last executing test programs: 6m54.185324811s ago: executing program 32 (id=237): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @multicast1}}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000680)={"0a3c30dfe584f718c1997c9b10910659", 0x0, r4, {0x4, 0x100}, {0x2f740000, 0xfffffff8}, 0xec, [0x8, 0x400, 0x9, 0xfffffffffffffff7, 0x4, 0x826, 0x6, 0x2, 0x81, 0x7, 0x7, 0xb, 0x8, 0x9, 0x5, 0x7]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000a0100"]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xbdc47d4d27057e4, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="260000002200470105000710", 0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', 0x0, 0x84000, 0x0) write$binfmt_elf32(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000020002000300030000000903000038000000fcffffff0e0000000000200001000500000000000000000003"], 0x58) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000) close(r7) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='proc\x00', 0x200000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m48.991555848s ago: executing program 33 (id=278): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="36260f06cef30fc7360f009d0f238bf3f236f30f48ffc0d5b0ba4100ec0f5c926d38", 0x22}], 0x1, 0x16, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f4, 0x0, 0x3ff000000}]}) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) lstat(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x82c1, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r8) (async) ptrace$peeksig(0x4209, r8, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f00000002c0)=[{}]) (async) pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000800)="b5", 0x1}, {0x0}], 0x2, 0x7fffffffffffffff, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0xc, 0x13, r0, 0xca639000) 5m20.158704721s ago: executing program 34 (id=1314): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8c4) (async) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) (async, rerun: 64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000580)=0x1b, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x800, &(0x7f00000002c0)={0xa, 0xfd7f, 0x4, @loopback, 0xf58}, 0x1c) (async) recvmmsg(r2, &(0x7f000000a100)=[{{0x0, 0x0, 0x0}, 0x2}], 0x40001b2, 0x40002040, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x18d) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) r3 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async, rerun: 64) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r7, r7, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}, {@userxattr}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x31, 0x66, 0x63, 0x38, 0x37, 0x65, 0x36], 0x2d, [0x35, 0x38, 0x62, 0x61], 0x2d, [0x62, 0x39, 0x66, 0x39], 0x2d, [0x66, 0x66, 0x50, 0x65], 0x2d, [0x0, 0x62, 0x66, 0x5, 0x3c, 0x63, 0x32, 0x37]}}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@uid_eq={'uid', 0x3d, r6}}, {@euid_eq={'euid', 0x3d, r6}}, {@euid_gt={'euid>', r7}}, {@obj_type={'obj_type', 0x3d, 'userxattr'}}]}) (async) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$khugepaged_scan(r8, &(0x7f0000000380), 0x8) (async, rerun: 32) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000180), &(0x7f0000000540)=0x8) (async, rerun: 32) mkdirat(0xffffffffffffff9c, 0x0, 0xc5) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11], 0x22c}}, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) (async) read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) 4m22.394492597s ago: executing program 35 (id=2363): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x150) mknodat$loop(r2, &(0x7f0000000440)='./file1\x00', 0x800, 0x1) syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0xf2d8, 0x13090, 0x0, 0x382}, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x27, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x4, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) linkat(r2, &(0x7f0000000200)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x400) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000300)=0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x11, 0x6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000009c0)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002440)={'ip6gre0\x00', &(0x7f00000023c0)={'ip6gre0\x00', 0x0, 0x9d329f69641b3aef, 0x4, 0x6, 0x4, 0x74, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8, 0x7e1, 0x9}}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000002480)={@dev, @empty, 0x0}, &(0x7f00000024c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000002580)={'syztnl1\x00', &(0x7f0000002500)={'syztnl1\x00', 0x0, 0x10, 0x8000, 0x0, 0x7f, {{0xd, 0x4, 0x3, 0x1c, 0x34, 0x66, 0x0, 0xf4, 0x29, 0x0, @remote, @empty, {[@ra={0x94, 0x4}, @cipso={0x86, 0x11, 0x3, [{0x1, 0xb, "f857a052153f2df1de"}]}, @timestamp={0x44, 0x8, 0xf2, 0x0, 0x5, [0x7]}]}}}}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000280)}, {&(0x7f0000000880)="169064d0b9b56a9b5101d467ee2bebaded4608229ce88d49e8b4d8ab75020f22e337d17b91bb34892035a4714afcbeff06d693c0aa36267f7684ae60394ed4934630ac9ff511e3955894f06e5c7445c63fe1e9a2ee09a3e0bd620f842421ad3b68609b8ffafae9297f5c734bb3fa104349cb20a06d5fa927f00e023d0e5e0e61ba575fc975412ff6390ff402148eb62193b8f5ae59e64dc7598ddc2e1eb8831c1b422c144653c3459f015bf1cf3bb0f11c31cfac5d2a189ae5b4e80a3dbd48a81029d04f7e6b1604a48f6efb3ca13ca2c2b4c4fc09", 0xd5}, {&(0x7f0000000340)="c9ae39e51e74dda2394331123e67c3b8e8c59036be31d06c5835edbcffb9f9eb2c1f2912e2c8de6d3d3de0ee7b923953c41a8985b26c14bf24977e", 0x3b}], 0x3, &(0x7f0000000a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010101, @private=0xa010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x87f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0xd0}}, {{&(0x7f0000000b00)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="7121364fde8338926f6f6c022afdda8713800cefaf985c4950c828ddb9557f5db530cc3669ba7cdfe07ae2d779dceae93197383e202c43d23abdcd57d600dd57e5da07d2fb9b29adc8b5bc326f5cff53", 0x50}, {&(0x7f0000001bc0)="b59385203ed900132598d2965e960c5e46693ac5d551930f3da5d3048f689f9506580a13f64e6fc97612b65c6484afb01816ba970cdc91f3e21a0e4f79289c4ca2d116b786fe3c4aad4aba65521f9e61e67054097b8c651b9cb7c08e5a89889b825cf91a5970d156557937192dbab5c3eb19d34e40cb150496af6fa06d49c67f7b0a3f37c76282982836d306b6a2c1424d6bac3dc56bc32a214e145375a3b5ff993fb33345f39e868e3fc79abd9f487ac14a727aa161ec75fd694443ab9758a850b066fc", 0xc4}, {&(0x7f0000001cc0)="8b", 0x1}, {&(0x7f0000001d00)="81c9fab600aed9a3da1bb9c8cd4906cdc7c33b7024fdc724a43c0508d60f1cf220", 0x21}], 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x108}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001f00)="a7641f7ea9a6fb9ae9a9872870d233b3ce75c2c32e87004f8ce87dfd518b8e524699d240df8662f503acde687dccd7f4e8c1fce7c003039deae6896d1a7d3a56709e7840faa10aaa10734cbcd8f62e1d367a56a5e73ace46de867d0d35832ad125b8d449a3aa0309d7889a2cb4a16362843386acafd9232f17abe0756d386184af4693a8907ef4f431b6", 0x8a}, {&(0x7f0000001fc0)="e9fc69db415e6240de0f4a953eef8f738dc35851001cd79542d0286697b8b333b5c6c2134caa426b866a1e005b1de536c1b2f114b4e2c5f135da077d10d292a5323b99b874aa18a2c0f79c1f01031985c904e4832ea0696e1c1ad89739ce34d09ef39a8f1147f128a74fc33a376029afafafaecc0f1573380fd1ec1796115406f0096fce53fb7726f9566197f6", 0x8d}, {&(0x7f0000002080)="49785434986f78c4dc60a429a8a245ca9a925b1909d44365dc4e86993fb2e73e8de8c915c277480ced120589d04d1cb97c464e04cd10cf5d115220c2c9771bc58dea1ccb799ceef69e6a6d7313ae2ce1334a66ef36cb2443dd30d008c5238e8acc9f3a2dd4bb4b902080377ec7f905d9c3caa817153961b79f64ba7838d2e9a04e20232e6e64e39d019c57eea2604e21721c1d968d44817164548371ff3c1b71c2366ae021657c0d8f8a1fb006ffdf3404149400", 0xb4}, {&(0x7f0000002140)="a42bcf8450ccaad87400bf04cf7e68e656d69eae8e7229e39224b5b2e1bd62fbc943793604e550e743d224e5bb49e04bff4d8d51704e16cb6269a936d5dc3d5f346d3ea2f29437", 0x47}, {&(0x7f00000021c0)="0810d020763f6584e18f022ee3ec56c5c7f052dcc33e27f037d3079a4e1fea50d72eff5532e35275e340f32568d35725", 0x30}, {&(0x7f0000002200)="4081c4cf868a07b5f26140bce407eeb2244cb97558ac3bca4af2e7eef941b9918d3cca75f6edf655f010ffb86f8590ffc177aaaba6d2337ce62da15a61c187", 0x3f}, {&(0x7f0000002240)="7b4f94bd6a1d0734148314193b4690563302c149742ec4f5aae0cf6b579d85144b1d6c487add6caf95d14c4442d56ad7e72c756e2b0c0b2bf0bdd424ba9e66cd155531bfa1cb907c6d179689c4da93b425c69820013a76ad38c171699b452ee0a9c5652134ec7e029c71557d06b2fe94f83d9a6cdfcebd99849d09943832658b4cd1696b8dad8d334c8d155abeebb8a22e950e75bbb3c527dce11cc9c0857b3919ff5c210191054869b65aa94b1ff246325a41c8ce0dd5cf1ebdde", 0xbb}, {&(0x7f0000002300)="46465a8aa2381e77534f178207d48b4954b4bad3a172a29ec7476831c653d641ad9b72b2cbba433216d3a730674e7651010601a7d59a179ef736db9a4aca9f", 0x3f}], 0x8, &(0x7f00000025c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @empty}}}], 0x78}}, {{&(0x7f0000002640)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002ac0)=[{&(0x7f0000002680)="b714425510d40cf190ac56308cceb47a837dc50d04e801d77e2fad9e8b50004eadb3f4f04c3ac19890c15d1ed1f5177ee30a7b4ad502f2f34086459ed9196a4b1d85313047f72d0d9f815c2eb83f1cf239321d1ef52fe9f4db9a7b86e29e7052d0487e6bdfab7bcbbe2be80afa96df6b8e13db27ad37ca9afd55ad111a85ffda6584ee7fa4c6df7b66cd3c35965f0d463b66c81f9726f411", 0x98}, {&(0x7f0000002740)="76575b300a71bf899c792cabe2b3468a4ee2591c851af60b3b6c63af14a6a036a0dbacc7dbea28620ab649f69d", 0x2d}, {&(0x7f0000002780)="5eb2564462fa5c9e2fd1ed5d1895ecc2ba7fb9851643769399479a6eb9adb677810cd5ff16d7b8103b27", 0x2a}, {&(0x7f00000027c0)="88b273e1f3842c667ac7c0cb850be4c19608168106dca6256ef9c1dec8c39fc635c2c329d8bd3502f0d57ecb0eacbe9cef1c27e379259bcaee4888f9ccd334ee0504f02b8a003842542d7dee123f658b3b7cf1698c6be3cc6926db90e48d4c1019dd273ce9f10a08290a6c9129dfb7c2b068251317abbb248649ea0d86a408c041af5b83bfb7f2eebd1d", 0x8a}, {&(0x7f0000002880)}, {&(0x7f00000028c0)="d8661a44674b673d7c3f98e3eb69f03213a0da9c831d42a2df4510da9c4388b120a944fa9a66e8a31e05b609a3d6becabf92", 0x32}, {&(0x7f0000002900)="282d90f9748eedd448be38303b4da4092c4d7036b4a8625010ae88635656c8fa8ff764fc394a00bec28b69c709a7ac950d2592a14bf881aabe6ee68762143494fcb7c3bc88d9a181d05bed32f540939374b06a10e24e74b3ad", 0x59}, {&(0x7f0000002980)="cdde8ca99f167d4965b1afdfbf57fb83a7d8c65445b68da343eabef8ff8b683ea10a3e04a596", 0x26}, {&(0x7f00000029c0)="153f511e3d6e0e97e0f2501befb6ae6cf9b6306133cfdb751a9d495e039be1ac7bec65f07fddbd6f0eb40b9d6b8e85ee18717a2bb735f15d06b16317fa68d87b393748473d99829fcd2d78d735d6f93967439177d64eb91d04f45dd19785c2ad70e0db18768fb470ce93dba00f7cd4fd6306098537634b9b2f27990bb9b9ec9d7195b51ea17df5a89d4af93994bba4d59b3c249fe3bc8dde4c68290807b3f425344d28308b14569f8cec2808d632cac458e227b3d35d61f580fe07c61897522be872ae55a0222c11b0f68db082d2bac7c3460430e4018e69961b3f5b4f9a9272ed04be", 0xe3}], 0x9}}, {{&(0x7f0000002b80)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000003cc0)=[{&(0x7f0000002bc0)="80da5bf90436dc325966b9381eb622161303bb6ecda41e3d824ba8c6208279d3767d82697d6e377fc11422c9d8f1f6207af0847294a38a43af05b7b4a08099e67240a05b6304b9261d39c7a752184080d7ffe1e8b16075060a7c36429e72ca572eb1198a0477277a82f60211cbab86915f419e01ac9e3e546d2829906ddcadb884e6a93986408e8de5c148e7cc71af47d3542f3f03d7abf83abddfe32c512b5d02ec2851d81164201f32d1bb22a822b3b4914683f38d091fb619639fb5303b100a6aaab577da9ff425af65f406a6f01a64f06a369c08358b486d1f5fb57d750a1fba417c4649b4988ec368153cdc0d9f488dcb864f3bd53e156d33ae4276182620da52fe4a24e9534427a69ff78ef3f865a66cfd45fdb887f0c74d409b33eab713cac778f6a7459f0ddd38dbbb60150d4726e7924ccce3eb2de03d4896b77e9fbf906dcdd845526a0306003a5c7947ed2b28ce439f4dc2b226a8a106485c5744256d1375cbc69fc62448ea44da7e641b731d67c8f6fd2d58dbb5c5de86e548cfef63dc80ad278aa445ec06e6007b90b956ef742e289eb209b89df73a45d223135ecdbd07ba3c0ef34077576282fa7ea43437c2228a3f54f597f6808bd8279c80854b160931636de4382da8171083c317b01ae67eb3dbe1a97a5d12b09036cd89261daa56d30e9eeaaaeaea150852c86e43b376e551e186d9377180f6f3884437a74f41c0ab8488fd6ea182894ecf63402ff60c1cc3a207100718850795788dfabe7d3dbe292d6f66dc90ea7a524b297867959c813fbaed4acff1dec745517c556897c17a0539d0a19678cc5e99c248618dc1a147b56dc7eea7dbf4e881bed1c8c78721d2797b7f1c19e0e1bfbc6b736a48e0dce119ea032212cd0e0ac65452db98f587e4362e7def6dfe7e9ecf7d05c2bf74d67023386b3aa9fca1a767996202faf64bd733e2c5d042804549538653fa1240b56e672f43186f76baf5d54d52ac554ec1c799b2bad6eb9a084b365eb8fcc2244cc2a870b8da0d61be16f3bd3c48fe5a536dbf4268c66ac345df223f7da0dd565cad2e7e06d9a88acd176633b0ca5b6b054ef6b502a50c092da39e163cf8c8eed3344db4a33f16d14137ba8adf6dabd9ac84f762972dc06c0c8cad8692f1eb28b4dac75eb9b8d4fcf09ff7c7564933a911e3caf4537c0e38061ba353f0c5e2341d11b5da77e60eca260fd4b2e9683bdfc0eb6c9ec10c164d7bec7774b6366e348567cf320270e366217cf2a72386340f59d3885f8910004aa9c96bdc6199018088d3b01a1aaacfaa4615554d1dc4532d41aeb575a26f41aa37fe20af878e2ac839ea25f594ec79e3868ea6aacb786826b6813407f668615aba95733a68c5cabd16b8c5c70a968cb1788f307e2ea85f9ea4faea3214fdc71348be918477923772887c0c714b216461fe8bb14553dc6e9a5e17e93c724751ffec5011e5d8e4011e8e908e4bab9a9c8c9505ca3b97c144dff70498ba99db6dbfe951ba7ea2908792586060d80b118ad31d9dc27b0fb90f957f88e8664864a2bf11f8f2bf3699fda98e63c551ce8bee8e2efaa3e78a981523f4c8953ed8e688915375de37f2185f48fc838e74afc8259b551064046f75b4abf3ae943f99df00cde173c81c1f8a1bd190988e76aa5902df12ee1be831ca31c3fa8d0d81bcb0229c08e0d79dafaa86f575f71b7d644a4a3592b9bcf2774f154c9ab366a411adcc5aa343fa191413594408d06b382a08356f6581e9c61501bb51a24de642b777940a4f480c3641ee1c350fc832566dbdfa69bbb057f3877189834abb5ed1428ea1aaab51110540651d2308c5472d55e2bd0bf4c19e63922e33c3e5274248219634a4d8cb64833759e591a29f755095a63c2bd5dd0ff7c6a0eadbff17a2c99f76d5d0b240dc401bed0f6c42ad06ef3ff0ee70d6782ca289910502f78519c7f6da951b31cc11dfe05286e858427d387deeb7c9c80effbea59ef20cccf4e625a1703432270296f7f65b9d6885ba0c4ef76ddbf16dd83a1e6552342db45b8de2f2b99108fab5410bad13fe4ed4b0688568cb7a49abdd92c106ea8946e0e196dc8a7a98c5210a2e7329e6839ab36ae66915f514edd795ea1da04923b2189030f5482a53de39d15d4b6017814425526800ec8722db20a49629fb941b5ee4c53ed5c5ae683267db5fde82b239c26d6fb1f2bebb71283852fcdc7da88cd3a53dcd3d95b63c78a168fb07295ceb497baaef4ddfad48ad33094a932b97f88a8b8dd2894e5cba85e967618689fe1273580b89eeea04d7d35b64852f1c89886d842cea793690efdac1e85d05878baf939286d0c46192672a21fc08a8a125327eedf0fd1614ebaea11a838ca14e2d304a6d2dccf1372c4352cfea7ea6b006f01df06e2154b29a2cedea5f9871b863fbc29079ad5b6de048bf039e9dcca4c237f31769ee406bf05ccebe891585da663285ca6f5646a4af16edd6860e9de8dd91764848a97f4816c3f561a0b209a7bb1bb44ba607da4f4a0965cd54b98f1691da7cd232d424b10e232bbbf84245d481899156ff43a21f10e3faeb23ced72d97fed476d314c3a08a16146b326b11f0d7ec94a31175f845ca25a2fa8a2e1008e5ae8d9761eca7c573b898f53f3f8c8148cd0752bde33f4749c57535405be9f712815d2fb6ddcb7c8bae82246d69c69539ad9033cb593f5bf49ce49b5f4bef33ba4e95bbd5cff25b963740f6857f400287b6d41e624192bd5016837e297a534139092f610ff66c680cfcf592ac2a9a93bf7233cbf75d6145a00b036516022202bd65f348aa41a33603fc7a8c147e7d1f2bab8f3695a26c2f23b924ddbe47ba23cc73ff79b094f7b6d9e23ef06d7d05f8864617315596a1ed240731ce9cbe185cdce9cf10d888f994e053041a0e6067a314e0af2c3ab73def2b58cf084db948305dc86a73ecdccd1db7d505041997f7beb132b23f5c3d29b9b478edaa564f0c5a13890525d407be2298a95f7358d68e278a29d3e0ff61d92ee74ed83d8c693b219da6b1cc9092a9edaf7b2d51951fdd9b30d5efcce1a99b87eeb4e6d42149e76e210d53ce0108eef5986d3d4d9766754c1f03c93fab22aea0a4436a494118abd8fb114261f0eb8fef77d5ffebe0b0045154ac613bebfee0713fe0585a18dc46241b2cf65fb57094f1357accebc31c89adb251f87a186ea3369d2e1d7794bd1fa351aa998033abb657ddc4d4a76a6096e85316e02d46a2cc24fa2cb1286e132d0be9a4368653aa493b1911f190670d777b589e7a49bd34f6dadca057a2b7da052ada08f8191a7b232d4bfa16581dd293af62e393dac933817d34a5ab8b13b780d54f287bfbe8dc853f7daada8e5d60f7c875c8d5ab2caf56092cfe76b32ce7ec200206fb06b52312e752120ad07fd13dbcab2efcb11033b2b9d1a967511f6d4d7599054cc3e1a54a269d031f1940323abe5ab6b16544f94eb91b3a67c87ba76f5afbac9b2b2c52e721583c39a989ce9af3a5026400453033d9b5ed0b3f46c9a717d2b1db1818b77a6c20c205c5c4de7180d2ac60c2b9f5cc898e19162c36b24f43fc470ccd490bca396ddd24a2f6d5c0a75a25c8fbc1c669076d6143fd21bda2cff18378ef23b30ad921f0be5d5208a7ed7e1c6f2de4b4efe9461d770893890f35e04ce7248a606afad6572c6b2035f930d56a3e8dbb87aa46e770d7d5a0d8f66022625d446fc0e95b5f7295180819b0071b675ad0928ac9aa47ae79764d75bcd3b145d8ad342643365c30188514938a0100b13236bef2133e3f211b588ac8019b8516a1e98edd50698fd6ae80e8172bfea74c44a9000a5efe9f8bae76684c8d4e485fdb856c021ce7637badbf9e0acffa83ce8d9a8c0580cf703179c513c4ef379a57cff493ef1de254e23ea05f2464d8edc17ebdc1b33e69200797260fab4c938d257b61caa7ea64f6cc66ad93acff6e47c686b8f0f8ab6e7dd82766bba2adbbb89c87b8e751b5e1dd6c4c23ae250ef67b53be64ed04254ab9794ad63a992cc31a757c259e78a6246413083a241c37c286d8c600932d970728f3cec12940d94bdb6eea723972de880bbb17423537c04a76028fa4e63be4e487119a042c362599ab52edad7adbc5e3bc383fe083c4f115722b8e95e22b0020d6b3d3d06019bd650af8ca4db1e11f5f39567a392b1e77647f18f06a1c0f5b840e3b62c23869ed7b2722482d85864adca979190bd65f1403161e0b0734c20b49e5d92ed9a68b2ad2007fd542be9fedd3e27b01f99751819a659709df2745a9ef8bbc335e0dac99fedd39845f620bdadb6c4020d7594a6aa7493e8abf5a1961069e5d94e2550206fa1be2f1b30ad81903aab782b134559652be1c9ccde81a2a6acee8ac93ed553de1a8576bd71b6871450cbe3f0eb4ab19fe707a37351a6a02343e7b3f3fed7460340993a6100b5d6605e54d96c596e9e73371a36aac38a2794ce94eb939ffd706b2ceeef1b358f11405d4456fec0cd323a4b61b80d16169c50c003340d26993f9d161594f18f64c25d777031ff406594a93cf498586d45c2707cf112c1b11217e99c7dc5c5f2b066bbbf7a4536bdbe87008e281f3dab74e30918a22ef66819233c648eecc402e77f9687afd5f426d318c2a8433b59334d1de2df4fdd38cc199ec06b0078097bd78ae38c63a3d1b7538ab404b21e2856ac10a79661bb68924e698b30724c3f7c17700c4824b1d33ed25fd8ac9a87d7db88ba78a34247d9576248c30aa8e112fbc06fc7f4c0d890bb7522d2aa327152d8b5ad2924da3e44eba013fa724ebdb02dd05cef800a429d2ebece2a7fa904b9608b6cce4dd0cb3516744a5a0cff85b52fded8356b83572675f0ece82058c53dfb77d3cce7f1e1ca98639973d1932401e4a078e2a1f086e65efa15580aa2859e3458e544dca45c54834dfa52502babbbef8b2e432c2e6536152d26cf49b5781439a0febf2cc91a880a200811c5ad02e6db67c31edcaca02732a72a8a5f1d784ae6b2f98d01c4dcebf5c2b9696234f806775543018836e37feaa38fe6b1ea0719da719fdbd7328fc758562b3d263934e680bb59db4f380268de839e9afd1132cf8b9cdc0e59eb025c4be17f8fe0a9eeb3c1da55e8a06361d14e6f7bef2c8b46e397565f5883b7f6b96b850500b632887773965363fd36d7b3d9824a889e6afaa361b3e0b6d5695877fd5f2e7fe8aeb43566f22ba779b60bee8a7fe9763bd6cc6446c2758523f65c95fbc9cef76da71646e4829c3498cbe2dd055a03807b851675a894c3ccca55f475bd94fd55f1351386440ac93399b610b5c321c1216c86c66f46172ffcd817b20523858843ae38d0ada35af15bf373b7eb454c5a43737dba18fd77b8932210b9d6c06244409fe41ef7afa91060fd33c41d419a6bf66dfa9d555c49d5b0029af89482028d1c5487a009ca412d4f461c794d75df56b9653566d05b63c4728d6e2e6a7201bff329e9d535b6fb3363ae3fdf393f54a427c31c032200dfcd25388d9c2deaed3fe6ff9484b2bb2239ebcc3789be1cf63919b2d46adf13844df9d5a89f6a02431d8afaea9a66cad1c038db873c874a4d37cb0a70769fce116adef9b18f5340c342f41f1ce9c824b69a6a55fc87180b1eac6939def9ef0c91abb10ed710de7d294475cf29354445f58453d71ce323348bcf6cfef5fe7411b0d9071464fb372a0d7bce20e24be63e1e5c9b803f3e27f6006db89c7366cc258717d95de53e404eeeb03be6978f9ec9766a5a83a8f708c0e5ca4ef32582435084fded155988576b3becbc120", 0x1000}, {&(0x7f0000003bc0)="08a8d01de77d11dc1b8c1c6d1dcabe9aac8f04a086094736d8df12c66681c42482e82911f2d956111ac8c1f109224bbe8a07835288b1bd4fbf8be166cbb227a7753e1456c1bfd86d17ac3f1d106be6f345b0e111e4bfee20448335f42f7baeb9a7d5f8d21d8117dfda0ee0a9c2dba160396e01a13ede37868c9dd1874f924386a13fa1b326b92ddc2bcb26f7f55f0811e841f2e225cb5f2ad102f52abb2466d85500598e7e69afa50c7a1e2d0b9dca70836bc59bd2f84d08252fba81ba33b55763d5842cd104375a71373a7a4fd4", 0xce}], 0x2, &(0x7f0000003d00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x30}}], 0x5, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x20}], 0x1}, 0x0) r9 = open(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, 0x40) ioctl$LOOP_SET_FD(r9, 0x4c00, r0) socket$netlink(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @broadcast}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x38, {0x2, 0x4e22, @empty}, 'veth1_to_bond\x00'}) ioctl$AUTOFS_IOC_CATATONIC(r10, 0x9362, 0x0) 3m36.700600937s ago: executing program 36 (id=2889): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x2}) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$tcp_mem(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$incfs(r3, &(0x7f0000000100)='.log\x00', 0xc629a5405cf83ffa, 0xc2) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x9, 0x28011, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000180)={0x54, r8, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2a}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x29, 0xe, [@random={0x7, 0x23, "d5b8bf7b2e2e4bcc258fe77cb3fc70490da57f352cdfdb51b2d837ee0e6b2e8020a155"}]}]}, 0x54}}, 0x10) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r8, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) 3m29.556118396s ago: executing program 37 (id=3009): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'veth0_macvtap\x00', 0x8000}) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f00000000c0)) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000440)=0x1) close_range(r3, 0xffffffffffffffff, 0x0) 3m22.853199437s ago: executing program 38 (id=3133): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x8, 0x5, 0x0, 0x1, [@generic="0bad07e0"]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x804) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000140)=[@decrefs={0x400c6314, 0x1}], 0x0, 0x0, 0x0}) 3m15.096648118s ago: executing program 39 (id=3273): mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x220881, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x80, 0x4) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x220881, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x80, 0x4) (async) 3m1.293052477s ago: executing program 40 (id=3566): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) write$cgroup_pid(r4, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$EXT4_IOC_GETFSUUID(r6, 0x8008662c, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) 2m43.070193013s ago: executing program 4 (id=3924): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0xe0}, 0x14) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="81726e6f3d000000c175bd8ed232872700000000000000", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',noxattr,cache=fscache,\x00']) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 2m42.987771174s ago: executing program 4 (id=3925): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x8c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "13a5ddae2bfbf5458f598276bafe52c2"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d35aa715f6d0ada49f020aa5eefbb2188269fa4d23ba0113269961f522cb89fc"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b6c75c32b43ae1fb4356952e0f40de6a765a8a69c953a42321b9b57f8d3f4128"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "964ff9f54bdf7adcb081836eee46b6c45950420423da4a58e308e2d3a64ed879"}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4010) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6a, &(0x7f0000000080), 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="82f5", 0x2}], 0x1, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x8010}}], 0x1, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async, rerun: 32) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async) syz_clone(0x20022000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 64) r9 = syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') (rerun: 64) ioctl$UDMABUF_CREATE_LIST(r9, 0xc0686611, 0x0) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3c, 0x1000, 0x3a, 0x3ff, 0x2, 0x1000004}, 0x1c) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000400)={{r7}, 0x2, &(0x7f00000003c0)=[0xb18, 0xffffffffffffffff], 0x0, 0x4, 0x1}) (async) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) getsockopt$packet_int(r9, 0x107, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)={0x1e0, r11, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x44, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25928742}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3523244f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fe7fa1b}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x241e8d1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x685bedac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x361afd24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77dab5f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42bd7f7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x413112d3}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6209ce96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76ca0a32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x4}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x854c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22818c4a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6223231f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27716fac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bf908b9}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6771}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bcc7ea0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37f22f73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x574e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6416e786}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d54}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x633c}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1e0}, 0x1, 0x0, 0x0, 0xc090}, 0x20048081) (async) sendmsg$nl_generic(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x10, 0x9, 0x2, 0x25dfdbfc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000810}, 0x4810) close_range(r2, 0xffffffffffffffff, 0x0) 2m42.987179544s ago: executing program 4 (id=3926): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{0x2, 0x1}], {0x4, 0x1}, [], {0x10, 0x1}}, 0x2c, 0x3) getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0xed) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 2m42.896746106s ago: executing program 4 (id=3931): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) read$FUSE(r0, &(0x7f0000001140)={0x2020}, 0x2020) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_get$pid(0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0xb, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) (async) read$FUSE(r0, &(0x7f0000001140)={0x2020}, 0x2020) (async) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00') (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) (async) ioprio_get$pid(0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0xb, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) 2m42.841314397s ago: executing program 4 (id=3934): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') (async) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) (async) setreuid(0x0, r2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x20, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8c, 0x0, &(0x7f0000000280)=[@register_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x4, 0x1, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x1, 0x2c}, @fda={0x66646185, 0xa, 0x0, 0x2a}}, &(0x7f0000000080)={0x0, 0x20, 0x48}}}, @clear_death, @decrefs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8c, 0x0, &(0x7f0000000280)=[@register_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x4, 0x1, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x1, 0x2c}, @fda={0x66646185, 0xa, 0x0, 0x2a}}, &(0x7f0000000080)={0x0, 0x20, 0x48}}}, @clear_death, @decrefs], 0x0, 0x0, 0x0}) 2m42.754278379s ago: executing program 4 (id=3936): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/111, 0x6f}, {&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f00000003c0)=""/46, 0x2e}], 0x3}, 0x1}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/84, 0x54}, {&(0x7f00000015c0)=""/21, 0x15}, {&(0x7f0000001600)=""/66, 0x42}, {&(0x7f0000001680)}, {&(0x7f00000016c0)=""/186, 0xba}, {&(0x7f0000001680)=""/4, 0x4}], 0x7, &(0x7f0000001840)=""/34, 0x22}, 0xf}, {{&(0x7f0000001880)=@hci, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001900)=""/172, 0xac}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)=""/35, 0x23}, {&(0x7f0000001a40)=""/232, 0xe8}, {&(0x7f0000001b40)=""/150, 0x96}, {&(0x7f0000001c00)=""/206, 0xce}], 0x6}, 0x773}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000001dc0)=""/31, 0x1f}, {&(0x7f0000001e00)=""/196, 0xc4}, {&(0x7f0000001f00)}, {&(0x7f0000001f40)=""/237, 0xed}, {&(0x7f0000005700)=""/246, 0xf6}], 0x5, &(0x7f0000002080)=""/230, 0xe6}, 0x8}, {{&(0x7f0000002180)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002200)=""/239, 0xef}, {&(0x7f0000002300)=""/41, 0x29}], 0x2}, 0x1}, {{&(0x7f0000002440)=@isdn, 0x80, &(0x7f0000002540)=[{&(0x7f00000024c0)=""/94, 0x5e}], 0x1, &(0x7f0000002580)=""/146, 0x92}, 0xc}, {{&(0x7f0000002640)=@generic, 0x80, &(0x7f0000002780)=[{&(0x7f00000026c0)=""/183, 0xb7}], 0x1, &(0x7f00000027c0)=""/229, 0xe5}, 0x10001}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/235, 0xeb}, {&(0x7f00000029c0)=""/33, 0x21}, {&(0x7f0000002a00)=""/155, 0x9b}], 0x4, &(0x7f0000002b00)=""/240, 0xf0}, 0x5}, {{0x0, 0x0, 0x0}, 0xe625}], 0x9, 0x0, 0x0) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bind$tipc(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 2m42.706269029s ago: executing program 41 (id=3936): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/111, 0x6f}, {&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f00000003c0)=""/46, 0x2e}], 0x3}, 0x1}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/84, 0x54}, {&(0x7f00000015c0)=""/21, 0x15}, {&(0x7f0000001600)=""/66, 0x42}, {&(0x7f0000001680)}, {&(0x7f00000016c0)=""/186, 0xba}, {&(0x7f0000001680)=""/4, 0x4}], 0x7, &(0x7f0000001840)=""/34, 0x22}, 0xf}, {{&(0x7f0000001880)=@hci, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001900)=""/172, 0xac}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)=""/35, 0x23}, {&(0x7f0000001a40)=""/232, 0xe8}, {&(0x7f0000001b40)=""/150, 0x96}, {&(0x7f0000001c00)=""/206, 0xce}], 0x6}, 0x773}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000001dc0)=""/31, 0x1f}, {&(0x7f0000001e00)=""/196, 0xc4}, {&(0x7f0000001f00)}, {&(0x7f0000001f40)=""/237, 0xed}, {&(0x7f0000005700)=""/246, 0xf6}], 0x5, &(0x7f0000002080)=""/230, 0xe6}, 0x8}, {{&(0x7f0000002180)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002200)=""/239, 0xef}, {&(0x7f0000002300)=""/41, 0x29}], 0x2}, 0x1}, {{&(0x7f0000002440)=@isdn, 0x80, &(0x7f0000002540)=[{&(0x7f00000024c0)=""/94, 0x5e}], 0x1, &(0x7f0000002580)=""/146, 0x92}, 0xc}, {{&(0x7f0000002640)=@generic, 0x80, &(0x7f0000002780)=[{&(0x7f00000026c0)=""/183, 0xb7}], 0x1, &(0x7f00000027c0)=""/229, 0xe5}, 0x10001}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/235, 0xeb}, {&(0x7f00000029c0)=""/33, 0x21}, {&(0x7f0000002a00)=""/155, 0x9b}], 0x4, &(0x7f0000002b00)=""/240, 0xf0}, 0x5}, {{0x0, 0x0, 0x0}, 0xe625}], 0x9, 0x0, 0x0) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bind$tipc(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 2m12.319150762s ago: executing program 7 (id=4437): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xfccf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000488000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x7d}], 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') getcwd(0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xbffc, 0x6}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x1) r5 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x1267, 0x3) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000101010200000000000000000a00000308001a40000000070c000680080001007f00000108021540000000011000058009000100736e6d70000000000800084000080009"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20048080) 2m12.310384572s ago: executing program 7 (id=4439): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x1f, 0xa, 0x5) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x394f, 0x5, 0x5, 0x8}, 0x10) 2m12.243802833s ago: executing program 7 (id=4442): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0xc5f5, 0x4) close(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)=[@request_death], 0x42, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000600)=[@exit_looper, @decrefs, @enter_looper], 0x50, 0x0, &(0x7f0000000240)="d81e15c3b9703b627c6f69f27e8fda212411223bed3eb544eea0bb85b9db7e9aa8f4f153246efaf2a8d8f8cf1ae69729c805005f1b7d4d99777c1b090637f7b9cdf7476fa4d69887ad7b73ec4b8475b3"}) 2m12.228552263s ago: executing program 7 (id=4446): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 2m12.178619304s ago: executing program 7 (id=4447): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x3ff, 0x0, 0xfffffffffffffffe, 0x8000009, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000002c0)={0x7f, 0x8, 0x0, 0xb9ff, 0x14}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)) r2 = syz_open_pts(r1, 0x101000) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) r5 = socket(0x1d, 0x1, 0x0) listen(r5, 0x0) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) shutdown(r6, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000488000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x7d}], 0x0, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x1) 2m11.35529172s ago: executing program 7 (id=4462): creat(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x130) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480), 0x200000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '9p\x00'}}]}}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000330000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r4, 0x45809000) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r5) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='?', 0x1, r5) ioctl$BLKRRPART(r4, 0x125f, 0x0) r6 = open(&(0x7f0000000140)='./file1\x00', 0x880, 0x28) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) ioctl$SNAPSHOT_S2RAM(r6, 0x330b) lsm_get_self_attr(0x68, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) listen(0xffffffffffffffff, 0x10000) r7 = getuid() stat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0xc1004, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=r9, @ANYBLOB=',blksize=0x0000000000000000,allow_other,default_permissions,default_permissions,allow_other,default_permissions,max_read=0x0000000000000008,default_permissions,max_read=0x0000000000000002,allow_other,subj_type=rfdno,smackfstransmute=\'/,-\',smackfstransmute=,fsname=wfdno,measure,fscontext=unconfined_u,uid<', @ANYRESDEC=0xee01, @ANYBLOB=',pcr=00000000000000000020,context=unconfined_u,permit_directio,\x00']) r10 = openat(r6, &(0x7f0000000440)='./file0\x00', 0x200042, 0x80) lstat(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x840041, &(0x7f0000000940)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r11}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@allow_other}], [{@uid_lt={'uid<', r7}}, {@uid_eq={'uid', 0x3d, r8}}, {@uid_gt={'uid>', r8}}, {@measure}, {@uid_lt={'uid<', r8}}]}}) pidfd_getfd(r6, r0, 0x0) syz_clone3(0x0, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000100)) syz_open_dev$loop(0x0, 0xff, 0x28a00) 1m56.203627026s ago: executing program 42 (id=4462): creat(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x130) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480), 0x200000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '9p\x00'}}]}}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000330000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r4, 0x45809000) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r5) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='?', 0x1, r5) ioctl$BLKRRPART(r4, 0x125f, 0x0) r6 = open(&(0x7f0000000140)='./file1\x00', 0x880, 0x28) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) ioctl$SNAPSHOT_S2RAM(r6, 0x330b) lsm_get_self_attr(0x68, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) listen(0xffffffffffffffff, 0x10000) r7 = getuid() stat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0xc1004, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=r9, @ANYBLOB=',blksize=0x0000000000000000,allow_other,default_permissions,default_permissions,allow_other,default_permissions,max_read=0x0000000000000008,default_permissions,max_read=0x0000000000000002,allow_other,subj_type=rfdno,smackfstransmute=\'/,-\',smackfstransmute=,fsname=wfdno,measure,fscontext=unconfined_u,uid<', @ANYRESDEC=0xee01, @ANYBLOB=',pcr=00000000000000000020,context=unconfined_u,permit_directio,\x00']) r10 = openat(r6, &(0x7f0000000440)='./file0\x00', 0x200042, 0x80) lstat(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x840041, &(0x7f0000000940)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r11}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@allow_other}], [{@uid_lt={'uid<', r7}}, {@uid_eq={'uid', 0x3d, r8}}, {@uid_gt={'uid>', r8}}, {@measure}, {@uid_lt={'uid<', r8}}]}}) pidfd_getfd(r6, r0, 0x0) syz_clone3(0x0, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000100)) syz_open_dev$loop(0x0, 0xff, 0x28a00) 1m41.360495195s ago: executing program 6 (id=5119): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0xe5441000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000700)="b053294d7b9978000f03139bd5e6b0b5f1", 0x11}, {0x0}], 0x2) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr(r2, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)='/\x00', 0x2, 0x1) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r4 = socket(0x2, 0x1, 0x0) shutdown(r4, 0x2) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x8) accept(r3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = eventfd(0x80) read$eventfd(r5, &(0x7f0000000080), 0x8) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x18, r6, 0x4, 0x70bd24, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000891}, 0x800) 1m41.347019945s ago: executing program 6 (id=5120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r4) (async) r5 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r5, 0x9, 0x0, 0x0) (async) r6 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)=[@register_looper, @clear_death], 0x50, 0x0, &(0x7f0000000240)="d81e15c3b9703b627c6f69f27e8fda212411223bed3eb544eea0bb85b9db7e9aa8f4f153246efaf2a8d8f8cf1ae69729c805005f7cf44d476fa4d69887ad7b73ec4b8475b312ee27f07411c59fbffc81"}) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r7, 0x11, 0x64, 0x0, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r9, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) (async) r10 = dup(0xffffffffffffffff) read$hiddev(r10, 0x0, 0xc) (async) mkdirat(r10, &(0x7f0000000080)='./bus\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000b80), 0x10e039, &(0x7f0000000200)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x1048, &(0x7f0000000280)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@loose}, {@access_any}, {@ignoreqv}, {@loose}, {@cache_fscache}, {@cache_readahead}, {@directio}], [{@euid_eq}, {@appraise}, {@smackfshat={'smackfshat', 0x3d, 'euid'}}]}}) (async) r11 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) fchown(r11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.268463897s ago: executing program 6 (id=5122): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pidfd_send_signal(r2, 0x33, &(0x7f0000000000)={0x11, 0x4, 0x2}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r5, 0x29, 0x1a, 0x0, &(0x7f0000003840)) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010300e2793f10d10501200002000014010902120001000000000904"], 0x0) r6 = socket(0x15, 0x0, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r7 = syz_open_dev$hiddev(&(0x7f0000000040), 0x9, 0x248a00) read$hiddev(r7, &(0x7f0000000100)=""/107, 0x6b) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1m40.789400286s ago: executing program 6 (id=5127): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) ioprio_set$uid(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e0000001140001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x258540, 0x30) mkdirat(r3, &(0x7f0000000180)='./file1\x00', 0x36) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) dup(r0) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000480), 0x10840, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000500)=0xa) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000340)=0x60) sendfile(r2, r1, 0x0, 0x2) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000440)={0x9, &(0x7f0000000380)=[{0x2c19, 0x1, 0x1, 0x9}, {0x0, 0x8, 0x3b, 0xc}, {0x9, 0x8, 0x8, 0x5}, {0x6, 0x5, 0x8, 0x1ff}, {0x7, 0xd3, 0x3, 0x3}, {0x2, 0x2, 0x8, 0x3ff}, {0x2, 0x1a, 0x3, 0x8}, {0xe6d8, 0xbb, 0xa, 0xffffffff}, {0x101, 0x8, 0x1, 0x8}]}) 1m40.767663686s ago: executing program 6 (id=5128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000001000000400000000000000000a0000003c000180"], 0x98}}, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 1m40.689527308s ago: executing program 6 (id=5131): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = dup(r0) bind$inet6(r1, &(0x7f0000001dc0)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x80000001}, 0x1c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc0046209, &(0x7f0000001340)) 1m40.670938679s ago: executing program 43 (id=5131): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = dup(r0) bind$inet6(r1, &(0x7f0000001dc0)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x80000001}, 0x1c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc0046209, &(0x7f0000001340)) 1m32.518883917s ago: executing program 2 (id=5311): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {r1, r2+10000000}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 1m32.517881507s ago: executing program 2 (id=5312): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000002040)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m32.508690038s ago: executing program 2 (id=5314): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000340)=@arm64_fp={0x6040000000100069, &(0x7f0000000300)=0x7}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1\xbf\x00nh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\xe5\x00\x00\x00', 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r2, 0x4068aea3, &(0x7f00000001c0)) r5 = dup(r4) finit_module(r5, 0x0, 0x3) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x3}) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r6}) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) socket(0x1, 0x2, 0x0) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) sched_setaffinity(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r10 = syz_open_procfs(r8, &(0x7f0000000040)='stat\x00') pread64(r10, &(0x7f0000000140)=""/15, 0xf, 0x4) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r11, &(0x7f00000008c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x10000000000000e4, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r6, 0xfffffff9, 0x1, r6}) close_range(r1, 0xffffffffffffffff, 0x0) 1m31.991228867s ago: executing program 2 (id=5316): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x9b301a, 0x0) (async) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) (async) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) r3 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000200)="330320000a00140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e049185a0ef852a8176735b8bce5adc4d75b7f24ec55bad48422034662742a4bd79e654364c27699af3e3508aed2a896658f5c0511dbecdc11f3172d0866a52570aff821c8f75076a1756b93b45e204eb566d619f02a06ca835b3abf689195cbf48f219c024adb1a3d6746bfe70ec06ae3fde2b79083a0b262f0519b056456b02e6bdb559b73649dbffbe432a44c6402c9594f166adb1035074641f6d", 0xc6, 0x40008c1, &(0x7f00000001c0)={0x11, 0x86dd, r4, 0x1, 0x62}, 0x14) (async) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r6, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x40080) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x2, 0x70bd2b, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000400), 0x12) (async) r10 = openat$cgroup_int(r8, &(0x7f0000000100)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f00000003c0)=0x1002, 0x12) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 1m31.757901872s ago: executing program 2 (id=5328): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = timerfd_create(0x0, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write(r4, &(0x7f0000000040)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) (async) write(r4, &(0x7f0000000040)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xa8, 0x0, &(0x7f0000000300)=[@dead_binder_done, @enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0xa}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/250, 0xfa, 0x2, 0x4}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0xb, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 1m31.734199923s ago: executing program 2 (id=5329): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='coredump_filter\x00') (async, rerun: 32) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)={0x5c, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x24008044) listen(r4, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async, rerun: 64) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000002480)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x3, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000180)=@x86={0xf3, 0x3, 0x9, 0x0, 0x2, 0x6, 0x5, 0x24, 0x2, 0x3, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x4, 0x3, 0x6, '\x00', 0x73, 0x400}) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b) (rerun: 32) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f00000007c0)={0x4, 0x0, [{0x203, 0x2, 0x1, 0x0, @irqchip={0xe, 0x2}}, {0x2, 0x4, 0x1, 0x0, @irqchip={0x1, 0x2}}, {0x900000, 0x5, 0x1, 0x0, @adapter={0x0, 0xb, 0x8, 0x2fddc916, 0x2}}, {0x8, 0x5, 0x0, 0x0, @msi={0x5, 0x1, 0x8, 0x7b0d528}}]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) r8 = socket(0x10, 0x3, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$packet(r8, 0x0, &(0x7f0000000640)) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/custom0\x00', 0x0, 0x0) (async, rerun: 64) mmap$binder(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3fffd) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x1180, 0x2}, @fda={0x66646185, 0x7, 0x2, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}], 0x51, 0x0, &(0x7f0000000740)="88830000cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7fa8abff48000000000000000461ba22fd7fca4f6c2d92"}) 1m16.611703297s ago: executing program 44 (id=5329): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='coredump_filter\x00') (async, rerun: 32) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)={0x5c, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x24008044) listen(r4, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async, rerun: 64) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000002480)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x3, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000180)=@x86={0xf3, 0x3, 0x9, 0x0, 0x2, 0x6, 0x5, 0x24, 0x2, 0x3, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x4, 0x3, 0x6, '\x00', 0x73, 0x400}) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b) (rerun: 32) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f00000007c0)={0x4, 0x0, [{0x203, 0x2, 0x1, 0x0, @irqchip={0xe, 0x2}}, {0x2, 0x4, 0x1, 0x0, @irqchip={0x1, 0x2}}, {0x900000, 0x5, 0x1, 0x0, @adapter={0x0, 0xb, 0x8, 0x2fddc916, 0x2}}, {0x8, 0x5, 0x0, 0x0, @msi={0x5, 0x1, 0x8, 0x7b0d528}}]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) r8 = socket(0x10, 0x3, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$packet(r8, 0x0, &(0x7f0000000640)) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/custom0\x00', 0x0, 0x0) (async, rerun: 64) mmap$binder(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3fffd) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x1180, 0x2}, @fda={0x66646185, 0x7, 0x2, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}], 0x51, 0x0, &(0x7f0000000740)="88830000cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7fa8abff48000000000000000461ba22fd7fca4f6c2d92"}) 1m3.284014837s ago: executing program 0 (id=5766): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x303, 0x0, 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffff5, 0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 1m3.281076967s ago: executing program 0 (id=5767): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 1m3.280707147s ago: executing program 0 (id=5768): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x4c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000003c0)=[{}, {}, {}, {r0, 0x9008}], 0x4, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x581002, 0x0) recvmsg$unix(r3, &(0x7f0000000180)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000200)=""/89, 0x59}, {&(0x7f0000000280)=""/66, 0x42}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000580)=""/225, 0xe1}, {&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f0000000300)=""/89, 0x59}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f0000001940)=""/195, 0xc3}], 0x9, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x1) 1m2.451324624s ago: executing program 0 (id=5775): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, 0x0) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f0000000680)={[0x8000, 0x7, 0x3ef, 0x0, 0xa, 0x4, 0x8000, 0x10, 0x80000000, 0x5, 0x9, 0x0, 0x0, 0x5, 0x6b8, 0x4, 0x3, 0x9, 0x6, 0xd86, 0x3ff, 0x8, 0x9, 0x3, 0x4, 0x2, 0x2, 0x1000, 0x8, 0x80000000, 0x9, 0x1, 0x2, 0x0, 0x5, 0xff, 0x3, 0x1, 0x3, 0x80002c4, 0x2, 0xe, 0x370, 0x8, 0x406f, 0x800000, 0xc, 0x1, 0x8, 0x4, 0x4, 0x4, 0x6, 0x0, 0x101, 0x0, 0x7, 0x4, 0x909cd059, 0x714, 0x2, 0x0, 0x8, 0x9, 0x7fffffff, 0x4fc, 0x7, 0xa, 0x1, 0x80000001, 0xffff, 0xf5bd, 0x1ff, 0xfffffffa, 0xa, 0x3, 0xfffffecc, 0xff, 0x7, 0x0, 0x1, 0x3e6a, 0x9, 0x4, 0x80000001, 0x2, 0x74462e3a, 0xfffffffa, 0x300000, 0x7, 0x3e35, 0x4, 0x7f, 0x2, 0x0, 0x400, 0x9a, 0x4, 0xffffffff, 0x8, 0x6, 0x5, 0x7f, 0x4, 0xc72, 0xffff, 0x0, 0xfffffff8, 0x3ff, 0x1, 0x8001, 0x3, 0x50000, 0x7, 0x73, 0x200, 0x8, 0x100, 0x7, 0x6, 0x0, 0x931a, 0x40, 0x6, 0xf, 0x8, 0x0, 0x21b0, 0x4, 0x9, 0x1, 0x200, 0xf146, 0x4, 0x309a15c0, 0x0, 0x8, 0x15, 0x10000, 0x2, 0x5, 0x3, 0xb1, 0x7fff, 0x6, 0x0, 0x1, 0x9237, 0x1, 0x9158, 0xfffffffe, 0xd, 0xe2, 0x4, 0x5, 0x400, 0x3, 0x3, 0x0, 0x5136, 0xffffaba2, 0x5, 0x9, 0x0, 0x2, 0x1000, 0x9, 0x7, 0x80000001, 0x1, 0x1, 0x1ff, 0x3, 0x1477, 0xe6, 0x3, 0x5, 0x8000, 0x400, 0x2, 0xa, 0xf, 0xffff, 0x6, 0x1000, 0xfffffffa, 0x5, 0x80000001, 0x2, 0x1, 0x3, 0x3e, 0x8, 0x800, 0x568e, 0x100, 0xae, 0x8d, 0xfffffff7, 0xf69d, 0x7, 0x3, 0x3, 0x7, 0x3, 0xfffffff3, 0x1, 0x8, 0x100, 0x0, 0x7, 0x0, 0xfed, 0x7, 0x4, 0xeb, 0xfffffff8, 0x4, 0x1, 0x8e, 0x2, 0x3, 0x80000001, 0x1, 0x800, 0x6, 0x5, 0x800, 0x100, 0xcff2, 0xd, 0xea1, 0x1, 0x2, 0xfffffffe, 0x0, 0x80, 0x4c, 0x2, 0xe, 0x7, 0x3, 0x4, 0x5, 0x3, 0x7ff, 0xfffffff8, 0x8, 0x3c, 0x40, 0x10000, 0x7, 0xc, 0x7, 0x2, 0x6, 0x8000, 0x4, 0x7, 0x13fd, 0x40, 0x8e, 0xffffffff, 0x1, 0x7f, 0x6, 0xb, 0x8da, 0x5, 0x1, 0x0, 0x1, 0x7, 0x6, 0x19b, 0x7f, 0x6, 0xfec, 0x40, 0x36, 0x3, 0xc1a, 0x80, 0x3, 0x0, 0x400, 0x6, 0x7fa, 0x91f, 0x9, 0x4, 0x0, 0xe3, 0x1, 0x6, 0x4, 0x7ff, 0x5, 0x0, 0xb, 0x1ff, 0x7, 0x80000001, 0x6, 0x2, 0x5, 0xd028, 0x8, 0x9, 0x5, 0x2000000, 0x7, 0x9, 0x2, 0x7, 0x6, 0x22e, 0x9, 0x9, 0x3, 0x3, 0x6, 0x3, 0x7, 0x4, 0x1, 0x6, 0x5, 0x0, 0xdc9, 0xe, 0x10001, 0x9, 0x6, 0x10000, 0x0, 0x0, 0x3, 0x3, 0x4, 0x4, 0x6, 0x3, 0x3, 0x4, 0x7, 0x3, 0xff, 0x80, 0x9, 0x0, 0xffff8047, 0x13, 0xdd, 0xa60, 0x0, 0x0, 0x9, 0x4, 0x8, 0x5, 0x81, 0x8001, 0x8, 0x1000, 0x2, 0x4, 0x10000, 0x2, 0x291, 0xffffffc0, 0x0, 0x4, 0x8, 0x3b, 0xc2, 0xfffffff8, 0x1ff, 0x2, 0x7ff, 0x6, 0x7ff, 0x3, 0x7f, 0xfffffffb, 0x1, 0x78, 0x1, 0xc, 0x0, 0x7db1, 0x7, 0x0, 0x1, 0xe, 0x0, 0x9cc, 0x7fffffff, 0x7, 0x7, 0x6, 0x7ff, 0x4, 0xc1, 0x5, 0x3, 0x7, 0xb0d1, 0x401, 0xb30d, 0x7ff, 0x6, 0xfffffffa, 0x3, 0x2, 0x9, 0xc, 0x7fffffff, 0x4, 0x7, 0x2, 0x8, 0xe, 0x2, 0xf, 0x10fa4108, 0x9, 0xfffffffc, 0x1000, 0x9, 0x3, 0xfffffc01, 0x1ea, 0x7, 0x7fff, 0x4, 0x3, 0xb3, 0x1, 0x4, 0x3, 0xf78, 0x3, 0x51, 0x8000, 0x7, 0x6c, 0x200, 0x1, 0x6, 0x7, 0x8, 0x4, 0x4, 0x101, 0x10, 0x10, 0x400, 0x4, 0x8, 0x3edb, 0x5, 0x3ff, 0x5, 0x1, 0x7, 0xf, 0xe1, 0x0, 0x47, 0x2400, 0x7, 0x6, 0x7, 0x6, 0x3, 0x6, 0x10001, 0x6, 0x10000, 0x1, 0x1, 0x81, 0x1, 0x1, 0xfffffffa, 0x3, 0x747b, 0x6f6c44fc, 0x4, 0x10001, 0x7, 0x80000001, 0x8, 0xcb5f, 0x7, 0x3, 0x6, 0x8, 0x6, 0x1000, 0xe2d2, 0x1, 0x4, 0x16, 0xfffffffc, 0x2, 0x2, 0x66, 0x1b, 0x5, 0x8001, 0x4, 0xfffffffd, 0x4, 0x4, 0x2, 0x9, 0x5, 0x9, 0x10001, 0x2da62ad7, 0x1, 0x10001, 0x5c31, 0x7fd9, 0x8, 0x800, 0x40, 0x7ff, 0x10001, 0xed3, 0x7, 0x9, 0xac2, 0xd, 0x2, 0x1, 0x2, 0xe9b, 0x9, 0xffffff00, 0x81, 0x0, 0x2, 0x5, 0x7, 0xffff, 0x2, 0x452, 0x3, 0x4, 0x9, 0x1ff, 0xfda, 0x10000, 0x3, 0x80000000, 0x7, 0x7, 0xbf, 0x0, 0x6, 0x4, 0x4, 0x5, 0x1, 0x0, 0xff, 0x7, 0x1, 0xd, 0x0, 0x6, 0x8, 0x9, 0x2, 0x6, 0x0, 0x6, 0x7, 0xff43, 0x7980, 0x6, 0x3, 0xffffffff, 0x31df, 0x5, 0x3ff, 0xf, 0x8, 0x1, 0x101, 0x7ff, 0x7, 0x8, 0xd7, 0xc7, 0x800, 0x68000000, 0x81, 0x9, 0x8, 0x4, 0x10000, 0x3, 0xfffffffc, 0x101, 0x80, 0x0, 0x4, 0x1, 0xf4, 0xa, 0x81, 0x0, 0x48, 0x1e5c9a74, 0x8b, 0x9, 0x4, 0x5, 0x7ff, 0x0, 0x3, 0xa, 0x0, 0xc, 0x1, 0x0, 0x101, 0x136d, 0x5, 0x2, 0x0, 0xfffffffd, 0x5, 0xb2, 0x7fffffff, 0x84, 0x7f, 0x6, 0x100, 0x9, 0x209c, 0x2, 0x6, 0x8, 0x3, 0x81c, 0x6, 0x89, 0x4, 0x44, 0x81, 0xe, 0x0, 0x7fffffff, 0xfffffffc, 0x8, 0x3, 0x0, 0x6, 0xb, 0x5, 0x8, 0xffffffff, 0x3ff, 0x0, 0x200, 0x9, 0x220, 0x9, 0x78f, 0x40, 0x4, 0x1, 0x8, 0x2, 0x9, 0x401, 0x925, 0xfffffff0, 0x1c83, 0xffff8000, 0x2, 0x9, 0xac, 0x6, 0x0, 0x200, 0x3, 0x4, 0x9, 0x7f, 0x8, 0x4, 0x400, 0x0, 0x8001, 0xffffff01, 0x5, 0x6c, 0x3, 0xb53, 0x7, 0x9, 0x9, 0x7a, 0x5, 0x80, 0xb, 0x8, 0x8, 0x5, 0x400, 0x7, 0x8, 0x5, 0x9, 0x59104da5, 0x884f, 0xffff, 0x1, 0x1, 0x7fff, 0x2, 0xd, 0x2, 0x8, 0x0, 0x3, 0x2, 0x9, 0x8, 0x8, 0x3, 0x2, 0x203, 0x9, 0x5, 0x7, 0x7ad4, 0x7ff, 0x9, 0x1, 0x7, 0x7fffffff, 0x0, 0x8, 0x71, 0x71ea, 0x554, 0x2, 0x2, 0x7, 0x7fffffff, 0xfffffff7, 0x7, 0x100, 0x8, 0x1, 0x3a5a234a, 0x0, 0x9, 0x800, 0x3, 0xb, 0x8, 0x7, 0x7f, 0xfffffffb, 0x4, 0x7f, 0x8001, 0x8, 0x7ff, 0xffffffff, 0x0, 0x1, 0x5, 0x80, 0xfff, 0x200, 0x2, 0xe, 0x7, 0x4, 0x8, 0x5, 0xffffffff, 0x2, 0x3, 0x40000000, 0x9, 0x10, 0x8001, 0x7, 0x10, 0x5, 0x10001, 0xfffffffa, 0x0, 0x3, 0x80, 0x4, 0x1, 0x2, 0x2, 0xf95, 0x7, 0x55, 0x8, 0x10000, 0x401, 0x101, 0x80, 0x5, 0x4, 0xffffffff, 0x7, 0x5a, 0x1, 0x7, 0x32b6, 0x9, 0x7, 0x5, 0x6, 0x9f, 0x6, 0x7, 0x3, 0x8, 0x7, 0x7ff, 0x0, 0xbe4e, 0x9, 0x6, 0x9, 0x1, 0x9, 0x3, 0x5, 0xe, 0x2, 0x3ff, 0xffffffff, 0x8, 0x4, 0xf0, 0x0, 0xfda, 0x3, 0x6, 0x9, 0x3, 0x0, 0x5, 0xb000, 0xffff8000, 0xfffffffe, 0xffffff6a, 0x0, 0xfffffffc, 0xffff14e6, 0x0, 0xdb2d, 0x3, 0x0, 0x1, 0x2, 0x80, 0x81, 0x488a, 0x5, 0x1, 0x9, 0x7ff, 0x5, 0x6, 0x5, 0x0, 0x5, 0x76, 0xd71, 0x4, 0x6, 0x7d1c, 0x7, 0x2, 0x3, 0x2, 0x5, 0x9b538000, 0x109, 0xb2, 0x4, 0x1, 0x4, 0xa, 0x3851, 0x0, 0xa, 0x1, 0xb8, 0x5, 0x3ff, 0x8, 0x0, 0xa, 0x1, 0xfffffff7, 0x8, 0x303b, 0xca, 0x8, 0xc, 0x9, 0x79, 0x4, 0x6, 0x5347, 0xfff, 0x7, 0x80000001, 0x0, 0xb1, 0x3, 0xfff, 0x7, 0x5, 0x40, 0x8, 0x1, 0x4, 0x8, 0x5de8, 0x9, 0x800, 0x1, 0x10000, 0x1, 0x5, 0xda, 0x7, 0xfffffffa, 0x6, 0x1000, 0x0, 0x6, 0x8000, 0x7, 0x4, 0xcd, 0x6, 0x8, 0x40, 0x8, 0x35e0, 0x3, 0x9, 0x9, 0x7, 0x80000001, 0x5, 0x3, 0x8000, 0x91, 0x8, 0x7, 0x7, 0x7, 0x5, 0x2, 0x2, 0x0, 0xe, 0x92, 0x1, 0x5, 0x9, 0x5, 0x2d, 0x9, 0xfffffffb, 0xa3, 0x7, 0xff, 0x1, 0x8, 0x7f, 0xb0, 0x6, 0x0, 0x4, 0x80000001, 0x4, 0x400, 0xe19, 0x5, 0x4, 0x0, 0x6, 0x295, 0x5, 0x7, 0x6, 0x4, 0x7, 0x6, 0x81, 0x9, 0x36f5, 0x100, 0x2, 0xa66, 0x8000, 0x1, 0x0, 0xba, 0xffff, 0x9]}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = pidfd_getfd(r3, r3, 0x0) setns(r7, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m2.383972064s ago: executing program 0 (id=5776): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x2c, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) 1m2.377327205s ago: executing program 0 (id=5777): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x42cc02, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='N,'], 0x6a) (async, rerun: 64) close(r1) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) close(r4) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) ioprio_set$uid(0x3, 0x0, 0x0) (async) r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, &(0x7f00000000c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4010004) clock_nanosleep(0x2, 0x1, &(0x7f0000009040)={0x0, 0x989680}, 0x0) 1m2.336671355s ago: executing program 45 (id=5777): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x42cc02, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='N,'], 0x6a) (async, rerun: 64) close(r1) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) close(r4) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) ioprio_set$uid(0x3, 0x0, 0x0) (async) r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, &(0x7f00000000c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4010004) clock_nanosleep(0x2, 0x1, &(0x7f0000009040)={0x0, 0x989680}, 0x0) 22.148162608s ago: executing program 8 (id=6398): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0x37, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x2, 0x9, 0x2, 0x3000}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8085}, 0x42800) (async) flock(0xffffffffffffffff, 0x8) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20002, 0x100) r3 = openat$incfs(r2, &(0x7f0000000200)='.pending_reads\x00', 0x123000, 0x80) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) (async) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400), 0x1800882, &(0x7f0000000440)={[{@uuid_on}, {@verity_on}], [{@hash}, {@obj_role={'obj_role', 0x3d, ','}}, {@obj_type={'obj_type', 0x3d, '-['}}, {@measure}, {@pcr={'pcr', 0x3d, 0x24}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@measure}]}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, r5, {0x7, 0x2b, 0x4, 0xffffffff00000500, 0x4, 0x4, 0xfffffff6, 0x93, 0x0, 0x0, 0x1, 0xa5}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x10080, 0x0) read(r7, &(0x7f0000000380)=""/8, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(r2, &(0x7f00000003c0)='./file0\x00', 0xf1002, 0x1aa) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="08000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000500", @ANYRES32=r9, @ANYBLOB="100006000000000020"], 0x54, 0x1) (async) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0x0, r5, {0x400, 0xa1, 0x0, {0x6, 0x3, 0x5, 0x3, 0x5, 0x800, 0x7, 0x1b656c2c, 0xa34, 0x1000, 0x10, 0xffffffffffffffff, r9, 0x80000, 0x5}}}, 0x78) 22.147983658s ago: executing program 8 (id=6399): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xfdc48000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) socket$inet6(0xa, 0x80003, 0x6) (async) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0xfffffffd) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 22.133517839s ago: executing program 8 (id=6400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)={0x36c, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0x148, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "65d3140e6eafbba0f5107470119886db46b84df737f3aefb11eec2b7060b00682f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "b3a7c2c315a2d57f43f99c142480dc63d7bde58ae663f3f666345898316b45a83faed174caf597d021830aea0917f56a2c00e63506da02db6f20de5d18fc68423e0a3b2a49e7995511f0f4c0ed494159e9a2dcab6fb2cc447a2d4e50ea186979373464a0223fa1a29849befdb8f4c1bdd1e72f60d3159a249d056a2e07319624d7f00744962334a619471635827ac4517a81b8b6d4aa96a3b77d67fbe53e7fc57722d1d3a334f006d4791e38243c08d84f81355422af4acde73f0ba88e91ebfe01a46c10ad51f289b85b1b14b2a0b2cc14c05bffc96486ef43870d7c79a25aed4cd796127d"}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0x9a, 0x3, "014098cb647f4f8e68824cf7073e9e3551344443306567d025121169f04886b337ec89d7de43ad28ffaad99938936809aec23392cae37ebf3240138036386b348bbbbfafd4716a2bc60a67cbca3add7eea1b795d6e789b9e628ec031540c7f24f11b5785538062f18a234ed146a785fdc573fcc03b3777c9e3a231fa756f696c10027920b140a63b88b0755ee2b8fe1f2f0a07ff71b4"}, @TIPC_NLA_NODE_ID={0x63, 0x3, "145afc75c16eceeded91d299ebefd818989bf70bf8b5c9ff05826419c879b578d32b1347427ba4a584e77496c2618300cf6d2c3118f58349c67395bf844d9a6688083d4156797a2fbe3f61f8870e17db05fd3a21c0707ddebc7cc4a6bcc764"}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd677}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x359}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_PUBL={0x4}]}, 0x36c}, 0x1, 0x0, 0x0, 0x5}, 0x4000805) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'veth0_to_hsr\x00', 0x0}) bind$packet(r2, &(0x7f0000000540)={0x11, 0xf7, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x101400, 0x0) r6 = openat2(r5, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x749580, 0x10, 0x11}, 0x18) sendto$packet(r6, &(0x7f0000000640)="c986d445ad3586e8c449ba2ef1fe59381e7671e939531568ea43b88361588e411e5addc3aea7640ec0b358e4e5880ae6c89d", 0x32, 0x801, &(0x7f0000000680)={0x11, 0x7, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) fsetxattr$security_selinux(r2, &(0x7f00000006c0), &(0x7f0000000700)='system_u:object_r:dhcpc_exec_t:s0\x00', 0x22, 0x2) r7 = accept$packet(r6, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f00000009c0)={"4720e1dfaf0a21299c40812ef6f351a4", 0x0, r9, {0xc, 0x7}, {0x8001, 0x9}, 0x8, [0x78, 0x5, 0xc, 0x0, 0x1, 0x80000000, 0xfffffffffffffffa, 0x4, 0x7, 0x7fffffffffffffff, 0x9, 0x4, 0x81, 0xca, 0x10a6, 0x2]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000e80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b40)={0x2c8, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$KVM_RUN(r6, 0xae80, 0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000ec0), 0x400, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f40), r0) sendmsg$TIPC_CMD_GET_LINKS(r11, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r12, 0x2, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), r6) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000010c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r13, &(0x7f0000001400)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x278, r14, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x647e48250062dd79}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x144, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8b42ad589fdb3f48}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x278}, 0x1, 0x0, 0x0, 0xc890}, 0x800) write$binfmt_script(r6, &(0x7f0000001440)={'#! ', './file0', [{0x20, ']@#'}, {0x20, '/dev/full\x00'}], 0xa, "1e48a9e8851043e99392614a4fdaa98fb5ce4a7e0b5abab3738a611ebdccffa729"}, 0x3b) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000001480)={'veth0_to_batadv\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) write(r0, &(0x7f00000014c0)="1be28420c4f3674a025d5e5ec4e02b44c729da2cc6e5a61f5354959abcbd5dd2d7609b257205a77809100c2b094d15feefc62c64434f67c1a7f0dbf0dc488236d6a48cbdd4038a6e863751fd85bb0644e20caccc85726c5a1dac7d1c2850c02a8e96a1b201a32b467b06c9f733a4fe12533db4da0956b5bd3752a12dda88194cbf2fe42d28e1ab15c318f2e66c2e01bb1ef061aa1f01643098c28715663e47154ce6fc707bcbb324e662704f9edeb2bdf0dcf84f5fc57d5f42ea3ce4", 0xbc) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000001580)="24b482cb9f08c75cd9c1887388bc16b594c3adfee9c9a614209cb101a1c4255d40") lstat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)) 22.05199882s ago: executing program 8 (id=6402): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x2, 0x3, 0x1000, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000380)={0x30, 0x30, 0x30}}, 0x1040}], 0x5a, 0x0, &(0x7f0000000400)="cb2a499fc52c7a386ad917877700d052ef62983aca8ff936fca29e7bc7ec2ca216262dae1f7f32ff497c006ba3cd35c832d7b0320be1eecb3c8ab2ac50bae16cdedcd164b2862c43a8745bafdd94c96182643b70efd41186dc9d"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 22.05184736s ago: executing program 8 (id=6403): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0xd8, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000040)) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd, 0x0, 0x0, 0x3}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x103380, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) 22.05063371s ago: executing program 8 (id=6404): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) socket(0x28, 0x5, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = getgid() (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x5, &(0x7f0000000080)=[{0x1, 0x3, 0x6, 0x862d}, {0x1, 0x5, 0xf, 0xa}, {0x1, 0x9, 0x86, 0x818}, {0x2, 0xb9, 0xf, 0x9}, {0x7, 0xa2, 0x41, 0x2}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) (rerun: 32) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xda) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000100)={[0xd44, 0x9, 0xffffeffffffffffb, 0x10000000, 0x10000, 0x3, 0x4002004c1, 0xa, 0x9, 0x8, 0x1, 0xa04a, 0x403, 0x0, 0x80, 0x10000008d], 0xddcd0000, 0x2}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fd9000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r5}}], [], 0x6b}}) (async) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000020c0), 0x80000, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r0}, 0x2c, {[], [{@fowner_eq={'fowner', 0x3d, r5}}, {@permit_directio}]}}) 6.67232342s ago: executing program 46 (id=6404): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) socket(0x28, 0x5, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = getgid() (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x5, &(0x7f0000000080)=[{0x1, 0x3, 0x6, 0x862d}, {0x1, 0x5, 0xf, 0xa}, {0x1, 0x9, 0x86, 0x818}, {0x2, 0xb9, 0xf, 0x9}, {0x7, 0xa2, 0x41, 0x2}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) (rerun: 32) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xda) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000100)={[0xd44, 0x9, 0xffffeffffffffffb, 0x10000000, 0x10000, 0x3, 0x4002004c1, 0xa, 0x9, 0x8, 0x1, 0xa04a, 0x403, 0x0, 0x80, 0x10000008d], 0xddcd0000, 0x2}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fd9000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r5}}], [], 0x6b}}) (async) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000020c0), 0x80000, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r0}, 0x2c, {[], [{@fowner_eq={'fowner', 0x3d, r5}}, {@permit_directio}]}}) 5.735992369s ago: executing program 9 (id=6626): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x1}) syz_clone(0x313311, 0x0, 0xfffffffffffffe41, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000040)=0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.975844253s ago: executing program 1 (id=6665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1a81, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x3}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r4}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x3}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="110000005a001f001007f4110800040002", 0x11) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000280)={0x6a99, 0xeeef0000, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r0}, @fd, @fda={0x66646185, 0x8, 0x400000001, 0xc}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = socket$unix(0x1, 0x2, 0x0) connect$unix(r10, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getpeername$unix(r10, 0x0, &(0x7f0000000300)) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000040)={&(0x7f00000002c0)=""/155, 0x9b}) r11 = syz_open_procfs(r1, &(0x7f0000000080)='net/udp6\x00') ftruncate(r11, 0x6) 3.931170004s ago: executing program 1 (id=6666): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f23d50f07f283f9c7410f06769cc9759971716266baf80cb89c1bdd82ef66bafc0cb0f1ee9a110f01380f20e035200000000f01c48f7178d1812e4b80001740ab46be46bec7f08a", 0x73}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.827776496s ago: executing program 1 (id=6667): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$binderfs(0x0, 0x0, &(0x7f0000000080), 0x400000, &(0x7f00000002c0)) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200e77"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x10, 0x7, 0x6, 0x8, 0x0, 0x6}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x20, 0x40}}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0xf, 0x2}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x19, 0x2, '_X'}, 0x0, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x5}, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1, 0xa}}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x8710, 0x10, 0x9, 0x3, {{0x6, 0x4, 0x2, 0x11, 0x18, 0x68, 0x0, 0x7, 0xb1f731c05033de53, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x86b26c00c8b9d457, 0x7, 0x0, 0x10000, {{0x1d, 0x4, 0x2, 0x28, 0x74, 0x66, 0x0, 0x81, 0x4, 0x0, @private=0xa010102, @empty, {[@end, @ssrr={0x89, 0x17, 0x9f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @private=0xa010100, @empty]}, @generic={0x82, 0x7, "b77379ee8e"}, @generic={0x94, 0x6, "a37dbc90"}, @timestamp_prespec={0x44, 0x14, 0x98, 0x3, 0xa, [{@private=0xa010102, 0x1}, {@rand_addr=0x64010101, 0x7fff}]}, @cipso={0x86, 0x10, 0x0, [{0x6, 0x2}, {0x1, 0x8, "efb7a5bf5803"}]}, @generic={0x89, 0x5, "6777ee"}, @generic={0x1c, 0xa, "a35ec040da00084f"}, @timestamp={0x44, 0x8, 0x53, 0x0, 0x8, [0x8]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x2, 0x0, 0x17, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x8, 0x40, 0x9, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x4, 0x7a70, {{0x25, 0x4, 0x1, 0x0, 0x94, 0x66, 0x0, 0x2c, 0x29, 0x0, @private=0xa010101, @remote, {[@lsrr={0x83, 0x23, 0x95, [@multicast1, @rand_addr=0x64010100, @private=0xa010102, @multicast1, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0xe8, [@broadcast, @broadcast, @local]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x83, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x5abe}, {@loopback}, {@local, 0x7fff}, {@remote, 0xd}, {@multicast2, 0x10000}, {@loopback, 0xa}, {@private=0xa010100, 0xf9d}]}, @noop, @generic={0x44, 0x6, "a2cec69d"}, @noop]}}}}}) socket$unix(0x1, 0x1, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @local, @multicast2}, &(0x7f0000000580)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xec, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4d}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x60}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1a}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xec}, 0x1, 0x0, 0x0, 0x8044}, 0x8014) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) 2.676156208s ago: executing program 9 (id=6676): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3d29) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x00\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00n#\xd6\xe0\x89s@D\xd07\xb0\t\xb48b\x9b\xa7<\xd6\xe78\x1a\xae\x91\x1d\xbc\xf4\x18\xcdXf\x97\xca=n\xd4A\xbel\x98&\x11\r\xafs\x04?\xff\x89\x83\xb6\xb2c\x89Y\xa5\xa7\xa8f\xce\xfc\xa0k\xf8D:\xfc\xb3\xfc\x8a\xb4Z\x80d\x98\a!\r\xce\xee\x87\x02\xe1\x84\rWf\xb3\xde:\x96qr\x1a\xd2\xae\xe9\x1bt\x12\x98hE)\x15\xe8\xc5\xe8\x8f\x81@\x004,\xea\xea\x83rrN\xe7\xa8\x90\xad\xc1\x0fs\x00\x00\x00\x00\x00') 2.645559499s ago: executing program 9 (id=6677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80840, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x10084, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2806c0a, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'cpuset'}, {0x2d, 'pids'}]}, 0xe) dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) lseek(0xffffffffffffffff, 0x3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r4, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000040) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) 2.433121563s ago: executing program 9 (id=6681): futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mkdir(&(0x7f0000000280)='./file0\x00', 0x6c) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x141) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(r2, &(0x7f00000004c0)='net/packet\x00') fsetxattr$security_selinux(r3, &(0x7f0000000000), 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000580)=[@free_buffer={0x40086303, r1}], 0x51, 0x0, &(0x7f0000000740)="88830000cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7fa8abff48000000000000000461ba22fd7fca4f6c2d92"}) 2.279869486s ago: executing program 9 (id=6686): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x28) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) (async) ioprio_get$pid(0x2, 0x0) (async) fsopen(0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, 0x0) (async) mkdir(0x0, 0x188) (async) r5 = inotify_init() (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000000)=0x10, 0x4) (async) inotify_add_watch(r5, &(0x7f0000000440)='.\x00', 0x8) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000000c0)=0x1) (async) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002c40), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xe) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000004000004032000000fe8000000000000000000000000000aa0400000000000000070000000000000003000000000000000400000000004000ffffffffffffffffffffffffffffffff7f00000000000000000000000000000000000000000000000800000000000000cc000000000000000200000000000000f600000000000000000000000000000000000000020001fe00000000000000004c00120061656769733132382d67656e6572696300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000"], 0x13c}}, 0x804) (async) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)) (async) signalfd4(r2, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x8, 0x80000) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000000)="c9453900000000000000000028", 0xd}) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xf, r8, 0x1, &(0x7f0000000000)) 2.249935656s ago: executing program 9 (id=6687): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x4, 0x0}) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000001180), 0x806, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff}, 0x6) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) connect$pppl2tp(r6, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2.245856446s ago: executing program 3 (id=6688): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffff5, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x206c) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x28, 0x2, 0x400c8460, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r4, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) chown(&(0x7f0000000000)='./file0\x00', r1, r4) 2.171998248s ago: executing program 3 (id=6689): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0x4008af10, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x6, 0x9, 0x0, 0x36, 0xc7e, 0xfffffffc, 0x101, 0x2, 0x1, 0x8, 0xb}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2.144406299s ago: executing program 3 (id=6690): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r4, 0x0, 0x0) (async) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) (async) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b0000000000000000000000000000000040000000020000000000000000000000000f3ffffffffff0178358b19000000000000000000000000000000000000000000f9ffffff00000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000020000000040000000001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="002000000000000000000000000000000000000004000000000000000100"], 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x14, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) (async) pipe(&(0x7f0000000d00)={0xffffffffffffffff}) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) splice(r5, 0x0, r6, 0x0, 0x714f, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',Sootmode=00000080000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x2}}, 0x50) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x542, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r9, 0x0, r10, 0x0, 0x808, 0x0) 2.112780579s ago: executing program 3 (id=6691): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000000)={0x3, 0x100, 0x200, 0x5, 0x590f}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x1) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a440000000010109024800010100000009040000160202"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)=0x28) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.002310751s ago: executing program 1 (id=6693): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffff3) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) lseek(r2, 0xfffffffffffffff5, 0x1) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0xffffffff, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/360], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000002380), 0x4) (async) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0={0xfc, 0x0, '\x00', 0xff}, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}}, 0xf0}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 1.761410766s ago: executing program 1 (id=6694): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f00000001c0)=""/223, 0xdf}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000002f00)=""/4119, 0x1017}, {&(0x7f0000001980)=""/168, 0xa8}, {&(0x7f0000000680)=""/132, 0x84}, {&(0x7f0000000300)=""/153, 0x99}, {&(0x7f0000002d00)=""/127, 0x7f}, {&(0x7f0000000400)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xa}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x800}], 0x7, 0x40000100, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl(r1, 0x5, &(0x7f0000000780)="b80985fd1a2f0932eb2a53a91a78ee6ef7568bc27a79178cefab199a5dbfdce4b7869bdd6d6960ffbfef1f9d76418175d16cae35ffd5230883afeba82939bb1bcb8182e2da05e6780d0026289da8ad07c061f4dd71b45b3b60af1d0fb26e213bee3d6902d11e318a66890dcbc02291007455e4b2cd830b26b8d0d3862a3de9f3277537f4c2e105190b87446c5386ab23b60e1cd0c37186772364") r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r5, 0x4068aea3, &(0x7f00000001c0)={0xc7, 0x0, 0x1}) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x7ffffffffffffffe}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) r10 = getegid() lchown(&(0x7f0000000140)='./file0\x00', 0x0, r10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000600)={0x14, 0x11, 0x1, {0x10, 0x3, 0x3}}, 0x14) ioctl$sock_netdev_private(r3, 0x89fe, &(0x7f0000000840)="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") 1.524797611s ago: executing program 3 (id=6699): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000000000009f0b0000000000006c0a00"]) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}]}}) ioctl$RTC_VL_READ(r7, 0x80047013, &(0x7f0000000000)) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 1.523223751s ago: executing program 1 (id=6701): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) keyctl$setperm(0x5, 0x0, 0x7613809) r2 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x2040, 0x0, 0x0) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000b80)={'syz', 0x2}, &(0x7f0000000bc0)="0594", 0x2, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x1) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d1050120000200000001090212"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, &(0x7f0000000900)={0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="2023020000050203"], 0x0}, &(0x7f0000000b00)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x0, 0x2}, 0x0, 0x0}) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000c40)='big_key\x00', 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000c80)) bind$bt_l2cap(r1, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) r5 = socket$inet6_udp(0xa, 0x2, 0x0) listen(r5, 0xfffffff2) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x2}, 0xe) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r6, 0xa0e4f000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.479945671s ago: executing program 3 (id=6702): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0xeff, 0x0, [@sadb_key={0x3, 0x9, 0x48, 0x0, "23492741702c8b8388"}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x68}, 0x1, 0x7}, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) userfaultfd(0x80001) (async) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x138}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x44, 0x4) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x44, 0x4) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f000047b000/0x1000)=nil, 0x1000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock2(&(0x7f00007d6000/0x4000)=nil, 0x4000, 0x1) (async) mlock2(&(0x7f00007d6000/0x4000)=nil, 0x4000, 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3fc) (async) chmod(&(0x7f0000000100)='./file0\x00', 0x3fc) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r1, 0x22e7c000) 1.0452454s ago: executing program 5 (id=6709): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4043, &(0x7f0000000cc0)=ANY=[@ANYBLOB='rlog_pages=0']) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000140019"], 0x28}}, 0x48c0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000a00)=0xe8) getresgid(&(0x7f0000000a40)=0x0, &(0x7f0000000a80), &(0x7f0000000ac0)) syz_fuse_handle_req(r0, &(0x7f0000002900)="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", 0x2000, &(0x7f0000000c00)={&(0x7f0000000300)={0x50, 0x0, 0x5, {0x7, 0x2b, 0xfffffff7, 0x64000, 0x2, 0xb3ce, 0xffff8000, 0x2, 0x0, 0x0, 0x10, 0x5d1b}}, &(0x7f0000000380)={0x18, 0x0, 0x5, {0x400}}, &(0x7f00000003c0)={0x18, 0x0, 0x4b6f, {0x3}}, &(0x7f00000004c0)={0x18, 0x0, 0x401, {0x46}}, &(0x7f0000000500)={0x18, 0xfffffffffffffffe, 0x2, {0x3}}, &(0x7f00000005c0)={0x28, 0x0, 0x3, {{0xf5f, 0x6, 0x1, r8}}}, &(0x7f0000000600)={0x60, 0xffffffffffffffda, 0x4d, {{0xf, 0xa34, 0x7, 0x10001, 0x5, 0x3, 0xffffff94, 0x38f}}}, &(0x7f0000000680)={0x18, 0x0, 0x4, {0x2}}, &(0x7f00000006c0)={0x18, 0xffffffffffffffda, 0x6, {'appraise'}}, &(0x7f0000000700)={0x20, 0xffffffffffffffda, 0x4, {0x0, 0x1a}}, &(0x7f0000000740)={0x78, 0x0, 0xc39, {0x4, 0x7, 0x0, {0x0, 0x0, 0xd20e, 0x80, 0x40, 0x71c1800000, 0x833, 0x6, 0x2, 0x1000, 0x4a, r5, r6, 0x200, 0x9}}}, &(0x7f00000007c0)={0x90, 0x0, 0x7, {0x5, 0x1, 0x100000000, 0x9, 0x500, 0x1, {0x3, 0x4, 0x6, 0x100000001, 0x7797, 0x7, 0x1, 0x9, 0x91d5, 0x1000, 0x2, r11, r6, 0x6, 0x2}}}, &(0x7f0000000880)={0x60, 0xfffffffffffffff5, 0x1e, [{0x1, 0x400, 0x15, 0x6, '/proc/self/net/pfkey\x00'}, {0x6, 0x2, 0x8, 0x7, '{-U^][+]'}]}, &(0x7f0000000d00)={0x1f0, 0x0, 0x735, [{{0x4, 0x0, 0x1, 0x1, 0x2, 0x0, {0x6, 0x2, 0x7, 0x7f4, 0x7a, 0x7, 0x5, 0x2, 0xd36, 0x1000, 0x5, r2, r6, 0x1, 0x23}}, {0x4, 0x5, 0x3, 0x5, '9p\x00'}}, {{0x6, 0x0, 0x80000000, 0x9000000, 0x101, 0xff, {0x5, 0x40, 0x285, 0x101, 0x4, 0x3e3, 0x6, 0x439, 0x2, 0x1000, 0x59d6f42, r12, r13, 0x1}}, {0x0, 0x98c, 0x8, 0xdee4, 'appraise'}}, {{0x3, 0x1, 0x0, 0xc, 0x2, 0x17bf, {0x3, 0x10, 0xd5, 0x4, 0x7fffffffffffffff, 0x0, 0x7fffffff, 0xffff, 0x8, 0xa000, 0x0, r5, r6, 0x4180, 0x40}}, {0x4, 0x8, 0x1, 0x1f, '/'}}]}, &(0x7f0000000b00)={0xa0, 0x0, 0x5, {{0x4, 0x1, 0x100000000, 0x5, 0x1000, 0xffff, {0x1, 0x8001, 0x1, 0x4e6, 0xa2, 0x9, 0x3, 0x9, 0x7, 0x6000, 0x2, r2, r6, 0x7fffffff, 0x5}}, {0x0, 0x1}}}, &(0x7f0000000bc0)={0x20, 0x0, 0x10000, {0xfffffc00, 0x4, 0x80, 0x10}}, &(0x7f0000000f00)={0x130, 0x0, 0xfffffffffffff7f2, {0x81, 0x966, 0x0, '\x00', {0x17ff, 0x9, 0x10001, 0xfffffbff, r5, r6, 0xa000, '\x00', 0xfd4d, 0x1, 0xd2, 0x6, {0x3, 0x7fff}, {0x8, 0x1000}, {0x2, 0x60}, {0x1, 0x10000}, 0x7, 0x1, 0x0, 0x9cf}}}}) r14 = fsmount(r7, 0x0, 0x0) r15 = openat$cgroup_procs(r14, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$cgroup_pid(r15, &(0x7f0000000140), 0x12) setreuid(0x0, r5) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@access_uid={'access', 0x3d, r2}}, {@noextend}, {@aname={'aname', 0x3d, '^}$'}}, {@dfltuid={'dfltuid', 0x3d, r5}}], [{@smackfsroot={'smackfsroot', 0x3d, '*('}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x30, 0x66, 0xf2, 0x51, 0x30, 0x33, 0x39], 0x2d, [0x62, 0xd, 0x64, 0x66], 0x2d, [0x66, 0x65, 0x32, 0x65], 0x2d, [0x36, 0x32, 0x31, 0x65], 0x2d, [0x30, 0x39, 0x66, 0x0, 0x32, 0x32, 0x56, 0x64]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@appraise}]}}) r16 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r16, &(0x7f0000001900)=""/4079, 0xfef, 0x66) 1.04483286s ago: executing program 5 (id=6710): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000540)=0x100) fallocate(r5, 0x20, 0x0, 0x8000) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000640)="66b818018ed80f2281f2a7660f2a96e8590000c4e17d71f20466baf80cb800005486ef66bafc0cb8b4000000ef66b8f9000f00d866b81f010f00d0f2a666b8dd008ec8", 0x43}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRESHEX]) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = eventfd2(0x0, 0x800) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000100)={0x7, 0x0, 0x0, r8}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) ioctl$KVM_CAP_HYPERV_VP_INDEX(r7, 0x4068aea3, &(0x7f0000000440)) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=E']) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x85032, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r6, @ANYRESDEC=r4, @ANYRESHEX=r4]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x11}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) 1.04445831s ago: executing program 5 (id=6711): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x3, 0x2, 0x2, 0x0, 0x80, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x0, 0x3}}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x8, 0x9}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xe9, 0x0, 0x2}}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xff) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) listen(r3, 0x3) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080)=0xfff, 0x4) fchownat(r1, &(0x7f0000000080)='./file0\x00', 0x0, r2, 0x900) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x64, 0x0, &(0x7f0000000000)=[@register_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0xffffffff}, @clear_death={0x400c630f, 0x1}, @clear_death, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) 488.01933ms ago: executing program 5 (id=6712): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000edff10"]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 487.646731ms ago: executing program 5 (id=6713): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x11) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000340)=ANY=[@ANYBLOB="12010100000000106b1d010140000102030109028f0003"], 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=6714): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0x58, 0x7, 0x5, [0xd95, 0x8, 0x7, 0x3, 0xffffffffffffffff]}}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 186][T15317] netlink: 'syz.0.4630': attribute type 46 has an invalid length. [ 341.142582][ T340] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 341.292543][ T340] usb 3-1: Using ep0 maxpacket: 16 [ 341.299125][ T340] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.309352][ T340] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 341.319892][ T340] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 341.329121][ T340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.337281][ T340] usb 3-1: Product: syz [ 341.341466][ T340] usb 3-1: Manufacturer: syz [ 341.346090][ T340] usb 3-1: SerialNumber: syz [ 341.351349][ T340] usb 3-1: config 0 descriptor?? [ 341.558625][ T9] usb 3-1: USB disconnect, device number 47 [ 341.574856][T15336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4636'. [ 341.614152][T15304] can0 (unregistered): slcan off ttyS3. [ 342.278022][T15400] x_tables: duplicate underflow at hook 1 [ 342.797829][T15441] netlink: 'syz.0.4663': attribute type 6 has an invalid length. [ 342.817000][T15443] fuseblk: Bad value for 'rootmode' [ 343.057556][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.065175][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.073037][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.080684][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.088337][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.095871][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.103490][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.111080][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.118668][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.126239][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.133823][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.141436][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.149078][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.156654][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.164377][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.171977][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.179692][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.187477][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.195120][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.202871][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.210591][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.218364][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.225994][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.233728][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.241338][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.249085][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.256710][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.264411][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.272116][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.279938][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.287538][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.295190][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.302822][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.310399][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.318142][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.325752][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.333441][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.341315][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.348995][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.356629][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.364263][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.371822][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.379466][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.387136][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.394769][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.402370][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.410016][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.417609][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.425686][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.433307][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.440879][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.448514][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.456104][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.463722][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.471284][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.478949][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.486567][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.494247][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.501834][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.509454][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.517067][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.524662][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.532279][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.539951][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.547535][T15474] overlayfs: lower data-only dirs require metacopy support. [ 343.568264][T15476] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4675'. [ 343.765299][ T36] audit: type=1400 audit(2000000371.612:3714): avc: denied { ioctl } for pid=15480 comm="syz.0.4677" path="socket:[78679]" dev="sockfs" ino=78679 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 343.817701][T15487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.869821][T15491] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 343.876448][T15491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 343.884570][T15491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:301 [ 343.894667][T15491] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.898459][T15490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53018 sclass=netlink_route_socket pid=15490 comm=syz.0.4680 [ 343.904507][T15491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 343.924846][T15491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:301 [ 343.940914][T15491] rust_binder: 301: no such ref 5 [ 343.955512][T15491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:301 [ 343.969896][T15493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2068 sclass=netlink_route_socket pid=15493 comm=syz.0.4681 [ 344.410112][T15498] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4683'. [ 344.419184][T15498] netlink: 35 bytes leftover after parsing attributes in process `syz.5.4683'. [ 344.428370][T15498] netlink: 'syz.5.4683': attribute type 6 has an invalid length. [ 344.436175][T15498] netlink: 'syz.5.4683': attribute type 5 has an invalid length. [ 344.443991][T15498] netlink: 35 bytes leftover after parsing attributes in process `syz.5.4683'. [ 344.580946][T15520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4690'. [ 344.590372][T15520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4690'. [ 344.613660][ T36] audit: type=1400 audit(2000000372.462:3715): avc: denied { create } for pid=15521 comm="syz.0.4691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 344.640428][T15527] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4692'. [ 344.666361][T15529] xt_NFQUEUE: number of total queues is 0 [ 344.900038][T15551] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 344.905784][T15551] rust_binder: 324: no such ref 3 [ 344.917561][T15551] rust_binder: 324: no such ref 3 [ 344.922816][T15551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:324 [ 345.963688][T15615] overlayfs: failed to clone upperpath [ 346.266867][ T36] audit: type=1326 audit(2000000374.112:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.2.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b58eba9 code=0x50000 [ 346.290411][ T36] audit: type=1326 audit(2000000374.112:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.2.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b58eba9 code=0x50000 [ 346.314133][ T36] audit: type=1326 audit(2000000374.112:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.2.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b58eba9 code=0x50000 [ 346.337414][ T36] audit: type=1326 audit(2000000374.112:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.2.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b58eba9 code=0x50000 [ 346.360700][ T36] audit: type=1326 audit(2000000374.112:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.2.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b58eba9 code=0x50000 [ 346.384177][ T36] audit: type=1326 audit(2000000374.112:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.2.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b58eba9 code=0x50000 [ 346.407584][ T36] audit: type=1326 audit(2000000374.112:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.2.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b58eba9 code=0x50000 [ 346.430925][ T36] audit: type=1326 audit(2000000374.112:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.2.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b58eba9 code=0x50000 [ 346.454184][ T36] audit: type=1326 audit(2000000374.112:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.2.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b58eba9 code=0x50000 [ 346.477428][ T36] audit: type=1326 audit(2000000374.112:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.2.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b58eba9 code=0x50000 [ 346.815679][T15671] veth0_virt_wifi: entered allmulticast mode [ 346.889512][T15672] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.896631][T15672] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.903816][T15672] bridge_slave_0: entered allmulticast mode [ 346.910272][T15672] bridge_slave_0: entered promiscuous mode [ 346.916949][T15672] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.924084][T15672] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.931178][T15672] bridge_slave_1: entered allmulticast mode [ 346.937685][T15672] bridge_slave_1: entered promiscuous mode [ 347.016815][T15672] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.023922][T15672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.031270][T15672] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.038355][T15672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.065726][ T8918] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.073296][ T8918] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.084654][ T8920] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.091763][ T8920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.104117][ T8918] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.111213][ T8918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.136564][T15687] netlink: 'syz.2.4748': attribute type 4 has an invalid length. [ 347.146472][T15687] netlink: 'syz.2.4748': attribute type 4 has an invalid length. [ 347.164867][T15672] veth0_vlan: entered promiscuous mode [ 347.176805][T15672] veth1_macvtap: entered promiscuous mode [ 347.225188][T15689] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 347.225214][T15689] rust_binder: Read failure Err(EFAULT) in pid:2 [ 347.589425][T15668] veth0_virt_wifi: left allmulticast mode [ 347.800725][T15733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4766'. [ 348.364935][T15756] overlayfs: failed to clone lowerpath [ 348.611277][T15761] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4778'. [ 348.642782][T15761] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4778'. [ 348.776322][T15784] /dev/loop0: Can't lookup blockdev [ 349.063405][T15805] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 349.173895][T15809] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4795'. [ 349.365812][T15821] overlayfs: failed to clone lowerpath [ 349.445445][T15833] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 350.105074][T15879] overlayfs: failed to clone upperpath [ 350.880673][T15915] overlayfs: failed to clone upperpath [ 350.916280][T15923] netlink: 'syz.0.4836': attribute type 19 has an invalid length. [ 351.569646][T15999] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4859'. [ 351.591510][T16004] overlayfs: failed to clone upperpath [ 351.611095][T16006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16006 comm=syz.0.4861 [ 351.815203][T16030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16030 comm=syz.2.4868 [ 351.923325][T16048] netlink: 'syz.5.4876': attribute type 4 has an invalid length. [ 351.940083][T16048] netlink: 'syz.5.4876': attribute type 4 has an invalid length. [ 351.968714][T16049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4875'. [ 352.730011][T16098] 9pnet_fd: Insufficient options for proto=fd [ 352.836888][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=16117 comm=syz.6.4902 [ 352.860690][T16126] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 353.133366][T16144] 9pnet_fd: Insufficient options for proto=fd [ 353.569927][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 353.569947][ T36] audit: type=1400 audit(2000000381.412:3791): avc: denied { mounton } for pid=16156 comm="syz.6.4918" path="/file0" dev="rootfs" ino=73517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 353.690273][T16174] bridge0: port 3(macsec0) entered blocking state [ 353.696860][T16174] bridge0: port 3(macsec0) entered disabled state [ 353.703760][T16174] macsec0: entered allmulticast mode [ 353.706412][T16176] tmpfs: Unknown parameter '' [ 353.716468][T16174] veth1_macvtap: entered allmulticast mode [ 353.723483][T16174] macsec0: entered promiscuous mode [ 353.729005][T16174] bridge0: port 3(macsec0) entered blocking state [ 353.735502][T16174] bridge0: port 3(macsec0) entered forwarding state [ 353.817285][T16193] overlayfs: failed to clone upperpath [ 354.429197][T16230] overlayfs: failed to clone upperpath [ 354.505671][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4955'. [ 354.514820][T16252] bridge_slave_1: left allmulticast mode [ 354.520710][T16252] bridge_slave_1: left promiscuous mode [ 354.526513][T16252] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.534136][T16252] bridge_slave_0: left allmulticast mode [ 354.539813][T16252] bridge_slave_0: left promiscuous mode [ 354.546214][T16252] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.078363][T16255] 9pnet_fd: Insufficient options for proto=fd [ 355.085771][ T8920] tipc: Subscription rejected, illegal request [ 355.099303][T16258] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 355.121420][T16261] overlayfs: failed to clone upperpath [ 355.156276][T16266] veth0_virt_wifi: entered allmulticast mode [ 355.243382][T16263] veth0_virt_wifi: left allmulticast mode [ 355.269366][T16284] fuse: Unknown parameter '00000000000000000005\6 I}H [ 355.269366][T16284] 7nߑWv oǃϏE#mhRiv3Ѭ1IL︷D34^#&nTO3NEF#܉ewYXQpdQ!:%Gҿ' [ 355.311645][T16288] overlay: Bad value for 'verity' [ 355.373707][T16299] overlayfs: failed to clone upperpath [ 355.428350][T16306] /dev/loop0: Can't lookup blockdev [ 355.488536][ T36] audit: type=1326 audit(2000000383.332:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.5.4972" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7ff70c985b67 code=0x0 [ 355.865929][ T36] audit: type=1326 audit(2000000383.712:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.2.4978" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe09b58eba9 code=0x0 [ 356.130261][T16355] overlayfs: failed to clone upperpath [ 356.130261][T16354] overlayfs: failed to clone upperpath [ 356.188626][T16364] fuseblk: Bad value for 'rootmode' [ 356.285651][T16376] 9pnet_fd: Insufficient options for proto=fd [ 356.323668][T16380] 9pnet_fd: Insufficient options for proto=fd [ 356.364523][T16396] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 356.372168][T16395] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 356.435585][T16412] /dev/loop0: Can't lookup blockdev [ 356.731233][ T36] audit: type=1400 audit(2000000384.572:3794): avc: denied { create } for pid=16422 comm="syz.0.5011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 358.517770][T16543] overlayfs: failed to clone upperpath [ 358.673933][T16549] 9pnet: Could not find request transport: fdno=0x0000000000000004 [ 358.837244][T16578] netlink: 'syz.6.5070': attribute type 4 has an invalid length. [ 358.845291][T16578] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5070'. [ 359.308712][T16598] overlayfs: failed to clone upperpath [ 359.537359][ T36] audit: type=1326 audit(2000000387.382:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16661 comm="syz.0.5097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdef7b8eba9 code=0x0 [ 359.972360][T16680] netlink: 'syz.6.5103': attribute type 1 has an invalid length. [ 360.008964][T16685] fuse: Bad value for 'rootmode' [ 360.036042][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5107'. [ 360.422059][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5114'. [ 362.071780][T16744] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5127'. [ 362.131632][T16746] overlayfs: failed to clone upperpath [ 362.256648][T16763] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5137'. [ 362.316974][T16764] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.324105][T16764] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.331305][T16764] bridge_slave_0: entered allmulticast mode [ 362.337690][T16764] bridge_slave_0: entered promiscuous mode [ 362.344307][T16764] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.351345][T16764] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.358758][T16764] bridge_slave_1: entered allmulticast mode [ 362.365449][T16764] bridge_slave_1: entered promiscuous mode [ 362.419558][T16764] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.426668][T16764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.434046][T16764] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.441099][T16764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.465673][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.473208][ T8920] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.483954][ T8916] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.491062][ T8916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.499727][ T8920] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.506837][ T8920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.536262][T16764] veth0_vlan: entered promiscuous mode [ 362.550810][T16764] veth1_macvtap: entered promiscuous mode [ 362.822546][ T1896] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 363.002899][ T1896] usb 2-1: Using ep0 maxpacket: 32 [ 363.009343][ T1896] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 363.017607][ T1896] usb 2-1: config 0 has no interface number 0 [ 363.023785][ T1896] usb 2-1: config 0 interface 184 has no altsetting 0 [ 363.032091][ T1896] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 363.041318][ T1896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.049452][ T1896] usb 2-1: Product: syz [ 363.053762][ T1896] usb 2-1: Manufacturer: syz [ 363.058421][ T1896] usb 2-1: SerialNumber: syz [ 363.064212][ T1896] usb 2-1: config 0 descriptor?? [ 363.070114][ T1896] smsc75xx v1.0.0 [ 363.110717][T16799] overlayfs: missing 'lowerdir' [ 363.609330][T16841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=16841 comm=syz.2.5161 [ 363.622267][T16841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=16841 comm=syz.2.5161 [ 363.635467][T16841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=16841 comm=syz.2.5161 [ 363.648482][T16841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=16841 comm=syz.2.5161 [ 363.990768][T16846] veth1: entered allmulticast mode [ 363.997268][T16845] veth1: left allmulticast mode [ 364.473062][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5132'. [ 364.482073][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5174'. [ 364.494418][ T1896] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 364.505351][ T1896] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 364.514964][ T1896] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 364.525820][ T1896] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 364.535568][ T1896] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 364.546004][ T1896] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 364.555564][ T1896] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 364.565098][ T1896] usb 2-1: USB disconnect, device number 70 [ 364.775180][ T36] audit: type=1326 audit(2000000392.622:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.0.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef7b8eba9 code=0x7ffc0000 [ 364.798928][ T36] audit: type=1326 audit(2000000392.622:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.0.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef7b8eba9 code=0x7ffc0000 [ 364.822493][ T36] audit: type=1326 audit(2000000392.622:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.0.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef7b8eba9 code=0x7ffc0000 [ 364.846050][ T36] audit: type=1326 audit(2000000392.622:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.0.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef7b8eba9 code=0x7ffc0000 [ 364.869709][ T36] audit: type=1326 audit(2000000392.622:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.0.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdef7b8eba9 code=0x7ffc0000 [ 364.893224][ T36] audit: type=1326 audit(2000000392.622:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.0.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef7b8eba9 code=0x7ffc0000 [ 364.916732][ T36] audit: type=1326 audit(2000000392.622:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.0.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef7b8eba9 code=0x7ffc0000 [ 364.940319][ T36] audit: type=1326 audit(2000000392.622:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.0.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef7b8eba9 code=0x7ffc0000 [ 364.963881][ T36] audit: type=1326 audit(2000000392.622:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.0.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fdef7b8eba9 code=0x7ffc0000 [ 364.987334][ T36] audit: type=1326 audit(2000000392.642:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16889 comm="syz.0.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef7b8eba9 code=0x7ffc0000 [ 365.188843][T16913] syzkaller0: entered allmulticast mode [ 365.194887][T16913] syzkaller0: entered promiscuous mode [ 365.203981][T16913] syzkaller0 (unregistering): left promiscuous mode [ 365.212648][T16913] syzkaller0 (unregistering): left allmulticast mode [ 366.187069][T16946] overlayfs: failed to clone upperpath [ 366.221276][T16946] overlayfs: failed to clone upperpath [ 366.544913][T16975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5203'. [ 366.571316][T17022] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 366.761302][T17043] netlink: 'syz.1.5222': attribute type 1 has an invalid length. [ 366.769886][T17043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5222'. [ 366.822393][T17051] netlink: 'syz.1.5224': attribute type 10 has an invalid length. [ 366.830319][T17051] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5224'. [ 366.913355][T17061] rust_binder: Error while translating object. [ 366.913406][T17061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 366.919714][T17061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 367.005192][T17075] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5232'. [ 367.084413][T17083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5236'. [ 367.192518][ T393] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 367.362524][ T393] usb 2-1: Using ep0 maxpacket: 32 [ 367.370067][ T393] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.382526][ T393] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.402502][ T393] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.419944][ T393] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 367.432958][ T393] usb 2-1: config 0 interface 0 has no altsetting 0 [ 367.441127][ T393] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 367.452118][ T393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.469212][ T393] usb 2-1: config 0 descriptor?? [ 367.672025][T17164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5262'. [ 367.884200][ T393] hid-thrustmaster 0003:044F:B65D.0018: item fetching failed at offset 4/5 [ 367.893152][ T393] hid-thrustmaster 0003:044F:B65D.0018: parse failed with error -22 [ 367.901278][ T393] hid-thrustmaster 0003:044F:B65D.0018: probe with driver hid-thrustmaster failed with error -22 [ 368.153838][ T45] usb 2-1: USB disconnect, device number 71 [ 368.472140][T17198] overlayfs: failed to resolve './file0': -2 [ 368.667041][T17204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.667365][T17204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:72 [ 368.920419][T17214] pim6reg1: entered promiscuous mode [ 368.935240][T17214] pim6reg1: entered allmulticast mode [ 369.083791][T17233] kvm: kvm [17231]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 369.101221][T17233] kvm: kvm [17231]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 369.293706][T17250] rtc_cmos 00:00: Alarms can be up to one day in the future [ 369.450595][T17259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.460715][T17259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.682518][ T393] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 369.812526][ T393] usb 2-1: device descriptor read/64, error -71 [ 369.944812][ T36] kauditd_printk_skb: 474 callbacks suppressed [ 369.944831][ T36] audit: type=1400 audit(2000000397.792:4280): avc: denied { block_suspend } for pid=17261 comm="syz.5.5296" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 369.972958][ T36] audit: type=1400 audit(2000000397.792:4281): avc: denied { sys_module } for pid=17261 comm="syz.5.5296" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 369.994897][ T36] audit: type=1400 audit(2000000397.822:4282): avc: denied { getopt } for pid=17264 comm="syz.0.5298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 370.015320][ T36] audit: type=1400 audit(2000000397.822:4283): avc: denied { ioctl } for pid=17264 comm="syz.0.5298" path="socket:[84501]" dev="sockfs" ino=84501 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 370.037385][T17271] 9pnet_fd: Insufficient options for proto=fd [ 370.045570][ T36] audit: type=1400 audit(2000000397.872:4284): avc: denied { mounton } for pid=17270 comm="syz.2.5299" path="/295/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 370.047149][T17271] 9pnet_fd: Insufficient options for proto=fd [ 370.091509][ T36] audit: type=1400 audit(2000000397.892:4285): avc: denied { remount } for pid=17274 comm="syz.5.5300" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 370.097340][ T393] usb 2-1: device descriptor read/64, error -71 [ 370.118005][T17279] netlink: 'syz.5.5300': attribute type 64 has an invalid length. [ 370.125029][ T36] audit: type=1400 audit(2000000397.892:4286): avc: denied { create } for pid=17274 comm="syz.5.5300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.131622][T17279] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5300'. [ 370.151658][ T36] audit: type=1400 audit(2000000397.892:4287): avc: denied { connect } for pid=17274 comm="syz.5.5300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.214959][ T36] audit: type=1400 audit(2000000398.062:4288): avc: denied { map } for pid=17294 comm="syz.0.5306" path="socket:[85364]" dev="sockfs" ino=85364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 370.217717][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5307'. [ 370.257141][ T36] audit: type=1400 audit(2000000398.102:4289): avc: denied { map } for pid=17298 comm="syz.0.5308" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 370.266445][T17301] /dev/loop0: Can't lookup blockdev [ 370.301782][T17310] netlink: 'syz.0.5310': attribute type 1 has an invalid length. [ 370.309870][T17308] netlink: 'syz.0.5310': attribute type 1 has an invalid length. [ 370.382603][ T393] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 370.512568][ T393] usb 2-1: device descriptor read/64, error -71 [ 370.753511][ T393] usb 2-1: device descriptor read/64, error -71 [ 370.870741][T17327] overlayfs: missing 'workdir' [ 370.876110][ T393] usb usb2-port1: attempt power cycle [ 371.033438][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5326'. [ 371.102945][T17363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5328'. [ 371.222568][ T393] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 371.243624][ T393] usb 2-1: device descriptor read/8, error -71 [ 371.373612][ T393] usb 2-1: device descriptor read/8, error -71 [ 371.612567][ T393] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 371.633722][ T393] usb 2-1: device descriptor read/8, error -71 [ 371.763621][ T393] usb 2-1: device descriptor read/8, error -71 [ 371.875399][T17378] fuse: Bad value for 'rootmode' [ 371.878907][ T393] usb usb2-port1: unable to enumerate USB device [ 371.966909][T17407] netlink: 'syz.0.5341': attribute type 11 has an invalid length. [ 372.221530][T17423] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17423 comm=syz.0.5346 [ 372.234429][T17423] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2571 sclass=netlink_tcpdiag_socket pid=17423 comm=syz.0.5346 [ 372.448114][T17442] __nla_validate_parse: 1 callbacks suppressed [ 372.448139][T17442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5353'. [ 372.496578][T17452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5356'. [ 373.035448][T17470] cgroup: fork rejected by pids controller in /syz5 [ 373.057421][T17497] .N: renamed from veth0_to_bond (while UP) [ 373.067222][T17497] futex_wake_op: syz.0.5362 tries to shift op by -1; fix this program [ 373.608164][T17523] tmpfs: Bad value for 'nr_blocks' [ 373.614019][T17523] 9pnet_fd: Insufficient options for proto=fd [ 373.630412][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5369'. [ 373.692524][ T1896] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 373.803256][T17532] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.810372][T17532] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.817744][T17532] bridge_slave_0: entered allmulticast mode [ 373.824185][T17532] bridge_slave_0: entered promiscuous mode [ 373.831240][T17532] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.838597][T17532] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.838782][ T1896] usb 2-1: device descriptor read/64, error -71 [ 373.845897][T17532] bridge_slave_1: entered allmulticast mode [ 373.858824][T17532] bridge_slave_1: entered promiscuous mode [ 373.892326][T17544] tipc: Enabling of bearer rejected, failed to enable media [ 373.944225][T17532] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.951360][T17532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.958736][T17532] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.965817][T17532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.974466][ T8916] tipc: Left network mode [ 373.980444][ T8916] veth1_macvtap: left promiscuous mode [ 373.985995][ T8916] veth0_vlan: left promiscuous mode [ 374.038938][ T8914] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.046383][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.059193][ T8914] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.066301][ T8914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.074029][ T8914] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.081072][ T8914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.102559][ T1896] usb 2-1: device descriptor read/64, error -71 [ 374.113139][T17532] veth0_vlan: entered promiscuous mode [ 374.124878][T17532] veth1_macvtap: entered promiscuous mode [ 374.168242][T17552] SELinux: failed to load policy [ 374.342552][ T1896] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 374.472583][ T1896] usb 2-1: device descriptor read/64, error -71 [ 374.505288][T17572] vlan0: entered promiscuous mode [ 374.510518][T17572] vlan0: entered allmulticast mode [ 374.515742][T17572] veth0_vlan: entered allmulticast mode [ 374.722592][ T1896] usb 2-1: device descriptor read/64, error -71 [ 374.832848][ T1896] usb usb2-port1: attempt power cycle [ 375.172528][ T1896] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 375.203690][ T1896] usb 2-1: device descriptor read/8, error -71 [ 375.343640][ T1896] usb 2-1: device descriptor read/8, error -71 [ 375.558149][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 375.558170][ T36] audit: type=1400 audit(2016777848.407:4365): avc: denied { create } for pid=17602 comm="syz.0.5394" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 375.564150][T17603] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 375.564663][ T36] audit: type=1400 audit(2016777848.407:4366): avc: denied { write } for pid=17602 comm="syz.0.5394" name="file2" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 375.592565][ T1896] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 375.593150][ T36] audit: type=1400 audit(2016777848.407:4367): avc: denied { open } for pid=17602 comm="syz.0.5394" path="/3/file2" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 375.646627][ T36] audit: type=1400 audit(2016777848.407:4368): avc: denied { ioctl } for pid=17602 comm="syz.0.5394" path="/3/file2" dev="tmpfs" ino=34 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 375.653693][ T1896] usb 2-1: device descriptor read/8, error -71 [ 375.671299][ T36] audit: type=1400 audit(2016777848.407:4369): avc: denied { append } for pid=17602 comm="syz.0.5394" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 375.699760][T17608] overlayfs: failed to clone upperpath [ 375.706029][ T36] audit: type=1400 audit(2016777848.437:4370): avc: denied { write } for pid=17602 comm="syz.0.5394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 375.725992][ T36] audit: type=1400 audit(2016777848.437:4371): avc: denied { lock } for pid=17602 comm="syz.0.5394" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 375.792548][ T36] audit: type=1400 audit(2016777848.637:4372): avc: denied { unlink } for pid=17532 comm="syz-executor" name="file2" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 375.813360][ T1896] usb 2-1: device descriptor read/8, error -71 [ 375.914546][ T36] audit: type=1400 audit(2016777848.767:4373): avc: denied { name_bind } for pid=17624 comm="syz.5.5402" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 375.942622][ T1896] usb usb2-port1: unable to enumerate USB device [ 375.972493][ T36] audit: type=1400 audit(2016777848.817:4374): avc: denied { setopt } for pid=17624 comm="syz.5.5402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 376.695472][T17645] rust_binder: 129: no such ref 3 [ 376.701631][T17645] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 376.711054][T17645] rust_binder: Write failure EINVAL in pid:129 [ 376.772647][T17647] overlayfs: failed to clone upperpath [ 376.855986][T17651] binder: Bad value for 'stats' [ 377.212557][ T45] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 377.362528][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 377.368836][ T45] usb 2-1: config 211 has an invalid descriptor of length 0, skipping remainder of the config [ 377.380548][ T45] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 377.389652][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.397741][ T45] usb 2-1: Product: syz [ 377.401939][ T45] usb 2-1: Manufacturer: syz [ 377.406587][ T45] usb 2-1: SerialNumber: syz [ 377.683974][ T45] usb 2-1: USB disconnect, device number 80 [ 377.877537][T17685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5423'. [ 378.757740][T17731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5440'. [ 378.882519][ T1896] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 379.032546][ T1896] usb 2-1: Using ep0 maxpacket: 32 [ 379.038836][ T1896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.049786][ T1896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.059565][ T1896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 379.072544][ T1896] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 379.082395][ T1896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.091764][ T1896] usb 2-1: config 0 descriptor?? [ 379.097958][ T1896] usbhid 2-1:0.0: can't add hid device: -22 [ 379.104008][ T1896] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 379.301053][T17727] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 379.301083][T17727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 379.309162][T17727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:149 [ 379.319679][ T739] usb 2-1: USB disconnect, device number 81 [ 379.707390][T17809] netlink: 'syz.0.5469': attribute type 20 has an invalid length. [ 379.779301][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5472'. [ 379.907055][T17830] bridge0: port 3(macsec0) entered blocking state [ 379.913655][T17830] bridge0: port 3(macsec0) entered disabled state [ 379.920278][T17830] macsec0: entered allmulticast mode [ 379.925965][T17830] veth1_macvtap: entered allmulticast mode [ 379.932716][T17830] macsec0: entered promiscuous mode [ 379.938210][T17830] bridge0: port 3(macsec0) entered blocking state [ 379.944739][T17830] bridge0: port 3(macsec0) entered forwarding state [ 379.953956][T17830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5475'. [ 380.122524][ T1896] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 380.273685][ T1896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.283888][ T1896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.293566][ T1896] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 380.302672][ T1896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 380.310680][ T1896] usb 2-1: SerialNumber: syz [ 380.571076][T17838] loop4: detected capacity change from 0 to 8388608 [ 380.921393][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 380.921414][ T36] audit: type=1400 audit(2016777853.767:4404): avc: denied { read } for pid=17845 comm="syz.5.5481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 380.978734][T17856] overlayfs: failed to clone lowerpath [ 381.005539][T17864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5487'. [ 381.898096][T17901] erofs: dax options not supported [ 381.976512][ T36] audit: type=1400 audit(2016777854.827:4405): avc: denied { ioctl } for pid=17907 comm="syz.0.5502" path="socket:[86729]" dev="sockfs" ino=86729 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 382.056455][ T36] audit: type=1400 audit(2016777854.907:4406): avc: denied { getopt } for pid=17922 comm="syz.0.5506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 382.113158][T17929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5509'. [ 382.174075][T17930] netlink: 'syz.0.5509': attribute type 27 has an invalid length. [ 382.888962][ T1896] usb 2-1: USB disconnect, device number 82 [ 382.911733][T16178] udevd[16178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 382.930131][T17933] can0: slcan on ttyS3. [ 382.936523][ T36] audit: type=1400 audit(2016777855.787:4407): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 382.971746][ T36] audit: type=1400 audit(2016777855.817:4408): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.004382][ T36] audit: type=1400 audit(2016777855.817:4409): avc: denied { read } for pid=149 comm="dhcpcd" name="n48" dev="tmpfs" ino=10904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 383.030822][ T36] audit: type=1400 audit(2016777855.817:4410): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n48" dev="tmpfs" ino=10904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 383.056602][ T36] audit: type=1400 audit(2016777855.817:4411): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n48" dev="tmpfs" ino=10904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 383.080703][ T36] audit: type=1400 audit(2016777855.877:4412): avc: denied { read } for pid=17938 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.111338][ T36] audit: type=1400 audit(2016777855.877:4413): avc: denied { open } for pid=17938 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.186308][T17933] can0 (unregistered): slcan off ttyS3. [ 384.221457][T17996] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 384.221492][T17996] rust_binder: Error while translating object. [ 384.233879][T17996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 384.240168][T17996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168 [ 384.593242][ T1896] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 384.754290][ T1896] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.765310][ T1896] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 384.775179][ T1896] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 384.786463][ T1896] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.795655][ T1896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.803780][ T1896] usb 2-1: Product: syz [ 384.808028][ T1896] usb 2-1: Manufacturer: syz [ 384.812742][ T1896] usb 2-1: SerialNumber: syz [ 385.021684][ T1896] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 385.028586][ T1896] cdc_ncm 2-1:1.0: bind() failure [ 385.034775][ T1896] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 385.041612][ T1896] cdc_ncm 2-1:1.1: bind() failure [ 385.048119][ T1896] usb 2-1: USB disconnect, device number 83 [ 385.247023][T18047] overlay: Unknown parameter 'uid>00000000000000000000' [ 385.254519][T18047] overlayfs: failed to clone upperpath [ 385.583178][T18052] rust_binder: Failed to allocate buffer. len:8815263377109862632, is_oneway:false [ 385.583211][T18052] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 385.592680][T18052] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:174 [ 385.606478][T18052] rust_binder: Write failure EFAULT in pid:174 [ 385.729315][T18068] tmpfs: Unsupported parameter 'mpol' [ 386.117611][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 386.117633][ T36] audit: type=1400 audit(2016777858.967:4432): avc: denied { remount } for pid=18087 comm="syz.0.5553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 386.286645][ T36] audit: type=1400 audit(2016777859.137:4433): avc: denied { associate } for pid=18089 comm="syz.0.5553" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 386.423330][T18097] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.432914][T18097] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.440036][T18097] bridge_slave_0: entered allmulticast mode [ 386.463007][T18097] bridge_slave_0: entered promiscuous mode [ 386.469745][T18097] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.477075][T18097] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.484421][T18097] bridge_slave_1: entered allmulticast mode [ 386.490895][T18097] bridge_slave_1: entered promiscuous mode [ 386.574567][T18105] pimreg: tun_chr_ioctl cmd 1074025677 [ 386.580421][T18105] pimreg: linktype set to 780 [ 386.594178][T18105] pimreg: tun_chr_ioctl cmd 1074025672 [ 386.599795][T18105] pimreg: ignored: set checksum enabled [ 386.623262][T18097] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.630396][T18097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.637749][T18097] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.644844][T18097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.676876][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.694874][ T8920] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.715338][ T8914] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.722479][ T8914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.733916][ T8920] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.741038][ T8920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.793054][T18097] veth0_vlan: entered promiscuous mode [ 386.806966][T18097] veth1_macvtap: entered promiscuous mode [ 386.847651][ T36] audit: type=1400 audit(2016777859.697:4434): avc: denied { write } for pid=18126 comm="syz.8.5555" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 386.871839][T18127] input: syz0 as /devices/virtual/input/input32 [ 386.879768][ T36] audit: type=1400 audit(2016777859.727:4435): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=908 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 386.909124][ T36] audit: type=1400 audit(2016777859.727:4436): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=908 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 386.933576][ T36] audit: type=1400 audit(2016777859.727:4437): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=908 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 386.980694][ T36] audit: type=1400 audit(2016777859.827:4438): avc: denied { mount } for pid=18132 comm="syz.0.5567" name="/" dev="ramfs" ino=88099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 387.034435][T18146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5571'. [ 387.452537][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 387.612567][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 387.620799][ T9] usb 9-1: config 2 has an invalid interface number: 49 but max is 1 [ 387.629213][ T9] usb 9-1: config 2 has an invalid interface number: 219 but max is 1 [ 387.637770][ T9] usb 9-1: config 2 has no interface number 0 [ 387.644205][ T9] usb 9-1: config 2 has no interface number 1 [ 387.650407][ T9] usb 9-1: config 2 interface 49 altsetting 4 endpoint 0xC has invalid maxpacket 544, setting to 64 [ 387.661230][ T9] usb 9-1: config 2 interface 49 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 387.672182][ T9] usb 9-1: config 2 interface 49 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 387.683073][ T9] usb 9-1: config 2 interface 49 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 387.694000][ T9] usb 9-1: config 2 interface 49 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 387.704918][ T9] usb 9-1: config 2 interface 49 has no altsetting 0 [ 387.711627][ T9] usb 9-1: config 2 interface 219 has no altsetting 0 [ 387.720690][ T9] usb 9-1: New USB device found, idVendor=0436, idProduct=0005, bcdDevice= 1.00 [ 387.729832][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.738129][ T9] usb 9-1: Product: syz [ 387.742300][ T9] usb 9-1: Manufacturer: syz [ 387.746949][ T9] usb 9-1: SerialNumber: syz [ 387.882547][ T45] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 387.957522][ T9] ums-sddr09 9-1:2.49: USB Mass Storage device detected [ 388.025506][ T9] ums-sddr09 9-1:2.219: USB Mass Storage device detected [ 388.036013][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.046901][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.049098][ T36] audit: type=1400 audit(2016777860.897:4439): avc: denied { mount } for pid=18183 comm="syz.5.5585" name="/" dev="configfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 388.057129][ T45] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 388.079263][ T36] audit: type=1400 audit(2016777860.937:4440): avc: denied { search } for pid=18183 comm="syz.5.5585" name="/" dev="configfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.088623][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 388.111544][ T36] audit: type=1400 audit(2016777860.967:4441): avc: denied { read } for pid=18183 comm="syz.5.5585" name="/" dev="configfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.148115][ T45] usb 2-1: SerialNumber: syz [ 388.157153][ T9] usb 9-1: USB disconnect, device number 7 [ 388.167360][T18189] 9pnet_fd: Insufficient options for proto=fd [ 388.369836][ T45] usb 2-1: 0:2 : does not exist [ 388.392135][ T45] usb 2-1: USB disconnect, device number 84 [ 388.403638][T16178] udevd[16178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 388.509331][T18213] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 388.575671][T18218] bridge0: port 3(macsec0) entered blocking state [ 388.582236][T18218] bridge0: port 3(macsec0) entered disabled state [ 388.588865][T18218] macsec0: entered allmulticast mode [ 388.594315][T18218] veth1_macvtap: entered allmulticast mode [ 388.600583][T18218] macsec0: entered promiscuous mode [ 388.606106][T18218] bridge0: port 3(macsec0) entered blocking state [ 388.612588][T18218] bridge0: port 3(macsec0) entered forwarding state [ 388.620727][T18218] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 388.620751][T18218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:22 [ 389.088904][T18258] overlayfs: failed to clone upperpath [ 389.114162][T18258] netlink: 'syz.0.5611': attribute type 3 has an invalid length. [ 389.121998][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5611'. [ 389.372522][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 389.537526][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 389.546303][ T9] usb 2-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 389.556638][ T9] usb 2-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 389.569775][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 389.577907][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 389.587044][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.595137][ T9] usb 2-1: Product: ˝憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓ꊐݜㄿ↦裌莡ꉳ咆纥㉸從ழ讧걿⨔亓뉭얄슀葋䤝빗馿㞘톷注栴享◗◧報ꓨ莏藷⢞덥ﯕ좢떸枱嘯떦摵﹧겥鈐ᜇ䤬漳 [ 389.603263][T18278] binder: Unknown parameter 'defcontext01777777777777777777777' [ 389.616817][ T9] usb 2-1: SerialNumber: syz [ 389.845885][T18284] netlink: 'syz.5.5620': attribute type 16 has an invalid length. [ 389.853904][T18284] netlink: 'syz.5.5620': attribute type 3 has an invalid length. [ 389.855913][T18260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.862281][T18284] netlink: 'syz.5.5620': attribute type 1 has an invalid length. [ 389.871510][T18260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.880516][T18284] netlink: 64030 bytes leftover after parsing attributes in process `syz.5.5620'. [ 389.907526][ T9] cdc_ether 2-1:1.0: skipping garbage [ 389.913275][ T9] cdc_ether 2-1:1.0: skipping garbage [ 389.918868][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 389.924439][T18293] 9pnet_fd: Insufficient options for proto=fd [ 389.930454][ T9] usb 2-1: USB disconnect, device number 85 [ 389.978220][T18302] binder: Unknown parameter 'stat_' [ 389.993424][T18306] 9pnet_fd: Insufficient options for proto=fd [ 390.046235][T18313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5630'. [ 390.102960][T18323] can0: slcan on ttyS3. [ 390.352664][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 390.396610][T18361] netlink: 'syz.8.5640': attribute type 4 has an invalid length. [ 390.404658][T18361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18361 comm=syz.8.5640 [ 390.418005][T18361] rust_binder: Failed copying into alloc: EFAULT [ 390.418033][T18361] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 390.424691][T18361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 390.433337][T18361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:35 [ 390.452822][T18363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18363 comm=syz.8.5640 [ 390.453181][T18362] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 390.486055][T18367] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5641'. [ 390.502524][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 390.509700][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.526664][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 390.528890][T18372] Invalid ELF header len 1 [ 390.547101][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.556459][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.564594][ T9] usb 2-1: Product: syz [ 390.568864][ T9] usb 2-1: Manufacturer: syz [ 390.573715][ T9] usb 2-1: SerialNumber: syz [ 390.579149][ T9] usb 2-1: config 0 descriptor?? [ 390.785979][ T9] usb 2-1: USB disconnect, device number 86 [ 390.813962][T18323] can0 (unregistered): slcan off ttyS3. [ 391.095391][T18413] /dev/rnullb0: Can't open blockdev [ 391.136836][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 391.136856][ T36] audit: type=1400 audit(2016777863.987:4464): avc: denied { bind } for pid=18421 comm="syz.8.5654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 391.167848][ T36] audit: type=1400 audit(2016777864.017:4465): avc: denied { ioctl } for pid=18421 comm="syz.8.5654" path="socket:[88558]" dev="sockfs" ino=88558 ioctlcmd=0x48dc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 391.193325][ T36] audit: type=1400 audit(2016777864.017:4466): avc: denied { execute } for pid=18421 comm="syz.8.5654" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.330589][T18430] veth0_vlan: entered allmulticast mode [ 391.392982][T18436] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 391.394779][ T36] audit: type=1400 audit(2016777864.247:4467): avc: denied { unmount } for pid=18097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 391.426957][ T36] audit: type=1400 audit(2016777864.277:4468): avc: denied { unmount } for pid=16764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 391.453506][ T36] audit: type=1400 audit(2016777864.307:4469): avc: denied { append } for pid=18439 comm="syz.8.5660" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.457821][T18438] overlayfs: failed to resolve './file0': -2 [ 391.752559][ T1619] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 391.846922][T18449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5665'. [ 391.856619][ T36] audit: type=1400 audit(2016777864.707:4470): avc: denied { create } for pid=18448 comm="syz.0.5665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 391.877596][ T36] audit: type=1400 audit(2016777864.707:4471): avc: denied { getopt } for pid=18448 comm="syz.0.5665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 391.913221][ T1619] usb 2-1: not running at top speed; connect to a high speed hub [ 391.921853][ T1619] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 391.930368][ T1619] usb 2-1: config 95 has no interface number 0 [ 391.936685][ T1619] usb 2-1: config 95 interface 1 has no altsetting 0 [ 391.944839][ T1619] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 391.954304][ T1619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.962721][ T1619] usb 2-1: Product: syz [ 391.966961][ T1619] usb 2-1: Manufacturer: syz [ 391.971590][ T1619] usb 2-1: SerialNumber: syz [ 392.231196][ T36] audit: type=1400 audit(2016777865.077:4472): avc: denied { mounton } for pid=18444 comm="syz.1.5663" path="/syzcgroup/unified/syz1" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 392.231321][T18464] /dev/rnullb0: Can't open blockdev [ 392.408161][T18474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.417254][T18474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.453454][ T36] audit: type=1400 audit(2016777865.307:4473): avc: denied { mount } for pid=18477 comm="syz.0.5673" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 392.642578][ T1896] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 392.792560][ T1896] usb 9-1: Using ep0 maxpacket: 16 [ 392.799801][ T1896] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 72, changing to 10 [ 392.810986][ T1896] usb 9-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 392.821108][ T1896] usb 9-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 392.830900][ T1896] usb 9-1: config 1 interface 0 has no altsetting 0 [ 392.839022][ T1896] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.848188][ T1896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.856263][ T1896] usb 9-1: Product: syz [ 392.860454][ T1896] usb 9-1: Manufacturer: syz [ 392.865132][ T1896] usb 9-1: SerialNumber: syz [ 392.871725][T18475] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 392.878992][T18475] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 393.042664][T18491] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 393.087843][T18475] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 393.095297][T18475] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 393.236896][T18504] @: renamed from vlan0 (while UP) [ 393.310956][ T1896] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 393.320649][ T1896] usb 9-1: USB disconnect, device number 8 [ 393.983660][T18555] rust_binder: 77: no such ref 3 [ 393.988806][T18555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 393.989703][T18555] rust_binder: Error while translating object. [ 393.999595][T18557] overlayfs: failed to clone upperpath [ 393.999631][T18555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 394.011387][T18555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 394.561431][T18571] fuse: Unknown parameter '0xffffffffffffffff' [ 394.578171][T18569] netlink: 'syz.1.5706': attribute type 10 has an invalid length. [ 394.584779][ T1619] usb 2-1: USB disconnect, device number 87 [ 394.612018][T16178] udevd[16178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 395.112007][T18597] rust_binder: Error while translating object. [ 395.112071][T18597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 395.118386][T18597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 395.372500][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 395.533591][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.544694][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.554483][ T9] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 395.563563][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.572258][ T9] usb 2-1: config 0 descriptor?? [ 395.614507][T18607] rust_binder: Read failure Err(EFAULT) in pid:88 [ 395.671007][T18616] netlink: 277 bytes leftover after parsing attributes in process `syz.8.5725'. [ 395.718071][T18620] fuse: Bad value for 'group_id' [ 395.723091][T18620] fuse: Bad value for 'group_id' [ 395.884784][T18645] 9pnet_fd: Insufficient options for proto=fd [ 395.988045][ T9] hid-led 0003:27B8:01ED.0019: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 396.004252][ T9] hid-led 0003:27B8:01ED.0019: ThingM blink(1) initialized [ 396.207190][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 396.207210][ T36] audit: type=1326 audit(2016777869.057:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18658 comm="syz.8.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb602f8eba9 code=0x7ffc0000 [ 396.302531][ T1619] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 396.458141][ T1619] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.469132][ T1619] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.479040][ T1619] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 396.488232][ T1619] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.496952][ T1619] usb 9-1: config 0 descriptor?? [ 397.622870][ T36] audit: type=1400 audit(2016777870.477:4494): avc: denied { unmount } for pid=18097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 397.727658][T18718] can0: slcan on ttyS3. [ 397.733602][T18718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.742157][T18718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.815049][T18718] can0 (unregistered): slcan off ttyS3. [ 398.158339][ T1896] usb 2-1: USB disconnect, device number 88 [ 398.452553][ T1896] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 398.602513][ T1896] usb 2-1: Using ep0 maxpacket: 32 [ 398.608970][ T1896] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 398.617253][ T1896] usb 2-1: config 0 has no interface number 0 [ 398.623406][ T1896] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 398.633644][ T1896] usb 2-1: config 0 interface 196 has no altsetting 0 [ 398.641978][ T1896] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 398.651120][ T1896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.659182][ T1896] usb 2-1: Product: syz [ 398.663406][ T1896] usb 2-1: Manufacturer: syz [ 398.668029][ T1896] usb 2-1: SerialNumber: syz [ 398.673575][ T1896] usb 2-1: config 0 descriptor?? [ 398.678905][T18747] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 398.887626][ T1896] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 398.896781][ T1896] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 399.090126][ T9] usb 2-1: USB disconnect, device number 89 [ 399.435522][T18764] netlink: 'syz.0.5764': attribute type 16 has an invalid length. [ 399.443474][T18764] netlink: 'syz.0.5764': attribute type 2 has an invalid length. [ 399.451283][T18764] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.5764'. [ 399.611376][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5769'. [ 399.654000][T18777] binder: Unknown parameter ' [ 399.654000][T18777] &'.WFaICf5`' [ 400.192543][ T45] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 400.343618][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.354021][ T45] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 400.364468][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.373582][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.381610][ T45] usb 2-1: Product: syz [ 400.385852][ T45] usb 2-1: Manufacturer: syz [ 400.390474][ T45] usb 2-1: SerialNumber: syz [ 400.602271][ T45] usb 2-1: 0:2 : does not exist [ 400.613027][ T45] usb 2-1: cannot find UAC_HEADER [ 400.619744][ T45] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 400.632286][ T45] usb 2-1: USB disconnect, device number 90 [ 400.639540][T18796] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.646340][T16178] udevd[16178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 400.646732][T18796] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.669599][T18796] bridge_slave_0: entered allmulticast mode [ 400.676453][T18796] bridge_slave_0: entered promiscuous mode [ 400.683245][T18796] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.690550][T18796] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.697840][T18796] bridge_slave_1: entered allmulticast mode [ 400.704335][T18796] bridge_slave_1: entered promiscuous mode [ 400.780099][T18796] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.787201][T18796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.794721][T18796] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.801779][T18796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.834617][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.842236][ T8916] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.853558][ T8916] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.860742][ T8916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.870915][ T8916] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.878009][ T8916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.917586][T18796] veth0_vlan: entered promiscuous mode [ 400.933106][T18796] veth1_macvtap: entered promiscuous mode [ 401.096375][T18831] input: syz1 as /devices/virtual/input/input33 [ 401.240822][T18845] fuse: Bad value for 'group_id' [ 401.246572][T18845] fuse: Bad value for 'group_id' [ 401.304181][T18865] rust_binder: 18865 RLIMIT_NICE not set [ 401.340573][T18857] overlayfs: failed to clone upperpath [ 401.639913][ T45] rust_binder: 18849: removing orphan mapping 0:1168 [ 401.671623][T18905] /dev/rnullb0: Can't open blockdev [ 401.900985][T18913] rust_binder: Error in use_page_slow: ESRCH [ 401.901015][T18913] rust_binder: use_range failure ESRCH [ 401.907346][T18913] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 401.913112][T18913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 401.921223][T18913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:266 [ 401.931417][T18914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 401.953248][ T1619] usbhid 9-1:0.0: can't add hid device: -32 [ 401.969936][ T1619] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 402.155838][T18921] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 402.245514][ T36] audit: type=1400 audit(2016777875.097:4495): avc: denied { read } for pid=18926 comm="syz.1.5815" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 402.282516][ T36] audit: type=1400 audit(2016777875.097:4496): avc: denied { open } for pid=18926 comm="syz.1.5815" path="/91/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 402.315548][ T36] audit: type=1400 audit(2016777875.127:4497): avc: denied { ioctl } for pid=18926 comm="syz.1.5815" path="/91/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 402.506018][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5826'. [ 402.516612][T18958] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 402.524428][T18958] rust_binder: Write failure EINVAL in pid:282 [ 402.524501][T18956] rust_binder: 282: no such ref 0 [ 402.568520][T18973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=18973 comm=syz.5.5831 [ 402.710789][T19011] /dev/loop0: Can't lookup blockdev [ 403.314683][T19042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48666 sclass=netlink_route_socket pid=19042 comm=syz.8.5852 [ 403.315399][T19044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5853'. [ 403.339392][T19044] overlayfs: failed to resolve './file0': -2 [ 404.221976][T19087] can0: slcan on ttyS3. [ 405.484850][ T36] audit: type=1326 audit(2016777878.337:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.5.5885" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff70c98eba9 code=0x0 [ 405.508056][ T36] audit: type=1400 audit(2016777878.347:4499): avc: denied { accept } for pid=19162 comm="syz.8.5886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 405.528150][ T36] audit: type=1400 audit(2016777878.347:4500): avc: denied { setopt } for pid=19162 comm="syz.8.5886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 405.941723][T19178] bridge0: port 3(dummy0) entered blocking state [ 405.948159][T19178] bridge0: port 3(dummy0) entered disabled state [ 405.955079][T19178] dummy0: entered allmulticast mode [ 405.960943][T19178] dummy0: entered promiscuous mode [ 405.966429][T19178] bridge0: port 3(dummy0) entered blocking state [ 405.972862][T19178] bridge0: port 3(dummy0) entered forwarding state [ 406.128165][T19181] netlink: 'syz.1.5893': attribute type 5 has an invalid length. [ 406.250549][ T36] audit: type=1400 audit(2016777879.097:4501): avc: denied { listen } for pid=19199 comm="syz.8.5901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 406.330758][ T36] audit: type=1326 audit(2016777879.177:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19203 comm="syz.5.5903" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff70c98eba9 code=0x0 [ 406.405400][T19202] overlayfs: failed to clone upperpath [ 406.871770][T19231] netlink: 'syz.5.5910': attribute type 4 has an invalid length. [ 406.886074][T19231] netlink: 'syz.5.5910': attribute type 4 has an invalid length. [ 406.908990][T19234] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5911'. [ 406.982501][ T36] audit: type=1400 audit(2016777879.827:4503): avc: denied { getopt } for pid=19238 comm="syz.5.5912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 407.018775][ T36] audit: type=1400 audit(2016777879.867:4504): avc: denied { mounton } for pid=19250 comm="syz.1.5917" path="/100/file0" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 407.286203][T19087] can0 (unregistered): slcan off ttyS3. [ 407.441003][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 407.441023][ T36] audit: type=1400 audit(2016777880.287:4507): avc: denied { read write } for pid=19281 comm="syz.3.5922" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 407.472075][ T36] audit: type=1400 audit(2016777880.287:4508): avc: denied { open } for pid=19281 comm="syz.3.5922" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 407.524047][T19296] batadv_slave_0: mtu less than device minimum [ 407.547226][T19299] tmpfs: Unknown parameter './file0/../file0' [ 407.592501][ T393] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 407.630826][T19308] x_tables: duplicate underflow at hook 1 [ 407.676034][T19318] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5929'. [ 407.722532][ T393] usb 2-1: device descriptor read/64, error -71 [ 407.787118][ T36] audit: type=1400 audit(2016777880.637:4509): avc: denied { create } for pid=19324 comm="syz.5.5932" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 407.815286][ T36] audit: type=1400 audit(2016777880.637:4510): avc: denied { read } for pid=19324 comm="syz.5.5932" name="file0" dev="tmpfs" ino=3234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 407.838472][ T36] audit: type=1400 audit(2016777880.637:4511): avc: denied { open } for pid=19324 comm="syz.5.5932" path="/592/file0" dev="tmpfs" ino=3234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 407.843725][T19334] netlink: 'syz.5.5935': attribute type 33 has an invalid length. [ 407.861645][ T36] audit: type=1326 audit(2016777880.687:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19329 comm="syz.3.5934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e76f8eba9 code=0x0 [ 407.869349][T19334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5935'. [ 407.892354][ T36] audit: type=1326 audit(2016777880.687:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19329 comm="syz.3.5934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e76f8eba9 code=0x0 [ 407.940478][ T36] audit: type=1400 audit(2016777880.787:4514): avc: denied { map } for pid=19336 comm="syz.5.5936" path="socket:[93603]" dev="sockfs" ino=93603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 407.964767][T19338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 407.964801][T19338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24 [ 408.053735][ T393] usb 2-1: device descriptor read/64, error -71 [ 408.189444][T19351] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.197949][T19351] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.205440][T19351] bridge_slave_0: entered allmulticast mode [ 408.211904][T19351] bridge_slave_0: entered promiscuous mode [ 408.218741][T19351] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.225847][T19351] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.237097][T19351] bridge_slave_1: entered allmulticast mode [ 408.243725][T19351] bridge_slave_1: entered promiscuous mode [ 408.320985][ T8916] veth1_macvtap: left promiscuous mode [ 408.326657][ T393] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 408.457948][T19351] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.465070][T19351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.472420][T19351] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.479526][T19351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.488998][ T393] usb 2-1: device descriptor read/64, error -71 [ 408.518947][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.527417][ T8920] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.539769][ T36] audit: type=1400 audit(2016777881.387:4515): avc: denied { unmount } for pid=19381 comm="syz.8.5949" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 408.565965][ T8918] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.573086][ T8918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.581058][ T8918] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.588185][ T8918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.630421][T19351] veth0_vlan: entered promiscuous mode [ 408.646332][T19351] veth1_macvtap: entered promiscuous mode [ 408.698562][T19386] binder: Unknown parameter '' [ 408.732510][ T393] usb 2-1: device descriptor read/64, error -71 [ 408.750153][ T36] audit: type=1400 audit(2016777881.597:4516): avc: denied { append } for pid=19391 comm="syz.3.5952" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 408.842629][ T393] usb usb2-port1: attempt power cycle [ 408.892807][T19400] pim6reg1: entered promiscuous mode [ 408.898160][T19400] pim6reg1: entered allmulticast mode [ 408.960460][T19402] rust_binder: Error while translating object. [ 408.960507][T19402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 408.967100][T19402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:38 [ 409.050606][T19412] can0: slcan on ttyS3. [ 409.104212][T19412] can0 (unregistered): slcan off ttyS3. [ 409.192505][ T393] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 409.193050][T19440] can0: slcan on ttyS3. [ 409.213844][ T393] usb 2-1: device descriptor read/8, error -71 [ 409.343533][ T393] usb 2-1: device descriptor read/8, error -71 [ 409.469506][T19498] binder: Bad value for 'max' [ 409.582491][ T393] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 409.613607][ T393] usb 2-1: device descriptor read/8, error -71 [ 409.743716][ T393] usb 2-1: device descriptor read/8, error -71 [ 409.852750][ T393] usb usb2-port1: unable to enumerate USB device [ 410.073491][T19548] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5989'. [ 410.371546][T19558] rust_binder: Error while translating object. [ 410.371587][T19558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 410.378065][T19558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:316 [ 410.631786][T19574] 9pnet_fd: Insufficient options for proto=fd [ 411.602512][ T739] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 411.752544][ T739] usb 2-1: Using ep0 maxpacket: 8 [ 411.758999][ T739] usb 2-1: unable to get BOS descriptor or descriptor too short [ 411.767443][ T739] usb 2-1: config 6 has an invalid interface number: 232 but max is 0 [ 411.775670][ T739] usb 2-1: config 6 has no interface number 0 [ 411.781749][ T739] usb 2-1: config 6 interface 232 has no altsetting 0 [ 411.790525][ T739] usb 2-1: string descriptor 0 read error: -22 [ 411.797262][ T739] usb 2-1: New USB device found, idVendor=452e, idProduct=a3be, bcdDevice=d4.8d [ 411.806377][ T739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.816707][ T739] usb-storage 2-1:6.232: USB Mass Storage device detected [ 412.017047][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6009'. [ 412.027146][ T597] usb 2-1: USB disconnect, device number 95 [ 412.225220][T19439] can0 (unregistered): slcan off ttyS3. [ 412.248760][T19638] netlink: 165 bytes leftover after parsing attributes in process `syz.3.6016'. [ 412.283794][T19643] rust_binder: 63: no such ref 1 [ 412.372559][T19659] SELinux: security_context_str_to_sid () failed with errno=-22 [ 412.478555][T19676] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 412.765238][T19716] rust_binder: Error while translating object. [ 412.765804][T19717] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 412.792652][T19717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 412.792658][T19716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 412.792689][T19717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:91 [ 412.810817][T19716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 413.124160][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 413.124183][ T36] audit: type=1400 audit(2016777885.967:4525): avc: denied { read } for pid=19732 comm="syz.1.6038" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 413.212515][ T36] audit: type=1400 audit(2016777885.967:4526): avc: denied { open } for pid=19732 comm="syz.1.6038" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 413.256543][ T36] audit: type=1400 audit(2016777885.977:4527): avc: denied { ioctl } for pid=19732 comm="syz.1.6038" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 413.283984][T19738] hub 8-0:1.0: USB hub found [ 413.302683][T19738] hub 8-0:1.0: 1 port detected [ 413.622500][ T597] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 413.673368][ T36] audit: type=1400 audit(2016777886.527:4528): avc: denied { create } for pid=19749 comm="syz.5.6044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 413.782484][ T597] usb 2-1: Using ep0 maxpacket: 16 [ 413.793579][ T597] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 413.805035][ T597] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 413.832488][ T597] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 413.855758][ T597] usb 2-1: config 1 interface 0 has no altsetting 0 [ 413.873999][ T597] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 413.883915][ T597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.901664][ T597] usb 2-1: Product: syz [ 413.905993][ T597] usb 2-1: Manufacturer: syz [ 413.910741][ T597] usb 2-1: SerialNumber: syz [ 413.943260][ T36] audit: type=1326 audit(2016777886.797:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19757 comm="syz.5.6048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b12d8eba9 code=0x7ffc0000 [ 413.971915][ T36] audit: type=1326 audit(2016777886.817:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19757 comm="syz.5.6048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f2b12d8eba9 code=0x7ffc0000 [ 413.995894][ T36] audit: type=1326 audit(2016777886.817:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19757 comm="syz.5.6048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b12d8eba9 code=0x7ffc0000 [ 414.020327][ T36] audit: type=1326 audit(2016777886.817:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19757 comm="syz.5.6048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b12d8eba9 code=0x7ffc0000 [ 414.044301][ T36] audit: type=1326 audit(2016777886.817:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19757 comm="syz.5.6048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b12d8eba9 code=0x7ffc0000 [ 414.068468][ T36] audit: type=1326 audit(2016777886.817:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19757 comm="syz.5.6048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b12d8e7ab code=0x7ffc0000 [ 414.132668][ T597] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 96 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 414.385224][T19743] usblp0:failed reading printer status (-32) [ 414.394690][ T393] usb 2-1: USB disconnect, device number 96 [ 414.404239][ T393] usblp0: removed [ 414.947966][T19781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6056'. [ 414.985074][T19785] tmpfs: Bad value for 'huge' [ 415.237201][T19807] rust_binder: Write failure EFAULT in pid:381 [ 415.257039][T19811] veth0_virt_wifi: entered allmulticast mode [ 415.269620][T19811] veth0_virt_wifi: left allmulticast mode [ 415.276284][T19811] netlink: 'syz.1.6065': attribute type 4 has an invalid length. [ 415.286704][T19811] netlink: 'syz.1.6065': attribute type 4 has an invalid length. [ 415.534918][T19826] fuse: Unknown parameter 'fd01777777777777777777777' [ 415.630683][T19828] netlink: 808 bytes leftover after parsing attributes in process `syz.8.6071'. [ 415.947605][T19844] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 416.142722][T19848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.151611][T19848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.222498][ T597] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 416.274090][T19861] random: crng reseeded on system resumption [ 416.366540][T19871] overlayfs: missing 'lowerdir' [ 416.391133][T19873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19873 comm=syz.8.6087 [ 417.495444][T19903] 9pnet_fd: Insufficient options for proto=fd [ 417.633381][T19905] overlay: ./bus is not a directory [ 418.482179][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 418.482202][ T36] audit: type=1400 audit(2016777891.327:4569): avc: denied { remount } for pid=19912 comm="syz.1.6099" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 418.583677][T19919] cgroup: Invalid name [ 418.592883][T19918] 9pnet_fd: Insufficient options for proto=fd [ 418.660622][T19929] overlayfs: failed to clone lowerpath [ 418.667381][T19929] netlink: 188 bytes leftover after parsing attributes in process `syz.5.6104'. [ 418.748246][ T36] audit: type=1400 audit(2016777891.597:4570): avc: denied { unmount } for pid=16764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 419.155660][ T36] audit: type=1400 audit(2016777892.007:4571): avc: denied { setopt } for pid=19970 comm="syz.8.6118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 419.218025][T19980] rust_binder: 118: no such ref 0 [ 419.226264][T19980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:118 [ 419.452687][T19990] random: crng reseeded on system resumption [ 419.594322][ T36] audit: type=1400 audit(2016777892.447:4572): avc: denied { write } for pid=19992 comm="syz.3.6125" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 419.655448][ T36] audit: type=1400 audit(2016777892.447:4573): avc: denied { create } for pid=19992 comm="syz.3.6125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 419.869920][T20009] netlink: 'syz.5.6131': attribute type 27 has an invalid length. [ 419.968942][ T36] audit: type=1400 audit(2016777892.817:4574): avc: denied { bind } for pid=20010 comm="syz.1.6133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 420.145773][T20021] /dev/rnullb0: Can't open blockdev [ 420.577637][ T36] audit: type=1326 audit(2016777893.427:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20040 comm="syz.8.6144" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb602f8eba9 code=0x0 [ 421.005794][T20044] tipc: Enabling of bearer rejected, failed to enable media [ 421.026204][ T36] audit: type=1400 audit(2016777893.877:4576): avc: denied { connect } for pid=20045 comm="syz.5.6146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 421.054377][ T36] audit: type=1400 audit(2016777893.907:4577): avc: denied { map } for pid=20047 comm="syz.5.6147" path="socket:[96012]" dev="sockfs" ino=96012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 421.134573][T20053] fuseblk: Bad value for 'fd' [ 421.296105][T20068] 9pnet_fd: p9_fd_create_unix (20068): problem connecting socket: ./file0: -111 [ 421.572128][ T36] audit: type=1400 audit(2016777894.417:4578): avc: denied { lock } for pid=20075 comm="syz.5.6154" path="socket:[96451]" dev="sockfs" ino=96451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 421.738415][T20080] rust_binder: Failed copying into alloc: EFAULT [ 421.738437][T20080] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 421.744933][T20080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 421.753375][T20080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:462 [ 422.680569][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6160'. [ 422.733999][T20096] rust_binder: Read failure Err(EAGAIN) in pid:142 [ 422.764900][T20100] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 422.999150][T20112] overlayfs: disabling nfs_export due to verity=require [ 423.006186][T20112] overlayfs: failed to clone upperpath [ 423.025528][T20114] IPv6: NLM_F_CREATE should be specified when creating new route [ 423.062558][ T393] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 423.213604][ T393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 423.224682][ T393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.234553][ T393] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.248305][ T393] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 423.257430][ T393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.266472][ T393] usb 2-1: config 0 descriptor?? [ 423.272697][ T393] usbhid 2-1:0.0: can't add hid device: -22 [ 423.278680][ T393] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 423.474700][T20103] binder: Bad value for 'stats' [ 423.480439][ T45] usb 2-1: USB disconnect, device number 98 [ 423.686733][T20143] rust_binder: Error while translating object. [ 423.686816][T20143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 423.693285][T20143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:150 [ 423.735472][T20147] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 423.754726][T20147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 423.767926][T20147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 424.013784][T20151] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 424.036975][T20152] rust_binder: Write failure EFAULT in pid:472 [ 424.102979][T20154] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 424.154514][T20156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 424.173019][T20156] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 424.192855][T20159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 424.247534][T20165] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 424.275589][T20167] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6188'. [ 424.302482][ T36] audit: type=1400 audit(2016777898.149:4579): avc: denied { lock } for pid=20164 comm="syz.1.6189" path="socket:[97323]" dev="sockfs" ino=97323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 424.332897][T20167] 9p: Unknown Cache mode or invalid value fscache [ 424.410826][T20179] rust_binder: 487: no such ref 2 [ 424.415952][T20179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:487 [ 424.427736][T20185] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 424.437548][T20184] rust_binder: Error while translating object. [ 424.444215][T20184] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 424.450683][T20184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:492 [ 424.587709][T20205] netlink: 'syz.5.6200': attribute type 4 has an invalid length. [ 424.609995][T20205] netlink: 'syz.5.6200': attribute type 4 has an invalid length. [ 424.620447][T20205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20205 comm=syz.5.6200 [ 424.804408][ T1896] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 424.823125][ T1896] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 424.966375][T20240] rust_binder: 520: no such ref 3 [ 424.982468][T20240] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 424.993240][T20240] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 425.010505][T20240] rust_binder: Write failure EFAULT in pid:520 [ 425.013773][T20246] netlink: 'syz.8.6211': attribute type 32 has an invalid length. [ 425.733109][T20264] netlink: 'syz.8.6218': attribute type 4 has an invalid length. [ 425.751668][T20264] netlink: 'syz.8.6218': attribute type 4 has an invalid length. [ 425.779375][T20266] overlayfs: failed to clone upperpath [ 425.813980][ T36] audit: type=1400 audit(2016777899.669:4580): avc: denied { read } for pid=20267 comm="syz.1.6220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 426.413324][T20290] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6227'. [ 426.422384][T20290] macsec0: left allmulticast mode [ 426.427522][T20290] veth1_macvtap: left allmulticast mode [ 426.433179][T20290] macsec0: left promiscuous mode [ 426.438294][T20290] bridge0: port 3(macsec0) entered disabled state [ 426.445389][T20290] bridge_slave_1: left allmulticast mode [ 426.451057][T20290] bridge_slave_1: left promiscuous mode [ 426.456814][T20290] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.464634][T20290] bridge_slave_0: left allmulticast mode [ 426.470407][T20290] bridge_slave_0: left promiscuous mode [ 426.476225][T20290] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.686376][T20298] rust_binder: Error while translating object. [ 426.686425][T20298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 426.692796][T20298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 426.804669][ T739] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=739 comm=kworker/1:4 [ 426.827145][ T739] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=104 sclass=netlink_xfrm_socket pid=739 comm=kworker/1:4 [ 426.854939][T20321] rust_binder: 545: no such ref 3 [ 426.860024][T20321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:545 [ 426.864414][T20321] rust_binder: Error in use_page_slow: ESRCH [ 426.873648][T20321] rust_binder: use_range failure ESRCH [ 426.879665][T20321] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 426.885322][T20321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 426.893428][T20321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:545 [ 427.676732][T20338] rust_binder: Error while translating object. [ 427.685976][T20338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 427.692176][T20338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:548 [ 427.701680][T20338] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 427.710931][T20338] rust_binder: Read failure Err(EFAULT) in pid:548 [ 427.739212][T20341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:550 [ 427.739627][T20342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:550 [ 427.755384][T20341] rust_binder: Read failure Err(EAGAIN) in pid:550 [ 427.829057][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6249'. [ 427.856567][T20360] fuse: Bad value for 'user_id' [ 427.861537][T20360] fuse: Bad value for 'user_id' [ 428.022518][ T1619] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 428.172645][ T1619] usb 2-1: Using ep0 maxpacket: 8 [ 428.196534][ T1619] usb 2-1: unable to get BOS descriptor or descriptor too short [ 428.204899][ T1619] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 428.212573][ T1619] usb 2-1: can't read configurations, error -71 [ 428.536189][T20378] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=20378 comm=syz.5.6256 [ 428.723206][T20406] rust_binder: Failed to allocate buffer. len:216, is_oneway:false [ 428.742185][T20412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 428.750183][T20412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:557 [ 429.681893][T20434] /dev/rnullb0: Can't open blockdev [ 429.696928][T20434] binder: Bad value for 'stats' [ 429.946412][ T1619] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 430.097559][ T1619] usb 2-1: Invalid ep0 maxpacket: 64 [ 430.228574][ T1619] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 430.379749][ T1619] usb 2-1: Invalid ep0 maxpacket: 64 [ 430.385339][ T1619] usb usb2-port1: attempt power cycle [ 430.732565][ T1619] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 430.752896][ T1619] usb 2-1: Invalid ep0 maxpacket: 64 [ 430.855276][T20445] cgroup: none used incorrectly [ 430.883526][ T1619] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 430.904022][ T1619] usb 2-1: Invalid ep0 maxpacket: 64 [ 430.909446][ T1619] usb usb2-port1: unable to enumerate USB device [ 431.180511][T20468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=20468 comm=syz.5.6288 [ 432.560191][T20485] 9pnet_fd: Insufficient options for proto=fd [ 432.590718][T20487] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6294'. [ 432.770102][ T340] rust_binder: 20495: removing orphan mapping 0:1024 [ 432.794716][T20498] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6298'. [ 433.360212][T20508] overlayfs: failed to clone upperpath [ 433.744483][T20524] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 434.648726][T20569] cgroup: Unknown subsys name 'io' [ 434.818977][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6323'. [ 434.853100][T20581] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 434.853129][T20581] rust_binder: Read failure Err(EFAULT) in pid:171 [ 435.451055][T20592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 435.458003][T20591] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 435.464443][T20591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 435.472377][T20591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:600 [ 435.742352][ T36] audit: type=1326 audit(2016777909.533:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20584 comm="syz.8.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb602f8eba9 code=0x7fc00000 [ 436.015562][T20605] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 436.022864][T20605] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 436.066491][T20606] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 436.192365][T20608] overlay: Unknown parameter 'euid<00000000001886221430' [ 436.310530][T20614] netlink: 'syz.8.6338': attribute type 4 has an invalid length. [ 436.480175][ T36] audit: type=1326 audit(2016777910.267:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20597 comm="syz.5.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b12d8eba9 code=0x7fc00000 [ 436.726938][T20622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6341'. [ 436.737218][T20622] 9pnet_fd: Insufficient options for proto=fd [ 436.874360][T20630] overlayfs: missing 'lowerdir' [ 436.879974][T20633] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 436.881374][T20630] overlayfs: missing 'lowerdir' [ 436.894115][T20630] overlayfs: missing 'lowerdir' [ 436.899463][T20630] overlayfs: missing 'lowerdir' [ 436.904770][T20630] overlayfs: missing 'lowerdir' [ 436.910151][T20630] overlayfs: missing 'lowerdir' [ 436.915425][T20630] overlayfs: missing 'lowerdir' [ 436.920776][T20630] overlayfs: missing 'lowerdir' [ 436.926079][T20630] overlayfs: missing 'lowerdir' [ 436.931730][T20630] overlayfs: missing 'lowerdir' [ 436.937015][T20630] overlayfs: missing 'lowerdir' [ 436.942379][T20630] overlayfs: missing 'lowerdir' [ 436.948727][T20630] overlayfs: missing 'lowerdir' [ 436.953836][T20630] overlayfs: missing 'lowerdir' [ 436.959008][T20630] overlayfs: missing 'lowerdir' [ 436.964095][T20630] overlayfs: missing 'lowerdir' [ 436.969278][T20630] overlayfs: missing 'lowerdir' [ 436.974355][T20630] overlayfs: missing 'lowerdir' [ 436.979792][T20630] overlayfs: missing 'lowerdir' [ 436.984992][T20630] overlayfs: missing 'lowerdir' [ 436.990492][T20630] overlayfs: missing 'lowerdir' [ 436.996584][T20630] overlayfs: missing 'lowerdir' [ 437.002066][T20630] overlayfs: missing 'lowerdir' [ 437.002501][T20640] rust_binder: 192: no such ref 1 [ 437.012036][T20640] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 437.012384][T20630] overlayfs: missing 'lowerdir' [ 437.019153][T20640] rust_binder: 192: no such ref 2 [ 437.029062][T20640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:192 [ 437.029329][T20630] overlayfs: missing 'lowerdir' [ 437.044339][T20630] overlayfs: missing 'lowerdir' [ 437.045525][T20640] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 437.049386][T20640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:192 [ 437.059547][T20630] overlayfs: missing 'lowerdir' [ 437.074510][T20630] overlayfs: missing 'lowerdir' [ 437.080329][T20630] overlayfs: missing 'lowerdir' [ 437.091015][T20630] overlayfs: missing 'lowerdir' [ 437.096378][T20630] overlayfs: missing 'lowerdir' [ 437.101923][T20630] overlayfs: missing 'lowerdir' [ 437.107202][T20630] overlayfs: missing 'lowerdir' [ 437.187562][ T36] audit: type=1400 audit(2016777910.963:4583): avc: denied { connect } for pid=20656 comm="syz.5.6355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 437.210726][T20662] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 437.214637][T20662] usb usb8: usbfs: process 20662 (syz.3.6351) did not claim interface 0 before use [ 437.266341][T20668] rust_binder: 617: no such ref 2 [ 437.271988][T20669] rust_binder: 617: no such ref 2 [ 437.437538][T20683] overlayfs: failed to clone upperpath [ 437.511031][ T36] audit: type=1326 audit(2016777911.290:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.5.6369" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b12d8eba9 code=0x0 [ 437.782881][ T597] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 437.935031][ T597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 437.944754][ T597] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 437.957850][ T597] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 437.966977][ T597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.984349][ T597] usb 2-1: config 0 descriptor?? [ 437.993862][ T597] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 438.231305][T20727] 9pnet_fd: Insufficient options for proto=fd [ 439.325345][T20753] 9pnet_fd: Insufficient options for proto=fd [ 439.439125][ T8914] veth1_macvtap: left promiscuous mode [ 440.351707][ T1619] usb 2-1: USB disconnect, device number 105 [ 440.573833][T20780] overlayfs: failed to clone upperpath [ 440.692147][ T1619] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 440.702922][T20782] tipc: Started in network mode [ 440.708059][T20782] tipc: Node identity ac14140f, cluster identity 4711 [ 440.716791][T20782] tipc: New replicast peer: 255.255.255.255 [ 440.722987][T20782] tipc: Enabled bearer , priority 10 [ 440.729626][T20782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6397'. [ 440.738657][T20782] tipc: Disabling bearer [ 440.843193][ T1619] usb 2-1: Using ep0 maxpacket: 32 [ 440.849441][ T1619] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 440.857687][ T1619] usb 2-1: config 0 has no interface number 0 [ 440.863835][ T1619] usb 2-1: config 0 interface 184 has no altsetting 0 [ 440.872062][ T1619] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 440.881159][ T1619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.889183][ T1619] usb 2-1: Product: syz [ 440.893366][ T1619] usb 2-1: Manufacturer: syz [ 440.898004][ T1619] usb 2-1: SerialNumber: syz [ 440.903355][ T1619] usb 2-1: config 0 descriptor?? [ 440.909348][ T1619] smsc75xx v1.0.0 [ 441.155728][T20808] binder: Unknown parameter '' [ 441.155728][T20807] binder: Unknown parameter '' [ 441.183384][T20810] can0: slcan on ttyS3. [ 441.703367][ T36] audit: type=1400 audit(2016777915.453:4585): avc: denied { module_load } for pid=20846 comm="syz.5.6413" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=99079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 441.705203][T20847] fuseblk: Bad value for 'group_id' [ 441.734647][T20847] fuseblk: Bad value for 'group_id' [ 442.023728][T20866] netlink: 'syz.5.6418': attribute type 1 has an invalid length. [ 442.043814][T20871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6419'. [ 442.078566][T20877] overlayfs: failed to clone upperpath [ 442.078591][T20876] overlayfs: failed to clone upperpath [ 442.117177][T20879] overlayfs: failed to clone upperpath [ 442.126939][T20880] overlayfs: failed to clone upperpath [ 442.183380][T20890] fuse: Bad value for 'group_id' [ 442.188388][T20890] fuse: Bad value for 'group_id' [ 442.222599][T20894] veth0_virt_wifi: entered allmulticast mode [ 442.229751][T20894] netlink: 388 bytes leftover after parsing attributes in process `syz.5.6428'. [ 442.239386][T20893] veth0_virt_wifi: left allmulticast mode [ 442.343010][ T1619] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 442.354013][ T1619] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 442.363426][ T1619] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 442.374257][ T1619] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 442.383941][ T1619] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 442.394257][ T1619] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 442.403752][ T1619] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 442.413188][ T1619] usb 2-1: USB disconnect, device number 106 [ 442.870884][ T36] audit: type=1400 audit(2016777916.615:4586): avc: denied { bind } for pid=20902 comm="syz.1.6432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 442.942571][T20911] SELinux: failed to load policy [ 443.198080][ T597] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 443.317526][T20920] netlink: 'syz.5.6437': attribute type 4 has an invalid length. [ 443.325400][T20920] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6437'. [ 443.337200][T20920] netlink: 'syz.5.6437': attribute type 4 has an invalid length. [ 443.345027][T20920] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6437'. [ 443.355269][ T597] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 443.356049][T20920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=20920 comm=syz.5.6437 [ 443.364512][ T597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.386249][ T597] usb 2-1: config 0 descriptor?? [ 443.397466][ T597] usb 2-1: selecting invalid altsetting 1 [ 443.407116][ T597] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 443.418557][T16178] udevd[16178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 443.422557][T20926] netlink: 220 bytes leftover after parsing attributes in process `syz.5.6439'. [ 443.657105][ T1619] usb 2-1: USB disconnect, device number 107 [ 444.248544][T20809] can0 (unregistered): slcan off ttyS3. [ 444.317324][T20950] netlink: 'syz.3.6446': attribute type 12 has an invalid length. [ 444.461239][T20978] pim6reg1: entered allmulticast mode [ 444.584378][ T36] audit: type=1400 audit(2016777918.315:4587): avc: denied { getopt } for pid=20986 comm="syz.1.6450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 444.641673][T20998] /dev/rnullb0: Can't open blockdev [ 444.673005][T21006] 9pnet_fd: p9_fd_create_unix (21006): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 446.312445][T21022] netlink: 'syz.1.6458': attribute type 4 has an invalid length. [ 446.335173][T21022] netlink: 'syz.1.6458': attribute type 4 has an invalid length. [ 446.867287][ T36] audit: type=1400 audit(2016777920.591:4588): avc: denied { create } for pid=21029 comm="syz.5.6462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 446.941173][T21038] overlayfs: missing 'lowerdir' [ 446.946698][T21038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21038 comm=syz.1.6466 [ 446.972863][T21040] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 447.395821][T21045] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6469'. [ 447.417573][ T36] audit: type=1400 audit(2016777921.138:4589): avc: denied { execute } for pid=21046 comm="syz.5.6470" name="file0" dev="ramfs" ino=100232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 447.439865][ T36] audit: type=1400 audit(2016777921.138:4590): avc: denied { execute_no_trans } for pid=21046 comm="syz.5.6470" path="/file0" dev="ramfs" ino=100232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 447.502605][T21058] __vm_enough_memory: pid: 21058, comm: syz.1.6473, bytes: 18014402804453376 not enough memory for the allocation [ 447.504612][T21057] rust_binder: 21057 RLIMIT_NICE not set [ 447.541841][ T36] audit: type=1400 audit(2016777921.257:4591): avc: denied { ioctl } for pid=21063 comm="syz.1.6476" path="socket:[100369]" dev="sockfs" ino=100369 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 447.586696][ T597] rust_binder: 21055: removing orphan mapping 0:1168 [ 447.643620][T21082] overlayfs: failed to clone upperpath [ 447.662009][T21086] overlayfs: failed to clone upperpath [ 447.845968][ T597] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 447.996803][ T597] usb 2-1: Using ep0 maxpacket: 32 [ 448.003899][ T597] usb 2-1: config 26 has an invalid interface number: 235 but max is 0 [ 448.012424][ T597] usb 2-1: config 26 contains an unexpected descriptor of type 0x2, skipping [ 448.021267][ T597] usb 2-1: config 26 has no interface number 0 [ 448.027506][ T597] usb 2-1: config 26 interface 235 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 448.038589][ T597] usb 2-1: config 26 interface 235 altsetting 64 has an endpoint descriptor with address 0x16, changing to 0x6 [ 448.050362][ T597] usb 2-1: config 26 interface 235 altsetting 64 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 448.061537][ T597] usb 2-1: config 26 interface 235 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 448.072719][ T597] usb 2-1: config 26 interface 235 altsetting 64 bulk endpoint 0x2 has invalid maxpacket 32 [ 448.082951][ T597] usb 2-1: config 26 interface 235 altsetting 64 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 448.094036][ T597] usb 2-1: config 26 interface 235 altsetting 64 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 448.105917][ T597] usb 2-1: config 26 interface 235 altsetting 64 has a duplicate endpoint with address 0xC, skipping [ 448.116819][ T597] usb 2-1: config 26 interface 235 altsetting 64 has a duplicate endpoint with address 0x8F, skipping [ 448.127860][ T597] usb 2-1: config 26 interface 235 altsetting 64 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 448.139032][ T597] usb 2-1: config 26 interface 235 has no altsetting 0 [ 448.147489][ T597] usb 2-1: New USB device found, idVendor=0c52, idProduct=2212, bcdDevice=22.eb [ 448.156797][ T597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.164862][ T597] usb 2-1: Product: syz [ 448.169091][ T597] usb 2-1: Manufacturer: 䣝㸰奎ቇ䑲㵏吸颱⚗痧㤌紲鵺䡠ᬮ蟆݄༏垧ꚿἶ媲䲽텹ᢍꈅ⪱칐疍䒙霥띕ꖣ儰⨩䞎㐀Ꜹ먐ꠁڑ篒쵢见襹ꆂ踥䞛െ滛ࣚ掬䭏驤雳㨼⇺㹳⩮赟걓嵸沅 [ 448.191569][ T597] usb 2-1: SerialNumber: syz [ 448.197301][T21072] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 448.408303][ T36] audit: type=1400 audit(2016777922.112:4592): avc: denied { ioctl } for pid=21070 comm="syz.1.6480" path="socket:[100345]" dev="sockfs" ino=100345 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 448.422059][ T597] ftdi_sio 2-1:26.235: FTDI USB Serial Device converter detected [ 448.442697][ T597] ftdi_sio ttyUSB0: unknown device type: 0x22eb [ 448.451698][ T597] usb 2-1: USB disconnect, device number 108 [ 448.459218][ T597] ftdi_sio 2-1:26.235: device disconnected [ 448.551775][T21097] fuse: Unknown parameter 'user_i\' [ 448.568211][T21100] devpts: called with bogus options [ 448.573642][T21100] devpts: called with bogus options [ 448.579124][T21100] devpts: called with bogus options [ 448.584660][T21100] devpts: called with bogus options [ 448.590216][T21100] devpts: called with bogus options [ 448.595573][T21100] devpts: called with bogus options [ 448.600976][T21100] devpts: called with bogus options [ 448.606302][T21100] devpts: called with bogus options [ 448.611706][T21100] devpts: called with bogus options [ 448.617132][T21100] devpts: called with bogus options [ 448.623067][T21100] devpts: called with bogus options [ 448.996160][T21114] /dev/rnullb0: Can't open blockdev [ 450.058529][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 450.209363][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 450.215586][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.227300][ T9] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 450.236411][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.244441][ T9] usb 2-1: Product: syz [ 450.248661][ T9] usb 2-1: Manufacturer: syz [ 450.253296][ T9] usb 2-1: SerialNumber: syz [ 450.258616][ T9] usb 2-1: config 0 descriptor?? [ 450.264559][ T9] plusb 2-1:0.0: probe with driver plusb failed with error -22 [ 450.494055][T21134] overlayfs: failed to clone upperpath [ 450.623378][T21139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6502'. [ 450.638059][T21141] rust_binder: Error while translating object. [ 450.638105][T21141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 450.644360][T21141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:225 [ 450.655066][T21143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 450.779239][T21149] rust_binder: Write failure EFAULT in pid:232 [ 450.952484][T21151] can0: slcan on ttyS3. [ 450.980163][ T1619] usb 2-1: USB disconnect, device number 109 [ 451.028536][T21163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6507'. [ 451.109603][ T36] audit: type=1400 audit(2016777924.807:4593): avc: denied { read } for pid=21174 comm="syz.1.6508" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 451.132500][ T36] audit: type=1400 audit(2016777924.807:4594): avc: denied { open } for pid=21174 comm="syz.1.6508" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 451.156444][ T36] audit: type=1400 audit(2016777924.807:4595): avc: denied { shutdown } for pid=21174 comm="syz.1.6508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 451.177754][ T36] audit: type=1400 audit(2016777924.877:4596): avc: denied { mounton } for pid=21174 comm="syz.1.6508" path="/dev/binderfs/binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 451.423539][T21191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6513'. [ 451.432783][T21191] bridge_slave_1: left allmulticast mode [ 451.438725][T21191] bridge_slave_1: left promiscuous mode [ 451.444579][T21191] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.452615][T21191] bridge_slave_0: left allmulticast mode [ 451.458396][T21191] bridge_slave_0: left promiscuous mode [ 451.464061][T21191] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.476849][T21219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6523'. [ 452.547919][T21226] netlink: 'syz.5.6525': attribute type 4 has an invalid length. [ 452.643856][T21248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6532'. [ 452.703941][ T36] audit: type=1400 audit(2016777926.398:4597): avc: denied { create } for pid=21249 comm="syz.5.6533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 452.725611][T21252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=21252 comm=syz.5.6534 [ 452.738297][T21252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=21252 comm=syz.5.6534 [ 452.757056][ T36] audit: type=1400 audit(2016777926.448:4598): avc: denied { create } for pid=21251 comm="syz.5.6534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 452.825579][ T36] audit: type=1400 audit(2016777926.518:4599): avc: denied { create } for pid=21265 comm="syz.5.6539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 452.871059][T21272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6541'. [ 452.886609][ T36] audit: type=1326 audit(2016777926.577:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21213 comm="syz.1.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cb18eba9 code=0x7fc00000 [ 452.910351][ T36] audit: type=1326 audit(2016777926.577:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21213 comm="syz.1.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42cb18eba9 code=0x7fc00000 [ 452.938975][T21276] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 452.939700][ T36] audit: type=1326 audit(2016777926.577:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21213 comm="syz.1.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cb18eba9 code=0x7fc00000 [ 453.082383][T21293] fuse: Unknown parameter 'grou_id' [ 453.113268][T21304] overlayfs: failed to clone lowerpath [ 453.442203][T21343] overlayfs: failed to clone upperpath [ 453.945777][ T36] audit: type=1400 audit(2016777927.632:4603): avc: denied { listen } for pid=21363 comm="syz.1.6572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 454.004239][T21151] can0 (unregistered): slcan off ttyS3. [ 454.304529][T21416] __vm_enough_memory: pid: 21416, comm: syz.1.6583, bytes: 18014402804453376 not enough memory for the allocation [ 454.306809][T21422] can0: slcan on ttyS3. [ 454.342138][T21422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6585'. [ 454.351066][T21422] bridge_slave_1: left allmulticast mode [ 454.357787][T21422] bridge_slave_1: left promiscuous mode [ 454.363645][T21422] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.371457][T21422] bridge_slave_0: left allmulticast mode [ 454.381747][T21422] bridge_slave_0: left promiscuous mode [ 454.387609][T21422] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.445940][ T36] audit: type=1400 audit(2016777928.129:4604): avc: denied { associate } for pid=21437 comm="syz.1.6586" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 454.595269][T21421] can0 (unregistered): slcan off ttyS3. [ 454.711046][ T36] audit: type=1400 audit(2016777928.388:4605): avc: denied { map } for pid=21467 comm="syz.3.6588" path="socket:[101876]" dev="sockfs" ino=101876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 454.796603][ T36] audit: type=1326 audit(2016777928.477:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.3.6590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e76f8eba9 code=0x0 [ 455.172900][T21489] netlink: 220 bytes leftover after parsing attributes in process `syz.5.6593'. [ 456.259975][T21539] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 456.305352][ T597] usb 9-1: USB disconnect, device number 10 [ 456.390199][T21543] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.398336][T21543] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.410057][T21543] bridge_slave_0: entered allmulticast mode [ 456.417265][T21543] bridge_slave_0: entered promiscuous mode [ 456.429568][T21543] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.436899][T21543] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.444196][T21543] bridge_slave_1: entered allmulticast mode [ 456.450548][T21543] bridge_slave_1: entered promiscuous mode [ 456.531576][T21543] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.538653][T21543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.545978][T21543] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.553068][T21543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.575996][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.583530][ T8920] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.593901][ T8916] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.600965][ T8916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.610631][ T8920] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.617725][ T8920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.652938][T21543] veth0_vlan: entered promiscuous mode [ 456.666641][T21543] veth1_macvtap: entered promiscuous mode [ 456.692536][T21580] overlayfs: failed to resolve './bus': -2 [ 456.851955][T21589] rust_binder: 8: no such ref 3 [ 456.856904][T21589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 456.858608][T21589] rust_binder: Error while translating object. [ 456.867735][T21589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 456.874046][T21589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 456.897738][T21593] overlayfs: workdir and upperdir must be separate subtrees [ 456.946715][T21596] rust_binder: Write failure EFAULT in pid:15 [ 457.287445][T21610] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6627'. [ 457.307163][T21609] kvm_intel: kvm [21608]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2 [ 457.326978][ T597] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 457.372958][T21620] binder: Binderfs stats mode cannot be changed during a remount [ 457.460705][ T597] usb 10-1: device descriptor read/64, error -71 [ 457.486580][T21631] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6635'. [ 457.499120][T21638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21638 comm=syz.1.6637 [ 457.531905][T21645] 9pnet: Unknown protocol version 9 [ 457.591829][T21650] /dev/rnullb0: Can't open blockdev [ 457.632757][T21654] IPv4: Oversized IP packet from 172.20.20.170 [ 457.639212][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 457.645464][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 457.652583][T21654] IPv4: Oversized IP packet from 172.20.20.170 [ 457.659144][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 457.665413][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 457.673043][T21654] IPv4: Oversized IP packet from 172.20.20.170 [ 457.679494][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 457.685716][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 457.692661][T21654] IPv4: Oversized IP packet from 172.20.20.170 [ 457.699272][ T597] usb 10-1: device descriptor read/64, error -71 [ 457.938452][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 457.938470][ T36] audit: type=1400 audit(2016777931.601:4612): avc: denied { write } for pid=21662 comm="syz.1.6649" name="/" dev="configfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 457.940015][ T597] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 458.110855][ T597] usb 10-1: device descriptor read/64, error -71 [ 458.352643][ T597] usb 10-1: device descriptor read/64, error -71 [ 458.472967][ T597] usb usb10-port1: attempt power cycle [ 458.834455][ T597] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 458.862950][ T597] usb 10-1: device descriptor read/8, error -71 [ 458.996244][ T597] usb 10-1: device descriptor read/8, error -71 [ 459.236367][ T597] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 459.257520][ T597] usb 10-1: device descriptor read/8, error -71 [ 459.266821][ T10] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 459.331826][ T36] audit: type=1400 audit(2016777932.985:4613): avc: denied { map } for pid=21712 comm="syz.3.6669" path="socket:[103610]" dev="sockfs" ino=103610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 459.386900][T21725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6672'. [ 459.398286][ T597] usb 10-1: device descriptor read/8, error -71 [ 459.441102][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 459.454756][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.465181][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 459.474696][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.484824][ T10] usb 2-1: config 0 descriptor?? [ 459.517846][ T597] usb usb10-port1: unable to enumerate USB device [ 459.902711][ T10] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 459.909801][ T10] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 459.916695][ T10] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 459.923972][ T10] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 459.931031][ T10] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 459.938035][ T10] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 459.945156][ T10] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 459.953518][ T10] isku 0003:1E7D:319C.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 460.179281][ T36] audit: type=1400 audit(2016777933.830:4614): avc: denied { read } for pid=21734 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 460.325882][ T597] usb 2-1: USB disconnect, device number 110 [ 460.496626][T21765] rust_binder: 21753 RLIMIT_NICE not set [ 460.658251][ T8914] Bluetooth: hci0: Frame reassembly failed (-84) [ 460.739463][T21791] rust_binder: 21791 RLIMIT_NICE not set [ 460.898496][ T36] audit: type=1400 audit(2016777934.537:4615): avc: denied { read write } for pid=21808 comm="ip" path="/dev/console" dev="rootfs" ino=102 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 460.970149][ T36] audit: type=1400 audit(2016777934.617:4616): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 461.005927][T21813] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6693'. [ 461.038605][ T36] audit: type=1400 audit(2016777934.686:4617): avc: denied { setopt } for pid=21812 comm="syz.1.6693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 461.125291][ T36] audit: type=1400 audit(2016777934.766:4618): avc: denied { read write } for pid=21821 comm="iptables" path="/dev/console" dev="rootfs" ino=102 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 461.162701][ T36] audit: type=1400 audit(2016777934.806:4619): avc: denied { search } for pid=21821 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.218142][ T36] audit: type=1400 audit(2016777934.806:4620): avc: denied { write } for pid=21821 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.241747][ T36] audit: type=1400 audit(2016777934.806:4621): avc: denied { add_name } for pid=21821 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.611404][T21872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=21872 comm=syz.5.6708 [ 461.629823][ T597] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 461.788398][ T597] usb 2-1: Using ep0 maxpacket: 16 [ 461.794931][ T597] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.805169][ T597] usb 2-1: config 0 has no interfaces? [ 461.810883][ T597] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 461.820018][ T597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.828723][ T597] usb 2-1: config 0 descriptor?? [ 462.722733][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 462.722725][ T781] Bluetooth: hci0: Opcode 0x1003 failed: -110 Connection to 10.128.0.121 closed by remote host. [ 462.897896][ T9] rust_binder: 21780: removing orphan mapping 0:1048 [ 463.088077][ T8914] bridge_slave_1: left allmulticast mode [ 463.093825][ T8914] bridge_slave_1: left promiscuous mode [ 463.099587][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.107292][ T8914] bridge_slave_0: left allmulticast mode [ 463.112956][ T8914] bridge_slave_0: left promiscuous mode [ 463.118671][ T8914] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.146238][ T597] usb 2-1: USB disconnect, device number 111 [ 463.267486][ T8914] veth1_macvtap: left promiscuous mode [ 463.273018][ T8914] veth0_vlan: left promiscuous mode [ 463.560516][ T8914] veth1_macvtap: left promiscuous mode [ 463.566046][ T8914] veth0_vlan: left promiscuous mode [ 465.098428][T21901] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 465.105672][T21901] ACPI: PM: Preparing to enter system sleep state S5 [ 465.112761][T21901] kvm: exiting hardware virtualization [ 465.118313][T21901] reboot: Power down serialport: VM disconnected.