=[@ANYBLOB="0f0000000000000016000000020000000500000000000000", @ANYRES32=r1, @ANYBLOB="000000004a0500"/28, @ANYRES32=r0, @ANYBLOB="000000008100"/28, @ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r1, @ANYBLOB="000000000100193104ba001000000000000000eeffffffffffffff00", @ANYRES64=r1, @ANYBLOB="00000000ffff00"/28]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x7f, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x275a, 0x0) recvmmsg(r2, &(0x7f0000003b40)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/181, 0xb5}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000680)=""/223, 0xdf}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/169, 0xa9}, {&(0x7f0000000940)=""/223, 0xdf}], 0x6, &(0x7f0000000ac0)=""/145, 0x91}, 0x81}, {{&(0x7f0000000b80)=@hci, 0x80, &(0x7f0000000380)}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000c00)=""/93, 0x5d}, {&(0x7f0000000c80)=""/219, 0xdb}, {&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002e00)=""/163, 0xa3}], 0x1, &(0x7f0000002f00)=""/240, 0xf0}, 0x6}, {{&(0x7f0000003000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003080), 0x0, &(0x7f00000030c0)=""/98, 0x62}, 0x3}, {{&(0x7f0000003140)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003300)=[{&(0x7f00000031c0)=""/14, 0xe}, {&(0x7f0000003200)=""/199, 0xc7}], 0x2, &(0x7f0000003340)=""/197, 0xc5}, 0x2}, {{&(0x7f0000003440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003500)=[{&(0x7f00000034c0)=""/1, 0x1}], 0x1, &(0x7f0000003540)=""/35, 0x23}, 0xc4b}, {{&(0x7f0000003580)=@caif=@util, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003600)=""/133, 0x85}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/170, 0xaa}, {&(0x7f0000003780)=""/134, 0x86}, {&(0x7f0000003840)=""/73, 0x49}, {&(0x7f00000038c0)=""/152, 0x98}, {&(0x7f0000003980)=""/28, 0x1c}], 0x7, &(0x7f0000003a40)=""/246, 0xf6}, 0x8b}], 0x8, 0x1, &(0x7f0000003d40)) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x3}) mount$overlay(0x0, &(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 8m28.044743833s ago: executing program 1 (id=14294): ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000080)={0x0, 0x100000}) r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0xfffffffe, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c317d18176f3d", @ANYRESHEX=r4, @ANYBLOB=',\x00']) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r5) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x3032, 0xffffffffffffffff, 0x588cc000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) write(r1, &(0x7f0000000400)="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", 0x1f000) socket$igmp6(0xa, 0x3, 0x2) 8m27.970154474s ago: executing program 1 (id=14297): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000081ca5f02b59d864e2d2a409022407000000000f09f2ffff03030000000921faff0890a98b1e09f213534d03c9ffb0df2847e1fe7fc5b9238c72bc19fcec7c1ea2cfc1ea3611117528f5d2ee30f9b027d97995f6f4f5f8f3ac00b0f6a9df92c11cf086d87ca5b9b8708872bdf64417c08cf4719562da0d24a4c2e7e9d76795dd806d145d6fe1037f86f1e6305061ff9dcd67052b301ce991f8457c9c2a11d63eea0765cb5c15deef0392818b0ee21147742130a37031baf6cf5f8b1ea57e25d7fbb6add030075466ba", @ANYBLOB="95c1f7679d6a00213427797e08f4fd33eddc31905d814a3e595e9d13e01182a2431a513386e4e5ecb0bedfd49b291dad05e76e2ab6f1a9cc04d16f5ad6e45e4446d8b92f78f69ce86e431ce36e3341c7496be868641a9e5bf75a1e8f92fe6f30e91239bf3b9e844e7147a944a58f327063b3cde34209a2d28dfead64b514e2156f0d0206e78984507faae7e42fc146cb61c7dc654ea0e276c039dbead27488fde15769527318af877a20035c2e7a919f60fb9096b8eb314d5a39f5cd1ab47ed5580ffd4b20171f1c5510cf74241f53c4691340a6794dee79f83e84632c032f0acebd32a0e8324ad3bd33cb6c61d24a629100000000000000", @ANYRES8, @ANYRES32], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 8m27.905154245s ago: executing program 68 (id=14297): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000081ca5f02b59d864e2d2a409022407000000000f09f2ffff03030000000921faff0890a98b1e09f213534d03c9ffb0df2847e1fe7fc5b9238c72bc19fcec7c1ea2cfc1ea3611117528f5d2ee30f9b027d97995f6f4f5f8f3ac00b0f6a9df92c11cf086d87ca5b9b8708872bdf64417c08cf4719562da0d24a4c2e7e9d76795dd806d145d6fe1037f86f1e6305061ff9dcd67052b301ce991f8457c9c2a11d63eea0765cb5c15deef0392818b0ee21147742130a37031baf6cf5f8b1ea57e25d7fbb6add030075466ba", @ANYBLOB="95c1f7679d6a00213427797e08f4fd33eddc31905d814a3e595e9d13e01182a2431a513386e4e5ecb0bedfd49b291dad05e76e2ab6f1a9cc04d16f5ad6e45e4446d8b92f78f69ce86e431ce36e3341c7496be868641a9e5bf75a1e8f92fe6f30e91239bf3b9e844e7147a944a58f327063b3cde34209a2d28dfead64b514e2156f0d0206e78984507faae7e42fc146cb61c7dc654ea0e276c039dbead27488fde15769527318af877a20035c2e7a919f60fb9096b8eb314d5a39f5cd1ab47ed5580ffd4b20171f1c5510cf74241f53c4691340a6794dee79f83e84632c032f0acebd32a0e8324ad3bd33cb6c61d24a629100000000000000", @ANYRES8, @ANYRES32], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 8m23.58516941s ago: executing program 7 (id=14363): r0 = syz_socket_connect_nvme_tcp() (async) r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) (async) shutdown(r2, 0x1) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000180)={@mcast1}, 0x14) sendto$inet_nvme_pdu(r0, &(0x7f0000000000)=@data_h2c={{0x6, 0x4, 0x18, 0x29, 0x6}, 0x6669, 0x8, 0x2, 0x4e, "9581a076"}, 0x80, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mmap(&(0x7f0000103000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 32) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x36f800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000dd96000040"]) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async, rerun: 32) shutdown(0xffffffffffffffff, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 8m23.551266381s ago: executing program 7 (id=14364): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@mcast1}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000300)=""/64, 0x40}], 0x1, 0x6c, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000340)="66ba4300b003ee0fc7b90c00000065640f30dc6300b805000000b9ececffff0f01d9b882dc00000f23d00f21f835100000080f23f866b82f008ec8c4e18564888000c0fe0f23c1c4c2d9aa5e00", 0x4d}], 0x1, 0x41, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000340)="66ba4300b003ee0fc7b90c00000065640f30dc6300b805000000b9ececffff0f01d9b882dc00000f23d00f21f835100000080f23f866b82f008ec8c4e18564888000c0fe0f23c1c4c2d9aa5e00", 0x4d}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="0f21ddba6100ed6766c7442400695e00000972086766c744240600000000670f011424f20f78d200c3c54c092666f0fe4eb70fc79e4a6bda832e260fc43d00", 0x3f}], 0x1, 0x49, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="0f21ddba6100ed6766c7442400695e00000972086766c744240600000000670f011424f20f78d200c3c54c092666f0fe4eb70fc79e4a6bda832e260fc43d00", 0x3f}], 0x1, 0x49, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000100)=0x1d1f, 0x4) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000100)=0x1d1f, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e00000010800020de00000010c0002800500010000000000240002801400018008000100ac1e000108000200ac1e00010c000280050001000000000008000740ffff639c"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e00000010800020de00000010c0002800500010000000000240002801400018008000100ac1e000108000200ac1e00010c000280050001000000000008000740ffff639c"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000140)={0x10001, 0x0, {[0x0, 0x200, 0x4, 0xffffffffffffffff, 0x7fffffffffffffff]}}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x41, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) getpeername$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) (async) getpeername$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="74120000120008002cbd7000f8dbdf251a52063f4e224e220ebc000000000000030000000800000000d34786467b2609ca94590000000000", @ANYRES32=r9, @ANYBLOB="140b000002000000aa000000020000000410010069b441dadcdc74a1e49bff7fa81402bc4a27065435cf60c0c70aef7b39f64a1ca01383b450eb8aeb213244d3ae46052b3313d690fcc5cbc898a13b04576221e22e3df4dfd6309af520ab8bbfcc3279e6236fb2fd3101e59720962915f62cfae415b2e79ad8783428d119a5c5b0f2d88dbbc84042d3363d43727f3fa4509e3eee93994db0ad9f6bb5c56de9429544b07ad60e7846c2b0deeb23de6400b0a2debfe2b5f7638893c5a7cc3ea7a8c3bd1fee9b28554d1a6d4bafb7b84f39a1ddddba433b5519ac517357618876bdb40e728caea6143a993520e35d0f9ca68e2dc5d899992c04dac622bb1a3441f7e2dcf8e8b94a90ce5bb5a3fb21900af731905ce3976dbc79204ff1b3a5fad78ac6653a987cacb1fcdf54e954967fd4a95f352ef2766735812ad586767bef3548663269afd87adc4ed499f0e71d2484981eeca1cfc7c55ab1ecc1e747b2608d2a38001eb8ce546a3192f2f0bdf4d8e824720d82b20562ebed8bdc5198aa460287b16ab25204e54c10618ea7689eddc467bfa251026895816adf34b7ac689972e6f9e9bd050ae52f975b68b70817df5bab1d2c1d3d6b651eb1f8833c327a6fff57b0e8224d499e62c9ecef1b09481baefa7a20ece67d0f994afad4aa634a0bbaa9d82d60bdf6b3326d92175c08a4afcb8ff39b78a296733bc1e811f5de38da368099e7d68b0da26878d81f1485b48e5f29092e9b87e5855b3576918ea8ba5459ace1ab2ba7df9ee0a7670192aa46b6a59ecad54108dd82081dc76b419d4c880230b673ae8b3dbcb5efd82093f66ecdd4dc9903afc6f1043f9d805bcd85cae5ddf48a816e9ca7fc08d22b10afb0276639f2b20d37886c0f2e470e0693d558f457903974c9ccda0cb621bdec9d18a39ac13b7efb865366889a9dfbeb79c99ae2b072adc5cd84163e257e30aafc504ea49dca481acbeb43ffc505c7f65dd7b4a39e27dd961341ad1e624fb3de1b5cc9a485f684abcc37ff31383a422018ec22ede05eec52aea8aebd516c8138181ce389b00b48171bf3564464df0cfecd22768df161d4a3164eb10eb9fd71c6fc18bd9cdbe62378a6b8410406f10b9dc6e1c45c3723e7281c37b03bd375a2c1404561098dfa89be666fe234b88df9db59f432bd735aad3d62efaef2bca153e74f9face92e915d7c4b48256ac190b5fbdcae2bafc5b6b891ec681081d39b522456ef16d5dd0f85e7640509647528221cc454abfef1ff57eca5b4341e0c0d9cf75a2a552c9db6c5676640330f8de1f644621808d8e2286ee7ab5fcd43d66e36ecd397ed1e7bce5e4f95954a71f0113f18f2afb1dcced5ca66d39a40ae3157f7b8b352af9cc710355f4919a3980bee2c0477c5a2cb2b376037fdd11d4b4199c9e988b6c9e755a0003e55163d2f2831a038e480b55570a9f4051c26d986dbc047c306e401d1380f8df1e082b3cfc0b281aef97788bdf48cce45c5ef56a3cef2e026a70efc7256b144d30e9a464986cd4a4d258a511bb36528e97b5c2215a14ba456e3fda3fe4d66f525dff863eab3a4b348c6877ae269c878330758eb8ee29aafca81903d8bd9cee55419d1ed6bb6492ce0cd10436f82bebab08e43a4ea0cdd2ab5c60b0b509cbcd599f583363c3cd378de94a7b2575c532a74f3a4fce9fe66028a3ad0e6dcb47c2b1dad9c630de057c904729e7ccb120650cdeb3c9152441b22eec91916eace80e201ef3fa96ef53f5d8b8e0c46072c0085fe2c24255abac9dac91c1a5f6407aa32e68a6459b7e93d8543b223987a590365cec26b5563ad59db9d883325521fb8c4c0f15f259e8ba3b6a59bbb87a0f916a5a1328da0161f73909c0ac21b0eb378379b7dc5208fde1013f813cafcddd04304f27cbd5797b60805636908140126fb7d43dcd2a087f4ae497278598b956021090c7490071ce7256baf61842455c98d401fec495df17fee3876ab45ec74aec0f7028bc90cc1e1590a6d262e1ad16a0b7c202071785d7806b883a9f9c87eaa4af93789a375f2de8fbbc87e4190e1e9bad076bc180ebe7ab461de386680ab936c0e1885be1d37a8337c20f3897459da98edb4d2f5a1077a6637e743751707ea266d88b6235eb67b9137b8b5e339e3bef268ec3e6034b33bb10d3ce224f2428d7692de4658a730261f2a59da9f411449b852fb640ddc4575ed71cd4d390ff428e91f975a310d56f5835c6af74b574fb12e76efbad626ac054b770762ad8e474513af356d9a116228a7f99caeddb1527dd1815909baed7fc85740eae41f5e85aa1b01996ab6587c473c7250567a2bc4a5ee12ea8e275fc8ce69d36427ea4118e297d2060f42ec2be36015df85a8b74326f394059cd113938e2ba630f8774ace3793f5f87d43861aa81d5c9c814df815e5a070d930ec8d299791d78150f824faaa61eed7cfa7a6f158297fe36f76f2597978c127e97329d480d514493137f9f61894487cf877e0ade4a51cfef24ec5b4c3bfc0620bed609a89f46fcb5f683b9537e8665b903b4a33193d3b480dc801a7bfb993407aaa658887f0249cf7576b541a99853d37f65f206198db3ae66324de740beb0ed7049f0296520eea763d52844f372da213e030e175e0149422c21296f278fa399ac652faa0aeeaacbf47570a55e3a044c55f1d9ad8a4f4c91d09717d3d6fdbf2f99054e420fee20d0bde1a25da4b8f45782e3e7f3b5f06dd2743f8f590193350cb30d1ca3bf75929aa818588872ae510c2f369c99b948e10380c7971cab4d7d2ca1eca7bc8f28fd5f60ce35836eface4693809754e03413906744eee87eb81da202c9926e090a02b285ceaa01a707a4cf1f6340a2e8b423b784b08630295b568ed71d458b39d28c6f8bbcd70febcf7490680e03e2944bced0def4a2450075e23749ef9c4e87b1c74af8e739414cdd118fe98e10ebb041017256bb145ec074d5832d9fed987997f1faffe6a0e04e293a23235ba1b94cd0ac4ceaf201076b8236b0347936b92831df7b915059f0c8456419241f6781aca07c44b015ba0c3a7de0551a1a593884a7242032cfd9a675d06362406e749677c68d958632dcc53503a4a1b9fda44cab367688bb58a3e09404ea0eadd92fa71349308075bd303590984efcab0733220dc7e722f9792238ccb4d4188239a11b83b42e54f22d0884649d93a0cc900d7de21676823478d30865af1901d0d577d87f57025d3df9f1093ae76161d0489c336d5bb3ab3c21a3ff7f78d32ac748b7c75103aa914f1d1b2106e95283693a977d001c60ce632eaf4863edf2dcb1b8f52ed675e8beaa1e8ed0dd5f4bb8c286d61e3cf4e414f1e62c9da358446cf1386e37ea398716d75b22ecec5459e8f92cf441003996a2d094558f8dd14b3a74d7aaca9cecb2bbfbbbcc4589fc5d1ebf7ca7e683e67ff1bb756753a48e516fbb1c2062b638559a5280a72a5536cde3bc4097d9c7567df16abe77d0381f34d2a4c805024df48892b9d4b7db7047ae8673cd733a95be0534f5f6629e7fa4e494fe84a4cd615a69c7ca115d09268be47d1dc07bb0f9a484ec46a47abd4d68f52694a483c37e4ff8fab1c3c1e49b9aabdc0efd79274e01f1aa65968273b79be390a86ce2557c5e6f4472c34e4f4ceca585076ef546f05e531b6f74a08a1bd53ff603f09f87a113acc81342071e00719ff5a64426fe28e9287e7d542025d8821e5b2c0339bec250ac68d5782645e8f9e71b7a36b3a80a76a902c3be6b1ebc50f4b1f6fd1f889cdf1a759772e965f57008952a1116228c5427bb93350d0912ab8c36acc05858279568d6bccfc437d87a118effa8a49a0aa83355710360f5438f59e13f5e09d4aa73a368f37bb5e3526ecf695bdb813d442d6029e303c57020e450c2a5db5f1fdb1202c55ab002ad0c5ffa0ebf47bd2964958a9c9793b7c2d999ee34db8266e377873a1b1f1369bfc0e20abf1448f13ef9e4d8b44365b455e985a949b53ea49c708e826767a5cc230c06989e97db8ef01d638158bd950c0b0420f537beb88a88fb2eb3554878090517bf85fc96117e71ae2795e140f65a6cbd198360db1e1c96552b3666787e5d5b1d49f3eea3c836971a75fbd89a797795cebc14ae64320e14bbb517e82fdedf62081ee45dfc8e7a2f94fdad7d9446cb5d43e85cba4e2f3ffca87512d1ca1205da585e544ecd72ee855d0bba5accd96d67901ce712b76dd09ed381cf1ab0a3e04d599d68431e23af0a1e4116740d490b43b4ada9444106961e1a06d96bd5af495f7c7df3004f5db1e3065b03ce3ab213a72b6dcfb51adfba6361ca2fdd1d4ece1d09977d9a75735c3e49f578a4c996e391cf05c4af77295b4f23827782890b3124ad981c1d1728693a4a75b3885dda343bc7f0ab87134ca8f05a773b4b7a0a9e3286f89e03082a69742d800afa09b325467e1cd61aa119d4ecc1971257b512daf60768f5925e44355a9856d5abfcfae214f6f0da9c5b961db2f579ba7eabd8c8b48274311c1d69790e631ed0776cc058fb473804e85e8c162b3341c5b0cfab54cbcee3edf2fe652d58d5c0e38025ea47ee5c76b97051f731a0e609648fc2f32f4651773861496b15eb157c9482c91bb29cae4e5f6f402dbc3bd938b6bdf6e6bef0b3cd32c3555729227241b26c90d2b85c0af8b49fd097a5d9786f21b08e0ee9ec114ceccf5dcf79b51ba51fa0e08e44119c5388bcf88f4806a1ed5e6c208f7a46009e6f107af8669f6c93ac6a865e8b5208fe5ac1e87648444c5d4b0e485077409bc1ff5adec0761d85d513c2ef31dd77cc752d69956f1de10b67ab2a0d6372e63878cbfa539258dec19a5b65bd6968c47ba0b2aad0f2d0b5e92abe3d41b91dfe1b9f9f6277da962b2676d27803a7e3ccd577abffc497e2742d167418ef65c570aacd249af9cd0db442d93306a71a0811e55244b9111b0b82840c375c0e8345552850556d38989e4c26d1e20f094a98fe0266259c93578fd1902d64b461a88dbaab82ac4bedba4d512986b65af4b23402e9107770e29543c19785237c8e96bd10ba5f477212bf2d02d522b9fe99fb668a09085fa43d2e6e5d46dabfc054c0db9dbf04a696d097896657c8516bb52bc32ee3a9e2b0171116809645ff8219cfbdf7cffbfe9a1faa595eaf501b85c05bf7a2ae5b771a3a8933e7d7b5b23101ad4ed70f4a1fa2ece19d67d6741c74b0f10541ebfd284323bed17c51492cd470ee8e165c97bdd9d34a3d2b3bacb31c0785f4d5fec716a2bf20cae09251c24c72a1da7ac5638aa42a2e0c1ff428007ddc14bc338d80d7c5b4dea9cf5b6520e81982001f7adae4a30d5675a3d959b82446f0a84c55f2ecb103464b93b5e1408de7d20f1b62438232f61c55e2e070a4c174ca93c4f2b07afac803d580a2ff3775f6598e02e6c71375e61fee29928b154966c675198773df99794460030c49b28ce1b931c7f13169a90f430973d9db6d88ec076d79dc0e63f6c49cc3629f0e864842742c86fc167d3807404398d258a28064c22bb8f0849bdf31c583d1bdc110a984ba3818ef9b2ad4d9b44e4f8cf76692bf55ceeb3a87f7082224f84f4534e04cf43b3715d05b0d934b9a4e4e000da3a332fc308704b769a6402b8e897876bafb7c8ec68097ee11e573253e50c5b624b17e4019a6ffe2dd1013480f07879f521de14f0ae4bc598b3b680dad7b69a6daee4182568bb03d85c5a5ee0c5ede979709ed54feb3dbe565648b9971720a88595435cbaee4830e3356cad88082f9548994374a3b4e82175b64b7d5b82869d5f5ee900e7b63653b802490e1926235d9d723dcac1b9d69ece11822090000100bd77ab7342e26cdfd008f14a9a13e8fcf2169c2190c784a51a111fdfce955598b0a8677059763976fcd5b11db2df5c5211711d2e6083806be9e6ec8690467bfaa94eb3431214f3f57f34801951a3cbb21d7bb639ae37dffe12ed7afbb9b4017a690a568b76a2abfb31b24b4521ae483ff9fcd72e0f4008303418940a97a3dd9840c7977742174ec1f085c7eaf0000100d2728f10f95b9f1a0afe58ba404030ee680e6e1d49cbeea498a0ec4967b4bccdf98a3237e07590fd30937fb81b39e8fd23aed7ae2981485568a13c3dcd4dbf6004664580db26d74d6f884ab09d255a8f38dc8df69dd104361a5039d8ace1f70901df64e59de8d7b06956bcbedfe1e1474f87190469de45e7d9b4688357c309dd6861987b059b4096672051a56000499b52eb4d977731255869290ec20cb5fd488895dccbae98d7fbb74b456334f3bf79c2b6a59e7d17ff2fe61d4a2c6f4a163c6b335628ae84eab0cbbeb6077b593c2d104cf7c63d7e374632e3a5e9dfee319953e56413cfb1264f7faed3d3a30001004952ed2834ed48b27feea3d81258f9d110016e3d210cce689fd7d1aa68c2da851a0e817b7eef9ffe52a7be1084e460c6141ff77d84938878a1c7839ae380d569d6a8d2447849e5c81bea68d202d5662c2db9cd80b39b3a74fc9e88e431c1fb73657251dc5a583ee7013fd27b3a4a3e83a225aa5351df0ed0eaa68691f91c72bde23d41f746b8755640352e7db730338c45705bb297ddfefa5cee199a20c3cb00"], 0x1274}}, 0x4000000) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000000)=ANY=[]) (async) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000000)=ANY=[]) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000003c0), &(0x7f0000000400)=0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 8m23.476762152s ago: executing program 7 (id=14365): r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000600)=ANY=[@ANYBLOB='+cpu'], 0x5) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r6, 0x29, 0xca, 0x0, 0x0) writev(r1, &(0x7f00000003c0), 0x100000000000022d) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x1, 0x12, 0x1, {0x2, @ah_ip6_spec={@private2, @remote, 0x8, 0x5}, {0x0, @local, 0x2, 0x1ff, [0x7, 0x6]}, @hdata="616ff9858894b3cc22f06359ecc9021a2d6b4a2d6f227d034e4c403b813cab2a5498ab146a6c5c5afa4903138e87754cf7aff4b8", {0x0, @local, 0xb289, 0x1, [0x401]}, 0xfffffffffffff200, 0xe}}}) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 8m23.476230272s ago: executing program 7 (id=14366): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) (rerun: 64) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x1000000002}) unshare(0x28000600) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x14000)=nil, 0x14000}, 0x1}) (async) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) (rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (rerun: 64) read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x206e) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (rerun: 64) 8m23.406486274s ago: executing program 7 (id=14367): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 8m23.300802065s ago: executing program 7 (id=14369): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@release], 0x0, 0x0, 0x0}) 8m23.288460176s ago: executing program 69 (id=14369): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@release], 0x0, 0x0, 0x0}) 7m1.017838832s ago: executing program 4 (id=15365): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='vxfs\x00', 0x200000, 0x0) 7m0.880951635s ago: executing program 4 (id=15367): r0 = socket(0x23, 0x800, 0x0) write(r0, &(0x7f0000000240)="040081000000800140000000000044d4183c4657c24b95c6a5e9f0379592566bbcd7c7b7c1e9a74f6d34f8100d3c3a2b500d39a5880c00674e82ee3826c687504c4f4c9a211f0000000000000000000000000000000000000000dc19864a86fc4af54efc95d1c288a82bc12e892392b048c54c39d1baaa181b395038b134091224e73e22bc772cf8141707fe72", 0x8d) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x1c, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 7m0.731133257s ago: executing program 4 (id=15369): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x6, 0xff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x802, 0x0) unshare(0x28000600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cf", 0x3}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\t\x00', "c0beb2b29ca2b8380100", "e9be1eae", "bb10e60700000001"}, 0x28) ppoll(&(0x7f00000001c0)=[{r2, 0x100}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x800) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) 7m0.57287961s ago: executing program 4 (id=15370): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @local}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BLKFLSBUF(r7, 0x1261, &(0x7f0000000000)=0x2400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0xf0422, &(0x7f0000001380)=ANY=[@ANYRES16=r7, @ANYRES32=r4]) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r7, 0xffffb000) 7m0.483809402s ago: executing program 4 (id=15371): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r0, 0x4068aea3, &(0x7f0000000000)={0xc7, 0x0, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000480)={r1, 0x1, 0xe8f}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs2/custom1\x00', 0x804, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000940)={&(0x7f00000008c0)=""/80, 0x50, 0x69000, 0x68}) pipe2$watch_queue(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x1d, r4}, 0x10, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x3, 0x1, 0x81, {0x77359400}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1}, 0x19, 0x0, 0x0, 0x0, "c681ecd3fa6ce12ef148c151e48c83501c57c70dcd8b609e1e98fccf7cac0ec238f998c46d304881191b623eed6a1dde86b06c06cfb42dc0bf929f53b9201091"}}, 0x80}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000bc0)={0x0, &(0x7f0000000b40)=[@uexit={0x0, 0x18, 0x9}, @cpuid={0x14, 0x18, {0x3ff}}, @wrmsr={0x1e, 0x20, {0xbab, 0x100}}], 0x50}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000c00)) r6 = syz_clone3(&(0x7f0000000e40)={0x2a000, &(0x7f0000000c40)=0xffffffffffffffff, &(0x7f0000000c80), &(0x7f0000000cc0)=0x0, {0x1a}, &(0x7f0000000d00)=""/65, 0x41, &(0x7f0000000d80)=""/110, &(0x7f0000000e00)=[0x0, 0x0], 0x2, {r0}}, 0x58) sched_rr_get_interval(r8, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f00)={'bond0\x00', 0x0}) syz_pidfd_open(r6, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000f40), &(0x7f0000000f80)=0x40) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000fc0)={0x0, 0x4, 0x3, 0x9}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000001000)=0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000022c0)={0xa0, 0x0, &(0x7f0000001200)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001040)={@fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0x0, 0x0, 0x18}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000010c0)={0x0, 0x18, 0x38}}}, @acquire_done={0x40106309, 0x1}, @register_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001140)={@fda={0x66646185, 0x4, 0x0, 0x7}, @ptr={0x70742a85, 0x0, &(0x7f0000001100)=""/60, 0x3c, 0x2, 0x9}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000011c0)={0x0, 0x20, 0x48}}}], 0x1000, 0x0, &(0x7f00000012c0)="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"}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002340), r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002400)={'ip6tnl0\x00', &(0x7f0000002380)={'syztnl2\x00', r9, 0x4, 0x1, 0x1, 0x6, 0x9, @empty, @mcast2, 0x7, 0x10, 0x3, 0xe}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000002500)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x5c, r10, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7f}]}, 0x5c}, 0x1, 0x0, 0x0, 0xa0}, 0x805) syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), r5) ioctl$KVM_GET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea3) r12 = geteuid() mount$overlay(0x0, &(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000002600)={[{@nfs_export_on}, {@verity_require}, {@index_off}, {@metacopy_off}, {@volatile}, {@index_on}], [{@appraise_type}, {@smackfsdef}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}, {@subj_role={'subj_role', 0x3d, '.$%^'}}, {@uid_eq={'uid', 0x3d, r12}}, {@appraise}, {@dont_hash}]}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f00000026c0)={0x20000008}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002780)={0x0, 0x0}, &(0x7f00000027c0)=0xc) mount$9p_unix(&(0x7f0000002700)='./file0\x00', &(0x7f0000002740)='./file1\x00', 0xfffffffffffffffc, 0xe, &(0x7f0000002800)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x3}}, {@aname={'aname', 0x3d, ',)-!)&@(,'}}, {@access_any}, {@version_9p2000}, {@cache_none}, {@loose}, {@fscache}], [{@euid_eq={'euid', 0x3d, r13}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'index=on'}}]}}) 7m0.295105756s ago: executing program 4 (id=15372): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902"], 0x0) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902"], 0x0) 7m0.256740027s ago: executing program 70 (id=15372): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902"], 0x0) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902"], 0x0) 6m51.880297201s ago: executing program 6 (id=15468): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8803, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8803, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 6m51.710987775s ago: executing program 6 (id=15473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001f00010040bd7000fedbdf25fe8000000000000000000000000000bb000004d6021e6c007f00000100000000000000000000000002000000ff040000004000000007350006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x40040) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000180)={0xa, 0xfffe, 0x3000004, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r2, &(0x7f00000000c0)="8f2a0a65070000000000000080a7b6070d000886a5cefe00", 0x18) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 6m51.480607789s ago: executing program 6 (id=15477): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x87, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de07010040"]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x1, 0x93f}]}, 0x10) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x920}, 0x1, 0x0, 0x0, 0x24008801}, 0x40095) write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, 0x0, {0x3, 0x0, 0x8001, 0x1029d0a}}, 0x20) syz_io_uring_setup(0x1e9c, &(0x7f0000000240)={0x0, 0x406653, 0x40, 0x0, 0x68, 0x0, r1}, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000c56000/0x4000)=nil, 0x4000}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r9, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r10, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000540)={0x877, 0xffffffffffffffc1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 6m50.490681119s ago: executing program 6 (id=15486): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x958028, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000000, 0x10, r0, 0x953a000) 6m50.320862282s ago: executing program 6 (id=15488): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffc, 0x9, 0x1, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) syz_usb_connect(0x0, 0x45, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x19, 0xa9, 0x57, 0x40, 0xc45, 0x6366, 0xcb99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x33, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xca, 0x10, 0x0, 0xe, 0x1, 0x0, 0x5, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "0d8c"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x0, 0x9, 0xfb}, [@country_functional={0x8, 0x24, 0x7, 0xf, 0x7, [0x3]}]}]}}]}}]}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x79, 0xf6, 0x7a21}) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)='\\Q', 0x2}], 0x1}}], 0x1, 0x4000051) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) splice(r2, 0x0, r3, 0x0, 0x9, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000380)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r4, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x8000, 0x0) fsetxattr$trusted_overlay_upper(r5, 0x0, &(0x7f00000004c0)={0x0, 0xfb, 0x15, 0x5, 0xd, "6e1994616a5da7db7d35cec7ccf564d3"}, 0x15, 0x0) accept$nfc_llcp(r4, 0x0, &(0x7f00000000c0)) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) mmap(&(0x7f0000755000/0x2000)=nil, 0x2000, 0x1, 0x28011, r6, 0x2660c000) r7 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1, 0x4, 0x7fff) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x1, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r8 = syz_open_pts(r0, 0x0) r9 = dup3(r8, r0, 0x0) read$FUSE(r9, &(0x7f0000003f80)={0x2020}, 0x2020) 6m50.228782334s ago: executing program 6 (id=15490): r0 = dup(0xffffffffffffffff) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x53b80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x44087f12}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008001}, 0x8085) syz_genetlink_get_family_id$team(&(0x7f0000000200), r0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x208000, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000280)={'macsec0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') write$tun(r0, &(0x7f0000000300)={@void, @void, @ipv6=@dccp_packet={0x9, 0x6, "b7b983", 0x140, 0x21, 0xff, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@fragment={0x1d, 0x0, 0xd, 0x1, 0x0, 0x2, 0x64}, @fragment={0x88, 0x0, 0x6, 0x0, 0x0, 0xf, 0x65}, @srh={0x2c, 0x6, 0x4, 0x3, 0x6, 0x50, 0x0, [@private1, @mcast1, @remote]}, @dstopts={0x0, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x8c}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x5}]}, @srh={0x87, 0xe, 0x4, 0x7, 0x0, 0x10, 0x40, [@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, @private0]}], {{0x4e21, 0x4e22, 0x4, 0x1, 0x2, 0x0, 0x0, 0x9, 0x6, "a42dc3", 0x7, "19b9b4"}, "eafcd76ddb7b7421d29a63f0dd26ca3d5c33b5bea69c4b5b45350182c0522486e671b9643c26b45d522d54bc20dbcb69d2ac3c86bfcf53b247a5e83edd0068b7e060d27e3b31da5a"}}}}, 0x168) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x13c, r4, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IE={0x99, 0x2a, [@mic={0x8c, 0x10, {0xcc7, "04d9d0213c9d", @short="5e17d891bd36934d"}}, @random={0x2, 0x81, "62625f1e24746ac721b792614eab264b1634f7bee9da8c33ac4557e2e9306dfe871fb94a3128e5fd2a5b12ac869b15841b4d2f99c0aec9b0d264336fc4a64a73f86e87243964d0b3680ca2653736fe68dd661996c7346503dbef16fcd07a1955569cc09e131c962031f3aee6cde64c9057be2be635cd94607867f2aa31e076a365"}]}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x1f, 0x0, @random="71f04c76c2969f83f6a78f288402ed0cbda94094ac29756517fb8a"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40805) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10428000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628) sendmsg$nl_netfilter(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x13c, 0x14, 0x3, 0x5, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x3}, [@generic="77e7d74dafc9f07f4f51f65b835bc278ad9d5c7b7deba8f1e497460941f21e2e95f3e65fe24eadebedf09bc04f3c798a5e93159909eb54ea70f24c60414b238d21fd45794a3c225f52d244ebae8ff80005c7a84799cfed7b28de168d2cbd85", @typed={0x4, 0x86}, @typed={0x4, 0x19}, @generic="9464d006a55d9749bfee0affb6b90fac3321dc6c37f83287a8e6fe2965c58397e69118764fe2ca276057d104ce92eab2427a0b73decca5117fb81157f4b7765dd49ca62fcb27a599bc97aa05f59505b9ae6016820fcde2bf28f12ecd71948ecb002da0ab777fea994906a8ade2acd8fe68d617670bb4e05805174b660288ccfa34dd63eaca2ae1f98cf96824e49f0c887fa8da86337cb03d10a6102242b92856d925054e26afcb1e9449c8e2b1e3af0f3a866248cf83af235cdd3c1183e5dbfc"]}, 0x13c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000004) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x80, r4, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2e}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0xd814}, 0x20001) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10800}, 0x20040884) fsetxattr$security_evm(r7, &(0x7f0000000cc0), &(0x7f0000000d00)=@v2={0x5, 0x1, 0x0, 0x8, 0x7b, "cb04ab751cca7b86ccda49bdbaa21ebb7f6f13f816deac3b609822c757465410a6b67d5f1416ba8912ed239ed2488c9ea7eca6fb15cc2c6f7aea617912bccc989414d3aa617128297036cc9ab1770c524110f605f4492276524b323a7d799850a4a22cfb9d0c142e96fc53fad5b47a36dbf385a80edd6aab5dbc32"}, 0x84, 0x2) ioctl$FIONCLEX(r2, 0x5450) pipe2$9p(&(0x7f0000000dc0), 0x80000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r8) openat$urandom(0xffffffffffffff9c, &(0x7f0000000e40), 0x4000, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x8c, r10, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x0) 6m50.131015136s ago: executing program 71 (id=15490): r0 = dup(0xffffffffffffffff) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x53b80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x44087f12}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008001}, 0x8085) syz_genetlink_get_family_id$team(&(0x7f0000000200), r0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x208000, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000280)={'macsec0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') write$tun(r0, &(0x7f0000000300)={@void, @void, @ipv6=@dccp_packet={0x9, 0x6, "b7b983", 0x140, 0x21, 0xff, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@fragment={0x1d, 0x0, 0xd, 0x1, 0x0, 0x2, 0x64}, @fragment={0x88, 0x0, 0x6, 0x0, 0x0, 0xf, 0x65}, @srh={0x2c, 0x6, 0x4, 0x3, 0x6, 0x50, 0x0, [@private1, @mcast1, @remote]}, @dstopts={0x0, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x8c}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x5}]}, @srh={0x87, 0xe, 0x4, 0x7, 0x0, 0x10, 0x40, [@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, @private0]}], {{0x4e21, 0x4e22, 0x4, 0x1, 0x2, 0x0, 0x0, 0x9, 0x6, "a42dc3", 0x7, "19b9b4"}, "eafcd76ddb7b7421d29a63f0dd26ca3d5c33b5bea69c4b5b45350182c0522486e671b9643c26b45d522d54bc20dbcb69d2ac3c86bfcf53b247a5e83edd0068b7e060d27e3b31da5a"}}}}, 0x168) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x13c, r4, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IE={0x99, 0x2a, [@mic={0x8c, 0x10, {0xcc7, "04d9d0213c9d", @short="5e17d891bd36934d"}}, @random={0x2, 0x81, "62625f1e24746ac721b792614eab264b1634f7bee9da8c33ac4557e2e9306dfe871fb94a3128e5fd2a5b12ac869b15841b4d2f99c0aec9b0d264336fc4a64a73f86e87243964d0b3680ca2653736fe68dd661996c7346503dbef16fcd07a1955569cc09e131c962031f3aee6cde64c9057be2be635cd94607867f2aa31e076a365"}]}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x1f, 0x0, @random="71f04c76c2969f83f6a78f288402ed0cbda94094ac29756517fb8a"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40805) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10428000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628) sendmsg$nl_netfilter(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x13c, 0x14, 0x3, 0x5, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x3}, [@generic="77e7d74dafc9f07f4f51f65b835bc278ad9d5c7b7deba8f1e497460941f21e2e95f3e65fe24eadebedf09bc04f3c798a5e93159909eb54ea70f24c60414b238d21fd45794a3c225f52d244ebae8ff80005c7a84799cfed7b28de168d2cbd85", @typed={0x4, 0x86}, @typed={0x4, 0x19}, @generic="9464d006a55d9749bfee0affb6b90fac3321dc6c37f83287a8e6fe2965c58397e69118764fe2ca276057d104ce92eab2427a0b73decca5117fb81157f4b7765dd49ca62fcb27a599bc97aa05f59505b9ae6016820fcde2bf28f12ecd71948ecb002da0ab777fea994906a8ade2acd8fe68d617670bb4e05805174b660288ccfa34dd63eaca2ae1f98cf96824e49f0c887fa8da86337cb03d10a6102242b92856d925054e26afcb1e9449c8e2b1e3af0f3a866248cf83af235cdd3c1183e5dbfc"]}, 0x13c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000004) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x80, r4, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2e}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0xd814}, 0x20001) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10800}, 0x20040884) fsetxattr$security_evm(r7, &(0x7f0000000cc0), &(0x7f0000000d00)=@v2={0x5, 0x1, 0x0, 0x8, 0x7b, "cb04ab751cca7b86ccda49bdbaa21ebb7f6f13f816deac3b609822c757465410a6b67d5f1416ba8912ed239ed2488c9ea7eca6fb15cc2c6f7aea617912bccc989414d3aa617128297036cc9ab1770c524110f605f4492276524b323a7d799850a4a22cfb9d0c142e96fc53fad5b47a36dbf385a80edd6aab5dbc32"}, 0x84, 0x2) ioctl$FIONCLEX(r2, 0x5450) pipe2$9p(&(0x7f0000000dc0), 0x80000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r8) openat$urandom(0xffffffffffffff9c, &(0x7f0000000e40), 0x4000, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x8c, r10, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x0) 5m27.718178804s ago: executing program 0 (id=16462): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x4c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x40) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x40) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'rose0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'rose0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x300a40d, &(0x7f0000000400)=ANY=[@ANYBLOB="6671d8393c3d004800010000000000800000000000000000", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d347ec7120d5c59594daba0eabc138ab8fe76de213accf016d5febfa111e37b3b7597a03cc136c53238dc0c683e949decbe9387c33ed6d08eea1b7ffb61ce98f3a249ec9fb1e7c92c2dc2e939e75cadf7055038741cb5154d640555e7d8fe813962a1fd924325b9bfeaf060fd51c87fedaeee40ef4d34efc03a218b8ec28dc53ed9ffffff7f1363395eb1c74a9ba1ccdc2d68141e1cfb7397d7c62259acf888f9adb17d251b37bbc3d052c31a9883e7d4c6c27a3f55bc6f55fd6a520383e25bce75ba47175ee8f665cd32a9ea48fd08f70f7dcc36429e568eae54e85b3669a98ab3ced9", @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000800,default_permissions,\x00']) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x4, 0x6}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) ioctl$PPPIOCGUNIT(r5, 0x80047456, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x80000003, 0x4200) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x80000003, 0x4200) r7 = fcntl$dupfd(r6, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f00000001c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000200)={0x80, 0xf, 0x400, 0x0, 0x7995}, 0x8, 0x40000000, 0x3, 0x48000000, 0x0, 0x3fffffff, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f00000001c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000200)={0x80, 0xf, 0x400, 0x0, 0x7995}, 0x8, 0x40000000, 0x3, 0x48000000, 0x0, 0x3fffffff, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) (async) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000600)=[@dead_binder_done], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000600)=[@dead_binder_done], 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpgrp(0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x161602, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x161602, 0x0) 5m27.096963277s ago: executing program 0 (id=16466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000001a0001002abd70000000000081ff80"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)={0x4, {{0xa, 0xe21, 0xffff, @private2, 0x200}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x40, @private2, 0x1}}]}, 0x110) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000db12c15b200010000000000000001410000001c001700000000e5ffffff64f8ff308c0161af56d0198d2557fbbebc29104926a98a721e6d2b4a4e794989d9a465a3b02115f61497beef95be1da98b38d8dfeaf263400874d285bcc0da99643ae381256b78664253a1e3936424ca44e90671bf1c042c87189be2f2fc19ba69368f500e673afb2bc564b6bc215c8c"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m27.029061587s ago: executing program 0 (id=16468): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) iopl(0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x381, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) signalfd(r1, &(0x7f0000000040)={[0xffffffff80000001]}, 0x8) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) (async) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (async) iopl(0x3) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x381, 0x3}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) signalfd(r1, &(0x7f0000000040)={[0xffffffff80000001]}, 0x8) (async) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) (async) 5m26.91602092s ago: executing program 0 (id=16470): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x8, 0x6, 0x8}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async) close(0xffffffffffffffff) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async, rerun: 64) chdir(&(0x7f00000001c0)='./file0\x00') (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) (async, rerun: 64) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="1fdea5f3fc0132a7a47be237a09811d3", 0x10) (async, rerun: 64) close(r0) close(0xffffffffffffffff) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 5m26.788887182s ago: executing program 0 (id=16473): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000080)=0x1ff, 0x4) r3 = socket(0x11, 0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0xa, 0x6ff, 0x220, 0x4, 0x4, 0x80, 0x29bd}, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x3a3, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="0201140084dc003f7fa682de9ecc01140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x1) r7 = dup(r1) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="07000000080800000000020000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="b2c50d08af09004a5d80b34912de000000000000c107da"], 0x48}, 0x1, 0x0, 0x0, 0x24004001}, 0x40) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000040)={r9, r10/1000+60000}, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x28, r11, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r6}]}, @ETHTOOL_A_STRSET_HEADER={0xfffffffffffffcea}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x404e001) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r12) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r13, 0x1, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffff8000, 0x4}}}}, 0x30}}, 0x2c040090) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r13, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x101}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4040) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 5m26.696792684s ago: executing program 0 (id=16476): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x11) flistxattr(r3, &(0x7f0000000000)=""/1, 0x1) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close_range(r0, 0xffffffffffffffff, 0x0) 5m11.62411109s ago: executing program 72 (id=16476): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x11) flistxattr(r3, &(0x7f0000000000)=""/1, 0x1) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close_range(r0, 0xffffffffffffffff, 0x0) 3.58038898s ago: executing program 2 (id=19676): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x3b}, {@in6=@private2={0xfc, 0x2, '\x00', 0x41}, 0x2, 0x32}, @in6=@remote, {0x7, 0x0, 0xfffffffffffeffff, 0x0, 0x4, 0x7, 0x9}, {0xfffffffffffff461, 0x0, 0x0, 0x40000010000}, {0x3, 0x2}, 0x70bd2a, 0x0, 0xa, 0x0, 0x0, 0x30}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[], 0x34c}, 0x1, 0xf0}, 0x8840) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000040)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2.994524561s ago: executing program 9 (id=19680): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x89, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0xfffffffffffffe8b, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}}) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$HIDIOCGRAWPHYS(r3, 0x4004480d, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) statx(r7, 0x0, 0x1000, 0x20, 0x0) 2.738654746s ago: executing program 9 (id=19681): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000002d00)={'veth0_macvtap\x00', {0x2, 0x4e23, @empty}}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) setgroups(0x0, &(0x7f0000000380)) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0x1, 0x4000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="03000010e59b1af49e0017d8df0000404e0a60b0cc9a4a8803727d4e9a04d6479319b9bbda17d3d87780674614222f04a9d27c5635b8148f9c9c5d70ab5b56f759d9ef3156074369c3658d4b78cdeb4a6c"]) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r6, 0x56) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)={0x30002011}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x635020181cf5fc1b, 0x0, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r7, &(0x7f0000000380), 0x0, 0xfff, 0xdffffffe) renameat(r4, &(0x7f0000000200)='./file0\x00', r7, &(0x7f0000000240)='./file0\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.573355159s ago: executing program 3 (id=19691): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f0000000100)={0x5, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r6, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r9) lstat(&(0x7f0000000980)='.\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r6, &(0x7f0000000b80)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000080)="315f79dc2ee1d848cff9b6a968ba2535b6513ef9592f20384f7ee65b4170da9d0456802765fca126e81284b9bbed", 0x2e}, {&(0x7f0000000380)="88b6efe663b0f699ba67601bc5c064036d4748dee3db6e206a568c0594bc503e3b6593972b9f93186f97aa1051a014a3ec27e3c3161a62191eb299ea61a512df2608dbceb0ef796883e103829ac91eca2f7bbe3c8973d68310c91e74b4fc4301541401a52e7367adbadb21db3ffa62998b6d754b3e10eebbbb424565263eaf805724739225d3f1904e66c5ba3f406824f171bedaab28eb9873ef2810f9ec5e6b37739265e27fd2675a79166595018f06c2bc7b49d04c5bf68b6b46406bb2a2", 0xbf}, {&(0x7f0000000440)="96b0bd55e34e0ff9292f0fcba927f5d5d2920802f91da7cd488e27103de2cf260db16a0069a35ee6abfa3ddb81c7fed801886733ab48e1e915fc12e61b9831c7f81e2043eb742e6894ae040b5c1887601e80cd3386c5d63b1e595e13aae6eb18397abb8db15dedee302c8ed9e9ffc15b11b8b49c19639bf576b8d49f84597d0c85f33f4f5574cfc2d2aa30e6c774dcc3d18f6fd61c8d2d7407bb1e5e046a4a615d3188263ec2f96a1c649b42f6fcea0385f896a94708810cc6ee7a79ce79b77dfd5f0477a34b32b4b3baa8b7602b028f9caeea854cb6b57b218b1c5619d8db797fc7f3858b718c189eb59e35", 0xec}, {&(0x7f0000000540)="b67180d569ff6886d60a1a199646ddba9438ecb0338abf82121918b06ae017f7f44a6252f517ecbb765626c24dc40920880d3a88ecab1741009b628c347bad1c248ade253bd4e8fbc51167307c87eff5906ed68aaf5539177f7916b9f09f34aca05d2d71e75fbd817d9bd519e545deac124f51daf31aaf096c22edad8c440a60c7471b52035caa139657ea51c48f3a3ebbb441d9ecec97", 0x97}, {&(0x7f0000000600)="e69272a3dadaa4718194663767f9897ebfd5f8a64f2acbaa3540666fd6f58e8fcd7b826171b19240410df646a9198670b020eb8031617d", 0x37}, {&(0x7f0000000640)="2ac1b79f2c1c178e8e1dbaa09b40147a6691c1fecb9f145fbb968733de5d4d9e64edd097b9febb543b20485499b6093bca089c3baa8c53b1e136fd4d995ca0f33d16b944a7b24a157b30d14b2fdf76fc9eee4502c777405660ea373c6b86703544856553813096662b72b67adf63b96374851f066a11954eeba0b220af896d5df7a32f62122aa768c0824aab71d93e22e6a6e0a45dc0e4c9", 0x98}, {&(0x7f0000000700)="2142511a8254356eb6aaadaba0c30d3ab37fa45754d411c17c52fa4afeeb6f14306d78b21bbca7", 0x27}, {&(0x7f0000000740)="9094c6d38c8e1340431c748534cd815ff24accad0bd5a2d2c392c580db65cf8d3782cb31102db0494b7868c72b451114e7eee126694c8aeb0dfbcebe53349849b2fe890aeb418d73364f4eb28d5cad15e4f1b712e89ac7268e8063cfdb6084d076d0fa272f734a056ecd23baf21b449f741d1a58a56baab1cb3e2f798d0206570e2795a8de2101d392f3493a4598c60a962cc3e3f5e84f498fe3eda0ea21fab58120f7b68bedc7d81971f582fa3be1750c4dec7f044d2ff9a6563eefe51237", 0xbf}, {&(0x7f0000000800)="caf7253869922f5fd65c5f29066d2d433eae9d3ddee45d8a72ada628f3bd75714faa730a1c6ba4a3109941f1e50cd16ff865cc2dc3c0b92d44ffec53c218b4877e7a988c38bb4b9deef0a4a27fa226c1104ec2811e8116cdcbcabe4b4dfa76ac3b6ce2b775ff003479243d5ce26b635067100fbd40009b266c837634b13402957b2530ca14d20660ff2b6967caef3404c3194429fc41b50f3b3a4ad753e5fc76635bedc23f39a823e79b36d4e90390", 0xaf}], 0x9, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r7, r9, r10}}}], 0x20, 0x24004800}}, {{&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b00), 0x0, &(0x7f0000000b40), 0x0, 0x2400800d}}], 0x2, 0x4048051) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe2, 0x40, 0x7, 0x0, 0x2e, 0x19, 0x7}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x4, 0x42, 0xd, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x66, 0x83, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xf000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x5000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.456196832s ago: executing program 3 (id=19692): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)=ANY=[@ANYBLOB="40010000100033"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000040)=0x888b, 0x4) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 1.356848674s ago: executing program 3 (id=19693): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB='huge=advise,']) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c0100001b0001000000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000c8000800c40008000000bc"], 0x19c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000deb1000040"]) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) 1.346571713s ago: executing program 9 (id=19694): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001680), 0x5c3902, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = creat(&(0x7f0000000bc0)='./file0\x00', 0xecf86c37d53049cc) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn+\x88\xfe\xf7\x01') add_key$keyring(&(0x7f0000002840), &(0x7f0000002a40)={'syz', 0x2}, 0x0, 0x0, r4) inotify_add_watch(0xffffffffffffffff, 0x0, 0x81000010) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0400040000000000f191465cc980229c2000000000", @ANYBLOB="02000000010000000000000002000500", @ANYRES32=r6], 0x2c, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x50800, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f00000013c0)={0x7d7}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000002880)={0x0, [{0x2, 0x8000, 0x3, &(0x7f0000000240)="97666a9b8fa13e7269a686d95a6968a4a931d4a10749b7df11ca233c205dcf09a839c4b0e7504484464bce91ea63eec47b0bab0e96d7fb740b789d4ad959c35b43e16447e8fa3e65e327bd4c0e415f088f67077a24d987b6f13cf7b9c539865a93bb78c83ad6047536ff6e2a7cc32e3aec3a41ffada83b177d213907b9dc8d6471bd403293e99387eccfb703f43c8f5447fac943d22f2b44de8c4606639a4be0745334d53217f14ebafd8c84279fedb8ce8a16195c72dea8518841ac33e54317b05290cbdfee87368af8d2426928c8ca29c0a27e447c5ec5badacfa880f99d8d744967562656895851b5774c87348eb2384f4a201ea06b3caad9928af6f2970494452a7617f0a66ee99a03977ffa124e021f914dd3bf9a76db90c82d3117a9bb55bce0cef717ef8a39ee97357607de7d40b28fe89ad3db5a923fcb6f382c940c6a0701357fefaee389c6ad12017a882cfbbdabbcb9f5e9fda67bb8b8bbca33070eaa2d59dbe1b01db327ebb0f8e1381eb3749cfe6dd2880b799c1bebad95dfcdaabe4af8e2a95028118c82fbc280c82c6c06f4eebdfe506b4a869bfd86d81463bdcaf6b602b2b2f075f29982f6f0f6b71929eca4c42d2c839f667e928c703c2bfd9705bfd1e22a607c8f864c35664fa1f33d75ded204b133efc58f09e9eb174526d0bc579158da29ef971c87ef50ffb7293f5da96358b4a6344bdcc2c753a0e64af1db109e92bffa572c0b50c3042a10c3f9ca6c7ecbe1d9089af5a2d5a21f94636028e29d40066dd56a45fd6992cbf015413cdd45169406a62fd40479b91e46f208d1c29fd2e4d1d4cc93edd4aea56fe7bda04c36804f69e5dfbb2a6c5ce31f9265593a5df86753a42d541222246fdc39e24b35a293c0c1e8d7640b0dc8ebe0587724844eb156cf57472e064f9b5a5bd855cce0d0dd1d5ba0aed75c5485dc0b0dd14edde8fb64349208d2a93ee6e0a3cbc4441b908a69a42c6cac5ebc7c4a897291f1267ac8a362820e90fa55baab28663e97b3670cf9a781b6974029c3cbc05f337009c7668c9d03a7c98446793f5f3fef148e87bd9cb8b6369e80213b31740b5d1590c055a76fa3c0d00461b50b6e71610b37827c3a108299d93f36061cda6253c5aa5b05016bd2dadc5fcb9e6d495405df6c5ffc05c047a512c6f7071f403a7c986233ce6ee5bb1e7b5c39086b56963d29ef620a0f8fab66568adf6cb239b41134b83cdcee3904e8763a257fabe63e24b32cf9f86f43e36c5b862acbdfc49919b1434d921dfab07f0dda12eb462b92e760bf58290ce90e23b66732e3a7c462da8a4bd07ec1a7214ec1d8d6ddb2d7c9b98d07d3d2f90aaf4bc08e7472eeef4df91e20fc40a81dcb171ca540f49bfdfe0f8f5ff903d41cff9dfa3d8f358855e7b137795cb7350b3403b159c0f1f037c754212d0718d2d7239ea44f5d5addfc2a36a6174139ad12ab4fb8947017f24a9ef702d9beedd847d521525d749de109067721dd1aadddb79f09e60fa685a80f18d83297af0c39f03161e4c64ae3e4931a105c70c53926f558642c0216f6be49809726fbbbe875a33198e043b0daefb647724dc782210566bcb6b7198e0a7d76337f7eb3831eb6f7d3fa8b4cdd44130e476706506d006545ad2969c418f5bbf506d5f6f659e198c429858487943032383464a9ff913cfbe0b5a1108b15d8528e820227c1cb20e8a687dd792d35b9fc443d23f3eb003a259d38045de2b2e44e27d2992ec0b3bd0190f42f232a6e2bd5f3752293de104fd22c642da449d9ea9161abb39208577a13d6b90b6006de9dfdfe0915310a296b4c64dff648e2363efea9c16e5136a1aadeda7e57ae7411bba165dc901e7ca2614f5b55661ca81820c648489d2a89e914555e6d36490fd37146084389e1fafe3caa3d97fae62a3f8a4224822e9fe32e62f1dd2bf6e54d3d486bc9a79527e75162581963029c42f8bc49601852a9d044bc3188ff95f6ee20abe4dfc9f82ad9b8848a88d2b05957ea4a8d681326d4654d73c1adeac0f060cb3836f5729e382ac5c8c753e2a5e1bd900087c8755e540c09a0cca6470b2bf0f8c71207a0b7bb639eba59ec8ffd189eade09f3b68f050ece36f7e0909938a88ae92a9e74183dc7c52d1b7b210020a3516b45768dad6e2eb071d38e04f1b94d62d80aef33c36ff6287182234247ae436e39074c6b7961d04dd2276fcb0a084bd55242d4ca2df8f4e774ac7aaf29bfcee69acb99f756bef1780767e4ef850a4acdea076adf9801687401f2089621f900a00c3a90e5c64b6e812d013cedc3b4a43851d866c5b2946e11ddc749c2ce48a5565309309c1a96fe5d429a92e3bb65f11dfdac54fd7392fc47d2174d192e5a59d73c9bbfcb7fc90d9e6f275bceab676a43acfdda7797097999e7468191117c307578a81b78d989af4133a6bf9ecc2e891987fb6cf3ac325d62e0f07885dff25bafa753e45871e6a3e8255b12de61b4af5e3c1eee6a26f41bded49b42c337358a27e6a87afbd387a355deb95e13794899f6649ed8bcc84d5742803feee825fa7a9af800f31f663f7ca826fbea9129ea819efdfd5b2eaaa811d3f02bfae000d8337a1a34bffe5d1a0430b79dabcd915c66a193ea02fc1084a006752a3e37c9d9a7d966f0222618b886e0254f5d995c2256fa7fdc1b2248d6fe0545f35f3c4241e808183c648dbad60e88bfcb6f3f4da589c1006966f99df2611472385ff95575f7731a6220eed02c219d9d380e208dcf4780fbad1fe8598f68e16912f0db7d1e1b62e7df360d61954c5fc9051940ff665004fc253284cb47feb566c53cffb8804e14ee1e0ce21e4936a936098061e53ed4666df55073eb1f823c30dde83dd4072353f702a020d76d58f31aef69fed23d424dab460fa4ef5623ffe253f788618511a9fed1163e92090df14f4a946f9ad4f9f71c187afe8b1c79685db5b4ea72a3c56f98f1b3ea33a97658dbd0bc9428a9532c94a8a8d83c14df315c22beabee44bdc1f70a77a05a4f4511da032f2fe1173c7fe45633e5861ed0f862588195479f809001cc4784941924c03cb5be59449e173a5afd068276bfbd73253a6a98ff0c8c249caa50bdb89f7a688c6717e4f39043d18a8541b8e03890339f95de20198e6f53bb8c82e633c81095f2a5f0b49011466d4b5e94e891cfa72a1702d7e789a4cca31e2cc14d1bb9a5415009a8e855b99e4bb1331b70851a9118b07312aecc3f1611021db0c03ce8bde1538c9c93a54e4ad041d18a373a410740399c708b6b02a2cae5c6bed92e9e97679691f2b3b6faaea9a55bc4c260ff6beee1c7d07451f684a15b0070ece53ef49eb36094269f1202018e876bdaee4f884ae42ea3e3d9b2d139c51fa48c5fdf7abdeaba4627f4883b1260cfc73ffda181d551c8eb551a6ba23470e7759a1502b707f45ce9bb8fd92e8e9d6cfaf22ca5fd24fc3795cf318808317f1afb63ac8ae06500d0f80be555be201e9f9671425895ff82ba9ee1beab69aad1acab6a717728b572ed3f2a527078ef2fc6becbbd31dd668941e2430688296ea9afdc5fbe905866f58642158d1375dd0c75266f4f8cde2779aff30e5e4d2ca8bde211ebacb6b83e50be93906e13b001be22061a5fa5da16f4546809a1c0b122af87defbdc76a0c05552dd7ff1bb17aef0284b8a212d540e2cd381ab33f51f8cb7a24de31ba7a891e86239b5b3266ce296ab745c0c676b256c9bae782dc27609142ea833484732a32a5e2d76212bf08c8fd4b493d283df5d01d232b7bd163239f386fe6948fb92d11ff628862a1462ce5cfbd5f0b69e6b14bda9376c6f4538c78041472eab92fed905b8cbce7894a4acea27e327787bbc3c97bf8ce640a327a53a864fe0b0977a7ff2b1da8ff8fb1b5df105922179427f8b1e048276c9e3108abb775b42e4e1f20a1c47ab26d12dc2745bb032530f7c137da1502f3122193802775d32defeb9e55a8e9194f69ea22eb73e0f9b02243cfa47c42eeebd2edd677b8e410839e2703bccbcf518f82af82dfc81447070cb73a0b7d32d3a5724be6e25dbc1656743c66eb407d5bbe764c240d0cfd322d30dbcc069150b10f5e4c9376ef0577bb134ba58beb2092f53b668a2b7da9e65d2745f877c3faae99878c3f6e6434eade32279eb75eef485e9a26bbfd795c8495f68b4ea8498f06a7a8caeb5bddecde8bb3fab2d1e7551dfd68e6156b74eec2c357e33dde307a9aca57159de79bc8ea43306f32996f6dde7717e8bc58864f1c63d82426ccc38ee06f4fbab2f9c3566afb734304a63e7f7c0025ff861ade7a66977f8e206fe31b206dcaee95f319f5713deddefe1145ea95c1496d04956920dde753794a978152d734392084cf063d96a1c794cf26d34f359313da7cc97324d1cc56bbfd6c51e9f381f804456d7ac6d943f1113ea964e2542b77a9a9b6aaaf220a4e411ede8640ad41a24817afeb2e1becf99c5eb1117b8ab7f19a4caf580f661db671ec14d132a02c114779b424fb99a3259152feccf1d2adb538062e70e9ed8df107688184970afc9eec1f86789e3bb65070146d2f6c2a61da0e9914c695329e5229ad099ba23c9fda8f46a6ae5f72f747cb0d70831251fcdd171d65e4e712286b6e6403b7929859487a0b5b90f536b0f3925138cb2517431095e797c881b6756459f45081d2f642f5788bff1ef3ed5051ae7cb0ca70d708f7153864969727e9c5a8a2c78d3db8facb7ce7573dce1ee8f0ca204ac29efbd6c3ebd564e05f5fad35ee8d80071b77a13144e22781e8d9ff1a76db9f30cb9c6094d42c8b287eeb093ab24818bf66d6664d0a2ad02c7ddd12f6ed97c7c89f90172bc5348a8fe5de3e30c841daf300665ca5c811059368930545b92db8e422c122dc942641c96b03a55b609dd0309f9745f99b1b63eb874061ca58f3a8ffdf558049c2fa2b83aacb6c921c76a5bde07c89ad6e8488193e5146eaf7b599292d98780564bbc44f94bd9a3c4042d06b31abd9881c85829acfc544500a25c3f3fff1337f037784b8158b2c3b423a9bc7d1cdbf0efbf1c484a70d6a70172bdca69ecf5e290ae400eee0b644338e8dac2a643a2e1d94fdd32d80da5858f74211356bb5d0e387d56da75a32f70c1797e4d9a30d4a9175e499bb4a5bd2f13a94cb00831b9ca1b85ec0a2e780588e3be5beba5139674e2ac845809abbd9e838c48d03552720d3529f94f00964308b418418199fd3ca37b0943ac82686a5d200ef142a29947a37219185296435e9c043267fa2d7a4ba272102a008a2aef4b6990a02b285cb0eeea252c5130d928fa3e83679e9ad21f8c96172e5599f97c409f0cd882148976d23f91ddd98805c07b7d60c86cbca5aaabf7f19dfc0e937e32c8f3f0fc23ddf60118f4bf56b875cb64cb88ba95bfdfc8f209e8aef22f4ccdc9d50af6907f233a8cda710b759b6465f931d20c67fe23daaed70b0925f60d8fe0f40ff10be7c6018453afae1ba3fa945c6bdfbf9a4cec4fd4aefe36663dd0b25895e4f630af0e61edf780dad1a72bfbf2ce58b169df6c611152cb77db38f38d1070aebb02f925a317c878e5edca88381828b0051cbbc4ff39dbba9dd620ff255fbac8c46b7147696b50d14759a27d4bc945f80f62fa2cbc5bf1948126e03644f609ce2574b3e37388e54ad2b1ef3abe9a7ffb2c96989eb191919737e42f020897c3bb0fe187ac44cbdfdec02cb38ddc88c4acbc18888a43c3535feb1462c85a1c1e58ff0a98dec363ee6c1e24ac38e9243ca5f70af5982d9fb2cf3367dace8260f3f618b89b07e45521aca0e9aee605e"}, {0x2, 0xe0, 0x3, &(0x7f0000000000)="fb143f52116a426a55e935cbbd94b18084f94fec81eef995024401c2"}, {0x3, 0x188, 0x4c00000, &(0x7f0000000080)="b46d55ef1bfa2ca65e6ad36b6094b6161469c177c5795abbdfb701db78c49c36bc808c337a722851379407ff6d929066ea"}, {0x0, 0x7b8, 0xfff, &(0x7f0000000100)="292b817a4b3e6c7e1ddaeafaee5cf28a465b9ca985a5866256992ec5dacd94226c8db51e91a9bf6bb8ad6488a721abca0153c99eeb44fcfd5238b42851deb0c87c5ff5eb1c02dc5dc7ba28157b1546e4e76531c74d4713574086c985f9b8452c4dcc12f57b67717c4df206440f3b8c0f45b94a38aaa848a6c5ff24ad32b3694fc69b17b5e1f19eda3430c9aa52b1b40663d083144dc11ac32988f4e95e0027a37e62d3a721ca667980c1281c0d37d1b1db95dcebf52422e38cb2968f49cba797182d0109687f7d9c298896499b87704df71e4114f117435fcb8d8c073668e3ac5fa57592758207b2c05b15fb88fdc89873be4104817ed6"}, {0x1, 0x200, 0x0, &(0x7f0000001240)="5c5499369b8e7933c064fd76f68a2e03b6220df0b476d6485b501f23bd59726e84467a15960f747bfd1d5757480bde1581fa0a11c7d3dcfd0d721049728f98b6"}, {0x1, 0x1f0, 0x9, &(0x7f0000001280)="b070ff85d668056ca5bd31e35f44de17369be094808aefcc34f76498b8c7bf44d1c5fdf7664693c7ca5c8bfa40b31a88249f5a1e27d4d9e576f52ff4729a"}, {0x2, 0x218, 0x2000000, &(0x7f00000012c0)="f203ee112d2afbc6936cb73ed40534461012661e8c6a3b773cae9a4c85f0a8c3ba8e857785844896d0cc537e4046cbdeb9054111596f3527ec93ccb4a9024ba836bec9"}, {0x2, 0x260, 0x7, &(0x7f0000001340)="b41962b7d606c5809996f8567b3989225458d42a7106c5fd0fbdab9de91eae8c7f6eb4f336ce2f784ec6dcf9f84d9f20f9b48c0bf4ef7a7c9c68ac932ed724d415bc597ad9fea1feb9a366cd"}, {0xc95ead7b457eeabd, 0x0, 0x15e8, &(0x7f00000013c0)}, {0x3, 0xfffffffffffffe5a, 0x0, &(0x7f0000001400)="351686e82c013331808bc506ccd19435c744a00039375455db191063b91b89e2bd09faf4b87e47f01c3a3bc2bc13107341a2377cee8f01faf20b76d85affc71bc75915db41874e91cd70bd1d91bf15e38d959b77148573fc4d1091448bca5d9fc935b2e23c3cd2487f3859f78a56a63b58772322ca0096fed1f2fad2418a88565f1b8af8507588b513a92aef2698927109aa4ed8389398711acc50332849f64eadfb28a90d4b2d889f47e0213a8259de92f18462279753f539708efc839db0c9e54d118e44dc52e33061304b7f9e291e8076f72d3cf87da71c2b9fbc48d3fd5dfb58d5c35c922f"}, {0x2, 0x438, 0x100, &(0x7f0000001500)="da04432d372bbc977a5f0a08d8ec69ccb3c892eaec3994d8e1780a79dcdbe529892b07a34b8b1a16cf47c8d0d93667ba012668f83e0305067f5123ed2aad4c0b2fa2a82a23632d22c9b82d74bd81589f98af371b4d2f7de1ad2d0bc2b0d001fca8f5b1c422162567e0ba6b60e6c85803d09b229dc09bf87503072fd479790d11127b4596779ef8"}, {0x0, 0x4a8, 0x0, &(0x7f00000015c0)="049a57e31b8b7c5c48402d04ed1cf215aabf9b0571e244efd16d764e1361468f6882b8e9726557a898b278470b9bafc0f9df63db88542f7b16933b044e4801c5ae09391b75fe221090fbe67b0a670a49860906e02ec99c910513269d7853d6aa8bd464c1d96e5a55e8abce99816031fcd0f31ac9b28b5a537c5c42b40a7ddc3cce3a115daf7a8374745858a7f9e51d59bebc826568"}, {0x2, 0x8000, 0x4, &(0x7f0000002a80)="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"}, {0x2, 0x5d0, 0x3, &(0x7f0000002680)="a7a14dd807c00d5eb167cbbd236444efff3675c043f8c19fb1e3edf1ad1e7a6a040fb472230ef2cff4773cbc837d00cc87a9b7d55da01406ade3b403bb1b1216b619866810b01528ca428b714e7bcfc929dbade52342ad874955e4326c6ca8a8497dc7399631a75d5f91401332c8bc6e9e26d11e20211dc6913868c88390054913247fefbc21ff607365528276b3a0543c5401806a477470496dc86dc1f12dc0eea7f514dd1847c37d095e7154186ef34fc55ebf6900def16b59"}, {0x0, 0x6d8, 0x2, &(0x7f0000002740)="5fc7f017c04f6dcf137c616f992af357d036b90932b520481b197119a1b889b554dd3f2bda40b3b772286f9c52752f8b70f3c5086d50a347c40dc0c13c39181198e1b5ff9eba9a5be1d679fe70700189e8e2881bd4042a31250e159cdcfb89336199ac5a1bc1892b994f682df3c9ee646d31c439cf9a337116396c2f0636f8ec48ec9bbcbf78b89f8a31360f42e5ec9a4b265cd203a98f2155d51e36319ab671199c8e5bf76f977644db8c05e933b512fc8c73a5c51f6cc10593fb1624aab826517b05d0282a113602022e91d614017d4ee9c29a7f6845e6920204"}, {0x2, 0x0, 0x24f061a7, &(0x7f0000002840)}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.277666215s ago: executing program 3 (id=19695): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000dd96000040"]) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) shutdown(0xffffffffffffffff, 0x2) r4 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@in_dx={0x82, 0x20, {0x9236, 0x6}}, @cpuid={0x14, 0x18, {0x401, 0x5}}, @uexit={0x0, 0x18, 0xb}, @out_dx={0xaa, 0x28, {0x728, 0x2, 0x8}}, @rdmsr={0x32, 0x18, {0x20d}}, @out_dx={0xaa, 0x28, {0xc561, 0x7, 0x5}}, @wrmsr={0x1e, 0x20, {0x872, 0xffffffffffffffd1}}, @out_dx={0xaa, 0x28, {0x5646, 0x6, 0xffffffffffffffb7}}, @code={0xa, 0x77, {"b9c50800000f32c4a3716dad009c5dca4f66ba2000b8e3000000ef8fe978833866baf80cb80c09838cef66bafc0c66b8902366ef66470fe7811000000066baf80cb8b834bf89ef66bafc0c66ed260f71d618c4e1aa5c1366baf80cb8cd0df284ef66bafc0cec"}}], 0x177}) close_range(r0, 0xffffffffffffffff, 0x0) 1.180772947s ago: executing program 9 (id=19696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 1.178840657s ago: executing program 5 (id=19697): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010100c0"]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xc, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d36e3172200", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38) sendto$inet6(r4, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) sendto$inet6(r4, &(0x7f0000000300)="b60c1b3e21de862718d566453976152c80ec6b297d26dca5a881db8f3d8e920b9ac7e3e700166d02d3e37f7556123b31a9bd3ca50ae6a71d422c7be87f67cc835adb8f719e06f2e3ea0c6ee3cec280527bff296533634df9488f7d17d9da62655f84291502995808b53d08d71001a36886d5c0c15afe9daec1a730851474de877864c2377a41754007ddbd2557beb2ae915a9a2e487480264fb88158a761579d96e9ae4e1310419095194e9181fa615bd67fa78b07b4f4ab4986cafec9b0ba2bddda1ee824de9358e4c09d8be54a30e0a414a7bf21e03daae00407c4f41777d30677248a20b6f004152098", 0xeb, 0x8000, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.090856848s ago: executing program 3 (id=19698): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) (async) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000340)={0x15, 0x0, {0xc, @usage=0x6, 0x0, 0x9, 0x0, 0x5, 0x3, 0xc83d, 0x80, @usage=0x401, 0x5e7, 0x5, [0xb0, 0x8, 0x7, 0x1, 0xd, 0xc8]}, {0x10000, @usage=0xd8, 0x0, 0x6, 0x9, 0x7f, 0x20, 0xe, 0x50, @struct={0x5, 0xa0}, 0x7, 0xf, [0xffffffffffff8a9b, 0x7, 0x7c5f, 0xd9, 0x6, 0x7]}, {0xa588, @struct={0x0, 0x2}, 0x0, 0x1, 0x2, 0x1, 0x4, 0xfffffffffffffffc, 0x20, @usage=0x9, 0xff, 0x7fffffff, [0x0, 0x7, 0x40000000000000, 0x9507, 0xffffffffffff8a7e, 0x4]}, {0x40, 0x1b5a, 0x1}}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f00000000c0)={{r0}, {@val={r3}, @actul_num={@void, 0x1, 0x67}}}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 1.057792079s ago: executing program 9 (id=19699): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000e000/0x3000)=nil) r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000000140), 0x4800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000002100)="cf3a19", 0x3, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f0000847000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x1000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x4, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 968.817811ms ago: executing program 5 (id=19700): fallocate(0xffffffffffffffff, 0x22, 0x0, 0xad) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async, rerun: 32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast2}, 0x4}}, 0x2e) (async) keyctl$chown(0x4, 0x0, 0xee00, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) write(r4, &(0x7f0000001180)="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", 0x1000) (async, rerun: 32) timer_create(0x3, 0x0, &(0x7f0000044000)) (rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) timer_delete(0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) ioprio_set$uid(0x3, r5, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 956.803401ms ago: executing program 5 (id=19701): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x925}]}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc010}, 0x40805) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x85800) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000340)={@multicast2, @local, 0xffffffffffffffff, "10b9907e07326d6b4f67c313cb315bd64285c8ac0f9ff0f5b70314df66c0de7b", 0x2, 0xc405, 0x101, 0x10001}, 0x3c) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x42380, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) fcntl$setown(r4, 0x8, r5) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x13, 0xa, 0x303, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c051}, 0x4000040) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r7, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x4040050) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000800)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000840)={0x1}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_FREEZE(r9, 0x400c620e, &(0x7f00000008c0)={r5, 0x0, 0x3}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x0) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000d00)={0x3, 0x0, 0x2, 0x6, 0x190, &(0x7f0000000900)}) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000f80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x1b4, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0x5a, 0x8, "f1bde8a49a10ce6f6195575e10378038f37318fa1d70d2f855046a428a561328f5d163a26922cc9f80e165877a54a3fc66c3269813e7cb6949d2204541f8230d7def91cdb7d2cfa60cf26ab394187ca45d2bb7b88a25"}, @NFTA_OBJ_USERDATA={0xa1, 0x8, "f132e1d7ba0288e36d7a72df7eedffdd0251663334a9a220195f7bcb49c741ad4fec619ac7c661ed776306f199ab6c49f2b05be88cae26435b3ed6e42261360b6d2648fa7cb54656fed3ad8a40177faa34f62eaddee263595255488fdb2d4b0246d071e688e4a11b85f65312c35b980d0a8342f4ca0f1d738c2537e271f10d0d12ff559f9218c736add05b58b3aa910010f2bfd20098ae77bbff52b2e2"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xc, 0x8, "ea4d07642055c034"}, @NFTA_OBJ_USERDATA={0x1f, 0x8, "ad13e61f39cb300642f9cd41a652cd876e4f5266ad1f1059ef0a9e"}, @NFTA_OBJ_USERDATA={0x59, 0x8, "77e919dfe86eca08312e0d3596213463f2a521373208924c1a57732135802439a8c6f42470980868ba131ca20dfd18812a95f343c459c6449d15713370d1fad5a106512230339d535d039e0aebd2c75b4f9dc8bffc"}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x232ba81baeaf1df2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000fc0)={[0x7fffffff, 0x8f5, 0x2, 0x400, 0x14, 0x80, 0xfffffffffffffffa, 0x35d, 0x4, 0x714, 0x3, 0x9, 0x1, 0x1, 0x8, 0x2], 0x0, 0x10000}) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000001080)=0x80000001) preadv2(r1, &(0x7f00000012c0)=[{&(0x7f00000010c0)=""/244, 0xf4}, {&(0x7f00000011c0)=""/236, 0xec}], 0x2, 0xffffffff, 0x1000, 0x14) r10 = accept$inet6(r4, 0x0, &(0x7f0000001300)) connect$inet6(r10, &(0x7f0000001340)={0xa, 0x4e23, 0xd, @loopback, 0xfe}, 0x1c) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x48, r7, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x48004) 908.558792ms ago: executing program 9 (id=19702): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010100c0"]) syz_usb_connect(0x5, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="12011001070102109806826bebd30102030109021200010600b06a091f"], 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) ioprio_get$pid(0x3, 0x0) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@uid={'uid', 0x3d, r1}}]}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lseek(r5, 0x10001, 0x0) 844.746664ms ago: executing program 5 (id=19703): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB='huge=advise,']) (async, rerun: 64) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) (async, rerun: 32) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (rerun: 32) write$FUSE_GETXATTR(r1, &(0x7f00000004c0)={0x18}, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r3, {0x7, 0x29, 0x20200}}, 0x50) (async) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_ATTR(r6, &(0x7f0000000140)={0x78, 0x0, r3, {0x254, 0x4, 0x0, {0x5, 0x10001, 0x7, 0x9, 0x65e6, 0xcf93, 0x3, 0x2, 0x6, 0xa000, 0x8000000, r4, r5, 0x2, 0x80}}}, 0x78) (async) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, r4, &(0x7f0000000200)={0x6, 0x8cee, 0x0, 0x6}) r7 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x2, [{}, {}]}, 0x48) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x4, 0xe7, 0x6, 0xfffffbfe, 0x9, "ea7174ddb80fc7000002f7ffffffffd2a2d975", 0x4, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async, rerun: 64) syz_usb_connect$uac1(0x3, 0xab, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x4e, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8bd, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x5, 0x70, 0x80, 0x1, 0x1}, @processing_unit={0x7, 0x24, 0x7, 0x5, 0x5}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x7, '^'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x2, 0x6, 0x1, 0x6, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x6, 0x5, 0xa6}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0x7, 0x4, "036a03603e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x2, 0x6, {0x7, 0x25, 0x1, 0x80, 0x3f, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x80, 0x6, {0x7, 0x25, 0x1, 0x2, 0x1, 0x5}}}}}}}]}}, 0x0) (async, rerun: 64) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) r10 = syz_open_procfs(r8, &(0x7f0000000040)='mounts\x00') read$FUSE(r10, &(0x7f0000000980)={0x2020}, 0x2074) 808.560434ms ago: executing program 2 (id=19704): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) (async, rerun: 32) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7e000) (rerun: 32) 678.280636ms ago: executing program 2 (id=19705): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) (async, rerun: 64) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32) (async) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000003c0)) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x11, r3, 0xf648e000) (async) r4 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000) 516.70424ms ago: executing program 2 (id=19706): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000040)={{&(0x7f00006aa000/0x3000)=nil, 0x3000}}) write(r0, &(0x7f0000000400)="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", 0x1f000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) (async) userfaultfd(0x1) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000040)={{&(0x7f00006aa000/0x3000)=nil, 0x3000}}) (async) write(r0, &(0x7f0000000400)="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", 0x1f000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) 326.078564ms ago: executing program 2 (id=19707): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x7) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1, 0x5}) ioctl$KVM_CAP_HYPERV_VP_INDEX(r1, 0x4068aea3, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f00000000c0)={0xed, 0x0, 0x4}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet(r3, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="5ef87400028ddf59478fa275a36301dcfefae264e53bfdcd814cebe8c32a6a71436315c34489561d95f43e04c503cd69bff53f09ac0150a097a90d80", 0x3c}, {&(0x7f0000000180)="81c74f6cf101a35356f734bf2329f085aed213014f73a52e83fbb8f79b66f1975b7e257901217e71dbf068f94653e5347131ad71785c35b0beb64948ccd64837e374b4c448a8def9e10dbefa11411af15c1aa301000f08123d9227ba073e65cbb8469b06b2d66d3427f80f3418fcd9a6e4a2d181c6f072d0689ed74c744047cf14b3648bbc218ffc831a21ad57f469c719545248ce25b088146b2e2ab4eb9ac34a1fbd5d01d03c3aa7ed701962f9f35af744aa82", 0xb4}, {&(0x7f0000000240)="d811e4ecfebdd02610947fd416ac6bfa4630aeaae3175beebf75baf32d9b0200e2c147743b7c74bdbe20e11df23dce2ca962ad7a9431be14412e5ec649d745c4000b59d923499d6e0bc92824f6ff6b3215f42b697a5d2a6aa5daebad3ffcced421405fa1f79aed558b7928ed92c0bd89eeb79a5cf2be79ee31cb5276ba088e195d61c3b4c4f023", 0x87}, {&(0x7f0000000300)="eead8a271810f18a77a249820f5dc789591b081b54a2c607965749cd46cb8d62db164ecd7e842f6239108b402a2ed4d89b1c8e173867ffb45fcaa5679e44b864527883e8f5108f5163dc1cdc7d9e722bb7678ef04ef5bc7b79c727a738f63ab0e182f4f9b915ad454dd1a2b7d2baa00d61084a03a895bb7ecd524f0d60cbe2bb608de6fe582bb592e481db9215f3801431fbd03553fbaf97f10aaa16afc312661df17e48f5fb8cea692bc9847b5f4d85463ffbdd7b6c0d7e80276bb52fb6ed2cb8d311041a03", 0xc6}], 0x4, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}], 0x1, 0xc0000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0xf, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f00000005c0)={0x1000, "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"}) ioctl$KVM_CAP_PTP_KVM(r0, 0x4068aea3, &(0x7f0000001600)) ioctl(r1, 0x8, &(0x7f0000001680)="2af39f664543b9fd7373be48c410cffe6f36ef535874213b22b59c43a0e82b2c1a102b3aa675291c5bdcbeac56001dc7e1fe6ffe03d7373cfdd21cee2e6aa9ca9dfd9cde71b31af9b005087a693ce6132bd8dab2f40c7669dc88440b90608ae0153f580697bca5f8b5f3e560a85918d003902b455d0a34baedc95c171338e401ed7df2005179131a178199ff3991913bf7f03288bf1c16eb8a60378c2fa7e66172a86937adeb40dc394175a5383e79") ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000001780)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001880)={0x101ff, 0x4, 0x5000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000018c0)={[0x4efd, 0x0, 0x8, 0x3, 0x2, 0x4, 0x6, 0xfff, 0xc115, 0xaf08, 0xffffffff, 0x7, 0x3, 0x8, 0x2eb8, 0x1], 0xeeee0000, 0x40}) ioctl(r6, 0x4, &(0x7f0000001980)="c3cd33a48dbfe246758457f944c3fb2bd1c267a73f4d131e281323c6ed43b8445c6a3464d35fd036482ca57b4eca2860a4b4ed272f41a98704e9232b12f1fe17c35c974c7d36e92a0f8969ae9403d0c8366febc35a7edb5dcf94319e76ae") mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r6, 0x5fba2000) ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000001a00)) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCNXCL(r7, 0x540d) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000001a40)={0xb, 0xffffffffffffffff, 0x1}) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000001c40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x11c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x49e0}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1400}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2a13}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x804) r8 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./file0\x00', 0x121000, 0x80) ioctl$KVM_X86_SET_MCE(r8, 0x4040ae9e, &(0x7f0000001cc0)={0x100000000000000, 0x8000000, 0x6c9, 0x5, 0x5}) 281.041555ms ago: executing program 2 (id=19708): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @local}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xb6b2ca0ebc195c99, {0x2, 0x4e22, @multicast2}, 'veth0_vlan\x00'}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8fe67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 59.863089ms ago: executing program 5 (id=19709): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) (async) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) (async) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x4a9) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x4080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3f) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000040)=0x2, 0x4) (async) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000deb1000040"]) (async) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x6, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0xfffffffd}], 0x0, 0x0, 0x0}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) 59.459999ms ago: executing program 3 (id=19710): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000001c0)) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x13, r6, 0x0) read$FUSE(r4, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, r7, {0x7, 0x28, 0xd1a2, 0x0, 0x1, 0x0, 0x4, 0x5, 0x0, 0x0, 0x20, 0x3}}, 0x50) ioctl$EVIOCRMFF(r3, 0x40085507, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 0s ago: executing program 5 (id=19711): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="4a489b2b672028717e291f7bd39f2d91b883289c6d41be38181724c917744217efeaf2514f2b62e551d7ff0470c5b04c5cbc86955b353edfcf7dd37911378f298e70979f7d0841919d18119413518240dbcd9a37856ac270076f6b30e04b0785a7c5cafb619b5914358b2ed9d59d445b36f2ccf23ea594e6706f4afa16843469d36646262e0d108d234d1481599c3048898448df0b9f64967fa2a423d7203c695fe65ce24d41076a30120fcc316c1ccb60559221895b68b756f754456b900ce0fb68c47970bf6a6a4298a06a57a76f9b143280821114315da74e1dfb34f36d8084f3a1886905c283356ac305bdfcfae723516c39b265bc034970adef2811edd3697675506bc60046f99f6595553d5dd20c783fb5da4b034b9f049b019201995c3ab868352f4dc582f8fcd7a020943caa341ab7e4a0fd3bcfe7314bdf88c06841d2df559e5eb901a9f46d1df788f47cc9afbf6ca6ff8780c15e2319a7f9479a650e24a72e59dc37cb7121fc7ac32e5854cef78c9d150dfcc765de862b5566c96db7d65fed953b73ad06339c6ca7815188c3ba6982af4433cbcb3bb4daec540524cac8b3deb0c0d7c21278d62961bbc0ac575653b920869061f912ac194bc937357858fdf3fc3be4c33ffbb19eaddf0ae8b74510ec619e636d09fcd52c9e9e808b6f033b8113fb98301769e7e62474b746ba7ef86ad6546eb1705d4f07629785f96637459d799fe30ba1586c2b19210f3914ba328a25c05ff19323f756df71da79e5bf1395284d2bb92fb2ffd33d30a5b4cbeda9b1a1407eb2a56597eaac5d0b5407e240d6de155c05661f79c31c893f53af220e3aeeea9d85936f554824ad01c7114aebd4c728f8ffeb7e9eec4626d852e836c11570171550e295eb14ee0645473ec149dbc977f24d9f65e3f6f106b226293e6cba22d31a432ad9adaea336abdff85a59e78bf0d6d0e4dccfc72c6e94e0f264ff38487330de317ea8b774684167722152b5557a9bc5ed28eb81b690246e27444b3b989022553389f6c822e148dd4ffe6c3efa712b86ba1e7e2ec9cee70910b8e24720789118d3bb8cbe0660dd162c176146abddbf9ec37f2981747f63e54ef959cef9e1563a02f69ed8bc25020aa1d833a2498f2aa289348e4ffd4e0cefab664224a95aabd2074dae33c6abb029a76c7513b664c3b41c696b55e7a7442fa5731cf33b9a19a675140ea2d40a5ca9c925727a00ee319624f904aa8582800d4051ffc51fca739803877f30eee083130b516cf162369a0d4cb9360ca82bb07962f6a6e9d80547da7fea456cb7594785057eddca74247d0fb047d136a320005a9f6501596e0cb235f3fd83c80fc6d3a20599935915803ea1ff2ef86ce5cdbd105ffebf68c3514101a4745341e880fddc448732e0770c3e2989d0f69e4a73690b97b9801c832d3df7c26ff96a82cef2b1d2c3969307f73ba491a9e4ed7ac60c356d80d181cd3b3fb8b07099754aacb4db3d4bec550adda59635b4944bb7c60eb950b2c49541adfc349f5e602ced7dda7cf2e7e7561f428bc23bef33d2a77ef26ba8a0d64b67241533116c71cdec6ca0ab66eb1195921fa6baffe13f27c4e4437064fbaf973a60e0c4ba1b4fe31b60fb65cd53e628134a83a34b025abd6094944f00b4020d31e1e84073e3a4e369b47fb75ca3cc84fe350aadfaf9ae61f5f7acf7a813b9cbb511a9117e0690f6e4a4e712a58b39c881670b9eb392eacaefe819bcd9c6af03712ad02037eb42e6722a14fbd1a8d988dfb69ee067876b44479aa6271ab14155b3924f6902367e9ad4f5536266f0a00c0d59fd21d3923625d917afe516d1fcdf0638d66c223a605956bb2e7e56c03526fc68002ce19cf14f056f1adc20888784e62c32d81f2c7db62cffa35eb8bdf0be066c34b7531d8d2afad487ea34d42f07ceb15a5e7dc8ae393285941e820ae7812827c3d9b33beee54c5052eea4c0ba0a77e95aa9b19dbafb4dc6efe548979ef926640269f9486a4d32284fa7cb0f779082be1d8bf0f935216911be3cbc76c8b972f59505a9df398b8aaee3252b7896081f17dc80c1089b836c51a0761d1a8ebabae6a8cd0a83b0167864b12763a5515993f5000f2633c3d9aa73fb240d45b811390b381cda6df7ea1222a477f27891b28e27901ecbacf3229d8f20aba6f77cb67931a200b0d46c22bad550f2c7674a0f18c08ff11f575b45ecadb9b57eaa2a115f44d9d69a1ba6462613cc8d7c1628f9773d6aa5a034ddd9d0024b5f635369fe912455bba816cac72a960b3b1738d973eb4464f7264c8810f8ed8659aeca6836ff0956eb0862b628003fba029f548cb4bd67e0744a4cb03992012c903a9016c4e71c7f8f5e45e871c25c8040970d2cdfa72399a2c8597458cb0ca4418fb36597d20d80597b23ccdd9f5b7c66dd93c130de8829a7711aac25f82b5a4a103c0e2828c6d2db6201306067b0c10472cdb2c81b9aab62e95967cc7674ca7e7b4acd64a417984b1180f1236d3ec3fcd90f53e9f3224cab007e51619e91da001abffd90e798d48b177a0ee91a4987c8bf5fc231c72342200641cb51c6a2e7f57d0030cb77235e43830a214a2d0669927c2dae9c3c306511c1dc0118713b0f9e36569e08af161dd12c0b79257476296510a5a81d90e08d58f227b09fbd7df8712bb745e7cde96537895c726127a8d29d2baaaa6e6fd576792569bb0de42ebe11c2d47a881dbe94c1103b9cb5a8acde4c19c115fcf11af59fbcdbfc157165ba38fd88cb334cdbdaecbf56846f2d52f6d916beba34492d6bfd22295cfe62347aff71c415ea57a161dce25f00f9764b1afe0acb468512826f83781cfd7e2657950a9c10c7d92d1e04a4ab54a699f5c51c968ef2da5022c1a2884547a25a352b7b7f72a2c9c5df8927f68b390adb1081b70679b0c71da7c4199693b3fd7a3abbc0a4e34d1a7d186ff04da4b75744b578ca4b9bce5ac3c17732847646e3ccbe292b76d7343fe8a7744c3f7fb8c7143b15b20216c7082d2f4034e97e202e17b49522cf5d8c5b224e32e13e2d5f496a740e6fbfd976c75da75cdb858fe4a25e0fe15d514756bc09b349ac1194ccafe220b0bc3b27eacef1c5876334f6ee156cb8f30c42a082c0a72147d69eb586a326ab7ca1d171d7fcb777b0d2003848667d5cb3aca5a47ef5ba3ea018745fd8515d3e1d361953fd78d2523715ab29939892fba2dc548f218f2ea29112cec8618dbfdaa6972d17c9f06efcc6c0ccfe1fac71a59a07ab49f38aac5da21b1dab112542b5b192581234d2a74d08309811385f03076acbc74287d9f0e37a9f7b97c413652bfcbf327295163517c4d2daa70b84cdb880f645956833feda59c24405686a510b812605862b1e330af3204dbed01a65a51616cdc11357f0c603cb4c638c0948613b5de22f20be23459153e87ff8b0100d5c04edc009423e8106a05f90b12fd0657874d97ef5f2f839185a6dee96e5201d304ff291c6f27d08e35990406f138ae3e1591ce7489f5088afa0c8c5652561a3a3eecd89b6bec9a1dde85b5daba98e252e51d84f4eed648fb5193edd1be5368bfc2ef9eecd869691e6f926e7c549413fd9eff515a51e81499730cea9c576ff2595de95b6e3fd3c49d6b38023828ed9c49c731d690428d4d9c9a03d47081087762fb1031c281e2a48afe513f81132d54f2168d692890deb7353fd189794423abcc0065c42396e43531b687d2e4ea57993d517843870b855bf7de1078ca8c29f7c860199a74ff0fdbc31eaab87c9ab2ae65d1c8f7e8930ffb4df995f006007440321e041304a9dd69336def8a0d73c6688d7a79fbc1acd03b5b48b16a6747dedfa90ef4c0dbedd9a6d8658d926b5aa2035d03265ba9af321bd3dccd8b16e87c81f06b1b6a9436bee8369edce280fd09a6f1363c743511466267d6377400009b9708380982e0c58a0ad3bc6ad0a8cfd06e7483755e4bcbf4b1ef51bef14fd3201344c1b8f78d54c3fc91f36e6554deb227bc666506db29b74ec1cd6ecc88affeb8d7142179c5ebe6674f23d001598654ea5ad49040195fb70615e5b0ea791a42d782b75f8f822b8b07d8521c67925541de054ee1e2532a76b0a14e8679cdbc04a139a806178c21d16f8db9b8d19b1ea78510fdf14cd7af73e05edcafbe4e7cdb394b2245f17587a1479545a302314c63240c35353d6467fb49b6510850325a5f5e77f1c3d08f018a85c78f8907e11c5896f209675772cf1e88e8ed417a9401a50374c9df479128bb925898a2f65bab7e8047de8e1d66767b07fd7526dc6d81fdef6730124d1858f956cc6dcf3296fd06f31e45cff8e210491b908a9b443efad1a37363ac81bd739c72f77855b5f288816e38d6803d81726d4ef69e8fb4c7aae8fc66993f0062c7b3c52d47834977218251ade4a916689c34e1b8d301b1bfbcff14ad3a737d2872b8c565a8443d4f0d3e40767218b9d16a40147ae54ca8bf02479b2bfeaa401226ff141bd940bea2bb585e787b8ea65a096f6e09918e295293961a70212fc3ceca440eeeb00c30c16bc1cd4fd89b7e82444ed67776cf2c5664e82f3471f968c458ad3d004e23fd3a89f38cafe0354adc146d8263e7f853941b1421070ba3dc56829ae19783a5be0556a01ad54db1c7daa124098bfe88a906dffbb0ae5be182b743efae75dd0f244033fa7b59e13be3e9e884449f7dd8367a75dcbff20306abd6cbb721811e1cf69ed10e2eb6a9cf5630ff9f705fb5036cae6f0a81c944412474306aa3ddd37100b1d151da32931d6411a92a2b9b54cb834a12b88a89a77799ebe29718ae13a3ba71802b63981298bf391d34981724a994107f1073023f79961e9566d217e95a9187712a040191057579c975b0e18aa5c95e91743f6299f544924060ae91d992e7bfa77de0ef1061491375d069e4af9a755b14335484af581daa0d4c172883de51819832fd7e26645c834b094e7b86b7f1a93f3b3d34b5f7c17cad73eb3c1cb983623b90251ef8588b8bda62f9be3731e42ae08feb4d2b3f374f7bf8b94f3f00b9e569f407e5d38955fab28d95ff8e3d417eaf92626d2dc1bae5747e5bc42885c942d30ccec9596a796af544a00ec298b10843e482f895e1607eec81e808f2bb5f181cff52504761b7aaef48582904afee92afb0c91a54d025cd1b0ff6996a9752804105c6d0599069aa350e37933967e2a543339ed744a45622d5903c106cdaac1c91dd4959927cfb188bd45d60979e124c607d90ad30a1683d2d9ea30874c41ceae0f312241bb05de0c7222971a39b52a4aecc1b1b528d89cbdc4b461238dce9728954b9d69d592987ea11c70c653c9d63d9335efc18767683726f2527bc355abd018db3a8c35c51caec1b7d8cca460c16f84610564ebc1755cfd951a9ca78034ffcbddfb3d8a9c17b8e5260300e6b572edd993889ef3c5dbe97ef8de4237b67cb622c3242a2789dcf4306d233cc7c29d456f403da6d35c0fc05d6ec23a480ae17a85eb9c0ba5dcc1192e61dd6819bb22f13cd9dae41da18fb8a9dce352828f0128d2b1aaa5648ca0e516f9f7461a111c85d00f7d9d6f5772561568f45a03006c3b371ea38969ae545b245efe123d9790b2713969daab6f13b732fb220e1a84fe39e4ab033baa4b31167593a07d3f80e2f937b7cb99ba59c3087dfd04d255e0ce2c012543da401b6a6f074526abbdcfd5892fc66e9402367ceeebc29a05706b41e9ddd34fff19de040093340bfcd8593fc2130f05d9e07fe923b8abd572fa205b394d93520c787df9d2629cdf1443fc3178351327f1bf643cec7a57af41e6fecff51cb076eee3bcf98c7e66b149c1524a7069f60f84a73e54b433e32feed5fde55648c12fc22e8b19b6eff95235588bb8e9793abd50fe19d480a5c354cd74b811c231bb3712797d4db89208d4c6269a79fa4ff98386c012e4e8cad23c7fa2ae3f4d52bca514450606c7a016551ee51484aa8367a7019f719c1c79a5ed2ac72f1960a7973edff5251e083cb58b6d0c03affa457651513d061ce215de2a49f36885f256a4bc65a055fc13ebf6309a5180350166ee9a8e1fa349c372c94cf3557e98f25dc55f9664b3be3a34c2cc14e6943149c2e8a759169db1ddeac4bb573da6074ef33550c1debf8b5c4650c50e27246b47fbfe497ae5143abd86c3c06de2db24c7c3d27cfc8457e3de09ea1e020bbc3b622b0b72fd554cf4207ed0e1759f6d22634ca4834449c4ec166c0cafd44f976d6ab84e251b84a4e8174b0a95f9b58d8a83c6757847ec16d2b9a6a9c33b83e6a6ea56b9592ad75567cbb1704b0c7da3519cbe7424ab109d071456ed0f044140f4ae8d9063797154c6643562519d28c68f0a951f724cde608bcb7e570d07e5ea205639817b5c8185dec7e420080efd0e2c81abf01bb5dddeec32db0c25445b10ee5602d4422cbc12ab127ce051349abdbb6d200977043c74fe6e2271db8a8be6310a2cc69f0b05776af13556d0e699e5cd16f4c52451a448b326708a41fbd820a03f06bfce0b1aa2c709594a231beff5516c6d3fd98a9650844203ad6f7d3cb764548d32667f330046cfa1a4ef8f6e4ca519367a0b8bdb594c875589cdbacedf2f3573517e64c332e8a5c1427eaaf4aad0bafe0a5a9e987e764ab42b1ed9f5e705bf97ee6737ab28034c1155eaa93952dcc29bcca73de7d1e1e53163ba0c5ec814bb93cdf8cbea65513af785dce40227973d70bd5392058b0bb65d8898aa28e0b00944526f7066b2e0318fd32582c0f6ad51117094f5d9ce3e71d0b8e62fa976097c7b2e77dbc7c1c7b605188cc7f29a5d4112a8e98732c2da4c28d1fe37481e673fd4c70b1775d9917813109ba3b9a446d8a16aa69531237fa7a7c1c4ddea49df138c46166258c12ac9059bd435645e13f7e3c2246e6017b6b2008ae4749c25f7b75a08cdf92de013f70b4fa1c4fcd5a9c21aedc8ca33f23a7a926eb9d623a0966802ddd321298c37364c11e10b60d62e236ac4135d234f8e2ef68750a6cf5ff2ccb9478540b3d33cfd0e749900b51aaec89114eaeb8f8f070c363058f56674b508ce0dc9fd89dbf160b613d85a7a812b61601612428fd67cbd46a7592b7c6f924f8b96d8d836eda256c1f3814e37b364777ebc9a5c86386b87da520ea86966e1040b6b9b6b4a409aefe21bc464d3fa13c7f09fda8878ced61da4151cce08e749ebd175225adbf92710af796e26fed828fd5f4614e97801a50fcf2117818ed9fb805a1dc7271a10eb63c8afd0c1eb17cb8a04a7fbf44144f406d52adf2f4553b415cc25eee0810c29329252be7f31589217c0d20c0a6d2b4e3669e7d92caa2ddfd688b9f9ce429ee470d1625452bbf1b68b2d262f7869dcb3a8c08d0dba2b011534e339cf2dffea59e87819a3409c20cb600b93d11c9038153faa7df1d6b7196f3cfbf8931eecd65ea8b125bfc6420b8eeb82d999a556d66347ea83cda739a9b69fb3de7ad674777c3effc5524ed64d29905ae6347056ac385682dfcc77353c73fb65e5f4468489847cddc4fc47fb46287cd0b2a9823d2c26cc539c28232ce8b6a795e96ac4eeca09cda280fa1ef69f24b9a8250727e6e6b0859847239607afe16d50ceb67a9b593234e2f5a4d7783c2b0df1ee12a0f55981bb1cafdf7938f49346b97b83c3b608fbfa1e62f2d1caa294c7beb6ac21a35c5952039089079e999766dfccea81e3fea46146048b93d1f10681402f4f2af2c1458b3295403f9c9b0443d14489883a93a5b84395c271183ff9f9f708a83045b59c5a725d8d3f6593d72668d88cfffca42f218f4b41edab61db892ac4c2c6102750f0166afce267d87490c956fbc2318e0caf58cb8e2e7d67cd2163c63b9d2603a572c5506b21adc919e3d8df26e84493a946cb1be08192e405040f50d184d58c96bbac35ba63bcb04ef78a9aaf335d2f8cdce02bf6a2a4584916bda72bfa9b6a885075fcac768d88efaf5080fd3d15883d717819955b496b265f29ea2b3db307e00c87f19d0d3e594036788d5a5de1904963d7e113b2744bbc84e59304fc928c259f103b31fab8148d663de011881bcb6c08cc71b788dfc797f6acf3b66283890e74835e851a6ccc72609e07566a3add250e3b02572b56672608eacc39cacd2f9a7be222c508c4cd55c51fe6e82a3d6fe82eac30dcbf97f7ab98f974e2f92b4ada98096878ec1b8b37644323920464f59722536bbdb7d31d63a1b7f9cf659fe536cd3d6586ba30939cb05b33f43a877fec1e8c6890074279292476aafbb6215ad254c3bcf2989b012001fda36ebd5a343547e16bfcfc6f4b9cd1d124400609c176775faed22f4c5bf8fcf4387ea07217a88715c74a82c3b719499585f154ea4edfc0514591cb98bc678c451d30afc73883bed08339995467d611e92210978a075c9cffff04409a2af2516d5057f2c69b5ac8200a59279addce368b4408f76fcb500550f008be37c034e7c5636e51bbb5bdf1692736fe5698d9644fb1a84cc3bc9941bd1a7b8f20e9addf846e8ff0d3c829b8ded5f48faa5995137ccc078c8696c1ebbf36387a592f5d8a65e3f6c6f8cfac219d95fc49de210d7893924d84c6aa80cab893aa5953d86034e6408109f9459d7a6200d69efa298d93b8046339f024da5e7b1aa7f69b1a9f92fc02a9f75b507c629f05aa9efa778a4ac5c0697fe4aa254bb1dd4e63d5e3db6627cde671951670ce43eedc5097197d5bc22fd6a4a4178a6ed880e9f84cdc9af229bc6d36e79494aadb31c723af9dc176dd17a1063c5df330f38be6f649a25e60ab99556dc617e33cc7f6a2a999e341b0f9984af25c4eecd0c5cd81e7b0898c1eb688821d80ad3cc91fe64b522a5e205dd1f0a121589cc144e20735745796cf52f1a90e89dc0c1f7022d1cdf0dbdd6d9373886a217cf96839f30fcfada438bfd2f48d552257f39e8e5c77be1841f0250a7d1b46794f06442f7f23af68165182ab80eafc8862ebb8bccd0fbf00c179e14b011f0a4f3893c1809d28089b6c4fefac79a12ea1a8d853868f57da3fed46b29907dffcd44236e985cb18f2c62932dccd6d58c5ce747ccd78b76f9522813884935ff6328656cbe3ad33c9a90de333cad98fb66a5e23903616d669882b717601109c24738e90bae85867cdc96325cf9ebf194bd4fc3a71a5d49cf0875541e6733085eba05f2f3d8e43ea9a26ee0592e035e97739bc0a05d601981050449fcad222a3a8dd6c6b606d8d0fb0b1e30f91eb667b02a0685adc5a92c81ba089db2ea7b9750141999139a81f702712671ace2fdae3cb7b30bdd7c189444d37698a726e4a16fc84c4eea8f8ef7e6535f5d975d8eb6eec6c022f0df8ad57b5210501f0b5d15d2837bf44fb2d76d7489fe0ea6e5865b9900fde18624c9f5591b7b3f401626b78812eb5376ac313bcc7d2336e4bd0177cfda6f5a4ee57871ac761d1e837aa7060bbdd8b79f547850c62c8e8fae26d6bd3e1002ccbf44646ad0a68a33670c682ddf3f05a82fdeeb1317e5f23461108fd13451ccedf0c1d885e126cc3dbaf1a647f83cbb9a75fbd57b1ea545d381d4c9bfd6b5d35759f0bd131c7eabd0883eda365bf1bddd49573af8281089c2139bcfcde10dec500000b49bfd7d46181d107c87d1d08dcc64d0c4e1dae12ea2b3a8f5352ca6f07b07475701512d0ab4b5c7f28732ebed87fa9a78756c535e7f2179025d3991a05722b7217d5c9b75f54f9d3aadb0f0ec59ef051dab58c29799cd043a77a6cb213cc636c4f47a4397abe5702ccee23b28cd7819c3faf253e5bebb3d457f9cea486a9d6f8208a7be0132494564e32c377f5fce81ed7aac93078226ae32b5a5c443f7732b21494cc628961dc2d6e8bde3038bf8c75e36eb5a6d4f2261d40240c949933d5847e090bbe4d69f8aa0fdd0f1a5f04c991e8a050d995f5b77d88bc4452403574d774c6470dd595bdb0ac9130f2b400584d3f9adbd4cdf1d25c7d5acf1d3f6d0aab4a180aad7a12224a5920519f6e7fe9597317893af93120902114521a424d6b22a93ea50453d09f6a143ff2299e453eb75f0a3b01d63d2c9168a0acebc8dd56aa3f97a70ad4b2c53933ceb1058665dfb881c887adc6f03f604fac7c7868a2f98319f6551604a74489b8a9bb05434d7583dc76590c5349ed32e6976a546f63990ae08de68ec9ce5afeea537d92922ea1c57785c071b989fc7fc53a9fc5a602f495758ccccf3168d83b4053911c883ba4a8895d34ad4df8ba41e7fe9bbc499a0b2cca7426689ad6559296c152c2cb03f7e84145db3f2c993a10270d8305be4d5c50acaf0121c1cda027dd4499d0cc357cf9e4d68e2f08b70228848e915cbda9479efa49027e0b3eb8553a704a2aa03d5cbcddc9782df38b1a205e9f3d207f7b9d71b785834d15a94b8410a5df0bc1a10ac2d39493023d701d3a68809d279e3e5010e926f5f90a592bcff727bc8abf5d51052cc19f432c0e6ec11744ac760687702878589ce82e98f807de6db4583eb6af48a1c8083f423e3698dc8219c3b5b8c2e598ef470558b0c816a6155642d4180b2061a5c2ce81e05e80d2846e8304bda1b99b413d1fc5b35da65bd44865649754ce4b02b6456b02ab7fb6ac06a5e8eca7f3f02e96ae6ba5fb87300bb12793ca374bdcefb382544eaaac8b6465d96ba1fc1773bd25ef63c1f08843ea847901a66c33fb76df7a442bb0cb823a88d847fee8918eb1391891e4e571b462bfca1c4a1e2a0db0f0d771325bf87a4604e35e75c2dac5e887c697ec362afe6eb99c25490d8511085f1943cd26d34054f8204135797f881aa16898fb21cacc98725228f78b8faac5fbc2eadcb5a929c745fbf8ca099b1e376e1a554f58c8e269e41bf6efe0e33f019395194e281a1b3087f7a6aad8588746cd5c10e1a94ad7ceacb808f47022f0d4f11d43844130b653001f202ac34ab808b096804719914e8389f5e8e476228122ee04100513ad53d74db1085e1a6ec5a018bbedaf8b632972b14af35d6f846a4a3aeaf758d8e11f9b5f208b2dd417d9c37e7d50af4d950009f7f8080d67749d332edf786040b5c3e3b02b7cf53ce2c0c84611e21c67f01f14561014eca771eec25e86114c26cc6f4f1f08652877e99f33198aaec7c4f1bacd09d0e7555e0320a028b45fd1fd5e37817378ea8199b934132a20e6e3f50418da25c456be2f5e55174aa9209b24a5585ef530fc6f9686d9ad440601a232ef1974f2e5395486e765966562a5706fb667208a639793609869c34ea93e65d338bffb3c4899b16cabec1a490acd2e1b11cb75f64bf659045949e5cdfb766f53395872ddc07d7230f00b584cdca5ef0831d6fbf9907c580dee7b1d0a1d9c090cf21b07308b67b7a6bb36cee05afa234768e642356602b5430874b150929ac06e7ef675dd3439964d36bc9b91005dae2f1f1a6f8cfcb6a9c702b5db52f492d6079c8a0c4914c2d0c487e4760db1138d9c1e9d26ba3efcbce098a08471c92b0cd356d72176b3d29c7453d952b56ed9597350561fa67472e46dd1c0468f8c754f5a4148bbfb741f57b59530148d6e4c97af773ea0b36dc33e4fbd0f8f30dc8d050cd8071728127b1a9aa336c984b5385d9bac361e57505bfb2f", 0x2000, &(0x7f0000001180)={&(0x7f0000000080)={0x50, 0x0, 0x9, {0x7, 0x2b, 0x1, 0x20001, 0x3, 0x7, 0xf, 0x6f72, 0x0, 0x0, 0x40, 0x1000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r4, r4, 0x0, 0x7a680000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xf1) read$FUSE(r4, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000740)={0x50, 0x0, r5, {0x7, 0x2b, 0x2000, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000180)={0x158, 0xffffffffffffffda, r5, [{{0x6, 0x1, 0x517, 0x5, 0x9, 0x7fffffff, {0x1, 0x7, 0x9, 0x79d1, 0x5, 0x585, 0x9, 0x3, 0xffffffff, 0x8000, 0x0, 0xffffffffffffffff, r6, 0x5, 0x3}}, {0x1, 0x100, 0xb, 0x8, './binderfs\x00'}}, {{0x8, 0x0, 0x2, 0x5, 0x1, 0x7fffffff, {0x6, 0x1, 0xe300, 0xfa, 0xffff, 0x8, 0x95ca, 0x6, 0x7b9, 0xa000, 0x7, r7, 0x0, 0x4, 0x2}}, {0x2, 0x6, 0x2, 0xde, '\'%'}}]}, 0x158) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) kernel console output (not intermixed with test programs): ssive=1 [ 1885.146509][ T9] hub 10-1:250.0: probe with driver hub failed with error -5 [ 1885.562237][ T9] usb 6-1: new low-speed USB device number 122 using dummy_hcd [ 1885.605180][T11253] usb 10-1: reset high-speed USB device number 127 using dummy_hcd [ 1885.700778][ T9] usb 6-1: device descriptor read/64, error -71 [ 1885.766588][T11253] usb 10-1: device firmware changed [ 1885.772831][T11253] usb 10-1: USB disconnect, device number 127 [ 1885.956594][ T9] usb 6-1: device descriptor read/64, error -71 [ 1886.084491][T11253] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1886.212395][ T9] usb 6-1: new low-speed USB device number 123 using dummy_hcd [ 1886.244404][T11253] usb 10-1: Using ep0 maxpacket: 8 [ 1886.252122][T11253] usb 10-1: config 0 has no interfaces? [ 1886.262165][T11253] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1886.272536][T11253] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1886.281578][T11253] usb 10-1: Product: syz [ 1886.285918][T11253] usb 10-1: SerialNumber: syz [ 1886.290704][T19888] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1886.296949][T12440] Bluetooth: hci0: command 0x1003 tx timeout [ 1886.308525][T11253] usb 10-1: config 0 descriptor?? [ 1886.372954][ T9] usb 6-1: device descriptor read/64, error -71 [ 1886.532818][T11253] usb 10-1: USB disconnect, device number 2 [ 1886.638718][ T9] usb 6-1: device descriptor read/64, error -71 [ 1886.756068][ T9] usb usb6-port1: attempt power cycle [ 1887.118472][ T9] usb 6-1: new low-speed USB device number 124 using dummy_hcd [ 1887.142471][ T9] usb 6-1: device descriptor read/8, error -71 [ 1887.302487][ T9] usb 6-1: device descriptor read/8, error -71 [ 1887.427492][T11253] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1887.566034][ T9] usb 6-1: new low-speed USB device number 125 using dummy_hcd [ 1887.566169][T11253] usb 10-1: device descriptor read/64, error -71 [ 1887.590359][ T9] usb 6-1: device descriptor read/8, error -71 [ 1887.703392][T26958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1887.710626][T26958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.719599][T26958] bridge_slave_0: entered allmulticast mode [ 1887.727159][T26958] bridge_slave_0: entered promiscuous mode [ 1887.735039][T26958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1887.739121][ T9] usb 6-1: device descriptor read/8, error -71 [ 1887.744383][T26958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.756397][T26958] bridge_slave_1: entered allmulticast mode [ 1887.763651][T26958] bridge_slave_1: entered promiscuous mode [ 1887.853856][T11253] usb 10-1: device descriptor read/64, error -71 [ 1887.866601][T26958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1887.873680][T26958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1887.881037][T26958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1887.888117][T26958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1887.895552][ T9] usb usb6-port1: unable to enumerate USB device [ 1887.998900][T19878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.012115][T19878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1888.027921][T13679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1888.035045][T13679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1888.046978][T19878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1888.054076][T19878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1888.109845][T11253] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1888.144698][T26958] veth0_vlan: entered promiscuous mode [ 1888.182649][T26958] veth1_macvtap: entered promiscuous mode [ 1888.258896][ T9] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 1888.258905][T11253] usb 10-1: device descriptor read/64, error -71 [ 1888.435462][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1888.446521][ T9] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1888.459634][ T9] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1888.488790][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1888.495735][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1888.507924][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.529740][T11253] usb 10-1: device descriptor read/64, error -71 [ 1888.531927][ T9] usb 3-1: config 0 descriptor?? [ 1888.559445][T26969] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1888.674814][T11253] usb usb10-port1: attempt power cycle [ 1888.711684][T26986] rust_binder: Error while translating object. [ 1888.711734][T26986] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1888.718029][T26986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337 [ 1888.814046][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1888.855762][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1888.874275][ T9] usb 3-1: USB disconnect, device number 116 [ 1888.895343][ T9351] Bluetooth: hci0: Frame reassembly failed (-84) [ 1889.047590][T11253] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1889.082754][T11253] usb 10-1: device descriptor read/8, error -71 [ 1889.122304][T11265] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1889.225854][T11253] usb 10-1: device descriptor read/8, error -71 [ 1889.271504][T11265] usb 6-1: device descriptor read/64, error -71 [ 1889.452645][T11266] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1889.484696][T11253] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1889.508447][T11253] usb 10-1: device descriptor read/8, error -71 [ 1889.527677][T11265] usb 6-1: device descriptor read/64, error -71 [ 1889.612515][T11266] usb 3-1: Using ep0 maxpacket: 32 [ 1889.620316][T11266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1889.631344][T11266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1889.641201][T11266] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1889.650483][T11266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.661306][T11253] usb 10-1: device descriptor read/8, error -71 [ 1889.667947][T11266] usb 3-1: config 0 descriptor?? [ 1889.679008][T11266] hub 3-1:0.0: USB hub found [ 1889.783243][T11253] usb usb10-port1: unable to enumerate USB device [ 1889.793717][T11265] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1889.893723][T11266] hub 3-1:0.0: 1 port detected [ 1889.932278][T11265] usb 6-1: device descriptor read/64, error -71 [ 1890.111775][ T36] kauditd_printk_skb: 591 callbacks suppressed [ 1890.111797][ T36] audit: type=1400 audit(2000000194.826:323823): avc: denied { ioctl } for pid=27005 comm="syz.2.19213" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1890.143592][ T36] audit: type=1400 audit(2000000194.826:323824): avc: denied { ioctl } for pid=27005 comm="syz.2.19213" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1890.170226][ T36] audit: type=1400 audit(2000000194.892:323825): avc: denied { ioctl } for pid=26992 comm="syz.5.19210" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1890.230767][T11265] usb 6-1: device descriptor read/64, error -71 [ 1890.326953][ T36] audit: type=1400 audit(2000000195.033:323826): avc: denied { ioctl } for pid=27005 comm="syz.2.19213" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1890.352361][ T36] audit: type=1400 audit(2000000195.033:323827): avc: denied { ioctl } for pid=27005 comm="syz.2.19213" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1890.352433][T11265] usb usb6-port1: attempt power cycle [ 1890.384735][ T36] audit: type=1400 audit(2000000195.089:323828): avc: denied { ioctl } for pid=26992 comm="syz.5.19210" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1890.437829][ T36] audit: type=1400 audit(2000000195.089:323829): avc: denied { ioctl } for pid=26992 comm="syz.5.19210" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1890.453567][T27008] rust_binder: Error while translating object. [ 1890.474741][ T36] audit: type=1400 audit(2000000195.089:323830): avc: denied { ioctl } for pid=26992 comm="syz.5.19210" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1890.485513][T27008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1890.509237][ T36] audit: type=1400 audit(2000000195.099:323831): avc: denied { read write } for pid=24266 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1890.509712][T27008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:500 [ 1890.520648][ T36] audit: type=1400 audit(2000000195.099:323832): avc: denied { read write open } for pid=24266 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1890.595374][T11255] hub 3-1:0.0: activate --> -90 [ 1890.753024][T11265] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1890.777718][T11265] usb 6-1: device descriptor read/8, error -71 [ 1890.917189][T11265] usb 6-1: device descriptor read/8, error -71 [ 1891.062143][T19888] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1891.180804][T11265] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1891.203304][T11265] usb 6-1: device descriptor read/8, error -71 [ 1891.264641][T11253] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1891.342153][T11265] usb 6-1: device descriptor read/8, error -71 [ 1891.413823][T11253] usb 10-1: device descriptor read/64, error -71 [ 1891.456978][T11265] usb usb6-port1: unable to enumerate USB device [ 1891.605688][T11266] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1891.669633][T11253] usb 10-1: device descriptor read/64, error -71 [ 1891.765548][T11266] usb 4-1: Using ep0 maxpacket: 32 [ 1891.773427][T11266] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1891.781676][T11266] usb 4-1: config 0 has no interface number 0 [ 1891.791528][T11266] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1891.800652][T11266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.808689][T11266] usb 4-1: Product: syz [ 1891.812870][T11266] usb 4-1: Manufacturer: syz [ 1891.817481][T11266] usb 4-1: SerialNumber: syz [ 1891.825328][T11266] usb 4-1: config 0 descriptor?? [ 1891.833933][T11266] smsc95xx v2.0.0 [ 1891.915534][T11255] usb 3-1-port1: cannot disable (err = -32) [ 1891.922466][T11255] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 1891.929392][T11253] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1892.072717][T27029] rust_binder: Write failure EFAULT in pid:348 [ 1892.075356][T11253] usb 10-1: device descriptor read/64, error -71 [ 1892.268984][T11266] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1892.279951][T11266] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1892.351827][T11253] usb 10-1: device descriptor read/64, error -71 [ 1892.469709][T11253] usb usb10-port1: attempt power cycle [ 1892.512869][T11265] usb 3-1: USB disconnect, device number 117 [ 1892.831490][T11253] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1892.867451][T11253] usb 10-1: device descriptor read/8, error -71 [ 1892.952481][T27050] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 1893.029895][T11253] usb 10-1: device descriptor read/8, error -71 [ 1893.300433][T11253] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1893.321757][T11255] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1893.332171][T11253] usb 10-1: device descriptor read/8, error -71 [ 1893.473794][T11253] usb 10-1: device descriptor read/8, error -71 [ 1893.481651][T11255] usb 3-1: Using ep0 maxpacket: 8 [ 1893.490273][T11255] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1893.500109][T11255] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.510322][T11255] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1893.526934][T11255] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1893.536191][T11255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.544220][T11255] usb 3-1: Product: syz [ 1893.548516][T11255] usb 3-1: Manufacturer: syz [ 1893.553147][T11255] usb 3-1: SerialNumber: syz [ 1893.560003][T11255] usb 3-1: config 0 descriptor?? [ 1893.581413][T11255] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1893.591662][T11253] usb usb10-port1: unable to enumerate USB device [ 1893.654991][T25123] udevd[25123]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1893.789011][T27059] binder: Bad value for 'max' [ 1893.834334][T20407] usb 3-1: USB disconnect, device number 118 [ 1894.030650][T11266] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 1894.046411][T11266] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1894.056090][T11266] usb 4-1: USB disconnect, device number 109 [ 1894.633238][T27082] input: syz1 as /devices/virtual/input/input165 [ 1894.678294][T27079] veth1_macvtap: entered promiscuous mode [ 1894.684194][T27079] macsec0: left promiscuous mode [ 1894.738932][T27084] tc_dump_action: action bad kind [ 1894.981408][T27095] netlink: 228 bytes leftover after parsing attributes in process `syz.9.19242'. [ 1895.048436][T11266] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1895.155051][T11265] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1895.210897][T11266] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.221481][T11266] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1895.235127][T11266] usb 6-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 1895.244353][T11266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.254285][T11266] usb 6-1: config 0 descriptor?? [ 1895.261605][ T441] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1895.261927][T11266] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1895.314893][T11265] usb 3-1: Using ep0 maxpacket: 16 [ 1895.326452][T11265] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1895.334643][T11265] usb 3-1: config 0 has no interface number 0 [ 1895.344697][T11265] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1895.353835][T11265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.361964][T11265] usb 3-1: Product: syz [ 1895.366147][T11265] usb 3-1: Manufacturer: syz [ 1895.370867][T11265] usb 3-1: SerialNumber: syz [ 1895.377157][T11265] usb 3-1: config 0 descriptor?? [ 1895.384817][T11265] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 1895.391238][T11265] usb 3-1: No valid video chain found. [ 1895.442814][ T441] usb 10-1: Using ep0 maxpacket: 16 [ 1895.448793][ T36] kauditd_printk_skb: 647 callbacks suppressed [ 1895.448814][ T36] audit: type=1400 audit(2000000199.836:324480): avc: denied { ioctl } for pid=27094 comm="syz.9.19242" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1895.451289][ T441] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 1895.455706][ T36] audit: type=1400 audit(2000000199.836:324481): avc: denied { ioctl } for pid=27094 comm="syz.9.19242" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1895.480818][ T441] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.494070][ T36] audit: type=1400 audit(2000000199.836:324482): avc: denied { ioctl } for pid=27094 comm="syz.9.19242" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1895.549399][ T441] usb 10-1: config 0 has no interface number 0 [ 1895.558729][ T36] audit: type=1400 audit(2000000199.836:324483): avc: denied { ioctl } for pid=27094 comm="syz.9.19242" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1895.571013][ T441] usb 10-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1895.585461][ T36] audit: type=1400 audit(2000000199.836:324484): avc: denied { ioctl } for pid=27094 comm="syz.9.19242" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1895.602777][ T441] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.627883][ T441] usb 10-1: Product: syz [ 1895.632187][ T441] usb 10-1: Manufacturer: syz [ 1895.635185][T27093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1895.655190][T27093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1895.663865][ T36] audit: type=1400 audit(2000000199.874:324485): avc: denied { ioctl } for pid=27094 comm="syz.9.19242" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1895.676787][ T441] usb 10-1: SerialNumber: syz [ 1895.697210][ T36] audit: type=1400 audit(2000000199.874:324486): avc: denied { read write } for pid=27086 comm="syz.5.19239" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1895.710760][ T441] usb 10-1: config 0 descriptor?? [ 1895.747987][ T36] audit: type=1400 audit(2000000199.874:324487): avc: denied { read write open } for pid=27086 comm="syz.5.19239" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1895.802951][ T36] audit: type=1400 audit(2000000199.902:324488): avc: denied { read write } for pid=27086 comm="syz.5.19239" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1895.832376][T11284] usb 6-1: USB disconnect, device number 4 [ 1895.835595][ T36] audit: type=1400 audit(2000000199.902:324489): avc: denied { read write open } for pid=27086 comm="syz.5.19239" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1895.914948][T27107] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 1895.922143][T27107] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1896.056405][T27120] rust_binder: Write failure EFAULT in pid:388 [ 1896.151213][T27119] rust_binder: Got transaction with invalid offset. [ 1896.170092][T27119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1896.183582][T27119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 1896.278544][T11266] usb 10-1: USB disconnect, device number 11 [ 1896.892428][ T9] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1897.052305][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1897.061668][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1897.072198][ T9] usb 10-1: config 6 has an invalid interface number: 248 but max is 0 [ 1897.080551][ T9] usb 10-1: config 6 has no interface number 0 [ 1897.086790][ T9] usb 10-1: config 6 interface 248 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1897.100065][ T9] usb 10-1: config 6 interface 248 has no altsetting 0 [ 1897.110918][ T9] usb 10-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1897.120284][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.128452][ T9] usb 10-1: Product: syz [ 1897.132724][ T9] usb 10-1: Manufacturer: syz [ 1897.137461][ T9] usb 10-1: SerialNumber: syz [ 1897.373170][ T9] ums-karma 10-1:6.248: USB Mass Storage device detected [ 1897.446062][ T9] usb 10-1: USB disconnect, device number 12 [ 1897.502154][T27154] rust_binder: Write failure EFAULT in pid:49 [ 1897.556276][T27157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1897.562412][T27157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:51 [ 1897.691851][T11265] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1897.716661][T27162] tipc: Enabling of bearer rejected, failed to enable media [ 1897.726607][T27162] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27162 comm=syz.3.19261 [ 1897.862343][T11265] usb 6-1: Using ep0 maxpacket: 32 [ 1897.870084][T11265] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1897.879043][T11265] usb 6-1: config 0 has no interface number 0 [ 1897.888359][T11265] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1897.898044][T11265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.906087][T11265] usb 6-1: Product: syz [ 1897.910267][T11265] usb 6-1: Manufacturer: syz [ 1897.914877][T11265] usb 6-1: SerialNumber: syz [ 1897.921390][T11265] usb 6-1: config 0 descriptor?? [ 1897.937996][T11265] smsc95xx v2.0.0 [ 1898.118291][ T9] usb 3-1: USB disconnect, device number 119 [ 1898.395185][T11265] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1898.416573][T11265] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1898.663478][T11265] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1898.674423][T11265] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1898.997329][T27168] rust_binder: Error while translating object. [ 1898.997383][T27168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1899.014248][T27168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 1899.291861][T27199] rust_binder: Write failure EFAULT in pid:549 [ 1899.398724][T27204] netlink: 680 bytes leftover after parsing attributes in process `syz.2.19274'. [ 1899.414307][ T441] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1899.531328][T27207] rust_binder: Failed to allocate buffer. len:64, is_oneway:true [ 1899.581524][ T441] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.599539][ T441] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1899.608567][ T441] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1899.617681][ T441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.633651][ T441] usb 4-1: config 0 descriptor?? [ 1899.927363][T13679] Bluetooth: hci0: Frame reassembly failed (-84) [ 1899.949143][T27219] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1900.079376][ T441] usb 3-1: new low-speed USB device number 120 using dummy_hcd [ 1900.217909][ T441] usb 3-1: device descriptor read/64, error -71 [ 1900.473735][ T441] usb 3-1: device descriptor read/64, error -71 [ 1900.729532][ T441] usb 3-1: new low-speed USB device number 121 using dummy_hcd [ 1900.815282][ T36] kauditd_printk_skb: 594 callbacks suppressed [ 1900.815298][ T36] audit: type=1400 audit(2000000204.875:325084): avc: denied { ioctl } for pid=27215 comm="syz.2.19278" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1900.878757][ T441] usb 3-1: device descriptor read/64, error -71 [ 1900.982675][ T36] audit: type=1400 audit(2000000205.025:325085): avc: denied { write } for pid=27188 comm="syz.3.19269" laddr=fe80::b461:dbff:fe88:d00c lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1901.007481][ T36] audit: type=1400 audit(2000000205.025:325086): avc: denied { write } for pid=27188 comm="syz.3.19269" laddr=fe80::b461:dbff:fe88:d00c lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1901.033842][ T36] audit: type=1400 audit(2000000205.034:325087): avc: denied { read } for pid=27188 comm="syz.3.19269" name="binder1" dev="binder" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1901.057980][ T36] audit: type=1400 audit(2000000205.034:325088): avc: denied { read open } for pid=27188 comm="syz.3.19269" path="/dev/binderfs/binder1" dev="binder" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1901.083762][ T36] audit: type=1400 audit(2000000205.072:325089): avc: denied { ioctl } for pid=27215 comm="syz.2.19278" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1901.109884][ T36] audit: type=1400 audit(2000000205.072:325090): avc: denied { ioctl } for pid=27215 comm="syz.2.19278" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1901.138807][ T36] audit: type=1400 audit(2000000205.100:325091): avc: denied { ioctl } for pid=27215 comm="syz.2.19278" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1901.165251][ T36] audit: type=1400 audit(2000000205.100:325092): avc: denied { ioctl } for pid=27215 comm="syz.2.19278" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1901.191800][ T36] audit: type=1400 audit(2000000205.100:325093): avc: denied { ioctl } for pid=27215 comm="syz.2.19278" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1901.219843][ T441] usb 3-1: device descriptor read/64, error -71 [ 1901.337151][ T441] usb usb3-port1: attempt power cycle [ 1901.699504][ T441] usb 3-1: new low-speed USB device number 122 using dummy_hcd [ 1901.725011][ T441] usb 3-1: device descriptor read/8, error -71 [ 1901.765407][T11266] usb 6-1: USB disconnect, device number 5 [ 1901.878475][ T441] usb 3-1: device descriptor read/8, error -71 [ 1902.061896][T12440] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1902.061915][T19888] Bluetooth: hci0: command 0x1003 tx timeout [ 1902.147149][ T441] usb 3-1: new low-speed USB device number 123 using dummy_hcd [ 1902.172575][ T441] usb 3-1: device descriptor read/8, error -71 [ 1902.328679][ T441] usb 3-1: device descriptor read/8, error -71 [ 1902.345289][T27236] kvm: kvm [27234]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 1902.362618][T27236] kvm: kvm [27234]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 1902.372224][T27236] kvm: kvm [27234]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 1902.383452][T27236] kvm: kvm [27234]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 1902.392828][T27236] kvm: kvm [27234]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010000) = 0x8000 [ 1902.402488][T27236] kvm: kvm [27234]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010000) = 0x8000 [ 1902.411944][T27236] kvm: kvm [27234]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010000) = 0x8000 [ 1902.421395][T27236] kvm: kvm [27234]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010000) = 0x8000 [ 1902.431683][T27236] kvm: kvm [27234]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010000) = 0x8000 [ 1902.441830][T27236] kvm: kvm [27234]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010000) = 0x8000 [ 1902.457639][ T441] usb usb3-port1: unable to enumerate USB device [ 1902.490049][T11284] usb 4-1: USB disconnect, device number 111 [ 1902.724584][T27250] rust_binder: Write failure EFAULT in pid:416 [ 1903.105869][T27271] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1903.123341][T27271] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 1903.248584][T27276] incfs: Options parsing error. -22 [ 1903.271846][T27276] incfs: mount failed -22 [ 1903.294050][T27276] rust_binder: inc_ref_done called when no active inc_refs [ 1903.414107][T27282] rust_binder: 27278 RLIMIT_NICE not set [ 1903.415067][T27282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:572 [ 1904.025285][T27337] EXT4-fs: dax option not supported [ 1904.257558][T20407] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1904.406813][T20407] usb 6-1: device descriptor read/64, error -71 [ 1904.551289][T27372] rust_binder: Write failure EFAULT in pid:98 [ 1904.594684][T27374] 8021q: VLANs not supported on lo [ 1904.662601][T20407] usb 6-1: device descriptor read/64, error -71 [ 1904.672771][T27379] binder: Bad value for 'defcontext' [ 1904.738789][T27384] fuse: Bad value for 'fd' [ 1904.783215][T27383] ptm ptm34: ldisc open failed (-12), clearing slot 34 [ 1904.854681][T27391] netlink: 'syz.9.19322': attribute type 30 has an invalid length. [ 1904.918411][T20407] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1905.067625][T20407] usb 6-1: device descriptor read/64, error -71 [ 1905.159644][T27403] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=27403 comm=syz.2.19325 [ 1905.334096][T20407] usb 6-1: device descriptor read/64, error -71 [ 1905.451419][T20407] usb usb6-port1: attempt power cycle [ 1905.758339][T27409] netlink: 188 bytes leftover after parsing attributes in process `syz.3.19327'. [ 1905.824405][T20407] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1905.860336][T20407] usb 6-1: device descriptor read/8, error -71 [ 1905.902409][T27417] rust_binder: Error while translating object. [ 1905.902458][T27417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1905.908776][T27417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 1906.010049][T20407] usb 6-1: device descriptor read/8, error -71 [ 1906.028819][T27424] rust_binder: Error while translating object. [ 1906.028868][T27424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1906.035116][T27424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 1906.161434][ T36] kauditd_printk_skb: 1202 callbacks suppressed [ 1906.161458][ T36] audit: type=1400 audit(2000000502.886:326296): avc: denied { ioctl } for pid=27329 comm="syz.5.19305" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1906.226164][ T36] audit: type=1400 audit(2000000502.886:326297): avc: denied { ioctl } for pid=27329 comm="syz.5.19305" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1906.258631][ T36] audit: type=1400 audit(2000000502.905:326298): avc: denied { read } for pid=27433 comm="syz.3.19337" name="binder1" dev="binder" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1906.289794][ T36] audit: type=1400 audit(2000000502.905:326299): avc: denied { read open } for pid=27433 comm="syz.3.19337" path="/dev/binderfs/binder1" dev="binder" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1906.293165][T20407] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1906.317183][ T36] audit: type=1400 audit(2000000502.914:326300): avc: denied { read } for pid=27433 comm="syz.3.19337" dev="nsfs" ino=4026532442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1906.344115][ T36] audit: type=1400 audit(2000000502.914:326301): avc: denied { read open } for pid=27433 comm="syz.3.19337" path="net:[4026532442]" dev="nsfs" ino=4026532442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1906.344956][T27436] tipc: Enabled bearer , priority 0 [ 1906.368322][ T36] audit: type=1400 audit(2000000502.914:326302): avc: denied { create } for pid=27433 comm="syz.3.19337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1906.395216][ T36] audit: type=1400 audit(2000000502.914:326303): avc: denied { connect } for pid=27433 comm="syz.3.19337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1906.399811][T20407] usb 6-1: device descriptor read/8, error -71 [ 1906.419756][ T36] audit: type=1400 audit(2000000502.914:326304): avc: denied { getopt } for pid=27433 comm="syz.3.19337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1906.445475][ T36] audit: type=1400 audit(2000000502.914:326305): avc: denied { read } for pid=27433 comm="syz.3.19337" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1906.583322][T20407] usb 6-1: device descriptor read/8, error -71 [ 1906.617168][T27444] netlink: 56 bytes leftover after parsing attributes in process `syz.3.19341'. [ 1906.696363][T20407] usb usb6-port1: unable to enumerate USB device [ 1906.876636][T11253] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1907.035764][T11253] usb 4-1: Using ep0 maxpacket: 8 [ 1907.044000][T11253] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1907.052336][T11253] usb 4-1: config 250 has an invalid interface number: 0 but max is -1 [ 1907.060637][T11253] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.070943][T11253] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1907.082753][T11253] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1907.093032][T11253] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1907.101424][T11253] usb 4-1: Product: syz [ 1907.105609][T11253] usb 4-1: SerialNumber: syz [ 1907.121238][T11253] hub 4-1:250.0: bad descriptor, ignoring hub [ 1907.127405][T11253] hub 4-1:250.0: probe with driver hub failed with error -5 [ 1907.136433][T27435] tipc: Disabling bearer [ 1907.346379][T27450] rust_binder: Error while translating object. [ 1907.346426][T27450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1907.352660][T27450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:452 [ 1907.386289][T27444] netlink: 393 bytes leftover after parsing attributes in process `syz.3.19341'. [ 1907.449669][T20407] usb 4-1: USB disconnect, device number 112 [ 1907.635578][T27462] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 1908.142432][T27470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1908.155482][T27470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.283165][T27479] overlay: Unknown parameter 'audit' [ 1908.427223][T27489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19357'. [ 1908.442756][T27488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19357'. [ 1908.486720][T27488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1908.642940][T27497] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 1908.832367][T27500] rust_binder: Write failure EFAULT in pid:908 [ 1908.979290][T27509] /dev/nbd5: Can't lookup blockdev [ 1909.104206][T27512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:912 [ 1909.108317][T27513] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1909.171218][T27516] rust_binder: Write failure EFAULT in pid:917 [ 1909.271458][T27520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.317743][T27520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.518409][T11255] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1909.678152][T11255] usb 3-1: Using ep0 maxpacket: 8 [ 1909.688283][T11266] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 1909.697205][T11255] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1909.713582][T11255] usb 3-1: config 6 has an invalid interface number: 248 but max is 0 [ 1909.723430][T27530] rust_binder: Error while translating object. [ 1909.723481][T27530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1909.729690][T27530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 1909.739186][T11255] usb 3-1: config 6 has no interface number 0 [ 1909.754670][T11255] usb 3-1: config 6 interface 248 has no altsetting 0 [ 1909.766129][T11255] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1909.783690][T11255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.791741][T11255] usb 3-1: Product: syz [ 1909.808100][T11255] usb 3-1: Manufacturer: syz [ 1909.812769][T11255] usb 3-1: SerialNumber: syz [ 1909.861240][T11266] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1909.871352][T27533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1622 sclass=netlink_route_socket pid=27533 comm=syz.3.19371 [ 1909.873195][T11266] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1909.899539][T11266] usb 10-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 1909.909036][T11266] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.919624][T11266] usb 10-1: config 0 descriptor?? [ 1909.927601][T27524] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 1909.936587][T11266] usbhid 10-1:0.0: can't add hid device: -22 [ 1909.942817][T11266] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 1910.007647][T27534] binder: Unknown parameter 'P' [ 1910.042795][T11255] ums-karma 3-1:6.248: USB Mass Storage device detected [ 1910.086502][T11255] usb 3-1: USB disconnect, device number 124 [ 1910.180451][T11253] usb 10-1: USB disconnect, device number 13 [ 1910.660744][T27539] netlink: 'syz.5.19372': attribute type 4 has an invalid length. [ 1910.678504][T27539] binder: Bad value for 'max' [ 1910.868023][T27549] syz.9.19375: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz9,mems_allowed=0 [ 1910.908766][T27554] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 1910.925961][T27549] CPU: 0 UID: 0 PID: 27549 Comm: syz.9.19375 Not tainted syzkaller #0 687dd8cc987f259803714ab19d9ffd663b1e6878 [ 1910.926000][T27549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1910.926016][T27549] Call Trace: [ 1910.926025][T27549] [ 1910.926035][T27549] __dump_stack+0x21/0x30 [ 1910.926074][T27549] dump_stack_lvl+0x10c/0x190 [ 1910.926106][T27549] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1910.926140][T27549] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 1910.926172][T27549] dump_stack+0x19/0x20 [ 1910.926202][T27549] warn_alloc+0x1bc/0x2a0 [ 1910.926235][T27549] ? stack_depot_save_flags+0x38/0x800 [ 1910.926261][T27549] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 1910.926291][T27549] ? __cfi_warn_alloc+0x10/0x10 [ 1910.926321][T27549] ? kasan_save_track+0x4f/0x80 [ 1910.926344][T27549] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 1910.926365][T27549] ? xskq_create+0x68/0x2a0 [ 1910.926395][T27549] ? xsk_init_queue+0xb6/0x120 [ 1910.926426][T27549] ? xsk_setsockopt+0x43f/0x6f0 [ 1910.926457][T27549] ? do_sock_setsockopt+0x26d/0x400 [ 1910.926488][T27549] ? __x64_sys_setsockopt+0x1b8/0x250 [ 1910.926520][T27549] ? x64_sys_call+0x2adc/0x2ee0 [ 1910.926555][T27549] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1910.926593][T27549] __vmalloc_node_range_noprof+0x135/0x1420 [ 1910.926634][T27549] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 1910.926671][T27549] ? kasan_save_alloc_info+0x40/0x50 [ 1910.926705][T27549] ? __kasan_kmalloc+0x96/0xb0 [ 1910.926733][T27549] vmalloc_user_noprof+0x77/0x90 [ 1910.926766][T27549] ? xskq_create+0xdb/0x2a0 [ 1910.926797][T27549] xskq_create+0xdb/0x2a0 [ 1910.926838][T27549] xsk_init_queue+0xb6/0x120 [ 1910.926870][T27549] xsk_setsockopt+0x43f/0x6f0 [ 1910.926901][T27549] ? __cfi_xsk_setsockopt+0x10/0x10 [ 1910.926931][T27549] ? do_futex+0x309/0x500 [ 1910.926957][T27549] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 1910.926988][T27549] ? security_socket_setsockopt+0x33/0xd0 [ 1910.927011][T27549] ? __cfi_xsk_setsockopt+0x10/0x10 [ 1910.927040][T27549] do_sock_setsockopt+0x26d/0x400 [ 1910.927072][T27549] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 1910.927106][T27549] __x64_sys_setsockopt+0x1b8/0x250 [ 1910.927139][T27549] x64_sys_call+0x2adc/0x2ee0 [ 1910.927176][T27549] do_syscall_64+0x58/0xf0 [ 1910.927203][T27549] ? clear_bhb_loop+0x50/0xa0 [ 1910.927228][T27549] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1910.927265][T27549] RIP: 0033:0x7fc768d8eec9 [ 1910.927287][T27549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1910.927309][T27549] RSP: 002b:00007fc769c90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1910.927336][T27549] RAX: ffffffffffffffda RBX: 00007fc768fe5fa0 RCX: 00007fc768d8eec9 [ 1910.927356][T27549] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1910.927372][T27549] RBP: 00007fc768e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 1910.927390][T27549] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1910.927407][T27549] R13: 00007fc768fe6038 R14: 00007fc768fe5fa0 R15: 00007fff8d266628 [ 1910.927429][T27549] [ 1910.927439][T27549] Mem-Info: [ 1911.247895][T27549] active_anon:61040 inactive_anon:801 isolated_anon:0 [ 1911.247895][T27549] active_file:8409 inactive_file:17460 isolated_file:0 [ 1911.247895][T27549] unevictable:16397 dirty:41 writeback:0 [ 1911.247895][T27549] slab_reclaimable:6107 slab_unreclaimable:93135 [ 1911.247895][T27549] mapped:35481 shmem:32953 pagetables:1107 [ 1911.247895][T27549] sec_pagetables:3 bounce:0 [ 1911.247895][T27549] kernel_misc_reclaimable:0 [ 1911.247895][T27549] free:1400857 free_pcp:2904 free_cma:0 [ 1911.329774][T27549] Node 0 active_anon:244064kB inactive_anon:3204kB active_file:33636kB inactive_file:69840kB unevictable:65588kB isolated(anon):0kB isolated(file):0kB mapped:141924kB dirty:164kB writeback:0kB shmem:131812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8860kB pagetables:4300kB sec_pagetables:12kB all_unreclaimable? no [ 1911.410337][T27549] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:0kB free_cma:0kB [ 1911.451600][T27549] lowmem_reserve[]: 0 3921 3921 [ 1911.456546][T27549] Normal free:2646652kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:244164kB inactive_anon:3204kB active_file:33636kB inactive_file:69840kB unevictable:65588kB writepending:164kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3324kB local_pcp:1344kB free_cma:0kB [ 1911.488677][ T36] kauditd_printk_skb: 1275 callbacks suppressed [ 1911.488700][ T36] audit: type=1400 audit(2000000507.881:327581): avc: denied { read write } for pid=22131 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1911.544915][ T36] audit: type=1400 audit(2000000507.900:327582): avc: denied { ioctl } for pid=27562 comm="syz.5.19379" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1911.576721][T27549] lowmem_reserve[]: 0 0 0 [ 1911.581145][T27549] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 1911.606709][ T36] audit: type=1400 audit(2000000507.900:327583): avc: denied { read write open } for pid=22131 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1911.621732][T27549] Normal: [ 1911.635036][T27576] rust_binder: Failed to allocate buffer. len:208, is_oneway:false [ 1911.640427][T20407] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1911.652987][T27549] 1650*4kB (UME) 5560*8kB (UME) 2539*16kB (UME) 874*32kB (UME) 292*64kB (UME) 332*128kB (UME) 129*256kB (UME) 106*512kB (UME) 74*1024kB (UME) 18*2048kB (UME) 553*4096kB (UM) = 2645880kB [ 1911.669985][ T36] audit: type=1400 audit(2000000507.900:327584): avc: denied { ioctl } for pid=22131 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1911.682241][T27549] 76138 total pagecache pages [ 1911.710159][T27549] 921 pages in swap cache [ 1911.714542][T27549] Free swap = 120688kB [ 1911.720042][T27549] Total swap = 124996kB [ 1911.724230][T27549] 2097051 pages RAM [ 1911.729167][T27549] 0 pages HighMem/MovableOnly [ 1911.733974][T27549] 351537 pages reserved [ 1911.745889][ T36] audit: type=1400 audit(2000000507.966:327585): avc: denied { ioctl } for pid=27562 comm="syz.5.19379" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1911.746838][T27549] 0 pages cma reserved [ 1911.771525][ T36] audit: type=1400 audit(2000000507.975:327586): avc: denied { read write } for pid=22131 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1911.783790][T27549] Memory allocations: [ 1911.801056][ T36] audit: type=1400 audit(2000000507.975:327587): avc: denied { read write open } for pid=22131 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1911.806371][T27549] 0 B 0 init/main.c:1370 func:do_initcalls [ 1911.829265][ T36] audit: type=1400 audit(2000000507.975:327588): avc: denied { ioctl } for pid=22131 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1911.837845][T27549] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 1911.864134][ T36] audit: type=1400 audit(2000000507.994:327589): avc: denied { ioctl } for pid=27566 comm="syz.3.19381" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1911.871671][T27549] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 1911.905440][T27549] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 1911.905685][T20407] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1911.915137][T27549] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 1911.932586][T27549] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 1911.937514][T20407] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1911.942714][T27549] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 1911.958724][ T36] audit: type=1400 audit(2000000507.994:327590): avc: denied { ioctl } for pid=27566 comm="syz.3.19381" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1911.959768][T27549] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 1911.993899][T27549] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 1912.007710][T20407] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1912.012458][T27549] 0 B 0 init/initramfs.c:101 func:find_link [ 1912.017511][T20407] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.032761][T20407] usb 6-1: Product: syz [ 1912.037005][T20407] usb 6-1: Manufacturer: syz [ 1912.041630][T20407] usb 6-1: SerialNumber: syz [ 1912.170196][T27584] binder: Bad value for 'max' [ 1912.186663][T27586] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 1912.186691][T27586] rust_binder: Error while translating object. [ 1912.213490][T27586] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1912.219751][T27586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:943 [ 1912.510496][ T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1912.680253][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1912.688960][ T9] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1912.697914][ T9] usb 10-1: config 0 has no interface number 0 [ 1912.704523][ T9] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1912.714686][ T9] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1912.724789][ T9] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1912.736789][ T9] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1912.754560][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.763171][ T9] usb 10-1: Product: syz [ 1912.767694][ T9] usb 10-1: Manufacturer: syz [ 1912.775109][ T9] usb 10-1: SerialNumber: syz [ 1912.782232][ T9] usb 10-1: config 0 descriptor?? [ 1912.789332][T27588] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1912.797064][T27588] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1912.907987][T27618] x_tables: duplicate underflow at hook 1 [ 1912.991603][T27563] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1913.012429][T20407] usb 6-1: 0:2 : does not exist [ 1913.021869][T27588] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1913.030866][T27588] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1913.062413][T20407] usb 6-1: USB disconnect, device number 11 [ 1913.098527][T27624] overlayfs: failed to resolve './file0': -2 [ 1913.123780][T27624] rust_binder: Error while translating object. [ 1913.123818][T27624] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1913.136533][T27624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:181 [ 1913.154759][T24809] udevd[24809]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1913.182974][T27625] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1913.682210][ T9] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1913.969097][T27638] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1914.155576][T27644] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1914.164207][T27644] overlayfs: missing 'lowerdir' [ 1914.180584][T27644] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1914.181208][T27644] cgroup2: Unknown parameter 'fsname' [ 1914.200132][T27644] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 1914.386271][T27656] tmpfs: Unknown parameter '' [ 1914.390976][T27657] tmpfs: Unknown parameter '' [ 1914.628748][T27663] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1914.696401][T11255] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1914.844998][T11255] usb 3-1: device descriptor read/64, error -71 [ 1915.018205][T27588] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 1915.018662][ T9] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 1915.038922][ T9] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1915.051002][ T9] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 1915.061741][ T9] usb 10-1: USB disconnect, device number 14 [ 1915.078421][T11253] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1915.131512][T11255] usb 3-1: device descriptor read/64, error -71 [ 1915.240974][T11253] usb 6-1: config 0 has no interfaces? [ 1915.248523][T11253] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1915.257618][T11253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.270670][T11253] usb 6-1: config 0 descriptor?? [ 1915.386190][T11255] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1915.499907][T27668] netlink: 64 bytes leftover after parsing attributes in process `syz.5.19412'. [ 1915.510196][T27668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:505 [ 1915.525162][T27668] rust_binder: Read failure Err(EAGAIN) in pid:505 [ 1915.535429][T11255] usb 3-1: device descriptor read/64, error -71 [ 1915.535459][T11284] usb 6-1: USB disconnect, device number 12 [ 1915.789410][T11255] usb 3-1: device descriptor read/64, error -71 [ 1915.853080][T20407] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1915.906207][T11255] usb usb3-port1: attempt power cycle [ 1916.006331][T27675] sock: sock_set_timeout: `syz.3.19415' (pid 27675) tries to set negative timeout [ 1916.018760][T20407] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1916.030775][T20407] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1916.041034][T20407] usb 10-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 1916.050555][T20407] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.061148][T20407] usb 10-1: config 0 descriptor?? [ 1916.266930][T11255] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1916.316613][T11255] usb 3-1: device descriptor read/8, error -71 [ 1916.318578][T20407] uclogic 0003:28BD:0074.005E: interface is invalid, ignoring [ 1916.460831][T11255] usb 3-1: device descriptor read/8, error -71 [ 1916.472447][T27703] rust_binder: Fixups oob 165 172 361 173 [ 1916.472479][T27703] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 1916.478299][T27703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1916.488494][T27703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:209 [ 1916.548073][T20407] usb 10-1: USB disconnect, device number 15 [ 1916.650013][T27711] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1916.650412][T27711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:211 [ 1916.733888][T11255] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1916.789627][T11255] usb 3-1: device descriptor read/8, error -71 [ 1916.819156][ T36] kauditd_printk_skb: 752 callbacks suppressed [ 1916.819178][ T36] audit: type=1400 audit(2000000512.932:328343): avc: denied { read write } for pid=26958 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1916.851860][ T36] audit: type=1400 audit(2000000512.932:328344): avc: denied { read write open } for pid=26958 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1916.852607][T27720] rust_binder: Write failure EFAULT in pid:218 [ 1916.878017][ T36] audit: type=1400 audit(2000000512.932:328345): avc: denied { ioctl } for pid=26958 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1916.910125][ T36] audit: type=1400 audit(2000000512.951:328346): avc: denied { read } for pid=27719 comm="syz.3.19430" name="binder1" dev="binder" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1916.928126][T11255] usb 3-1: device descriptor read/8, error -71 [ 1916.934260][ T36] audit: type=1400 audit(2000000512.951:328347): avc: denied { read open } for pid=27719 comm="syz.3.19430" path="/dev/binderfs/binder1" dev="binder" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1916.964267][ T36] audit: type=1400 audit(2000000512.951:328348): avc: denied { ioctl } for pid=27719 comm="syz.3.19430" path="/dev/binderfs/binder1" dev="binder" ino=77 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1916.990095][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1916.991738][ T36] audit: type=1400 audit(2000000512.970:328349): avc: denied { ioctl } for pid=27713 comm="syz.5.19427" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1917.023210][ T36] audit: type=1400 audit(2000000512.970:328350): avc: denied { set_context_mgr } for pid=27719 comm="syz.3.19430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1917.043541][ T36] audit: type=1400 audit(2000000512.970:328351): avc: denied { ioctl } for pid=27719 comm="syz.3.19430" path="/dev/binderfs/binder1" dev="binder" ino=77 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1917.069372][ T36] audit: type=1400 audit(2000000512.998:328352): avc: denied { create } for pid=27719 comm="syz.3.19430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1917.069989][T11255] usb usb3-port1: unable to enumerate USB device [ 1917.168967][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1917.180879][ T9] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 1917.199527][ T9] usb 6-1: config 0 has no interface number 0 [ 1917.202270][T27727] @: renamed from vlan0 (while UP) [ 1917.205855][ T9] usb 6-1: config 0 interface 230 has no altsetting 0 [ 1917.222284][ T9] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1917.231538][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.239586][ T9] usb 6-1: Product: syz [ 1917.243838][ T9] usb 6-1: Manufacturer: syz [ 1917.248440][ T9] usb 6-1: SerialNumber: syz [ 1917.255250][ T9] usb 6-1: config 0 descriptor?? [ 1917.263571][ T9] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 1917.275382][ T9] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1917.808520][T27738] rust_binder: pid 27738 performed invalid decrement on ref [ 1918.152274][T27754] rust_binder: Write failure EFAULT in pid:230 [ 1919.107178][ T681] Bluetooth: hci0: Frame reassembly failed (-84) [ 1919.202089][T27773] overlay: ./file0 is not a directory [ 1919.676776][ T9] ums-usbat 6-1:0.230: probe with driver ums-usbat failed with error -5 [ 1920.121464][T27793] ptm ptm43: ldisc open failed (-12), clearing slot 43 [ 1920.558538][T27816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1920.558611][T27816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:271 [ 1920.857203][T27822] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1920.966618][T11253] usb 6-1: USB disconnect, device number 13 [ 1920.992192][ T9351] Bluetooth: hci1: Frame reassembly failed (-84) [ 1921.212956][T27833] netlink: 'syz.5.19463': attribute type 5 has an invalid length. [ 1921.222853][T27833] netlink: 'syz.5.19463': attribute type 5 has an invalid length. [ 1921.230778][T27833] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.19463'. [ 1921.265533][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 1921.265533][T12440] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1921.394125][T27844] rust_binder: Error while translating object. [ 1921.394170][T27844] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 1921.400526][T27844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:546 [ 1921.643561][T27847] x_tables: unsorted underflow at hook 2 [ 1921.867591][T27858] tipc: Started in network mode [ 1921.875738][T27858] tipc: Node identity 025ef360decb, cluster identity 4711 [ 1921.887688][T27858] tipc: Enabled bearer , priority 0 [ 1921.924938][T27857] tipc: Disabling bearer [ 1921.933155][T27860] rust_binder: Write failure EFAULT in pid:670 [ 1922.145177][ T36] kauditd_printk_skb: 972 callbacks suppressed [ 1922.145199][ T36] audit: type=1400 audit(2000000517.945:329325): avc: denied { read write } for pid=26958 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1922.212646][ T36] audit: type=1400 audit(2000000517.983:329326): avc: denied { read write } for pid=27867 comm="syz.9.19475" name="binder1" dev="binder" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1922.255153][T27866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:555 [ 1922.261559][ T36] audit: type=1400 audit(2000000517.983:329327): avc: denied { read write open } for pid=27867 comm="syz.9.19475" path="/dev/binderfs/binder1" dev="binder" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1922.297749][ T36] audit: type=1400 audit(2000000517.983:329328): avc: denied { read append } for pid=27863 comm="syz.5.19472" name="binder0" dev="binder" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1922.322394][ T36] audit: type=1400 audit(2000000517.983:329329): avc: denied { read append open } for pid=27863 comm="syz.5.19472" path="/dev/binderfs/binder0" dev="binder" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1922.348843][ T36] audit: type=1400 audit(2000000517.983:329330): avc: denied { read write open } for pid=26958 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1922.374881][ T36] audit: type=1400 audit(2000000517.983:329331): avc: denied { ioctl } for pid=26958 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1922.419321][ T36] audit: type=1400 audit(2000000517.992:329332): avc: denied { read } for pid=27867 comm="syz.9.19475" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_lib_t:s0" [ 1922.457688][ T36] audit: type=1400 audit(2000000517.992:329333): avc: denied { read open } for pid=27867 comm="syz.9.19475" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_lib_t:s0" [ 1922.487151][ T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1922.509321][ T36] audit: type=1400 audit(2000000517.992:329334): avc: denied { read } for pid=27863 comm="syz.5.19472" name="usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1922.579591][T27875] rust_binder: Error while translating object. [ 1922.579648][T27875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1922.585960][T27875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:557 [ 1922.699673][ T9] usb 10-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1922.723036][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.748322][ T9] usb 10-1: Product: syz [ 1922.760735][ T9] usb 10-1: Manufacturer: syz [ 1922.772673][ T9] usb 10-1: SerialNumber: syz [ 1922.779625][ T9] usb 10-1: config 0 descriptor?? [ 1922.792677][ T9] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1922.883062][T27880] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=118 sclass=netlink_xfrm_socket pid=27880 comm=syz.3.19479 [ 1922.974334][T11255] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1923.020870][T11253] usb 10-1: USB disconnect, device number 16 [ 1923.133541][T12440] Bluetooth: hci1: command 0x1003 tx timeout [ 1923.133540][T19888] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1923.158362][T11255] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1923.170523][T11255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1923.184084][T11255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1923.194830][T11255] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1923.209015][T11255] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1923.218101][T11255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.243190][T11255] usb 6-1: config 0 descriptor?? [ 1923.389093][T27896] rust_binder: Error while translating object. [ 1923.389141][T27896] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1923.395486][T27896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307 [ 1923.719961][T11255] plantronics 0003:047F:FFFF.005F: No inputs registered, leaving [ 1923.760983][T11255] plantronics 0003:047F:FFFF.005F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1923.976199][T27910] rust_binder: validate_parent_fixup: new_min_offset=25, sg_entry.length=0 [ 1923.976229][T27910] rust_binder: Error while translating object. [ 1923.985750][T27910] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1923.991966][T27910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:681 [ 1924.088834][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1924.291045][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11 [ 1924.311732][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26429, setting to 1024 [ 1924.329518][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1924.338724][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.354316][ T9] usb 3-1: config 0 descriptor?? [ 1924.362167][T27908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1924.397923][T11255] usb 6-1: USB disconnect, device number 14 [ 1924.640774][T11265] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1924.684941][T27930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:317 [ 1924.799999][T11265] usb 10-1: Using ep0 maxpacket: 32 [ 1924.817901][ T9] playstation 0003:054C:0DF2.0060: unknown main item tag 0x0 [ 1924.830650][T11265] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1924.833004][ T9] playstation 0003:054C:0DF2.0060: unknown main item tag 0x0 [ 1924.851123][T27932] rust_binder: 319: no such ref 0 [ 1924.852368][ T9] playstation 0003:054C:0DF2.0060: unknown main item tag 0x0 [ 1924.863655][T11265] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1924.865332][ T9] playstation 0003:054C:0DF2.0060: unknown main item tag 0x0 [ 1924.876537][T27932] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1924.883621][ T9] playstation 0003:054C:0DF2.0060: unknown main item tag 0x0 [ 1924.892269][T11265] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1924.903753][ T9] playstation 0003:054C:0DF2.0060: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 1924.917174][T27932] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1924.932267][T11265] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1924.952731][T11265] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.971785][T11265] usb 10-1: config 0 descriptor?? [ 1924.983405][T27927] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 1925.003885][T11265] hub 10-1:0.0: USB hub found [ 1925.035298][ T9] playstation 0003:054C:0DF2.0060: Invalid byte count transferred, expected 20 got 0 [ 1925.065350][ T9] playstation 0003:054C:0DF2.0060: Failed to retrieve DualSense pairing info: -22 [ 1925.085499][ T9] playstation 0003:054C:0DF2.0060: Failed to get MAC address from DualSense [ 1925.110058][ T9] playstation 0003:054C:0DF2.0060: Failed to create dualsense. [ 1925.129683][ T9] playstation 0003:054C:0DF2.0060: probe with driver playstation failed with error -22 [ 1925.255420][T11265] hub 10-1:0.0: config failed, hub has too many ports! (err -19) [ 1925.276120][T11253] usb 3-1: USB disconnect, device number 3 [ 1925.606827][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1925.790645][T11265] usbhid 10-1:0.0: can't add hid device: -71 [ 1925.803117][T27966] binder: Bad value for 'stats' [ 1925.810591][T11265] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1925.852568][T11265] usb 10-1: USB disconnect, device number 17 [ 1925.988414][T27976] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 1925.988440][T27976] rust_binder: Error while translating object. [ 1925.997363][T27976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1926.003850][T27976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:575 [ 1926.126907][T20407] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 1926.231269][T27982] overlay: Unknown parameter 'subj_type' [ 1926.237866][T27983] overlay: Unknown parameter 'subj_type' [ 1926.342108][T20407] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1926.381592][T20407] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1926.413431][T20407] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1926.423525][T20407] usb 4-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 1926.433595][T20407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.444470][T20407] usb 4-1: config 0 descriptor?? [ 1926.451931][T27974] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1926.455893][T11265] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1926.636333][T11265] usb 3-1: device descriptor read/64, error -71 [ 1926.683555][T20407] wacom 0003:056A:00F4.0061: unknown main item tag 0x0 [ 1926.710705][T20407] wacom 0003:056A:00F4.0061: unknown main item tag 0x0 [ 1926.717655][T20407] wacom 0003:056A:00F4.0061: unknown main item tag 0x0 [ 1926.743319][T20407] wacom 0003:056A:00F4.0061: unknown main item tag 0x0 [ 1926.754212][T20407] wacom 0003:056A:00F4.0061: unknown main item tag 0x0 [ 1926.762403][T20407] wacom 0003:056A:00F4.0061: hidraw0: USB HID v0.05 Device [HID 056a:00f4] on usb-dummy_hcd.3-1/input0 [ 1926.774682][T28001] rust_binder: Write failure EFAULT in pid:594 [ 1926.775045][T28002] rust_binder: Write failure EFAULT in pid:594 [ 1926.816828][T11266] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1926.901704][T11265] usb 3-1: device descriptor read/64, error -71 [ 1927.022701][T11266] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1927.034320][T11266] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1927.044309][T11266] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1927.054498][T27974] IPv6: syztnl0: Disabled Multicast RS [ 1927.060637][T11266] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.081299][T11266] usb 10-1: config 0 descriptor?? [ 1927.143930][ T9] usb 4-1: USB disconnect, device number 115 [ 1927.156472][T11265] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1927.326340][T11265] usb 3-1: device descriptor read/64, error -71 [ 1927.449999][T28023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19521'. [ 1927.462158][ T36] kauditd_printk_skb: 825 callbacks suppressed [ 1927.462179][ T36] audit: type=1400 audit(2000000522.957:330160): avc: denied { read } for pid=28022 comm="syz.3.19521" dev="nsfs" ino=4026532442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1927.490384][ T36] audit: type=1400 audit(2000000522.957:330161): avc: denied { read open } for pid=28022 comm="syz.3.19521" path="net:[4026532442]" dev="nsfs" ino=4026532442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1927.514575][T20407] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1927.522502][ T36] audit: type=1400 audit(2000000522.957:330162): avc: denied { create } for pid=28022 comm="syz.3.19521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1927.525349][T11266] konepure 0003:1E7D:2DBE.0062: item fetching failed at offset 5/7 [ 1927.544728][ T36] audit: type=1400 audit(2000000522.967:330163): avc: denied { getopt } for pid=28022 comm="syz.3.19521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1927.572809][ T36] audit: type=1400 audit(2000000522.967:330164): avc: denied { ioctl } for pid=28022 comm="syz.3.19521" path="/dev/binderfs/binder0" dev="binder" ino=82 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1927.598942][T11266] konepure 0003:1E7D:2DBE.0062: parse failed [ 1927.612961][T11266] konepure 0003:1E7D:2DBE.0062: probe with driver konepure failed with error -22 [ 1927.615568][ T36] audit: type=1400 audit(2000000522.967:330165): avc: denied { set_context_mgr } for pid=28022 comm="syz.3.19521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1927.644791][T11265] usb 3-1: device descriptor read/64, error -71 [ 1927.675818][ T36] audit: type=1400 audit(2000000522.967:330166): avc: denied { map } for pid=28022 comm="syz.3.19521" path="/dev/binderfs/binder0" dev="binder" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1927.696437][T28025] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1927.700093][ T36] audit: type=1400 audit(2000000522.967:330167): avc: denied { read } for pid=28022 comm="syz.3.19521" path="/dev/binderfs/binder0" dev="binder" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1927.713557][T20407] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1927.732121][ T36] audit: type=1400 audit(2000000522.967:330168): avc: denied { mounton } for pid=28022 comm="syz.3.19521" path="/113/bus" dev="tmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1927.732163][ T36] audit: type=1400 audit(2000000522.985:330169): avc: denied { unlink } for pid=28022 comm="syz.3.19521" name="#13c" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1927.742676][T20407] usb 6-1: config 0 has no interface number 0 [ 1927.764589][T11265] usb usb3-port1: attempt power cycle [ 1927.787302][T20407] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1927.801837][T11266] usb 10-1: USB disconnect, device number 18 [ 1927.809613][T20407] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1927.834800][T20407] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1927.857059][T20407] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.865121][T20407] usb 6-1: Product: syz [ 1927.880130][T20407] usb 6-1: Manufacturer: syz [ 1927.884790][T20407] usb 6-1: SerialNumber: syz [ 1927.901683][T20407] usb 6-1: config 0 descriptor?? [ 1927.910256][T28019] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1927.922939][T28019] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1927.933329][T20407] smsc95xx v2.0.0 [ 1928.146317][T28019] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1928.153923][T28019] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1928.175564][ T9] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1928.218053][T11265] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1928.242436][T11265] usb 3-1: device descriptor read/8, error -71 [ 1928.334760][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1928.344554][ T9] usb 4-1: config 5 has an invalid interface number: 29 but max is 1 [ 1928.352740][ T9] usb 4-1: config 5 has an invalid interface number: 48 but max is 1 [ 1928.360880][ T9] usb 4-1: config 5 has no interface number 0 [ 1928.366994][ T9] usb 4-1: config 5 has no interface number 1 [ 1928.373104][ T9] usb 4-1: config 5 interface 29 altsetting 150 has a duplicate endpoint with address 0xD, skipping [ 1928.384053][T20407] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1928.391219][T11265] usb 3-1: device descriptor read/8, error -71 [ 1928.394793][ T9] usb 4-1: config 5 interface 29 altsetting 150 bulk endpoint 0x9 has invalid maxpacket 32 [ 1928.411029][T20407] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1928.420133][ T9] usb 4-1: config 5 interface 29 altsetting 150 has an invalid descriptor for endpoint zero, skipping [ 1928.431265][ T9] usb 4-1: config 5 interface 48 altsetting 164 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1928.442393][ T9] usb 4-1: config 5 interface 48 altsetting 164 has a duplicate endpoint with address 0xA, skipping [ 1928.453365][ T9] usb 4-1: config 5 interface 48 altsetting 164 has a duplicate endpoint with address 0xE, skipping [ 1928.464262][ T9] usb 4-1: config 5 interface 48 altsetting 164 has a duplicate endpoint with address 0xE, skipping [ 1928.475148][ T9] usb 4-1: config 5 interface 48 altsetting 164 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 1928.486480][ T9] usb 4-1: config 5 interface 29 has no altsetting 0 [ 1928.493201][ T9] usb 4-1: config 5 interface 48 has no altsetting 0 [ 1928.508374][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=3062, bcdDevice=bf.6c [ 1928.517763][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.536449][ T9] usb 4-1: Product: ဌ [ 1928.540708][ T9] usb 4-1: Manufacturer: ꬃ즑茥Ṩ셌臰넩ꔧ淶큈댩䒙ᑰፖ뭠煳挮跖暐盷迕龽⌍줆轰顗ﭏð蘁⠖⿬倗税Ộ輏瞉⥯ꖝᡑ훳쌗暗҄ˢ哎敎漞㎊⇯顺ﹺ⧀␗뤰羼҇๕⭆댚쉪﹯Ἲࢂ쩮웎䵈砥럓 [ 1928.600137][ T9] usb 4-1: SerialNumber: ⼇쬨랛鯙䮖㡊읱ᛣ皭Ϫ导積츹ᆮ蹀᝛⋫옋Ŀ壍﯏⌸䠲舗쳋竡둙ᢗ龨驶鹜䳋⥘稽⼼䪘ﲝ䌉鐓ႎ㓻㰱餂直濒픷௄᠘ภ튺巋䞭만ฺᾎꔃ铲넮嗀ふᡄ꜌鲞냀㗵㒞嶯⓬蓒阂 [ 1928.639023][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1928.648604][T28027] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1928.663880][T11265] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1928.700050][T11265] usb 3-1: device descriptor read/8, error -71 [ 1928.848014][T11265] usb 3-1: device descriptor read/8, error -71 [ 1928.908101][ T9] r8152-cfgselector 4-1: USB disconnect, device number 116 [ 1928.961607][T11265] usb usb3-port1: unable to enumerate USB device [ 1928.984429][T28037] __vm_enough_memory: pid: 28037, comm: syz.9.19527, bytes: 18014402804453376 not enough memory for the allocation [ 1929.275529][T28044] binder: Unknown parameter 'fscontext?}' [ 1929.283083][T28044] binder: Unknown parameter 'context[7' [ 1929.331540][T28046] netlink: 56 bytes leftover after parsing attributes in process `syz.9.19531'. [ 1929.344704][T28046] rust_binder: Error while translating object. [ 1929.344741][T28046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1929.350938][T28046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:715 [ 1929.693184][T28064] netlink: 'syz.3.19538': attribute type 1 has an invalid length. [ 1929.719211][ T9352] Bluetooth: hci0: Frame reassembly failed (-84) [ 1929.736045][T11284] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1929.746112][T20407] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1929.756995][T20407] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1929.898253][T11284] usb 10-1: config 160 has an invalid interface number: 200 but max is 0 [ 1929.907267][T11284] usb 10-1: config 160 has no interface number 0 [ 1929.913710][T11284] usb 10-1: config 160 interface 200 has no altsetting 0 [ 1929.924460][T11284] usb 10-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1929.933693][T11284] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.944435][T11284] usb 10-1: Product: syz [ 1929.948760][T11284] usb 10-1: Manufacturer: syz [ 1929.953646][T11284] usb 10-1: SerialNumber: syz [ 1930.187503][ T9352] Bluetooth: hci1: Frame reassembly failed (-84) [ 1930.209262][T11284] usb 10-1: MIDIStreaming interface descriptor not found [ 1930.235577][T11284] usb 10-1: USB disconnect, device number 19 [ 1930.290777][T25119] udevd[25119]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1931.265666][T11265] usb 6-1: USB disconnect, device number 15 [ 1931.710719][T11265] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1931.869900][T11265] usb 6-1: Using ep0 maxpacket: 16 [ 1931.877601][T11265] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1931.887819][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 1931.891120][T19888] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1931.893881][T11265] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1931.918959][T11265] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1931.929419][T11265] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1931.942915][T11265] usb 6-1: config 7 interface 0 has no altsetting 0 [ 1931.950230][T11265] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1931.959973][T11265] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.024320][T28078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:366 [ 1932.390208][T19888] Bluetooth: hci1: command 0x1003 tx timeout [ 1932.390256][T12440] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1932.430922][T11265] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.0/0003:0458:5010.0063/input/input170 [ 1932.448530][T11265] kye 0003:0458:5010.0063: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 1932.643006][T28074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1932.662227][T28074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1932.893378][ T36] kauditd_printk_skb: 540 callbacks suppressed [ 1932.893397][ T36] audit: type=1400 audit(2000000528.072:330710): avc: denied { create } for pid=28073 comm="syz.5.19541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1932.901104][T11253] usb 6-1: USB disconnect, device number 16 [ 1932.921191][ T36] audit: type=1400 audit(2000000528.072:330711): avc: denied { setopt } for pid=28073 comm="syz.5.19541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1932.956336][ T36] audit: type=1400 audit(2000000528.072:330712): avc: denied { bind } for pid=28073 comm="syz.5.19541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1932.977249][ T36] audit: type=1400 audit(2000000528.072:330713): avc: denied { read write } for pid=28073 comm="syz.5.19541" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 1933.010014][ T36] audit: type=1400 audit(2000000528.072:330714): avc: denied { read write open } for pid=28073 comm="syz.5.19541" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 1933.038733][ T36] audit: type=1400 audit(2000000528.072:330715): avc: denied { map } for pid=28073 comm="syz.5.19541" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 1933.068274][ T36] audit: type=1400 audit(2000000528.081:330716): avc: denied { read } for pid=28073 comm="syz.5.19541" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 1933.098579][ T36] audit: type=1400 audit(2000000528.147:330717): avc: denied { read write } for pid=24266 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1933.124189][ T36] audit: type=1400 audit(2000000528.147:330718): avc: denied { read write open } for pid=24266 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1933.150264][ T36] audit: type=1400 audit(2000000528.147:330719): avc: denied { ioctl } for pid=24266 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1933.179391][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.179719][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.195120][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.195429][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.219646][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.219950][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.226674][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.248216][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.248538][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.281283][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.294173][T28098] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 1933.310564][T28099] rust_binder: Error in use_page_slow: ESRCH [ 1933.310586][T28099] rust_binder: use_range failure ESRCH [ 1933.323262][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.330692][T28099] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 1933.346222][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.346968][T28102] rust_binder: 28101 RLIMIT_NICE not set [ 1933.362480][T28099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1933.374596][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.376550][T28099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:379 [ 1933.399071][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.402558][T11284] rust_binder: 28100: removing orphan mapping 0:4240 [ 1933.419579][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.423551][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.432358][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.439257][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.446327][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.453219][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.460146][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.467150][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.515872][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.532241][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.543729][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.557547][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.572587][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.589640][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.606744][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.622005][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.638738][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.649489][T28095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1933.718532][T28115] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=28115 comm=syz.5.19554 [ 1933.749094][T11265] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1933.794704][T28117] rust_binder: inc_ref_done called when no active inc_refs [ 1933.794731][T28117] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1933.811040][T28117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:383 [ 1933.911948][T11265] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 1933.933247][T11265] usb 10-1: config 0 has no interface number 0 [ 1933.954584][T11265] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1933.974285][T11265] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.987051][T11265] usb 10-1: Product: syz [ 1933.991427][T11265] usb 10-1: Manufacturer: syz [ 1933.996329][T11265] usb 10-1: SerialNumber: syz [ 1934.010020][T11265] usb 10-1: config 0 descriptor?? [ 1934.695690][T11265] asix 10-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 1934.717285][T11265] asix 10-1:0.251: probe with driver asix failed with error -524 [ 1934.774530][T28134] rust_binder: Write failure EINVAL in pid:626 [ 1934.819033][T28136] fuse: Unknown parameter 'rf"Pzxootmoe' [ 1935.033822][T28145] rust_binder: Error while translating object. [ 1935.033866][T28145] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1935.040202][T28145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:392 [ 1935.066296][T28147] rust_binder: Error while translating object. [ 1935.075465][T28147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1935.082222][T28147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:635 [ 1935.162529][T28151] cannot load conntrack support for proto=3 [ 1935.472504][T28161] overlayfs: failed to resolve './file1': -2 [ 1935.559344][T28165] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 1935.559377][T28165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1024 [ 1935.693439][T28172] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 1935.702930][T28172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 1935.710918][T28172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1026 [ 1935.833226][T28182] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 1935.850882][T28182] SELinux: failed to load policy [ 1936.480297][T28204] fuse: Bad value for 'group_id' [ 1936.516031][T28204] fuse: Bad value for 'group_id' [ 1936.538201][T28204] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 1936.538230][T28204] rust_binder: Error while translating object. [ 1936.549912][T28204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1936.557544][T28204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1036 [ 1936.690293][T11253] usb 10-1: USB disconnect, device number 20 [ 1936.779852][T28209] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 1936.901080][T28217] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19589'. [ 1936.901080][T28216] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19589'. [ 1936.926500][T20407] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1936.952596][T28218] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 1936.962776][T28216] /dev/rnullb0: Can't open blockdev [ 1937.070555][T28222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19591'. [ 1937.122963][T28225] __vm_enough_memory: pid: 28225, comm: syz.5.19592, bytes: 18014402804453376 not enough memory for the allocation [ 1937.123965][T20407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1937.171277][T20407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1937.220936][T20407] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1937.263439][T20407] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1937.284494][T20407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.307701][T20407] usb 3-1: config 0 descriptor?? [ 1937.428376][T28238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28238 comm=syz.3.19595 [ 1937.443907][T11253] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1937.613782][T11253] usb 10-1: Using ep0 maxpacket: 8 [ 1937.637710][T11253] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1937.659062][T11253] usb 10-1: config 6 has an invalid interface number: 248 but max is 0 [ 1937.688170][T11253] usb 10-1: config 6 has no interface number 0 [ 1937.694407][T11253] usb 10-1: config 6 interface 248 has no altsetting 0 [ 1937.742556][T28247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:440 [ 1937.742746][T11253] usb 10-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1937.775858][T11253] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.785106][T11253] usb 10-1: Product: syz [ 1937.789467][T11253] usb 10-1: Manufacturer: syz [ 1937.794213][T11253] usb 10-1: SerialNumber: syz [ 1937.921720][T11284] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1937.962707][T28255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1937.962745][T28255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:444 [ 1938.045658][T11253] ums-karma 10-1:6.248: USB Mass Storage device detected [ 1938.065196][T20407] usbhid 3-1:0.0: can't add hid device: -71 [ 1938.071255][T20407] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1938.080333][T20407] usb 3-1: USB disconnect, device number 8 [ 1938.127146][T11253] usb 10-1: USB disconnect, device number 21 [ 1938.254226][T28263] netlink: 'syz.5.19602': attribute type 2 has an invalid length. [ 1938.265207][T28263] netlink: 1 bytes leftover after parsing attributes in process `syz.5.19602'. [ 1938.293381][ T36] kauditd_printk_skb: 901 callbacks suppressed [ 1938.293400][ T36] audit: type=1400 audit(2000000533.158:331621): avc: denied { read write } for pid=25169 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1938.325328][ T36] audit: type=1400 audit(2000000533.167:331622): avc: denied { read write open } for pid=25169 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1938.360194][ T36] audit: type=1400 audit(2000000533.167:331623): avc: denied { ioctl } for pid=25169 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1938.388277][ T36] audit: type=1400 audit(2000000533.243:331624): avc: denied { read write } for pid=28264 comm="syz.5.19603" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1938.412238][ T36] audit: type=1400 audit(2000000533.243:331625): avc: denied { read write } for pid=28264 comm="syz.5.19603" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1938.436179][ T36] audit: type=1400 audit(2000000533.243:331626): avc: denied { read write open } for pid=28264 comm="syz.5.19603" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1938.461074][ T36] audit: type=1400 audit(2000000533.243:331627): avc: denied { read write open } for pid=28264 comm="syz.5.19603" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1938.579781][ T36] audit: type=1400 audit(2000000533.422:331628): avc: denied { read write } for pid=24266 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1938.606024][ T36] audit: type=1400 audit(2000000533.431:331629): avc: denied { read write open } for pid=24266 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1938.631386][ T36] audit: type=1400 audit(2000000533.431:331630): avc: denied { ioctl } for pid=24266 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1938.973964][ T441] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1939.145728][ T441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1939.156887][ T441] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1939.165975][ T441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.175993][ T441] usb 3-1: config 0 descriptor?? [ 1939.182695][T28272] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1939.333955][T11253] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1939.493226][T11253] usb 6-1: Using ep0 maxpacket: 16 [ 1939.501411][T11253] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1939.515730][T11253] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1939.524839][T11253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.533156][T11253] usb 6-1: Product: syz [ 1939.537387][T11253] usb 6-1: Manufacturer: syz [ 1939.542008][T11253] usb 6-1: SerialNumber: syz [ 1939.548723][T11253] usb 6-1: config 0 descriptor?? [ 1939.559424][T11253] dm9601 6-1:0.0: probe with driver dm9601 failed with error -22 [ 1939.567396][T11253] sr9700 6-1:0.0: probe with driver sr9700 failed with error -22 [ 1939.622821][ T441] logitech 0003:046D:CA04.0064: unknown main item tag 0x0 [ 1939.632682][ T441] logitech 0003:046D:CA04.0064: unknown main item tag 0x0 [ 1939.639890][ T441] logitech 0003:046D:CA04.0064: unknown main item tag 0x0 [ 1939.664516][ T441] logitech 0003:046D:CA04.0064: unknown main item tag 0x0 [ 1939.671833][ T441] logitech 0003:046D:CA04.0064: unknown main item tag 0x0 [ 1939.680051][ T441] logitech 0003:046D:CA04.0064: unknown main item tag 0x0 [ 1939.688029][ T441] logitech 0003:046D:CA04.0064: unknown main item tag 0x0 [ 1939.705815][ T441] logitech 0003:046D:CA04.0064: hidraw0: USB HID v0.03 Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 1939.717230][ T441] logitech 0003:046D:CA04.0064: no inputs found [ 1939.862454][T11253] usb 6-1: USB disconnect, device number 18 [ 1939.889573][ T441] usb 3-1: USB disconnect, device number 9 [ 1940.106517][T28287] fuse: Bad value for 'fd' [ 1940.395818][T11253] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1940.520637][T28295] SELinux: syz.5.19613 (28295) set checkreqprot to 1. This is no longer supported. [ 1940.565701][T11253] usb 10-1: Using ep0 maxpacket: 16 [ 1940.573291][T11253] usb 10-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1940.583335][T11253] usb 10-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1940.593842][T11253] usb 10-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1940.606943][T11253] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1940.617225][T11253] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1940.626433][T11253] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.634629][T11253] usb 10-1: Product: syz [ 1940.639027][T11253] usb 10-1: Manufacturer: syz [ 1940.644351][T11253] usb 10-1: SerialNumber: syz [ 1940.725049][T11265] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1940.731036][T28297] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 1940.871989][T11253] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1940.894871][T11265] usb 3-1: Using ep0 maxpacket: 32 [ 1940.903163][T11265] usb 3-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 1940.915219][T11265] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1940.929391][T11265] usb 3-1: New USB device found, idVendor=04b8, idProduct=01ee, bcdDevice= 0.40 [ 1940.939127][T11265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.947315][T11265] usb 3-1: Product: ᰊ [ 1940.953166][T11265] usb 3-1: Manufacturer: Ⱁ [ 1940.957896][T11265] usb 3-1: SerialNumber: ⠁ [ 1941.079263][T28299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1941.089615][ T441] usb 10-1: USB disconnect, device number 22 [ 1941.112710][ T441] usblp0: removed [ 1941.158542][T28304] rust_binder: Write failure EFAULT in pid:452 [ 1941.205073][T28306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19616'. [ 1941.386646][T28313] futex_wake_op: syz.3.19618 tries to shift op by -1; fix this program [ 1941.398065][T28313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1941.399986][T28293] rust_binder: Error while translating object. [ 1941.406734][T28293] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1941.412933][T28293] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1042 [ 1941.439178][T28315] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1941.466365][T11265] usb 3-1: USB disconnect, device number 10 [ 1941.470937][T28313] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 1941.573420][T28320] /dev/rnullb0: Can't open blockdev [ 1941.779239][T25887] rust_binder: 0: removing orphan mapping 0:1048 [ 1941.874769][T28342] SELinux: policydb string does not match my string SE Linux [ 1941.897744][T28342] SELinux: failed to load policy [ 1941.924382][T28341] SELinux: policydb string does not match my string SE Linux [ 1941.943158][T28341] SELinux: failed to load policy [ 1941.999267][T11284] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1942.057577][T28347] netlink: 188 bytes leftover after parsing attributes in process `syz.5.19627'. [ 1942.148010][T11284] usb 4-1: device descriptor read/64, error -71 [ 1942.201082][ T9352] Bluetooth: hci0: Frame reassembly failed (-84) [ 1942.434663][T11284] usb 4-1: device descriptor read/64, error -71 [ 1942.691306][T11284] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1942.848805][T11284] usb 4-1: device descriptor read/64, error -71 [ 1942.923345][ T441] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 1943.071803][T11265] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1943.095588][ T441] usb 10-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1943.106793][T11284] usb 4-1: device descriptor read/64, error -71 [ 1943.113112][ T441] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1943.124305][ T441] usb 10-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1943.137612][ T441] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1943.144322][ T441] usb 10-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1943.153491][ T441] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.163113][ T441] usb 10-1: config 0 descriptor?? [ 1943.170777][T28359] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1943.209853][T11265] usb 6-1: device descriptor read/64, error -71 [ 1943.231631][T11284] usb usb4-port1: attempt power cycle [ 1943.464726][T11265] usb 6-1: device descriptor read/64, error -71 [ 1943.592138][T11284] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1943.608606][ T441] logitech 0003:046D:C298.0065: unbalanced collection at end of report description [ 1943.619933][ T36] kauditd_printk_skb: 616 callbacks suppressed [ 1943.619957][ T441] logitech 0003:046D:C298.0065: parse failed [ 1943.619954][ T36] audit: type=1400 audit(2000000538.177:332247): avc: denied { ioctl } for pid=28328 comm="syz.3.19621" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1943.636296][ T36] audit: type=1400 audit(2000000538.177:332248): avc: denied { ioctl } for pid=28328 comm="syz.3.19621" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1943.657578][T11284] usb 4-1: device descriptor read/8, error -71 [ 1943.689905][ T441] logitech 0003:046D:C298.0065: probe with driver logitech failed with error -22 [ 1943.693634][ T36] audit: type=1400 audit(2000000538.177:332249): avc: denied { ioctl } for pid=28328 comm="syz.3.19621" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1943.735073][T11255] usb 10-1: USB disconnect, device number 23 [ 1943.743982][ T36] audit: type=1400 audit(2000000538.177:332250): avc: denied { ioctl } for pid=28328 comm="syz.3.19621" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1943.769366][T11265] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1943.778991][ T36] audit: type=1400 audit(2000000538.177:332251): avc: denied { ioctl } for pid=28328 comm="syz.3.19621" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1943.832104][ T36] audit: type=1400 audit(2000000538.243:332252): avc: denied { ioctl } for pid=28328 comm="syz.3.19621" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1943.832611][T11284] usb 4-1: device descriptor read/8, error -71 [ 1943.870774][ T36] audit: type=1400 audit(2000000538.243:332253): avc: denied { ioctl } for pid=28363 comm="syz.5.19634" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1943.898491][ T36] audit: type=1400 audit(2000000538.328:332254): avc: denied { ioctl } for pid=28363 comm="syz.5.19634" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1943.925708][ T36] audit: type=1400 audit(2000000538.328:332255): avc: denied { ioctl } for pid=28363 comm="syz.5.19634" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1943.952030][ T36] audit: type=1400 audit(2000000538.328:332256): avc: denied { ioctl } for pid=28363 comm="syz.5.19634" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1943.962980][T28371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1943.977804][T11265] usb 6-1: device descriptor read/64, error -71 [ 1943.992229][T28370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28370 comm=syz.9.19636 [ 1944.123132][T11284] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1944.147063][T11284] usb 4-1: device descriptor read/8, error -71 [ 1944.239988][T11265] usb 6-1: device descriptor read/64, error -71 [ 1944.261231][T11253] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1944.295791][T11284] usb 4-1: device descriptor read/8, error -71 [ 1944.357264][T11265] usb usb6-port1: attempt power cycle [ 1944.367454][T19888] Bluetooth: hci0: command 0x1003 tx timeout [ 1944.367449][T12440] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1944.409981][T11284] usb usb4-port1: unable to enumerate USB device [ 1944.433468][T11253] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1944.443537][T11253] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1944.457017][T11253] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1944.466268][T11253] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.474481][T11253] usb 10-1: Product: syz [ 1944.478765][T11253] usb 10-1: Manufacturer: ﰙ졋䕨ↅ〪跱넷彌합凩찖面渻ⲉ谏ቨ䗔岬⠷꿜䱄ꌊ晝㭁㸢ᨐ塶굛䤉揯╁赖ꄰ啞㯴ꦖ找⹣ꁂТ赘長䧨Κྒྷ镞㡵缘ႉ늱嗭剐䌎踼藆ᆂ㶞쯃亳巣㕖穨⇯癀畖縆一뷗ႜ⥻Ɉ婮⒦埐꽸 [ 1944.505215][T11253] usb 10-1: SerialNumber: syz [ 1944.717830][T11265] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1944.731756][T11253] cdc_ncm 10-1:1.0: bind() failure [ 1944.738041][T11253] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1944.751350][T11253] cdc_ncm 10-1:1.1: bind() failure [ 1944.759388][T11265] usb 6-1: device descriptor read/8, error -71 [ 1944.767216][T11253] usb 10-1: USB disconnect, device number 24 [ 1944.901348][T11265] usb 6-1: device descriptor read/8, error -71 [ 1944.914615][T28374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1944.916063][T28374] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 1944.990814][T28378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19638'. [ 1945.163926][T11265] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1945.203745][T11265] usb 6-1: device descriptor read/8, error -71 [ 1945.357416][T11265] usb 6-1: device descriptor read/8, error -71 [ 1945.365692][T25887] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1945.450603][T11284] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1945.472118][T11265] usb usb6-port1: unable to enumerate USB device [ 1945.525179][T25887] usb 4-1: Using ep0 maxpacket: 32 [ 1945.532560][T25887] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1945.540813][T25887] usb 4-1: config 0 has no interface number 0 [ 1945.549640][T25887] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1945.558811][T25887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.566879][T25887] usb 4-1: Product: syz [ 1945.571205][T20407] usb 10-1: new low-speed USB device number 25 using dummy_hcd [ 1945.578817][T25887] usb 4-1: Manufacturer: syz [ 1945.583425][T25887] usb 4-1: SerialNumber: syz [ 1945.591279][T25887] usb 4-1: config 0 descriptor?? [ 1945.599939][T25887] smsc95xx v2.0.0 [ 1945.612642][T11284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1945.623755][T11284] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1945.636691][T11284] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 1945.645853][T11284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1945.656017][T11284] usb 3-1: config 0 descriptor?? [ 1945.662396][T28389] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1945.674650][T11284] usbhid 3-1:0.0: can't add hid device: -22 [ 1945.680690][T11284] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 1945.726796][T20407] usb 10-1: device descriptor read/64, error -71 [ 1945.898087][T11255] usb 3-1: USB disconnect, device number 11 [ 1945.992235][T20407] usb 10-1: device descriptor read/64, error -71 [ 1946.030286][T25887] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1946.055458][T25887] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1946.077198][T25887] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1946.091835][T25887] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1946.109641][T25887] usb 4-1: USB disconnect, device number 121 [ 1946.127128][T28395] fuseblk: Bad value for 'user_id' [ 1946.132373][T28395] fuseblk: Bad value for 'user_id' [ 1946.159353][T28395] can: request_module (can-proto-0) failed. [ 1946.247139][T20407] usb 10-1: new low-speed USB device number 26 using dummy_hcd [ 1946.324528][T28401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19647'. [ 1946.340610][T28401] bridge_slave_1: left allmulticast mode [ 1946.348496][T28401] bridge_slave_1: left promiscuous mode [ 1946.355369][T28401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1946.363849][T28401] bridge_slave_0: left allmulticast mode [ 1946.370600][T28401] bridge_slave_0: left promiscuous mode [ 1946.379072][T28401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1946.385179][T20407] usb 10-1: device descriptor read/64, error -71 [ 1946.503670][ T9352] Bluetooth: hci0: Frame reassembly failed (-84) [ 1946.650663][T20407] usb 10-1: device descriptor read/64, error -71 [ 1946.784255][T20407] usb usb10-port1: attempt power cycle [ 1946.844968][T28434] rust_binder: Write failure EINVAL in pid:724 [ 1946.870908][ T9352] Bluetooth: hci1: Frame reassembly failed (-84) [ 1946.875972][T28432] netlink: 'syz.2.19655': attribute type 27 has an invalid length. [ 1946.916234][T28434] futex_wake_op: syz.5.19656 tries to shift op by -1; fix this program [ 1947.181714][T20407] usb 10-1: new low-speed USB device number 27 using dummy_hcd [ 1947.205385][T20407] usb 10-1: device descriptor read/8, error -71 [ 1947.344603][T20407] usb 10-1: device descriptor read/8, error -71 [ 1947.595877][T20407] usb 10-1: new low-speed USB device number 28 using dummy_hcd [ 1947.619881][T20407] usb 10-1: device descriptor read/8, error -71 [ 1947.757854][T20407] usb 10-1: device descriptor read/8, error -71 [ 1947.872116][T20407] usb usb10-port1: unable to enumerate USB device [ 1948.233127][T20407] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1948.395826][T20407] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1948.404621][T20407] usb 6-1: not running at top speed; connect to a high speed hub [ 1948.414670][T20407] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1948.424951][T20407] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1948.433855][T20407] usb 6-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1948.446970][T20407] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1948.458511][T20407] usb 6-1: string descriptor 0 read error: -22 [ 1948.464858][T20407] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1948.474066][T20407] usb 6-1: New USB device strings: Mfr=15, Product=2, SerialNumber=11 [ 1948.700447][T12440] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1948.701083][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 1948.732455][T28451] rust_binder: Read failure Err(EAGAIN) in pid:781 [ 1948.794922][T28453] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1949.030758][ T36] kauditd_printk_skb: 674 callbacks suppressed [ 1949.030779][ T36] audit: type=1400 audit(2000000543.272:332931): avc: denied { read write } for pid=24266 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1949.040370][T19888] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1949.067745][T12440] Bluetooth: hci1: command 0x1003 tx timeout [ 1949.097824][ T36] audit: type=1400 audit(2000000543.272:332932): avc: denied { read write open } for pid=24266 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1949.125333][ T36] audit: type=1400 audit(2000000543.272:332933): avc: denied { ioctl } for pid=24266 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1949.157100][ T36] audit: type=1400 audit(2000000543.328:332934): avc: denied { read } for pid=28461 comm="syz.9.19665" name="binder1" dev="binder" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1949.180792][ T36] audit: type=1400 audit(2000000543.328:332935): avc: denied { read open } for pid=28461 comm="syz.9.19665" path="/dev/binderfs/binder1" dev="binder" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1949.205950][ T36] audit: type=1400 audit(2000000543.337:332936): avc: denied { read write } for pid=24266 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1949.230509][ T36] audit: type=1400 audit(2000000543.337:332937): avc: denied { read write open } for pid=24266 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1949.256060][ T36] audit: type=1400 audit(2000000543.337:332938): avc: denied { ioctl } for pid=24266 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1949.282377][ T36] audit: type=1400 audit(2000000543.394:332939): avc: denied { read } for pid=28464 comm="syz.9.19666" name="binder1" dev="binder" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1949.306229][ T36] audit: type=1400 audit(2000000543.394:332940): avc: denied { read open } for pid=28464 comm="syz.9.19666" path="/dev/binderfs/binder1" dev="binder" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1949.381235][T28474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1949.381679][T28474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:802 [ 1949.388865][T28476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1949.399038][T28476] rust_binder: Failed to allocate buffer. len:88, is_oneway:true [ 1949.524798][T28484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1949.535964][T28486] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 1949.542695][T28486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 1949.550761][T28486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:807 [ 1949.683070][T28482] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false [ 1949.696133][T28482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1949.706118][T28482] rust_binder: Read failure Err(EFAULT) in pid:488 [ 1949.847899][T28494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19676'. [ 1949.882464][T19878] Bluetooth: hci0: Frame reassembly failed (-84) [ 1949.907535][T28497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1949.917139][T28497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1949.935123][T28497] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1949.937315][T28497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:494 [ 1950.508622][T11284] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1950.533322][T11284] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1950.554327][T28507] kvm_pr_unimpl_wrmsr: 400 callbacks suppressed [ 1950.554355][T28507] kvm: kvm [28505]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 1950.569906][T28507] kvm: kvm [28505]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 1950.962722][T11284] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1951.124489][T11284] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1951.133875][T11284] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.144404][T11284] usb 10-1: config 0 descriptor?? [ 1951.230408][T20407] usb 6-1: USB disconnect, device number 23 [ 1951.382956][T28512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1951.390353][T28512] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 1951.397039][T28512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 1951.414110][T28512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:816 [ 1951.487912][T11284] usb 10-1: Cannot read MAC address [ 1951.546030][T11284] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1951.569373][T11284] usb 10-1: USB disconnect, device number 29 [ 1951.609457][T28524] netlink: 1 bytes leftover after parsing attributes in process `syz.5.19685'. [ 1951.670237][T28527] rust_binder: Fixups oob 165 172 361 173 [ 1951.670267][T28527] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 1951.677126][T28527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1951.686551][T28527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:741 [ 1951.933447][T28541] netlink: 100 bytes leftover after parsing attributes in process `syz.5.19690'. [ 1951.984654][T28545] netlink: 80 bytes leftover after parsing attributes in process `syz.3.19692'. [ 1951.996155][T28545] binder: Bad value for 'stats' [ 1952.024986][T19888] Bluetooth: hci0: command 0x1003 tx timeout [ 1952.031139][T12440] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1952.043357][T28547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19693'. [ 1952.252732][T28555] /dev/rnullb0: Can't open blockdev [ 1952.810820][ T9] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1952.970171][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1952.979010][ T9] usb 10-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 1952.993995][ T9] usb 10-1: New USB device found, idVendor=0698, idProduct=6b82, bcdDevice=d3.eb [ 1953.003830][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.012018][ T9] usb 10-1: Product: syz [ 1953.017899][ T9] usb 10-1: Manufacturer: syz [ 1953.023856][ T9] usb 10-1: SerialNumber: syz [ 1953.257271][T28574] veth1_macvtap: left promiscuous mode [ 1953.262914][T28574] macsec0: entered promiscuous mode [ 1953.270499][T28574] veth1_macvtap: entered promiscuous mode [ 1953.276504][T28574] macsec0: left promiscuous mode [ 1953.327112][T28596] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1953.327616][T28596] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1953.334875][ T9] usb 10-1: USB disconnect, device number 30 [ 1953.467136][T28603] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 1953.479797][T28603] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 1953.488244][T28603] CPU: 1 UID: 0 PID: 28603 Comm: syz.5.19711 Not tainted syzkaller #0 687dd8cc987f259803714ab19d9ffd663b1e6878 [ 1953.499982][T28603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1953.510054][T28603] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 1953.516321][T28603] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 1953.535942][T28603] RSP: 0018:ffffc900034c7820 EFLAGS: 00010202 [ 1953.542026][T28603] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88812ff01300 [ 1953.550036][T28603] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffff9b7 [ 1953.558037][T28603] RBP: ffffc900034c7a40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 1953.566059][T28603] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 1953.574060][T28603] R13: 7ffffffffffff9b7 R14: ffff88810cf71838 R15: ffff88810cf71828 [ 1953.582047][T28603] FS: 00007f084cdce6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1953.590988][T28603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1953.597592][T28603] CR2: 000000110c347019 CR3: 000000011b3d6000 CR4: 00000000003526b0 [ 1953.605583][T28603] Call Trace: [ 1953.608874][T28603] [ 1953.611825][T28603] ? __cfi_iter_file_splice_write+0x10/0x10 [ 1953.617879][T28603] ? __kasan_kmalloc+0x96/0xb0 [ 1953.622672][T28603] ? __kasan_check_write+0x18/0x20 [ 1953.627809][T28603] ? __cfi_iter_file_splice_write+0x10/0x10 [ 1953.633722][T28603] direct_splice_actor+0x279/0x4b0 [ 1953.638866][T28603] splice_direct_to_actor+0x4fe/0xbc0 [ 1953.644270][T28603] ? __cfi_direct_splice_actor+0x10/0x10 [ 1953.649920][T28603] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 1953.655895][T28603] do_splice_direct+0x182/0x270 [ 1953.660766][T28603] ? __cfi_do_splice_direct+0x10/0x10 [ 1953.666157][T28603] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 1953.672070][T28603] ? security_file_permission+0x2e/0xc0 [ 1953.677735][T28603] ? rw_verify_area+0xac/0x230 [ 1953.682706][T28603] do_sendfile+0x5c8/0xfb0 [ 1953.687184][T28603] ? vfs_writev+0xcf0/0xcf0 [ 1953.691706][T28603] ? __se_sys_futex+0x28f/0x300 [ 1953.696576][T28603] __x64_sys_sendfile64+0x193/0x1f0 [ 1953.701798][T28603] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 1953.707532][T28603] ? switch_fpu_return+0x12/0x20 [ 1953.712519][T28603] x64_sys_call+0xa26/0x2ee0 [ 1953.717156][T28603] do_syscall_64+0x58/0xf0 [ 1953.721594][T28603] ? clear_bhb_loop+0x50/0xa0 [ 1953.726287][T28603] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1953.732205][T28603] RIP: 0033:0x7f084bf8eec9 [ 1953.736629][T28603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1953.756248][T28603] RSP: 002b:00007f084cdce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1953.764695][T28603] RAX: ffffffffffffffda RBX: 00007f084c1e5fa0 RCX: 00007f084bf8eec9 [ 1953.772686][T28603] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1953.780675][T28603] RBP: 00007f084c011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1953.788657][T28603] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 1953.797076][T28603] R13: 00007f084c1e6038 R14: 00007f084c1e5fa0 R15: 00007ffdb58fb9f8 [ 1953.805075][T28603] [ 1953.808114][T28603] Modules linked in: [ 1953.812247][T28603] ---[ end trace 0000000000000000 ]--- [ 1953.820172][T28603] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 1953.826487][T28603] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 1953.846248][T28603] RSP: 0018:ffffc900034c7820 EFLAGS: 00010202 [ 1953.852398][T28603] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88812ff01300 [ 1953.860458][T28603] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffff9b7 [ 1953.868515][T28603] RBP: ffffc900034c7a40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 1953.876618][T28603] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 1953.884848][T28603] R13: 7ffffffffffff9b7 R14: ffff88810cf71838 R15: ffff88810cf71828 [ 1953.892978][T28603] FS: 00007f084cdce6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1953.902014][T28603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1953.908719][T28603] CR2: 00007f084cdadd58 CR3: 000000011b3d6000 CR4: 00000000003526b0 [ 1953.917413][T28603] Kernel panic - not syncing: Fatal exception [ 1953.923862][T28603] Kernel Offset: disabled [ 1953.928263][T28603] Rebooting in 86400 seconds..