last executing test programs: 5m52.261435539s ago: executing program 0 (id=359): open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x900) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10b, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5m52.240446619s ago: executing program 0 (id=360): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648e000) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_clone(0x8000, &(0x7f0000000480)="f1bcb41127df061746445029cc680300d2d78b669639b0d7fbf9d2b14dea9e2412b16b1b44551a798b7cdb9c522e54727c5d05ca742bedb54715be3c868517ae679e2912406eb050e916cd0f68ffdff09b173ab7ce931c6aea5b7a863e6a3fd1cb3e9d32fe4a31d3ad7b1bc9d213b9752ba8051d806b913be01af71b9e8c0a7a40f482da0f18c96b397b5c253636290a697937b1c6b6244f1fe90f95ee0b37ae0fd1d16786e0664bc4fa1fab54362985ffff2274e5307c156fee71cb208d7b4825907cd5b0eff05a57679750cbafa68ee3eb9b47afa1f7dd13b6fbb3fc33e2d3c08204aa37c3ff3d11462507224c14898ecd39a8838164e3fab99e48e1b5bde5299523936feb714f278d30b4263831aeca72a2bc47e25c8135e86529b9750e68f967924cb6d51fae4da5cd93a253de9e2c4983fa707f17a858534418850f58010bd71d4b4237cfbe9082dfc34b1c779f4fe95ce961cda923f05fa8f682b66d9baa90fbed4c1721ae5a036a36153c3c11f57a486ed16c597b11835394c8cdf3d7fa3296cc248b4f7f97656dc093c7c0d8c0df620c7dd4b95633d0d4c189a79584028e0d172070b8f4fcea1c34199baaa14d9b7e0767a65043b46318a7f54b25af707299fa296b86d91cfb2bfe68573faf358fe418e3ea5778dcdf88a27365999db0a084cb3dab51f1d3e8a74bb8452b58cf515b1744c8404b27821d5d550ade02", 0x200, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) (async) socket(0x2, 0x3, 0xff) (async) r3 = syz_open_pts(r2, 0x48000) r4 = dup3(r3, r2, 0x80000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000700)={'#! ', './file0', [{0x20, '@*'}, {0x20, '%)$'}, {0x20, '^'}, {0x20, '/dev/rnullb0\x00'}, {0x20, '/dev/rnullb0\x00'}, {0x20, '/dev/kv\x00'}, {0x20, '[\xf7N'}, {}, {0x20, '/dev/ptmx\x00'}, {0x20, 'M'}]}, 0x4b) mmap(&(0x7f000089f000/0x3000)=nil, 0x3000, 0x400000a, 0x10, r5, 0xfffff000) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, 0x0, 0x0) read(r4, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r4, &(0x7f0000002d40)=""/4095, 0xfff) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x2}, 0xe) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_setup(0x2, &(0x7f0000000000)=0x0) (async) r8 = eventfd(0x0) io_submit(r7, 0x3, &(0x7f0000000440)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xc2, r8, &(0x7f0000000200)="0000fd6000000000", 0x8, 0x36}, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xfa70, r5, &(0x7f0000000300), 0x0, 0xffffffff, 0x0, 0x2, r8}]) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r9, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r10}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r9], 0x48}}, 0x0) 5m52.22246153s ago: executing program 0 (id=361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x1000}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5m52.154656881s ago: executing program 0 (id=362): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) (async, rerun: 32) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 32) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) (async) close_range(r0, 0xffffffffffffffff, 0x0) 5m52.088650292s ago: executing program 0 (id=365): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fcff7f720f592b002100000009001f0070687930000000000c0005000000000000001000050020"], 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000300)="03cc195aef5d92a5dde2c6c6b6a2167de3b1d0271697f8638724771528535bb663df56fb27be9718ef7736bc0a0f2f30d94e9d8fdeb2618f32c234fdbcc3794b6c5cde13e6e56acd26258ddd54d316d6040024dea44508d377a847dd1398", 0x5e}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x39000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r9, 0x80487436, &(0x7f00000022c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="b702c0e6", @ANYRES16=r11, @ANYBLOB="010028bd7000fbdbdf25050000001c0001800d0001007564703a73797a32000000000800030000000000"], 0x30}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x770a, 0x0) 5m51.874506765s ago: executing program 0 (id=366): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x40, 0x608001) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x40402, 0x1) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000440)={0x2d, 0x4, 0x0, {0x4, 0x3, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) (async) syz_usb_disconnect(r0) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000140)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000008c0)=0xfffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028d0003010000000904000000010100000a24010000000201020624040000520b2405000053f11ee5f7260b24050000133b9bda531c090501000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240209000200018b7e8e0724010000000009058209ff"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x248, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1f8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x9f, 0x3, "84c42495e57a6cc809d00f1c9f57c2e80b4334fbaa37dfa8abca5d1dda1d7a7126ab32d060f80d4784ca8566924be00c1118d460a20d243365659968ed173fe096cfaf530c6954a0ffd9730769ea1e3235664bfc07f7b67501a71d71e513dd7fbb34f54aac188b6170361c7290a764d9141c77f568720bda091524afdc6c8745382e70ba079f0a1b5808076d1007938722fb146e4d85b44a0176fe"}, @TIPC_NLA_NODE_ID={0x4f, 0x3, "48da88af50d1d159e71270b91689f1fb840f1af8c4a24f4489b6f2086ee1b18a3046d3f9286b4fc06393f20d685aed9cfb5cd837051a4535bacdb3ee64a4f963eeebceb22dba1643acefb2"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf8, 0x3, "c21f7b95360b05f039517a5ffd14a4ef926b2077798800268644f4f1f11fdf8cb6ad57c71e539ed6e01ff92c720e708f14168b965db06b7a023901bc15836d580e18e4bae0ebe1f2b7cffb731fde92e7a199f0e7bcaebe2068d5b3fe8d027a5ffedbcd5ccc8d9bcc55f760a1e334623f0489a47375645ac8dd27a5115779b7dcba70541334c512520f236df0679efceb6f26af2bf5f5a7c472607b48dfac3193114a9d1030e8852935e33596da81ec63cd2f7e598e1d04f2ab6f22430370200e1bf553e250c3527b4db02d749326fabc0fb56344c9919a1e97850dc8884b5d8ef8d177bf13872188e9093e4fcc1bbe58fdfa451a"}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x748}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x44050}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) setresgid(0xffffffffffffffff, 0xee01, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) r10 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r12, &(0x7f0000000b00), 0x91) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) splice(r11, 0x0, r10, &(0x7f00000002c0)=0x40000000008009, 0x4, 0x8) 5m51.872859675s ago: executing program 32 (id=366): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x40, 0x608001) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x40402, 0x1) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000440)={0x2d, 0x4, 0x0, {0x4, 0x3, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) (async) syz_usb_disconnect(r0) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000140)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000008c0)=0xfffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028d0003010000000904000000010100000a24010000000201020624040000520b2405000053f11ee5f7260b24050000133b9bda531c090501000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240209000200018b7e8e0724010000000009058209ff"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x248, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1f8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x9f, 0x3, "84c42495e57a6cc809d00f1c9f57c2e80b4334fbaa37dfa8abca5d1dda1d7a7126ab32d060f80d4784ca8566924be00c1118d460a20d243365659968ed173fe096cfaf530c6954a0ffd9730769ea1e3235664bfc07f7b67501a71d71e513dd7fbb34f54aac188b6170361c7290a764d9141c77f568720bda091524afdc6c8745382e70ba079f0a1b5808076d1007938722fb146e4d85b44a0176fe"}, @TIPC_NLA_NODE_ID={0x4f, 0x3, "48da88af50d1d159e71270b91689f1fb840f1af8c4a24f4489b6f2086ee1b18a3046d3f9286b4fc06393f20d685aed9cfb5cd837051a4535bacdb3ee64a4f963eeebceb22dba1643acefb2"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf8, 0x3, "c21f7b95360b05f039517a5ffd14a4ef926b2077798800268644f4f1f11fdf8cb6ad57c71e539ed6e01ff92c720e708f14168b965db06b7a023901bc15836d580e18e4bae0ebe1f2b7cffb731fde92e7a199f0e7bcaebe2068d5b3fe8d027a5ffedbcd5ccc8d9bcc55f760a1e334623f0489a47375645ac8dd27a5115779b7dcba70541334c512520f236df0679efceb6f26af2bf5f5a7c472607b48dfac3193114a9d1030e8852935e33596da81ec63cd2f7e598e1d04f2ab6f22430370200e1bf553e250c3527b4db02d749326fabc0fb56344c9919a1e97850dc8884b5d8ef8d177bf13872188e9093e4fcc1bbe58fdfa451a"}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x748}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x44050}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) setresgid(0xffffffffffffffff, 0xee01, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) r10 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r12, &(0x7f0000000b00), 0x91) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) splice(r11, 0x0, r10, &(0x7f00000002c0)=0x40000000008009, 0x4, 0x8) 3m59.893873358s ago: executing program 3 (id=2819): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r1, 0xee01) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200a000, 0x0) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 3m59.893601398s ago: executing program 3 (id=2820): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='selinuxfs\x00', 0x4804, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 3m59.893449629s ago: executing program 3 (id=2821): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x21, "4372070000001000476fb2940acfbe4c0e24fa98ddf306e50000b646376f385355"}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$link(0x8, r2, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x280402) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x11, 0x141002) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000280)) read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000000)) 3m59.893074898s ago: executing program 3 (id=2822): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x63}], 0x2, 0x0, 0x20) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101880, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f00000003c0)={0x4, 0x59e8}) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000080)='\x00\x05\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbcQ=v-<\r\xd1?$\x8b\x17Bn\x17h\xee\x96\x99I\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hX1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x18\x8f\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\xde\xff\xffy\x85\x8b\x9c\x06\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8C\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7z\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz\x03\x00\x00\x00\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7V\xfe\x0e\x94\xb1\x15w\xc4\x9c\xb6s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xf1\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd\b\x02\xd5\xe9YE]\x8a\xb6n\x8f\x8dQ9\x13#\xed\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0xfffff000) (async, rerun: 64) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async, rerun: 32) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (rerun: 32) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x1) (async, rerun: 64) r3 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) syz_pidfd_open(r3, 0x0) syz_pidfd_open(r3, 0x0) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) getpriority(0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = epoll_create(0x3) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x40088a01, 0x0) (async) getsockopt$sock_int(r4, 0x1, 0x45, 0x0, &(0x7f0000000080)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) 3m59.891896178s ago: executing program 3 (id=2824): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) times(0x0) sendmmsg$inet(r1, &(0x7f0000003040), 0x0, 0xc044) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = dup3(r2, r3, 0x80000) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000480)="810692b4d3a3", 0x6) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 3m59.80645458s ago: executing program 3 (id=2825): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x0, 0xbf) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x2c, 0xa01, 0x0, 0x25dfdbfb, {0x17}}, 0x14}}, 0x20004014) bind$xdp(r3, &(0x7f0000000500)={0x2c, 0x2, 0x0, 0x30, r4}, 0x10) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0xd000, 0xeeef0000, 0x7, 0xf4, 0x3}) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$TIOCEXCL(r6, 0x540c) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000480)={0x38, r8, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf88}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x24040000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r11 = dup(r9) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dn\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',\x00']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x3, 0x40, 0xf, 0x8}, {0x6, 0x1, 0x5, 0x9}]}) statfs(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 3m59.757815811s ago: executing program 33 (id=2825): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x0, 0xbf) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x2c, 0xa01, 0x0, 0x25dfdbfb, {0x17}}, 0x14}}, 0x20004014) bind$xdp(r3, &(0x7f0000000500)={0x2c, 0x2, 0x0, 0x30, r4}, 0x10) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0xd000, 0xeeef0000, 0x7, 0xf4, 0x3}) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$TIOCEXCL(r6, 0x540c) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000480)={0x38, r8, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf88}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x24040000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r11 = dup(r9) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dn\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',\x00']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x3, 0x40, 0xf, 0x8}, {0x6, 0x1, 0x5, 0x9}]}) statfs(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 3m49.258971625s ago: executing program 5 (id=3059): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = socket(0x28, 0x2, 0xc3) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2501000000000000000b00002c0014001462"], 0x30}}, 0xc840) syz_usb_connect$uac1(0x5, 0xd8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3, 0x5, 0x4, 0x10, 0x25}, 0x3c, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f3c00150a10030000000107fcff03100b14100405e4ef363639709782d12e3c491dfadb850b1001fe2a00052f05000c0b10010c0e002d09000003"], 0x1, [{0x67, &(0x7f0000000300)=ANY=[@ANYBLOB="6703252a7f2f7050fac38f703201f02e6ee54e146688f04d4724be07c14280fe65985c3f6a5fe913162efad7f50e63cb8dab5c1e56407710e3b14f64223ee0bc8f19a0cbadb4406b29c9ee7bcf7813952b613a0ba70bb98c0646f6db7b885d5dd0a8ecc918f8be"]}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000340)={0x77359400}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r7, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x1) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="0000000075acc0ec8b321de5e92b44bb3ca3d5741591c7aa50b62af31ae459e5bc6a884294a24ea42090a5a35390f5927f0cead169d483355863f01cef92263e14218f6e22a1fd4e1d397bb5f700db95c1284e6c7cf60c9aa12cc71cf6fb05bb36e5fe08edb8e22790d100ba3e69a46f64c4a63396fc", @ANYRES16=r6, @ANYBLOB="000229bd7000f9dbdf25090000000800020008000000080002000300591cc47f05000300000056db63aa9e1189"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) write$UHID_DESTROY(r9, &(0x7f0000000200), 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r9, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x20040000}, 0xc845) sendmsg$netlink(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="18acf0d51c97f47360eb07", @ANYRES32=0x0, @ANYBLOB="04b4dd6208ebe00d069f36c4ae3d9e5e305af61654b1a4af58da2292b9ca2aa458a642a7d5aad601373797cfcadc0309093d8fd83ca69f9788c04eefcb86292e7aeba208675b2de4505500c182e12fa0ba7a4d850f9b"], 0x18}, {&(0x7f0000000780)=ANY=[@ANYBLOB="300000002400200027bd5600fddbdf25350a09d4ceebf1124453c79e8752ce3d3722861949c2b2ac20246ca49249d100"], 0x30}], 0x2, 0x0, 0x0, 0x4000000}, 0x4800) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r11 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fcntl$dupfd(r11, 0x0, r0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000180)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x4d75d000) 3m47.992559266s ago: executing program 5 (id=3082): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001b00)='/proc/schedstat\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2601, 0x0) r2 = socket$inet6(0xa, 0x4, 0x5) sendmmsg$inet6(r2, &(0x7f0000001a80)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x3d24d803, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="0418a48a1cffee5a2f47423b859e79cfbe07cb480c2302a9dac5ac95a5cf4f7b9985de1fd0cd519d594fd7a069b992caeee1e134759214b5d986356c2c964e86855256950c6d0478bbeb4a25a6fc8a4cf2539c35c3771ccf6c6ce5f5e64fbd", 0x5f}, {&(0x7f00000001c0)="0e5666c76a888126905d3783bae6294cfc7312b6de59ded57576d1e101acfa537459735978754473c37875c3d742748e08fc3a94885f645e2ddd7ce389cebf5a1551cf25117df1da362f9e564d6f57a4d15a30fdfdcb0ee7ec30cd4d60037a7213bfcb4bacdb212ff30ba83d1bd44356ea84e6192d5125b33bba353eacae929153bd411587feb18556170515fab862c0a779a80dd47165dc89911a6b3ea6109bbde8d06ad28d1c5dd4d174d18aefc4c93ccf590ede8da05fad688c284952ed3ca2e4f992a2c2aa5a571b49d322b60469184603979a220c9a2b35031baf3245a120fa8633acf5b5140b5f1bc6ff9f8880c5", 0xf1}, {&(0x7f00000002c0)="c9d2edbde122e64b9bbcc15ebad14e1c4aa4212f8130c5c4b2b5", 0x1a}, {&(0x7f0000000300)="c3f0e265c734f5822a0afcc6cae17a073af89be688de578eed161b80dde36c496ff597c8b3e5843738b6d8aad7e3f208e8", 0x31}, {&(0x7f0000000340)="ef6a15920e30f9cba1b8a6528abc56b5b794d9f58cf54da7cbb50702e77c8e8241136e0108a86fc1070ebec0cb2ee99a0788edabe25f8f3f48f68bfac7c25e2f63691f8f81e8f0c2666b53c4dec4825204d059bab848654971e972a4fb1e7914f124d3afd989fd7eff436139f84f313d95e762ddf9dc152e154e5ae9432f8687992b2aafec9182e0ea959d3b212487089950b09d408a48e031cccc46185034f0bc1300449f5fc6ca45f0fa57ecb6720dc18bd4d0055a532504b82c0ae2316475f819", 0xc2}], 0x5, &(0x7f00000004c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x7a0}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x3a, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0xfffc}, @generic={0x6, 0x10, "839e30a9de3441249c2b7f27cc60730e"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2e}}, @padn={0x1, 0x1, [0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2e, 0x0, '\x00', [@ra={0x5, 0x2, 0xe9fe}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x87, 0x6, 0x1, 0x99, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2]}}}, @rthdrdstopts={{0x118, 0x29, 0x37, {0xde79c280ce386552, 0x1f, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0xfa, 0x8, [0x5, 0x92, 0x7f]}}, @jumbo={0xc2, 0x4, 0xa8e3}, @generic={0x6, 0xd0, "5c5dd7ac4d67e4e52a3e31727be95a7c36ac85b91ea6c7a255840043f27345ef2525a556989d915f0a9e6ddbe1ade3275688ff2a1e5fa644d6e543eacef5fc63f010f21558c798858f0ab2089666709f5896127080c0e90efa22cb44b553f309992b638d594240990692cf0c56cdbc35b0790206d51a73de8183042a85f66b7770a6cbfe4080529029d0fde5fae55076e8ab172f5ddd7fd03e10a367e8c48aed9bb7ee132b604e402ad67a144b1eec73b185e3c6b7a576fced6988ff28a4f20dcbec5a4463b3831cf94f0eb5a5dfe7de"}]}}}], 0x218}}, {{&(0x7f0000000700)={0xa, 0x4e23, 0x3, @empty, 0xa}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000740)="b6608ba919a249637b5d5792da19acece9f10fb8322250eedf04944c70bdcd157540dffc6600a02e8cc141ccdce9cdd5eda49cc540c81ffe88b05613d85f0f089ff6eab5976f64683a16ca2948771b5d899db03d1aa63259941ee68cfc59835904fb9144b8382bea77aa1e4008b32a086ff548a6d1879526602f63201d007457db549710fc6b433e89e8778d9de2a05fd1d8c007adb972a7bd3b8ddaa51fcd32a788bc578fd8", 0xa6}, {&(0x7f0000000800)="9fe52d39e713f0442ac172a0ac44c7aed080fe22057fe57d5cde14efc51b2e1b76051ec14c32ddf18b27d6f99bb9800245f1da7b60f9618f6eb8382afad006db6ff9740d91b85d1deb3934cdab4751814b9677b3ce031b9e31a53e25cc5c87caf06ab95201a32fd988773d242e41a34bdb74e077ac025708a54c92d06547f84dbf7fe0b1916203e72917de849b5bebec1f83d8c9e84d3e946f651d6ad5ccf5fecb8f5d9c316ea4dd410ca5826c6880ad5defdb2dc59e055e830f075e1fea2e65f3e2c1fb82907b437568ca22889589c224f78525edde6839e27131014ebd41ac1a4e0ae8bf56", 0xe6}], 0x2, &(0x7f0000000940)=[@rthdrdstopts={{0x88, 0x29, 0x37, {0xc, 0xd, '\x00', [@generic={0x6, 0x3e, "ccacba6dead410fba6e759ed81eaf5b3759156b254f3c8adcffbf7adc6bf771ea34cc127e33f04dbda1f5041e73100a1b0c2113107f95e4791a9cf485e5a"}, @ra={0x5, 0x2, 0x7a2e}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x18, {0x2, 0x4, 0xe9, 0x0, [0x4, 0x4]}}]}}}, @hopopts_2292={{0x1088, 0x29, 0x36, {0x11, 0x20d, '\x00', [@ra={0x5, 0x2, 0xf000}, @ra, @generic={0x6, 0x1000, "952a98e0c68611931956749a6cdf08cef085dd31345391223363ce8ab2119ccff6c6620e782514c8d87df7ed7e510b987728cbbf868293e863f01bd7240568ea2547ccd0e3dd04efcaf5dab287f66d3c412aae0dc932fa3f527ec89806bc2372cecac3b6214a04f1d46ef2c2cc0cd6a8b2f9204c45f2022e2669f8c7f5ef42d4dd7bbb54cb7fae0ac98b3b5a77dc7de9d4141c2ea4198d7456470444faaf06d60eea80de4058ed3cff61f0c7e713ebf292ae7866650b3d3f6e425b89dbf548d30e9d4b37e82f09366d2afeba249e6d048fae06d6096d10e4c12c1b8c890523128386417f5016b707ea62da8effb31c7586cbc90b42c3e8afcc7976698a6f9e1a0a2fe54184897afcdd173a711c05d1c5cd30e319e20c78ec0e7a50d629da9740f8ea55e30da44c0530c51c2ba79e4bd09da20eb38fc4bc8c7ca781128cb0f74abe4484528a77ec4c3b64934ab1ac7ca60f5488701bbf52e56776f731bb2d42000ca771a75a88b2dbf1e3e1cc7f2fd302f66a25aea341cedcbbbdbc31563c71f31387c6154b11815fca58d79ca536fce8574ae33b01296f8a378e2a40b8faeb8547f4fe4b9397fc4f70d9d780887017d1f9967f09a0654f7361ec405801c9841df3e06cba127f5947282e9854e1fa3c532af92fb41bc9b01d566a183d87d058dbee64be027df1c7fe65ab22cf011b5bd566774fef4e4c0e64cea9d9f8324c744458c6d0a5e661142a96fd7a181a4d81cf22038e2cd32d59c25a386a001e1ae7c658fc7b159ceb278539685cce3ce4ce46e49b55ccb5e754c7ccce80a586aa846b55e136011b406d308301b494d293ca6013d1ac98c86793b754cf900df49f8012d0a7344ff72d536b3cdb106310c3fb3386ead8a5faecabe63ebf6d93de1bfecac859789ed3b80aa65ab2ab3a8362d5e91bde464d97dffae54fe630fca20e212130231ac7190619397f1140b13626372daff602c87d8ed74ecd3871dd3dabe3e59bbc4da153a45724e153af0c65d7723616142db2ac14ae80b120f58e4424ce1acee54dfb33cad37aa991c58f1904b92def0b92621c0a651e456af01c7e08f26ac0e65590473c880dc6be71c00c1e3e07f3d02c35b024a1836cf286560d62208f6d6e3b775cdc63c6ed59f28e9e8b1f76745fd38583accfe8b155f4e6d360f751cd251ba6e36def3e29a65d7f58a31f0b371fed79c504f039aafa6a3f0470aed490f8133021426370ce8f41ac12c6654d42b3c0175b6f1a62e68db23a3ea803f41ddbcee64947f1dcab5beb153129ec9b6cd70c08628f44874edbc537eb7aac932ea031d0c4842c3649e331e2a91eb43075b99336876beb80b07643fbde792743d4209d5d51306ac932af05f10c11adda50c16af0e3228112e19e850649d7cb85bddd2979c42e7378d988bd9bc4400c2564b2214f24a3540a08d3d17e8a05890122ee5626fa1859d6f71cea788d95d9eb013ff0f6f697afeafa0616728a913b32e75f8b3eb50a6ccab1044768504ab64a899d2257400dfab9310597795ef7670edb326150764aaa3594d324f6022f365ec81d146af2f1d2bde8029f8fcccde877d107c4d3dada2e87372412858c8540d0d81e25e75d7b05bea838905fc7fa8cbd4abec95c0283f454ca425bee1f0cefe89072a784cd9e0ebdaa2c0072bfb595427ca2d82849d0c0c888027097cbb5dbc065da38f938573b8105daf12682293084d8aa088a64dad7285cc0da53bfdaacad2eadc69849fd16a889a043e30d0adb7633c9603ea8edc9dbc58cd808681ec1e663042ac058be13c35f0a845fa9e6613c487f793a553edcd31c498508a4c13338f824b7d4b5d267270e69f92824707b75a74ee1449b4dbb913daa137c4afcc7524614113853638b1deaa7928b8c1e64852fd79856211387a44af695b07d182456196e957d5bdb69ef9f85f0a2fef49af6451ead5ca67bfe987b59c3abad0bd4db48fe3d75f87c5d9b79be7a20e8ac15ae3f139582c4c141f2189bc72febe671001d1d434c09d26ca6a9bf292f4f175dbc0eab188bf1bcdd376408ab5816dec1cc616a1c9e2d390a6ac3f3417408798a6bb9790a5a3c9cc80a10468604ece777733799c164fa7e3cbdb50efb18fcc2ceca88fc9310df3ad9c20474b5740dfaa5484d3fd1c2ceed7517b78ac4c38215b2ef8795d5ee4584f45da790ec2e7d5d16d7f5dcb501a640be8d4a5f456482cc050759968108041f9b99d7145b0639d14acb36123ec4661c609c2fc2b05c541582852f708dd566c7dc64a6a74257cb9943c8375026bdfa751e90771c751fb6071a47456f949095b5b1610c8afd7d37d8e09b363515a3f35565f99e92cc4e3ce83dbb3ad33df38064460e9fc126ca6a9ef69f4b626ad58fbe7a73f8af14252652f44c337e6eb997b4080079ceb62c5f857526d923150b7cc37ac53a03977726fe5692d4263ef6785cc0418fd578cefa484a6289de6168d5415b7143a1a64dfe78a5c13200f5c4e7efd2070011fd1b24ebab5e3d308061aeedf884ee04e6752aa23c22eb26681b938fb5fd1a27228f795dd518cabf8e0e468005fa3798b66e57aee1ef82fe6619db7e691a4e24b3043e2e7933b41f2ecb061bc8253a1af7681015487d949651e6b12ff8252907cb197a15fce68a5a31e6947a8b3b6f2a06eb3e2dd68c48b18b7bfbd7493ad9fc241ae1e93f136bfc444963fcddc0cb06b221edb24d87e91779b0f1aee6a3a4b20f164a043b84d04c0c90570b8131b5324db3e9ce232676e3b98be81663c56a8d60923e4ba90dbac8fcca9500a4a7856a70b520f97cba45877fbb877b5cf51efdaf4582fad99f91119b3673d5f73aff0af5617a10f689751f6025291734730c0ad092336f78c2df764dff9653957bc729404c3282a8b90956bb711e8b245c8c9a5cfd54eb6f9e8d07c495559dfa78f15c9c2a0803c98e91d51acaaa0e8b1641be9ca255ce22198843626097173b1f29493db0c70cf9022f48300d06e0ddcc99f08f0563b65d95bd66591fd32646afb0eecb4d2e2d05847b6049766b89d732cb5b5984495505cc68fdb232bcb964939a1f60a6e6e6f199a9ed044869ff96b4d5260cecf3387e839a27dbdfcd514b1566540e632ccd896bf45e227258337028d8f88a194c2d975b769da0b30107a7dae2dfad16995992ee7d4f59917f4762b03283e7a88d0094b2ef5a2b7211ec74fb88ea4beb2dc0b61473ce051b9abae397fc26d560ff71af41ebe0f4f0e4a48a2c222030f6e528bbac404d2fe4b49e540f497d569fd2a7a981dc1e62383598515f60241283fbaa7e43c4cbfe3cf116df894e692a96725266526df23def0c0680ceb7e80c9a1afa90541a7e074a4f6a1f3c302664629b726a3633b0a9defbfe65ccd08065b9a89fd949bb2681ecae892461d7d27d45ab0345cf430a6e8ff771840fcb82c9b0332b4487cacf168db026d4b2b84e239ed5601aa6b9d8b80b643124d1cfcd8f1d013bb6121aeb0e8d0ec577751d316e897829b314c52645b7ede36edf53dfe4c84623b9df0c02199b8a4a4180d706f98f00d86cfeeac199bc8e5d082db6e4a5d55bda887dc9680a1c20f89018ad970196f0694587607f5f5c271ceb99c949d9be2f23972624a56cdd07476af4ba82b26e428e3576743d17c5e55846da79ba3276994e61ee095bdae9b3918e6f5c0f69957ed4490f5560017211e851de9444caa4a669dcdc72cd18670740798cd8887a400a93bc6fca677d9e9ee5e5e666717397e4432c748def22c76a205bf1662d7db9a5173e665180bbd78aa80215bd73fc86497492d7a45ed4199e8287c5cd67241e7f5544cccb2d2faea5ec45fefcf5feebabcf6349eee9e6bfeb42fdbdc15ed2f2d45fd17378740be1b355742863e97f9cb67dad2e740e9cb040c4153a3aac642d1d4cef21ddbe34d555eededca038addf75f17216ebef0a02bb2512dd53c3d0980dd95e23a5a448d76e6c0ef66dbbfa2d637ad43ae683f2b78f9744c491546226ebc67e0ec3c5586de4ae214cd467994bc8d47db3c5cdce970d4709785e6163bf772d00514934ceecd6288c165aa8fb975535e8bcde5a7c9c2cf57f4d0569a4ca1556aac8bc66befc0b916c9bad087e5f68c63ffdbcfa4c323df3f42f63bc11453e8ec50993ef275760bb7fbb1678b07864245b02324fbcadee6932517fe70a6fd9afc7ffcae14de01f1e513fadd9023f190fa95f4ad2777f18c428762461579a5d160696f998c8e1bd500ece3e26187a92ada88d9afa61ba6bd8b64bfae02f2aa0fc4cf138e29e9421c5d3e0bc045c975861d4baf1f34ce5fc2aa0962bc3d783408f982beea4fa6f33dff6e1aae3e0d2d4c3eb790fb331579de6e12c27db447356178e99602b3adf9bfe7798a4751ca949a5a68b10dc61e2b8262ff953cdf69a2434d268745e895df41574c05d0336be9a00abcab95451eee466413aae5b3feb009bbc493b3db6a3b9188f4996de28d3eead7ccf6d2844c5447586271e5f77c1ee9d3cb43ad4c0318b83cd6eea9533aa94a07ccf656ed8dbe9ee2bdccb7f0d2e4dae33b06334c1ce953f48c6954a8bb1d8b58c3acde249542198ab29c728190cd3d67e74c6c8701565feaa8ee897f83cde8a8a93861b5f3202194275fbbce0bd91d014f90d55d2eb636ded74bff767789f32d3f14f0dfc3c16a98aa148e123dbed9d2e9fe720a2f2d141289d8b2aae8253a3d98615d463e6b1319db83f7dd5b431a53764ed1a94e5ad120e4416a778fbf1034502a7fddb7ba3b039b24408a33af539c7834a45b2b7d19703cf3101ad6c8c974abe587f61448307f3c8832e9c4498f824506f022cc05af25daef5a989a366d4d5a3cc2ef5463bfedc219df805139a6cbb4095c596297466c25a8fb8ab3f966c500282096ccd7995fc2ccf4d55aad895f1c604335aaf0376058585c6166363356a120bdfd0eec4158d4d2f3a14a107837d48a08bdf54e68e345832468782d213d33b6e13fbad08592d0e4af9dd36caa4931e83ae73bfee81d558edac3545e1edd34649c903c05495be6c5bc967402867319dd39cee1b5b67e8387a4a203ceb96fc79715ea0bab6fab84dfee3c40c985939d31eddb62137c0ffdbdf57f76762da32d25e4ed5ffbd635d092445d218f73ef57de54591fd407791f5b6a0a0fc9bcaf3b877962aaee1722d2f930884edfc24c2396353ee94247ae89eab6400710884723303a059c9a63b1e858a3a1de0baf46e35ce070d9044b2968097baa14eb941f7cb1df6a84f50a35f15288552d07469d4c5610b6760e3ed565a2f060cefab835fab1a55213e1544b0b3e1c4b217fe207fa650c2828a06535f232b580d024e8453eb71e55123ca6db553b8aa07761f0fc70e0f2e448631d6c818a37da472d64773f88c5b895cae1a5da0d8fbda82f3159e367a0b9898009d5c54b7e77a40f5b4a1ff801cf10fb40691b0609457f412690bc341e27405b96188a0e5f61fa39723edc0ef7e10b83b7935fb97bf15893876d440283039386dabd71d008cbe714bcb2f448be182a7a6cb18dad7da7c8d99ca69dad91988fcf00a0fb959428ad790d5abd70dc7399fc6c132281b8018321740e85f4e988606dbb580342c02350ee400f71632aa83b1417d65da893af4978880c44111d0ae79e654739017d5f2de67be272d44c250eb68d6b5da88cc4ba5e8cfd3cead46167c3173f3a65d6a6819ecd3c34bd44508be89e275fd1c316ba86f09c5e8b1080fc5898dc8440b63e99ee2701249177bfcbd1b2d029866f9287c07c80d772ce60a8cd3b39fe267ef5f3eb85e27a9"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x6, 0x400, [0x7ff, 0x4, 0x340000]}}, @enc_lim={0x4, 0x1, 0x10}, @calipso={0x7, 0x33, {0x3, 0xc, 0x6, 0x0, [0x101, 0x401, 0x1, 0x1, 0x3, 0x3]}}, @jumbo={0xc2, 0x4, 0x10001}]}}}], 0x1110}}], 0x2, 0x4040841) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000005c80)='devices.deny\x00', 0x2, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000064c0), 0x1, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8043, 0x0) syz_usb_connect(0x2, 0x6b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2403020005029a010209240603040000a5301124d500000000c65b0fa26410f3b600050924030506030501f909240702020005cbad0924030601016e2c"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r5 = userfaultfd(0x801) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0x200000000006, 0x7e, 0x5, 0x7ffc0002}, {0x1, 0x4, 0x2}, {0x6, 0x3, 0x0, 0x800}]}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000280)={0x0, 0x7a2e}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'erspan0\x00', @broadcast}) 3m47.372982317s ago: executing program 5 (id=3087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000400028091b8a41528c840f9db265e54055e066f11c8ee0e37ba31d82033509baa01e2df6fac73a78463729d46e00400000067fe35f68995f8bb2ab8af90218b8be201d2a1cce54c6d38adfcacb00030ccf944460ee2873d1544321f1e00"/110], 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = signalfd(r0, 0x0, 0x0) io_setup(0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, 0x0, 0x0) r3 = eventfd2(0xd, 0x80400) r4 = dup3(0xffffffffffffffff, r3, 0x80000) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r4) sendmsg$TIPC_NL_LINK_SET(r1, 0x0, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, 0x0, 0xcce0d7b3a9a68e4f) r6 = userfaultfd(0x80001) r7 = memfd_secret(0x35477e59b598092d) dup3(r6, r7, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r8, 0x99b33000) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 3m47.20236428s ago: executing program 5 (id=3088): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000000000000c000000200001801400020073797a5f74756e0000000000000000000800030002000000180003801400038010000180"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103241, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @pic={0x5, 0x1, 0x40, 0x2, 0x3, 0x5, 0x4c, 0x3, 0x2, 0x42, 0xe, 0xa, 0x81, 0x1, 0x80, 0x6a}}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) close_range(r2, 0xffffffffffffffff, 0x0) 3m46.987840924s ago: executing program 5 (id=3094): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000099, 0x0, 0x200000000000e}]}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x802, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) (async) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x210800, 0x94) mkdirat(r5, &(0x7f00000013c0)='./file0\x00', 0x81) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x4000, 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) (async) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008aec1, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x3}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x9000000) (async) socket$inet_tcp(0x2, 0x1, 0x0) 3m46.872172835s ago: executing program 5 (id=3100): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x1b, 0x4) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2329cf33d6bb9b58}], 0x0, 0x0, 0x0}) 3m46.845684666s ago: executing program 34 (id=3100): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x1b, 0x4) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2329cf33d6bb9b58}], 0x0, 0x0, 0x0}) 1m57.614029493s ago: executing program 1 (id=5539): r0 = socket(0x1e, 0x4, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x1e, 0x4e20, @empty}, 0x10) pselect6(0x0, 0x0, &(0x7f0000000080)={0x2, 0x4, 0x9, 0x2, 0x9, 0x3ff, 0x80, 0x7}, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000c0000009c00058008000100756470001c000280080003000000000008000200000000000800020000000000080001006574680008000100756470000800030065746800140002800800030000000000080002000000000014000280080004"], 0xb0}}, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000080)='\x00\x05\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbcQ=v-<\r\xd1?$\x8b\x17Bn\x17h\xee\x96\x99I\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hX1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x18\x8f\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\xde\xff\xff\x06\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8C\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7z\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz\x03\x00\x00\x00\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7V\xfe\x0e\x94\xb1\x15w\xc4\x9c\xb6s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd\b\x02\xd5\xe9YE]\x8a\xb6n\x8f\x8dQ9\x13#\xed\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x1, 0x12, r3, 0xfffff000) r4 = memfd_create(&(0x7f0000000c00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x01\x00\x00\x00.\xd4\xee\xbb\b\x85c\xc0G$hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\xe9c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\b\x00\x00\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\a\x00\x00\x00,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) getresuid(&(0x7f0000000280)=0x0, &(0x7f0000000340), &(0x7f0000000380)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x80, 0x8000, 0x2, 0xfffffffe, {{0x17, 0x4, 0x3, 0x9, 0x5c, 0x65, 0x0, 0x5, 0x2f, 0x0, @remote, @local, {[@cipso={0x86, 0xe, 0x3, [{0x2, 0x8, "e5243086710b"}]}, @timestamp_prespec={0x44, 0x14, 0xd1, 0x3, 0x1, [{@broadcast, 0x8}, {@rand_addr=0x64010100, 0x6}]}, @rr={0x7, 0x23, 0x31, [@remote, @loopback, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010100, @rand_addr=0x64010100]}]}}}}}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@acquire={0x254, 0x17, 0x2, 0x70bd29, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x4d3, 0xff}, @in6=@private2, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x4e20, 0xff, 0x4e21, 0x9, 0xa, 0x20, 0x0, 0x16, r4, r5}, {{@in=@private=0xa010102, @in6=@private1, 0x4e22, 0x4, 0x4e21, 0xfff4, 0xa, 0x80, 0x20, 0x2, r6, r7}, {0x7, 0xba7, 0x2, 0x7, 0x2, 0xea, 0xfffffffffffffff8, 0xe8b}, {0x3, 0x7, 0x6, 0x7}, 0x1, 0x6e6bb3, 0x2, 0x1, 0x0, 0x3}, 0x6, 0x4, 0x4, 0x70bd28}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x800}, @mark={0xc, 0x15, {0x35075c, 0x5}}, @algo_aead={0xc4, 0x12, {{'authencesn(rmd128,cbc-des3_ede-asm)\x00'}, 0x3c0, 0x100, "2f173022f9244a06167914d2dbdaedf35f5bd214d8b6c603149033f53bb658304bd03bd45bf7b291682cab82b680cbc005e957f2355b8eb44ed0feb2ec5bb055294debe226b52f7fbe3b89fbe212d500cfebf79df1eed5d5234abe14b5c8c412488b6e32f640ffa1aaf6a0addd4085d74fee225c12ea4834"}}, @coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e20, 0x4e20, @in6=@private2}}, @lifetime_val={0x24, 0x9, {0x8, 0xe, 0x7, 0x4}}]}, 0x254}, 0x1, 0x0, 0x0, 0x44}, 0x4810) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r8, 0x89f4, &(0x7f0000000600)={'sit0\x00', 0x0}) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000002c0)={0x0, &(0x7f0000000340)}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x33, 0x80, 0x3, "3d42e5d3", "4aab69b6"}}, 0x0}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "8b7caa2b"}]}}, 0x0}, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x40, 0x17}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000640)={0x20, 0x1, 0x5, "9afedd16e5"}, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) setpgid(r0, r10) socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, 0x0, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x24, 0x2a, 0xa01, 0x0, 0x0, {0x1e}, [@typed={0xe, 0x3, 0x0, 0x0, @binary="84067d13fbbcd3547fe5"}]}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private2, 0x1, 0x6, 0x0, 0x100, 0x6, 0x5c03c3, r13}) 1m56.238548866s ago: executing program 1 (id=5545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffff, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r3, &(0x7f0000002a80)={0x2, 0x4e21, @multicast1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat(r5, &(0x7f0000002700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffff7ffffd) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[]) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 1m55.238801213s ago: executing program 1 (id=5560): setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000580)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) listen(r0, 0x3) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="180000005500ff0700000000fddbdf2507"], 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x40) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x8000000000000001, 0x1, 0x22}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async) ftruncate(0xffffffffffffffff, 0x5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="66b805000000bad104b00dee0f21f866350800a0000f23f8b8110c8ee0ba2000ec0f07650f9aaa00680f235366b8000000000f23c80f21f866350400c0000f23f8640f78dd2e0f6787fce6260f6b21", 0x4f}], 0x1, 0x19, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000140), 0xe, 0x0) close_range(r7, r0, 0x0) (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) 1m55.234898423s ago: executing program 1 (id=5562): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) (async) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x2, 0x1, 0x4}}, 0xe8) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) (async) timerfd_create(0x1, 0x800) (async) r2 = openat(0xffffffffffffff9c, 0x0, 0x68001, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000080)=0x8000, 0x4) (async) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) (async) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x2}, 0x1c) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) write(r4, 0x0, 0x0) (async) close(r4) (async) clock_gettime(0x5, 0x0) (async) setsockopt$inet6_udp_int(r2, 0x11, 0x0, 0x0, 0x0) (async) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000380)={0x0, 0x0, 0x9}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) setuid(0xee00) (async) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) r6 = dup(r5) write$FUSE_BMAP(r6, 0x0, 0x0) write$FUSE_DIRENTPLUS(r6, 0x0, 0x138) (async) open(&(0x7f0000000080)='./file1\x00', 0x4efc2, 0x1) 1m54.389306167s ago: executing program 1 (id=5573): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) pread64(r0, 0x0, 0x0, 0x100) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1000000}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x11, 0x0, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r6, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0xf0, r4, &(0x7f00000000c0)='!', 0xb7f40}]) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000240)) dup3(r4, r2, 0x80000) mmap(&(0x7f000078d000/0x3000)=nil, 0x3000, 0x6000001, 0x40031, r0, 0x73f1d000) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a3, &(0x7f0000000200)='bridge0\x00') 1m39.373337947s ago: executing program 35 (id=5573): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) pread64(r0, 0x0, 0x0, 0x100) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1000000}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x11, 0x0, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r6, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0xf0, r4, &(0x7f00000000c0)='!', 0xb7f40}]) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000240)) dup3(r4, r2, 0x80000) mmap(&(0x7f000078d000/0x3000)=nil, 0x3000, 0x6000001, 0x40031, r0, 0x73f1d000) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a3, &(0x7f0000000200)='bridge0\x00') 1.905933258s ago: executing program 6 (id=7215): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f040000000000000000"]) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) 1.8425174s ago: executing program 6 (id=7216): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x50040, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x20) fsetxattr$system_posix_acl(r1, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000002000000000000000800060000000000100007000000000020"], 0x24, 0x0) (async, rerun: 32) r2 = socket$inet(0x2, 0x800, 0x0) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in=@private, @in=@remote}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) (async, rerun: 64) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{:&,$*/(w\x00') (rerun: 64) timer_create(0x6, &(0x7f0000000040)={0x0, 0x7, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_settime(r3, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000280)) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x2546c000) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001500)='\x00\x00\b\x00\xff\xff\xf7\xff\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q\x00\x00\x00\x00\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a\x00\x80\xff\xff\xff\xff\xff\xff\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xc3\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a\xde]X1`d\x9d\x9e\xd0\n\xa1\xa9\x8cO\xb8p\"\xe7\xdb\xab\x0eAW&+\xe8\xf7p\v\x01\\\x98\xeey\xc4c\x18\x91\xd9\x00\x1c\xf0.\x9f\x1e?\xea\xea\'0\"\x94\xd1\xd3P\xa8\xc5wP`\xa6\xd5Q\x11\xc3o\x04\vat\xb9}\x83g\xca\xfe\xf4\xe6;\x18\xb9\xe7<\xcf\x96~\x0f\xb0\xd3\x1bl\x9e\xc2\xc6\xcc\xbe\x8c#\xd0\x9f\x050\x1csf\x84\x06Z\xf4\xd2!\a\x8a\xc8\xbe\xdb\xf6y\x94Z\xed0\xdbZ\x9b8~\xc0\xbbU\xd5I\x14\xb6\xeb\xa7V\x00\x18A%') 1.251213129s ago: executing program 7 (id=7228): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8000000000000000, 0x420840) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/194) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000200)={0x4, 0xb2e, 0x6, 0x1, 0x7, 0xca63}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000240)=0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x10, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r3) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000440)) socketpair(0x18, 0xa, 0x10, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40014) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r5, 0x406855c9, &(0x7f0000000600)={0x6, 0xc169, {0x51, 0x5, 0x1000, {0x43e, 0x3}, {0x6, 0x4}, @const={0x6, {0x4, 0x0, 0x5, 0x7}}}, {0x53, 0x5623, 0x201c, {0x879, 0x6}, {0x2, 0x5d}, @cond=[{0xffc4, 0x7, 0x1, 0x401, 0x401, 0x417}, {0x2, 0x2, 0x8, 0x1, 0x6, 0x7}]}}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r6, &(0x7f0000002700)={0x78, 0x0, r7, {0x5, 0x0, 0x0, {0x1, 0xffffffffffffffff, 0x41f6, 0xc01, 0x4, 0xf7d, 0x3, 0x2, 0x80000000, 0x1000, 0xffffba8a, 0xffffffffffffffff, 0xee01, 0x6c5c, 0x80000001}}}, 0x78) r8 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r4, &(0x7f0000002780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000027c0)=0x14) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002840), r8) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000002940)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r10 = accept4(r1, &(0x7f0000002b80)=@isdn, &(0x7f0000002c00)=0x80, 0x80800) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000002c80), r3) sendmsg$FOU_CMD_GET(r10, &(0x7f0000002d80)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x60, r11, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_AF={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f0000002dc0)) open(&(0x7f0000002e00)='./file0\x00', 0x8880, 0x100) add_key$user(&(0x7f0000002e40), &(0x7f0000002e80)={'syz', 0x1}, &(0x7f0000002ec0)="52044975b18a95f147781f4bb1a96b61d6e4012703fbe57c9c455b1d2a6f2d41b80ab30cf111498ea940bb0dc880e161fd89dd34dde72ee518e79891ea62761ed15efcebb0be294c52f0938fc4bec96b7733b3f6b567bf62a29aaae007468b", 0x5f, 0x0) 1.249830729s ago: executing program 7 (id=7229): r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) close_range(r0, r0, 0x6) r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r3, &(0x7f0000000b00), 0x91) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000003c0)=@req={0x80000000, 0x3, 0x3, 0x8}, 0x10) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x3a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0xceb, @empty}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x4000}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x308) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0xfffffffffffffe21}], 0x1, 0x3fe, 0x0) splice(r2, 0x0, r1, 0x0, 0x4, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0xffffe000) r9 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x6, 0x7}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0) r10 = socket$packet(0x11, 0x36e02a105bfd2bad, 0x300) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r13 = dup(r12) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB='\fwfdno=', @ANYRESHEX=r13, @ANYBLOB=',access=', @ANYRESDEC=r14, @ANYBLOB=',\x00']) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000300)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000700)="0444e507f832a44e251061ec6db9c3c623d751e224b94a552a39b2d9f429d46d33c89228fca34c75139b379839f6a904ab628a0d94e58fa3c3bd79b7f727fe08020000002ae96d337e45b427224263f7ab1edfc5fc92c106710746e8d72c2d35b0428479f8cde102df1a18020060834636ea4b9855167b5ca646d0b2520679bffa5bbcfa1029b3983987f6ffec0e3b402d66f4884701ab40a940e92441aca6000000000000000000000000050000", 0xae}, {&(0x7f0000000540)="c53b8c9005f8ab88af4dfd0bce8c7fd02af74f892cffec21b3aff91de16dc95d3fa05a66551ab0340f60982ac29c395ef1c6bf9518f2f583294fe2bca9676993bda192b86bfbefb04a58edd78a35ce8e501c8b7de2156bdccc12a80b64f745908cac44c9f65efca72f44a4bd48d18f5faf2ea7dedd31ea6a22360ea6d132fdc47d28d4aaab1be8c8c723cd7d97e9c1fbb03b298d6e09b191016ca08b1d5720f47c948d4a1798c8f2cdb22dfee7c0827d8c1b63f0a775162f01043bc30ad6901d048d39bf0299ecaf6a1a54cbf211d5e7a10c582b1a33e0c61ec2c129d3d84527df30", 0xe2}, {&(0x7f0000000340)="80034f0000320f4268538b10720b849e4af49447463a0ab148edf37f7c", 0x1d}, {&(0x7f00000007c0)="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", 0xfa}], 0x4, 0x0, 0x0, 0x20040000}, 0x8080) setreuid(0x0, r14) 1.19452018s ago: executing program 7 (id=7230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x39faf98bcb8dc49d, 0x0, 0x4e22}, 0x6e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005f000100000000000000000800", @ANYBLOB="9cc54109"], 0x1c}], 0x1, 0x0, 0x0, 0x44000}, 0x4) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x400}) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000040)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000500)="10030600", 0x4, 0x40800, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) (async) r6 = socket$key(0xf, 0x3, 0x2) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r7, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1, 0xfffc, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="020100020a00000030bd700000000000030006000000000002004a230000000000000000000000000200100000000000000000000002000003000500ff20000002"], 0x50}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.19278553s ago: executing program 7 (id=7232): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000002c0), 0x8003, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3#\x82\xf7\x92\x10\x02k!i\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,{\xd3:`G\x81oN\xbd\x0f\xb8\xb7\xc0\xb8\"T0Z\xb1\x18\xe2\xd4&\xdb\x19\xb1\xbe\xcc}\x9d\x84\x10\x0e8^.d\xe1wSJ\xcf\xec\t\x12\x8b\xe1\x92\xf9hq\xbbs\x80x\xd5\xee~\xef\xea\x018\xec\xc3t\x992\xea\x93\x92\xdb\xb0|sdK\n\x8eN\x9a\x02\xe2\xdd\xf7Ho\x0f\"\f\xaf\xd7hb\a\x00\x00$\x1a\xc9\x06\x12Bg\x1a\xc8$v\xa2\xa1\xad\xed{\x8a\x0fn\xa8U0B\b\xc3Y=\xa6\xe9=m\xdc\xd9\x03\xa8\x93\x9c\xb6\xf8\xfc\xbb\n\xd9\xc8{\x1cs\xf5\xbd^\xb1\xda\x0f\xcb\xc5R\xe7b\xdf\xae\x7fo\x98\xc9\xf2\xa6\xa8\xaa)~\xa7\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x83\xd8\rX@\xa2JA\x84\xcc6\xc8\x05r\xb0\xbe\xf5\\\xfc\xb0\xa1\xb1\xa1`%\x18\x8d$\x89\x1cVD\xc9\x04\x1d\xc4#\xe9m\xa1\x82\x9a\x1e\x9c\xd1\"?4c7\x00Jf\x8a:X\xe1u\xb14.tf\xbd\x9b\xac\xa7\xb0o\x0e\xac!\x1f\x91+\xe2w\"\xf8\x9b\xe4\x8e\xcf#>\xbfi!\xc0\xc5\xd6\xab\xe2\xb8\x8e\x99}\x00j\x8d\xa7Z') (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000300)=0x1, 0x4) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000f59ffc)=0x4, 0x4) (rerun: 32) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x2}, {0x1}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r5, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x1e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008804}, 0x8000) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000080)=0xa1f6) (async) waitid(0x2, 0x0, 0x0, 0x20000000, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) 1.19130445s ago: executing program 7 (id=7233): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)}], 0x1}, 0x41) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40010041) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000001640)={0x2020}, 0x2020) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000400)=[@sack_perm, @window={0x3, 0x6, 0x8}, @mss={0x2, 0x7}, @window, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe, 0x81}, @sack_perm, @window={0x3, 0x9, 0x5}], 0x9) sendto$inet(r3, &(0x7f0000000780)="25d7fe", 0x3, 0x1, 0x0, 0x0) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x9c4d31de8d399137, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5, 0x18, &(0x7f00000004c0)={@flat=@handle={0x73682a85, 0x100, 0x1}, @fda={0x66646185, 0x3, 0x1, 0x3b}, @flat=@weak_handle={0x77682a85, 0x21d4d9ad7071ce0c}}, &(0x7f0000000540)={0x0, 0x0, 0x30}}}], 0x0, 0x0, 0x0}) 998.477964ms ago: executing program 6 (id=7236): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fdatasync(r1) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000028d62013cb40000102030109022400010189708f09040023020301010209214000fd01224d0d0905810320000806e7"], 0x0) syz_usb_connect(0x0, 0x90, &(0x7f0000000480)=ANY=[@ANYBLOB="1201500242b3c74099045b10216f0102030109027e00010008200709049c07065975f8080a24017f000402ff0101020009240405ed41b64cf305240502f808240806d30e04fe09240302ff010106230905801010000e0209090509101000050a0c090509000002040f04090505100002e5090c09050e104000"], &(0x7f00000009c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x0, 0x4, 0x3a, 0x40, 0x8}, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="050f1900417000000000"]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0xffff, 0x4, 0x1000, 0x37, 0x3ff, 0x2, 0x1}, 0x1c) openat$rnullb(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000010c0)={0x1, &(0x7f0000000000)=[{0xffff, 0x0, 0x7, 0xaa}]}, 0x10) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0xb, &(0x7f0000001440)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5501, &(0x7f00000000c0)={{r5}, "c4005a51cf48a456fe399e96793568de827d6e3af15928143f77a2c2bf19506fac2c94a8808e7365569e94b6012f452ddbdb4acaadf3199a4fa57eab4549a87e05bb9a155f3d08704dc753cff79d5128dc113e58ecd5a19e0bc7bef139e74acaed4f126be4cc57e22d44a734c7f2c44b2b2dc3ecfb59318827549e5b2679b3cc4f8d5df2bc30b674fb5f8e181e7dab6cc37989c9911a3d5b32ac444ebf78c76d68c313ed1bcaa4bfcdddc200878c72704b48f4cda8c86a41c703694c1e57aaf73751f45d5ed54010c14c30ea8ca2f620ab57b6ad6bdf3263aeab2de44576b10a1040c6cc84fcf2cb5037e025b227baf26e0c5bda231531365c778ef42bc49fd603b98b7b5173f2f1669834e8cd5167092f5d56e6c2623165710ec863179f143dba38551641ea77676773f3a18e97ada500fe448f172e6e714e16079d8233626d4c5c08c9117c5872c5d815ae0d481c25f2cfd2c76c6723e5ee78d5941b7d49e3d123294dd4c04c2691c5d086393047e3fd027daebf2114d1e9da89a36a49f7a411638060e87593ed8e45fb4292ff888e2eb7b776c9428623a34454eb2f11a47b43707e4b161faa8b8dc0d9cb2a0ac253ab41d01721909ae06af564cabff5a0ba5df004c44138b49d2e17944f6588839fdedcf6ddef583df85490fa3a956e416e02943d56f734c3d3aa8b4898544e8f417c79bb5532b4ab2393c6723488c627a285686a0dac4cd6df370ab806b80f251256cfc058f8c2c2b46dca533048a18315caca12ad5915f077285ffbe1a4b5f46f2af4e45695348200e1f5a57a698acae6b4f6124fc076af5f40c3461e91b2639a84be51abe62d27cde1642731d31ae1264d20a21011bd221f8d0e4fc9835ccb61405e1ba6fcd48b9d3487909f89a0f40f91abfd3d33876b707d908bd2b076d37f5b2e2d530210e3930cf0418c3a7d8d0900cd16b4d2b2d4ebf6134c88813a808d82c86a20b7beb6534bb112b374d5b00e000000e37872a2df879ebd568f0b20ce7d4aeb5ef6c960093b8a3d0e0332d821fdd099269364539d876caf78e60232baf7cc26589453666f17f94ac05fc2b752546a9586f9f18288e5944effa6f912709652113377ee14d949842910b0af467706b42d969908840fe55857f526694cdacb7735f2e0bdc49ca50ca57193aec63535f679e1486185bae007a7cd345bf8d7428e1a2881f6d327ee34ef0bbd67b51d25000fc59ed894c001ca327898dc4a3e7c33e20542772f31e7f125eedec11604b6569f051e643bff91d616284d2ea0f25320c22caba4d681781a13bf341dc22f882540aaab75d5bba9bbfe8aa960705d1d903a7ed8b7a14cc18b2ec9d1640ba3b6cf9c2a6cde4f7b23d1eb42fa57d2b2206c6cd6f84a5b7d682a09064e341c844edd3361f2e457a5057e1c3d97916190d9749adbadb70797f1729cc01c6146a23942e245021fe02748e2235582b36df8236c8b25fa94d1ed7e495f0df447b36f609b17526b2c8c43f1ded38f99344f2553fd911deed701d89fdf92ed6368d74f6f09ce2d26a3916f28eda4fac022f043aff14bab96f3841980533b2f935cfe7e40ad9cc77557d50a32a73aa71ae37a0cece6580887608d028b55fa7a1a1cf214098fe13c1a32ee5890e3d2c9a4d23041f89bac353aa1641df4375080b2181555e9667082a35b041645be39a47298b747eed9d127d8d342b620d0ecd2a48a86bd7dbfa04bf5fad62f5b1055b2259dc64b02d27599fff87c8303b47174e3ee66645d1eaaa05d63bad90ef4fdb97d21b468b37c313571d5776495460b57ba25dc2a5def286c8e81a3fdaa3dfb1dfb9deec86aa3629a03b9722bd95a96972a32552ba5d74f03989c73598b3ba0ef19151631ba4cf90d1bcc35c7cd2fecd6c271564df5ed060081417488454f5878f09523ce1b966162808d13a86872ad04bc777544ae4477459d197c6aaecf52e229a6cc94d151e014b589311f8e5bb7eb57605a80c11a7df2110b70735ae34a21e467f7bd8c3f81c1f9dfcf9464365566786b086637717df597c05b45249b04faa2269ca5a3fca2f1797682f24a34c9f70c27b6dd47fe9f6f006c934481524985afeec903f160c4e2c36c2bbe2081ff33733ca17ca2a2d794fd3af80d5a1adcbfa384e1ba851f4a554433e532f321b332d640513c9df326ddaa4691201f94d1b4b82b82f9bb986e00242fce6588d906cd820640a59707cecf78533496fdc49d90effde5769812ae474ef31adb849542ef23359a640eeeadecf273713a46e96c836823012fc190c8d1dd88d965fbe11074da36375c11fedc648160b55b8b8bc830b72a6f98b1396a72d96f06fab40ddd4729dc162d30e8a34c4041cc22fd62eb501fa685ae7d53376cca12e40f53edd0ae8abbb666c75a6ca8658b4ef8810931158868afb757831d14e81cdadc995fcb98e2da29050080ca03494f81b59985dbe3da8634a3c4a00626d08d6f1f997ccd63a1a103d292d29cdf15b2c4bca2f34ba406a47d9a184ed712356257ec45aa9a8ed8b8daca20f6a2edb1494a2af100000000000000006f1bfeb0edfdb1f10b66753f3fe900b95be3aafbfb5e2976de8b2c6b485243770da0cdc8f4d7384b6f39817f5661429442b20cab08cc28cf814ebf10d7ad4de140241ec169d70781524127a9454e5f1ee9fd5652818683a2f7ff0b11c8fea2ff7398e01df48c8eb62123f2630d561470003d020f4cc8923654fcf65d400ed0792af6bf1876099951e938adc275f47b9ba178b8ae3e9b295fab66c144ad8ad2fd29bced367833b76b2f0ded8dfead5dfccfc9ba2d658688abeb41f53eaf6efa82e5947f8d7a6e1010517032443507f5bd419317324000ca02e49db1cb985f8f11149496bfe54629f3f759c3100e0ab50c95446fd390a87b884930763ac810bdcdaee81b64343b955eba24d34d816bcf3eb5df1b6b44317e033a9015640942da607e3ea61727b97eab7511ff680dc5f4e54fa19e07c0023152272edc066010e661de98f73f913bc04983b325ff62134b41081dce65528af69b5206f9522b3e09f78dea218621e60f5ca9c58212526d96aace431133528b8a5354b213ef4883ef271e488bf629284c277843202bf7a41dbe2616e8338ab14f83bd6da1d1c4a4b50b6372564187a497036f2040f77c099bd0d98d3e4eebd4bf433360c518fc965e966642a22a335f3a9688336bd254dc9fe32632d4c1599c6b72fca290d9cae38548f4ad5d2a165053b7d392276d81ff26e97ebcfa210eddc832240de22bbfc6623929aa2d8bad6c41db54e2125063f9153e98b2316ae5e9d51a3a9efe5a81242f7045dbafa8db63cafad19e32b767dcd5adfd5e5459dce45c71f61a18a3e6a7de43bd61d6015fac48dcecb60795e02b30dc04cc4a408abc2dee10a97fb387a229ba5c07cebc63037c0102c846393b2bf865db38e51ce44b5cede8d530cb6496e5a34b9b0b060b8bd6f98cd53169518a1732d92af494c351f8ce753754f7d944865de345d8520a9232a1c5e516e61f23c39e09bac5d7c70a478e0b7a3208f61f090f69b9ab33da7a8ae16626c3d26f11065fd46851eff2c5968f937e90abe02555cad9e54b4bcaf3ee55aba96406cd457e27c1ad5b9cc640afff1d94d7d5f854fd50a66bf37355c548f840129ae0d81dc23202e4d7921236172d1c4920c1bf5e7bfad21740acd8f5fa278b6de2336276e271045d0ef0a9a566ae988269cb16f7eee941941d3a9f05d754cbb92a27ad9cb374872c3566a9db35920d63f0cfa69ef8dfc41f307f7c1f1ae712e3f6001e57e1de99777212ede107b692182c507b168c77a3824f0cd663f6d2ffe73e3d90587b3444e9a3cb093ddefd2869db927938ecf6cbd16a85d0849b7c829a37b70b24868e7ab1aa2adc012d85a8bf374225281b50882a40e6bed667f0538d8c85768cc9d8537bedfebe64cddf937a150c565e3824a75f5e7a173fed0ed3b3aa8750fde47ce1c219d5fc1977abc24c7a28aa8251e29a17eee3405d4c1f1f5e8b53df9425d6dde4b9de4715097c580500000037b42974a40f0bf24dcca060871b759e5f42a12da7d89a494468f6c91c47ac17e7bfd61e62872541fd5d3941c0f0ebca3de06ca63cb50f60fa5ffc61ade4eaed0fd5dd1eb4b8e2d2ebb689741fb354c8bbdc9092f68a156952395585113d78254ec826ba49204d76b8dcd854c4cf942c50c38ad5f8db2bf032d5eced178b25e56f9b39961aea03785119cab42fffbbbeaa15f0c21511f441fd72ab25014dbe5a35dfe295486e0d2e5803304deff8736e1d8df7886e4725321bc450c68459f01b5b3014735e81f989945e59b4c5e367976e90124e9cf422cc0f0d624627ab83ccd65ac7c1b91424672ebb3d91d932994c6e215a9d60efb6ed87eb579951668273e9a38f9089179459d2f670a21bd999a97c968891c59402d188dc601ef033fb9af3291b8778f2a38d379913a02d2215f2960f80847afe4d65f1fc7bcd1995e83fc88d87d799af0bf16060780efc8dbd08b041d8c2f646ca18ea18d3d295e172b344b6aea8d2a2620b6379c5c368459fee07bfcc83c83acaf3dc67755bbe8fe58b1a39051ef2327b30c886a0a5183e38c199e32365cb8194deade3262ea5ffa559b789da10f2948e135ce5858e1b016c153b14795a085b5bef350f95487a3f748afa943179d87a1e8828edc33804c2ea49979074fe162a8a36689286c390585d9f83645be3b921c4a6678b8ffd7edfb7c85265d5796ce4f12595b364fcc81b58c267beaa85dd47ad8c55783fe526d6dd0e3cc1f70a7e88d6f826b18aeab8282ff8e2a13ee8f03fab41be97af13c87883f87e6f0bdda04deebc05e35b601a55cc984478a997725d3faab2101cd9596c757c659e6b6c9178f620fbdcb87e399404f4bcd9b57dd1013818e58a785bed0a7fd1f5e5e355816ceba6745a42e10a145c87aedede2e0bed7bc75015a8354ba95a226c87df41d41e4ae368c4e84e8a032c48977601d71eae547f95375746e1f9c86135481bd09a08fee04db26b96cc9327bbde61cec27a56d114cc0e6459170e6cc4dde84e3fe1d975d05e14dbdac32aa759e5d0268fe819a3dc503247b6c24c1607b4742671f5ad63c21812b1904b3c39ec8734fb1ee77a124a29c50154f53c89754f5e4719cc0279c851a63fc33e16f2393e5134568b78126b5680664fcd1fbf9d88f4efdadc120bbb4f21ddd7bf4c445a534631c5f2c4b51d7842743493b4a13bb99f160987284bc7960aaa6d40dbe05e20f42ff48425d1c8166b7fd457d33d808b456b7b11d3d3c1f445a9698ee8a473fb116c5c4824fa224088fa6f031f07f2972e62592d59536dc4cbe3c1cb33e922b0f35f79f1df10ab43e1d3e5dc480bdd8a7039f71ee9c73f976809ec2853ad0c18e4f0ee73fd1361591375d3db6c822e7baae597fc454aae7b426922e9fd9a87fe52a25d5cd03434d7ffb9f319fbeb403c0836f2117cf851bf7660ecb567a6cd918e85190683c1c0a79da1cd92b8527400008f047a436a4859be0e7b9469c6830a81d81f93ea8ba1b614de4386294089c9b34f4b8116ae7afedd43f6a82abf4302e4d8a9fba0b87347df1f5bb676f496bf29bf9ea9e3ea4bd1dd3f3d4feb7609f96424f35035b5a13fd6efd0441dea1c1f17feae7d5a1ef77aa05537fc87e112e123e306ef0daa36e1ff069be815c5d0b74b6b41c6d5b76c04057de0a43c2e40b04fc11b60f0f1e7ff0b88fb600d79e03cc8b73fed0af95601acca00"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x1}, @release={0x40046306, 0x2}, @enter_looper, @acquire_done={0x40106309, 0x3}], 0x806, 0x0, &(0x7f0000000600)="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"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001100), 0x55, 0x0, &(0x7f0000001100)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a028a7b394d75b41f31b5962ce55eb14a64e7d309f28a612f9220c8d9b1b0d13e0e447c2e707fba38667900"/85}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 522.424062ms ago: executing program 2 (id=7239): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x100, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x8) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000001000)=ANY=[@ANYBLOB="000000000000000000000000000000190000000000000000"]) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffc) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x1}) (async) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x7) (async) read$FUSE(r3, &(0x7f0000002440)={0x2020}, 0x2020) (async, rerun: 64) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) (async, rerun: 64) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async) io_setup(0x8f0, &(0x7f0000002400)=0x0) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2040000300, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) (async) r8 = syz_clone(0x4000011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r4, 0x4008af7c, &(0x7f0000000200)={0x3, 0x62c6}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r9) sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES16=r10, @ANYRESDEC=r5], 0x2c}}, 0x0) ptrace(0x10, r8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x8000000000000001, 0x1, 0x22}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 521.651051ms ago: executing program 6 (id=7240): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xc, "02"}, @main=@item_4={0x3, 0x0, 0xa, "cd3f02d7"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, &(0x7f0000000240)={0x20, 0x1, 0xd0, {0xd0, 0x5, "5e8bfe7788e3bb1e23935bc74d6a2ab33cfa559a0586713585929c5c9f1981860c42de5deeca5981c6bb9d48e5dfa2f3bc688733ac862bb3cb2893d94efbb46df398b6ab11a5714507f637dec76e1d176734aa83267e7bba4f07cae73c938a5e534ff3b3aa9278103646c4d4eede7c6e296c4d6abf3d2e01e7082e18dbc6b3f03770cf4185f24b4ceb086b5707b5a9d33fa04608e28a7402d125e49513da435fb9cc79f3ce7dcff50f6b9eaf68454714eded529424284293fa793710177136d76096fce323201ecfd30761d07dea"}}, &(0x7f0000000000)={0x0, 0x3, 0x58, @string={0x58, 0x3, "e623c145839935bae76918637aa35e4dd1b02c785aed3a03f1724278ed88369b09bb62bdaaa662e22bc73a2570aa12166702d88b15ae828cabac8393f421560fdb5028a055f74e0e862ec01d25789b485bfc98a39af6"}}, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "14b407f1"}, @global=@item_4={0x3, 0x1, 0x8, "9af25826"}, @local=@item_012={0x0, 0x2, 0x7}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0xe6, 0x1, {0x22, 0x298}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x15, 0x99, "4e98d5e3d98bc879245d9eb05ea1949fad4dafcbaf6d87acde4d75f01bce68b5e414f4421f77f7c695382c835c6d3a2928dd8646be37a7445e6d58f1845bbd8bfd3e1a92bd862727f5db317fb694cb53e8de9521cc4e28ed57fa6557348442a8d9a2bd6301e14767a39ea55269f315ec2d76cf755d26bc56d7d979665b28def295effa56131cb0f0c2bbfd4ac8b084e86b04fa0bd101e98368"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000004c0)={0x20, 0x1, 0x45, "9b2c7a320d8be26ac55816411462da190a32acd4a90bf135c44f2a9dffc033a3fbc24c950f9e9fd2dd26e4cac727057d57d27fbf41b4903c0283d7fe165d8bb174eab02420"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x1}}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup3(r1, r0, 0x80000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xc, "02"}, @main=@item_4={0x3, 0x0, 0xa, "cd3f02d7"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, &(0x7f0000000240)={0x20, 0x1, 0xd0, {0xd0, 0x5, "5e8bfe7788e3bb1e23935bc74d6a2ab33cfa559a0586713585929c5c9f1981860c42de5deeca5981c6bb9d48e5dfa2f3bc688733ac862bb3cb2893d94efbb46df398b6ab11a5714507f637dec76e1d176734aa83267e7bba4f07cae73c938a5e534ff3b3aa9278103646c4d4eede7c6e296c4d6abf3d2e01e7082e18dbc6b3f03770cf4185f24b4ceb086b5707b5a9d33fa04608e28a7402d125e49513da435fb9cc79f3ce7dcff50f6b9eaf68454714eded529424284293fa793710177136d76096fce323201ecfd30761d07dea"}}, &(0x7f0000000000)={0x0, 0x3, 0x58, @string={0x58, 0x3, "e623c145839935bae76918637aa35e4dd1b02c785aed3a03f1724278ed88369b09bb62bdaaa662e22bc73a2570aa12166702d88b15ae828cabac8393f421560fdb5028a055f74e0e862ec01d25789b485bfc98a39af6"}}, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "14b407f1"}, @global=@item_4={0x3, 0x1, 0x8, "9af25826"}, @local=@item_012={0x0, 0x2, 0x7}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0xe6, 0x1, {0x22, 0x298}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x15, 0x99, "4e98d5e3d98bc879245d9eb05ea1949fad4dafcbaf6d87acde4d75f01bce68b5e414f4421f77f7c695382c835c6d3a2928dd8646be37a7445e6d58f1845bbd8bfd3e1a92bd862727f5db317fb694cb53e8de9521cc4e28ed57fa6557348442a8d9a2bd6301e14767a39ea55269f315ec2d76cf755d26bc56d7d979665b28def295effa56131cb0f0c2bbfd4ac8b084e86b04fa0bd101e98368"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000004c0)={0x20, 0x1, 0x45, "9b2c7a320d8be26ac55816411462da190a32acd4a90bf135c44f2a9dffc033a3fbc24c950f9e9fd2dd26e4cac727057d57d27fbf41b4903c0283d7fe165d8bb174eab02420"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x1}}) (async) 496.258672ms ago: executing program 2 (id=7241): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:fuse_device_t:s0\x00', 0x11) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) getpid() (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) (async) io_setup(0x5, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r4, 0x0}]) (async, rerun: 64) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) (async) rt_sigsuspend(&(0x7f0000000000), 0x8) (async, rerun: 64) tkill(r6, 0x16) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000180)) 436.151853ms ago: executing program 2 (id=7242): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x400}) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c61636365737b3d652c00000000008d34000000000000000097bd95c65476de5ac18a2b2835ef74f5"]) r6 = socket$key(0xf, 0x3, 0x2) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r7, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1, 0xfffc, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) (async) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="020100020a00000030bd700000000000030006000000000002004a230000000000000000000000000200100000000000000000000002000003000500ff20000002"], 0x50}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r9 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) (async) r11 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r11, 0xfffffffffffffffb, 0x0) chdir(&(0x7f0000000140)='./bus\x00') fadvise64(0xffffffffffffffff, 0x4, 0xfc, 0x4) (async) close_range(r0, 0xffffffffffffffff, 0x0) 333.853305ms ago: executing program 2 (id=7243): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) shutdown(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x2, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x501200, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000003c0)) r5 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) 333.051705ms ago: executing program 2 (id=7244): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3fe) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) io_setup(0x4, &(0x7f0000000080)=0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f00000011c0)="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", 0x1000, 0xa3, 0x0, 0x1, r3}, &(0x7f00000001c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x80010, 0xffffffffffffffff, 0x6931b000) keyctl$update(0x2, 0x0, &(0x7f00000000c0)='z', 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x0, 0x8, 0x2, @mcast2, @private1, 0x10, 0x46, 0xf538, 0x40}}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_access\x00') r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0xa, &(0x7f00000003c0)=[@cstype0={0x4, 0xf}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x11, r9, 0x3a176000) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r10, 0x0, 0x0, 0x4000, &(0x7f0000001180)={0xffffffffffffff97, 0x402, @multicast2}, 0x10) 332.506854ms ago: executing program 7 (id=7245): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) eventfd2(0x58, 0x80000) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 268.936906ms ago: executing program 4 (id=7249): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x1400a0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 266.664116ms ago: executing program 2 (id=7250): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6c3d53609f99aea8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) (async, rerun: 64) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x210}], 0x1, 0x100) (rerun: 64) 235.719896ms ago: executing program 4 (id=7251): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 235.112246ms ago: executing program 4 (id=7252): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r3 = socket(0x2, 0x3, 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r3, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r3, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 232.566376ms ago: executing program 4 (id=7253): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000140)={0x2000200b}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000240)=0x47ee917f) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 145.581508ms ago: executing program 4 (id=7254): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000065c0)=ANY=[@ANYBLOB="580000000102010100000000000000000a00000206000740000400003c0001"], 0x58}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x78, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000000c0)={@private=0xa010103, @loopback}, 0xc) ioprio_set$pid(0x1, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x400, 0x80) read$FUSE(r5, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r5, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) statx(r5, &(0x7f00000063c0)='./file0\x00', 0x4000, 0x100, &(0x7f0000006400)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000006580)='./file0\x00', &(0x7f0000006600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000480)=@v3={0x3000000, [{0x75c97ba1, 0x80000001}, {0x9, 0x3}], r13}, 0x18, 0x0) getresgid(&(0x7f00000067c0), &(0x7f0000006800)=0x0, &(0x7f0000006840)) r15 = geteuid() getresgid(&(0x7f0000006880), &(0x7f00000068c0), &(0x7f0000006900)=0x0) syz_fuse_handle_req(r5, &(0x7f00000040c0)="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", 0x2000, &(0x7f0000007200)={&(0x7f00000060c0)={0x50, 0x0, 0x6, {0x7, 0x2b, 0x9, 0x40000000, 0x2, 0x1, 0x8, 0x2, 0x0, 0x0, 0x10, 0xfffffff7}}, &(0x7f0000006140)={0x18, 0xffffffffffffffda, 0x1, {0x7}}, &(0x7f0000006180)={0x18, 0xfffffffffffffff5, 0xffc000, {0x9}}, &(0x7f00000061c0)={0x18, 0x0, 0x200, {0xc8}}, &(0x7f0000006200)={0x18, 0x0, 0xb, {0xffffffff}}, &(0x7f0000006240)={0x28, 0xffffffffffffffda, 0x9, {{0x10001, 0x4, 0x0, r10}}}, &(0x7f0000006280)={0x60, 0x0, 0x8000, {{0x20d, 0x10000, 0x2, 0x9, 0x9, 0x442, 0x6, 0x4}}}, &(0x7f0000006300)={0x18, 0xffffffffffffffda, 0x8000000000000000, {0xa5a}}, &(0x7f0000006340)={0x1d, 0xfffffffffffffff5, 0xd, {'/dev/rnullb0\x00'}}, &(0x7f0000006380)={0x20, 0x0, 0x5, {0x0, 0x8}}, &(0x7f0000006500)={0x78, 0x0, 0x5, {0x1, 0x0, 0x0, {0x6, 0x65bd9058, 0x7, 0x5, 0x1, 0x3497c5c, 0x5, 0x9, 0x8, 0x2000, 0x9, r11, r7, 0xed}}}, &(0x7f00000066c0)={0x90, 0x0, 0xfffffffffffffeff, {0x0, 0x1, 0x6, 0x7, 0x2, 0x63, {0x5, 0x2da8, 0x0, 0x9, 0x1, 0x1, 0x1000, 0x5, 0x7ff, 0xb000, 0x5, r6, r12, 0x40000000, 0x7}}}, &(0x7f00000072c0)=ANY=[@ANYBLOB="38000000daffffff0900000000000000010000000000000002000000000000000d0000005eec00002f6465762f726e756c9b914506ec73fa2b14e16c623000000000a5793a18cbba"], &(0x7f0000006940)={0x650, 0x0, 0x8000, [{{0x3, 0x1, 0xe1, 0x2, 0x533, 0x4, {0x1, 0x1cf, 0xff, 0x9, 0x1ff, 0x81, 0xfffffc00, 0xff, 0xc3, 0x8000, 0x4, r8, r7, 0x2, 0x81}}, {0x2, 0x4c, 0x0, 0x3}}, {{0x4, 0x1, 0xd, 0xa00000000000000, 0x6, 0x1, {0x6, 0x535, 0x9, 0x2, 0x80000000, 0xf, 0xde65, 0x33, 0x2, 0x6000, 0x5, r8, r9, 0x47, 0x6}}, {0x5, 0x9, 0x1, 0xffffffff, '\x00'}}, {{0x2, 0x0, 0x9, 0x9, 0x6, 0x5, {0x3, 0x5e, 0x0, 0x1, 0x3, 0x0, 0x6, 0xa, 0x0, 0x2000, 0x80000000, r8, r9, 0x4, 0xfffffff9}}, {0x1, 0x7, 0x0, 0x6}}, {{0x3, 0x1, 0x6, 0x4, 0x0, 0x8001, {0x6, 0x8, 0x4, 0x8, 0xd6, 0xffffffffffffffff, 0x400, 0xff, 0x6, 0x4000, 0x9, r6, r9, 0x0, 0x5}}, {0x1, 0xffffffff, 0xd, 0x2, '/dev/rnullb0\x00'}}, {{0x1, 0x2, 0x3, 0x0, 0x5, 0x40, {0x4, 0xfb3, 0x8, 0x3, 0x4, 0x1c, 0x0, 0x84, 0xfa5, 0x4000, 0xc, r6, r7, 0x68, 0x1}}, {0x1, 0x800, 0x3, 0x2, '!,!'}}, {{0x4, 0x3, 0x9, 0x8, 0x1, 0x0, {0x0, 0x8000000000000001, 0x4, 0x7, 0x4, 0x3, 0x80000001, 0x3, 0x8000, 0xb86760f509649345, 0xfffffffa, r8, r9, 0x9, 0x3}}, {0x3, 0x9, 0x3, 0xb, '$[{'}}, {{0x5, 0x1, 0xb, 0x2ec, 0x7, 0x401, {0x2, 0x5, 0x3f, 0x8000000000000001, 0x260, 0x8, 0xd4, 0x9, 0x7, 0x2000, 0xfffffffe, r13, r14, 0xe89a42a, 0xfffffe00}}, {0x6, 0x2, 0xd, 0x5, '/dev/rnullb0\x00'}}, {{0x6, 0x0, 0x9, 0x545c987c, 0x3c8, 0x8, {0x4, 0x0, 0x36b8, 0x3, 0x5, 0x8001, 0x43c5, 0x6, 0x26fe, 0x2000, 0x9cbc, r15, r16, 0x3, 0xf}}, {0x5, 0x4, 0xd, 0x2, '/dev/rnullb0\x00'}}, {{0x1, 0x3, 0x6, 0x2b, 0x7fffffff, 0x3, {0x2, 0x5, 0x1b9, 0xffffffffffff0001, 0x401, 0x4, 0xa, 0x0, 0x9, 0x6000, 0x5e0, r6, r7, 0x2, 0xffffffff}}, {0x0, 0x1, 0x1, 0x4, ','}}, {{0x1, 0x1, 0x7, 0x7, 0x71d1, 0x1, {0x4, 0x6, 0x1000, 0x2, 0x9, 0x9, 0x3, 0x8ac, 0xd9, 0x4000, 0x0, r6, r7, 0xfff, 0x8}}, {0x4, 0x5, 0x0, 0xfff}}]}, &(0x7f0000006fc0)={0xa0, 0x0, 0x6b1e9604, {{0x3, 0x1, 0x1ff, 0x3, 0x5, 0x1400, {0x0, 0xfffffffffffff001, 0x7fffffff, 0x7, 0x0, 0x9, 0x10, 0x3, 0x8001, 0x8000, 0x1, r8, r7, 0xc1, 0x3}}}}, &(0x7f0000007080)={0x20, 0xfffffffffffffffe, 0x81, {0xffffffff, 0x0, 0x9, 0x6}}, &(0x7f00000070c0)={0x130, 0x0, 0xe, {0x1b40d942, 0xb, 0x0, '\x00', {0x1690, 0x15b, 0x8000000000000000, 0x9, r6, r7, 0x0, '\x00', 0x8, 0x3, 0x0, 0x2, {0xffffffffffffff00, 0x7f}, {0x7, 0x7fffffff}, {0x3ff, 0x8}, {0x7aa, 0x5d}, 0x7, 0x0, 0x9d21, 0x9}}}}) 138.738418ms ago: executing program 4 (id=7255): syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') timer_create(0x0, &(0x7f0000000080)={0x0, 0x1b, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) rt_sigpending(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x40004) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="f001000016000100fdffffff0000000000000000000000000000000000000000ff0100000000000000000000000000010000000000f8ffffff00800084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1f0}, 0x1, 0x0, 0x0, 0x840}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYRES64=r4, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="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"], 0x128}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200041, 0x0) timer_getoverrun(r0) ioctl$TIOCSETD(r7, 0x5423, 0x0) r8 = getpid() syz_pidfd_open(r8, 0x0) 15.92478ms ago: executing program 6 (id=7256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) fcntl$lock(r1, 0x24, &(0x7f00000001c0)={0x2, 0x0, 0x401, 0x9, r4}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3a, &(0x7f0000000080)=0xffbfff9d, 0x4) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="87001000"], 0x8) sendto$inet6(r6, 0x0, 0x0, 0x40804, &(0x7f00000000c0)={0xa, 0x2, 0xfffffffc, @mcast1}, 0x1c) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe07", 0xb}], 0x1) splice(r7, 0x0, r9, 0x0, 0x9, 0x8) r10 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x1, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r12) r13 = syz_open_dev$evdev(&(0x7f0000000240), 0x9f7, 0x2cd00) ioctl$EVIOCGEFFECTS(r13, 0x80044584, &(0x7f0000000300)=""/4096) sendmsg$IEEE802154_START_REQ(r12, &(0x7f00000007c0)={0x0, 0xffffffffffffff18, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES8=r9, @ANYRES8=r11], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8000) 0s ago: executing program 6 (id=7257): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "299547f8a09eeacac3c4130f97f2cb9dc34b04"}) openat$kvm(0xffffffffffffff9c, 0x0, 0x22a800, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r2, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="3816", 0x2}, {&(0x7f0000000280)="e0ff2538ae36", 0x6}, {&(0x7f0000000180)="1583", 0x2}, {&(0x7f0000000200)="fb67", 0x2}, {&(0x7f0000000340)="8f029b4e02", 0x5}, {&(0x7f00000003c0)="e6ae2bfe", 0x4}, {&(0x7f0000000480)="6b60ac", 0xfffffe34}, {&(0x7f0000000540)="dec11e44c2", 0x5}, {&(0x7f0000000000)="0ca810f256", 0x5}], 0x9}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000780)="a443a0", 0x3}, {&(0x7f00000007c0)="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", 0x841}, {&(0x7f00000018c0)="b13d", 0xffffffffffffffc6}], 0x3}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000240)="a07c2095c4d2746978955d32609e5a", 0x3}, {&(0x7f00000002c0)="fdc681c71aab879d287cac0bbe84000000000000cb2130cfbfdc7cd8b4b30ecc16d3c2d233dd9d6f5605e70900000040b88552e12a107fc2a139e2159b86b18493ca354d45477ae0859aab3151e37a077568c672bd20723846cb535d", 0x5c}, {&(0x7f0000001e00)="282bb4", 0x3}, {&(0x7f0000001ec0)="aa3a32960a47", 0x6}], 0x4}}], 0x3, 0x4048841) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000440)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) sendto$inet(r3, &(0x7f0000001100)="0b0eac93b3081d247b80d48c2c212ff4226aaf21bb55f657d50399877fa824f98f4a4601e258c3a15cb14905eea5ef303433d55f1dc4c9ae23b0f2c38b46ac4e0d5c2b6aeb162b36d25e4ab6fdeb48f114271a7f4b3602b4408ca84506c8368c6c8c91519bde661d5d250033bcf9901e3f22b4f9749370f3b617c44dfdc7afce03cfc2868ec3f10d267f0ba27bc164c0f0efc808c5bdd728fa37eb306c580e810b592be0bf60792de9b3fb84f4c879374ebb0ccab571cf35aae20ed4020d50a5b2719c1583f30a162facdcef14889eed89c65eb6267c208556397cb27ea8bfd6", 0xe0, 0x8010, &(0x7f0000000400)={0x2, 0x4e22, @private=0xa010101}, 0x10) listen(r3, 0xb5d6) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x80000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x12, r0, 0x4d75a000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) fcntl$addseals(r6, 0x409, 0x9) kernel console output (not intermixed with test programs): Number: syz [ 245.641720][ T31] usb 3-1: config 0 descriptor?? [ 245.652482][ T31] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 245.671731][ T31] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.237/input/input16 [ 245.824345][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4846'. [ 245.938697][T15007] rust_binder: Write failure EFAULT in pid:63 [ 246.389315][T15013] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4852'. [ 246.479801][T15021] overlayfs: failed to clone upperpath [ 246.601767][T15045] /dev/loop0: Can't lookup blockdev [ 246.961014][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 247.015370][T15058] fuse: Bad value for 'rootmode' [ 247.111976][ T9] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.123062][ T9] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.132980][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 247.139627][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 247.148958][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.155720][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 247.155735][ T36] audit: type=1400 audit(2000000002.120:8378): avc: denied { relabelfrom } for pid=15061 comm="syz.4.4871" name="" dev="pipefs" ino=50921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 247.158762][ T9] usb 2-1: config 0 descriptor?? [ 247.166586][ T36] audit: type=1401 audit(2000000002.130:8379): op=setxattr invalid_context="" [ 247.277359][T15084] 9pnet_fd: Insufficient options for proto=fd [ 247.294621][T15088] fuseblk: Unknown parameter 'group00000000000000000000' [ 247.302906][ T36] audit: type=1400 audit(2000000002.280:8380): avc: denied { create } for pid=15087 comm="syz.4.4878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 247.597934][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 247.603981][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 247.612816][ T9] usb 2-1: USB disconnect, device number 15 [ 247.886309][T15113] SELinux: security_context_str_to_sid () failed with errno=-22 [ 248.028808][ T9] usb 3-1: USB disconnect, device number 23 [ 248.035978][ T9] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 248.046386][ T36] audit: type=1400 audit(2000000003.020:8381): avc: denied { read } for pid=15135 comm="syz.1.4893" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:var_log_t:s0" [ 248.114772][T15147] SELinux: security_context_str_to_sid (0x0000000000000003) failed with errno=-22 [ 248.553947][T15162] netlink: 'syz.1.4901': attribute type 4 has an invalid length. [ 248.563446][T15162] netlink: 'syz.1.4901': attribute type 4 has an invalid length. [ 248.572587][T15162] incfs: Error accessing: ./file0. [ 248.577709][T15162] incfs: mount failed -20 [ 248.585577][T15162] /dev/loop0: Can't lookup blockdev [ 248.775416][T15167] binder: Bad value for 'stats' [ 249.013946][T15170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4904'. [ 249.041099][ T306] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 249.192020][ T306] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.202204][ T306] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.211757][ T306] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.220820][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.228831][ T306] usb 3-1: SerialNumber: syz [ 249.435503][T15168] rust_binder: Error in use_page_slow: ESRCH [ 249.435531][T15168] rust_binder: use_range failure ESRCH [ 249.441543][T15168] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 249.447018][T15168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 249.454867][T15168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:187 [ 249.507079][ T36] audit: type=1326 audit(2000000004.480:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15163 comm="syz.1.4902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bdb8e9a9 code=0x7fc00000 [ 249.581769][T15192] overlayfs: failed to clone lowerpath [ 249.594786][T15190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4911'. [ 250.091277][T15207] fuse: Bad value for 'fd' [ 250.173750][ T36] audit: type=1400 audit(2000000005.150:8383): avc: denied { transfer } for pid=15226 comm="syz.1.4927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 250.173793][T15227] rust_binder: 140: no such ref 3 [ 250.217585][T15230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 250.217632][T15230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:142 [ 250.418898][T15244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4933'. [ 250.452153][T15246] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4934'. [ 250.453957][ T36] audit: type=1400 audit(2000000005.430:8384): avc: denied { connect } for pid=15247 comm="syz.1.4935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 250.515275][ T36] audit: type=1400 audit(2000000005.490:8385): avc: denied { shutdown } for pid=15255 comm="syz.4.4938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 250.613898][ T36] audit: type=1400 audit(2000000005.590:8386): avc: denied { write } for pid=15267 comm="syz.1.4941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 251.143769][T15303] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4953'. [ 251.166698][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4956'. [ 251.177018][T15310] 9pnet_fd: Insufficient options for proto=fd [ 251.279668][T15325] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4960'. [ 251.341402][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4961'. [ 251.361612][ T36] audit: type=1326 audit(2000000007.338:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15328 comm="syz.4.4961" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14bcf8e9a9 code=0x0 [ 251.521938][T15337] overlay: ./file1 is not a directory [ 251.528763][T15337] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4963'. [ 251.723313][ T306] usb 3-1: 0:2 : does not exist [ 251.728263][ T306] usb 3-1: unit 5: unexpected type 0x0a [ 251.742444][ T306] usb 3-1: USB disconnect, device number 24 [ 251.772497][T12981] udevd[12981]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 251.819239][T15362] netlink: 'syz.6.4972': attribute type 27 has an invalid length. [ 251.888416][T15372] rust_binder: 198: no such ref 1 [ 251.955566][T15388] __vm_enough_memory: pid: 15388, comm: syz.1.4982, bytes: 8589934592 not enough memory for the allocation [ 252.060023][T15393] rust_binder: 210: no such ref 3 [ 252.201326][T15399] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4986'. [ 252.314335][T15413] 2ar.xz: renamed from lo [ 252.323138][T15414] 9pnet_fd: Insufficient options for proto=fd [ 252.323138][T15413] 9pnet_fd: Insufficient options for proto=fd [ 252.489527][T15425] tipc: Enabling of bearer rejected, failed to enable media [ 252.758526][T15439] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 252.792182][T15443] fuseblk: Bad value for 'user_id' [ 252.797376][T15443] fuseblk: Bad value for 'user_id' [ 252.863853][T15451] fuse: Unknown parameter '6\' [ 252.992693][T15466] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 253.001172][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 253.001185][ T36] audit: type=1400 audit(2000000008.978:8395): avc: denied { mount } for pid=15464 comm="syz.1.5012" name="/" dev="overlay" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 253.010007][T15466] rust_binder: 15465 RLIMIT_NICE not set [ 253.032298][T15466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230 [ 253.045434][ T306] rust_binder: 15464: removing orphan mapping 0:4120 [ 253.598965][T15483] 9pnet_fd: Insufficient options for proto=fd [ 253.658385][T15494] overlayfs: failed to resolve './file0/file1': -2 [ 253.668871][T15494] netlink: 'syz.6.5022': attribute type 12 has an invalid length. [ 253.688222][T15498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5024'. [ 253.868434][T15527] overlay: Unknown parameter 'appraise_type' [ 253.888704][T15534] netlink: 'syz.4.5034': attribute type 4 has an invalid length. [ 253.980190][T15555] rust_binder: 241: no such ref 3 [ 253.985362][T15555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:241 [ 253.985847][T15556] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 254.016705][T15563] batadv_slave_1: entered promiscuous mode [ 254.029256][T15563] batadv_slave_1: left promiscuous mode [ 254.072688][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5048'. [ 254.086185][ T36] audit: type=1400 audit(2000000010.058:8396): avc: denied { setattr } for pid=15573 comm="syz.4.5050" name="RAWv6" dev="sockfs" ino=53751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 254.109311][ T36] audit: type=1400 audit(2000000010.058:8397): avc: denied { map } for pid=15573 comm="syz.4.5050" path="socket:[53752]" dev="sockfs" ino=53752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 254.148353][T15588] 9pnet_fd: Insufficient options for proto=fd [ 254.260406][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 254.410346][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 254.416605][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.426863][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.437114][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.446182][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.454194][ T10] usb 2-1: Product: syz [ 254.458361][ T10] usb 2-1: Manufacturer: syz [ 254.463206][ T10] usb 2-1: SerialNumber: syz [ 254.671809][ T10] usb 2-1: 0:2 : does not exist [ 254.678385][ T10] usb 2-1: USB disconnect, device number 16 [ 254.685763][T12981] udevd[12981]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 254.905392][T15611] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5064'. [ 254.914445][T15611] netlink: 'syz.2.5064': attribute type 6 has an invalid length. [ 254.922344][T15611] netlink: 'syz.2.5064': attribute type 5 has an invalid length. [ 254.930086][T15611] netlink: 'syz.2.5064': attribute type 4 has an invalid length. [ 255.076467][T15647] binder: Bad value for 'stats' [ 255.097678][ T36] audit: type=1400 audit(2000000011.069:8398): avc: denied { append } for pid=15649 comm="syz.2.5076" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 255.202814][ T36] audit: type=1400 audit(2000000011.179:8399): avc: denied { ioctl } for pid=15654 comm="syz.2.5079" path="socket:[53248]" dev="sockfs" ino=53248 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 255.251637][T15664] rust_binder: 249: no such ref 1 [ 255.256770][T15664] rust_binder: 249: no such ref 2 [ 255.361332][T15675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:249 [ 255.411527][ T36] audit: type=1400 audit(2000000011.389:8400): avc: denied { map } for pid=15684 comm="syz.2.5089" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.515322][T15713] futex_wake_op: syz.2.5098 tries to shift op by -1; fix this program [ 255.543360][ T36] audit: type=1400 audit(2000000011.519:8401): avc: denied { view } for pid=15717 comm="syz.2.5100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 255.571131][T15723] rust_binder: 239: no such ref 3 [ 255.594535][T15731] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 131074 [ 255.602339][T15731] rust_binder: Write failure EFAULT in pid:242 [ 255.620818][T15740] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 255.634392][T15740] rust_binder: Write failure EINVAL in pid:247 [ 255.675464][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5112'. [ 255.696395][T15759] rust_binder: 15758 RLIMIT_NICE not set [ 255.708347][ T36] audit: type=1400 audit(2000000011.679:8402): avc: denied { associate } for pid=15762 comm="syz.6.5114" name="fuse" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 255.735506][ T36] audit: type=1400 audit(2000000011.689:8403): avc: denied { mounton } for pid=15762 comm="syz.6.5114" path="/file0" dev="rootfs" ino=13518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 255.758003][ T36] audit: type=1400 audit(2000000011.729:8404): avc: denied { ioctl } for pid=15764 comm="syz.2.5115" path="socket:[54463]" dev="sockfs" ino=54463 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.791519][T15770] __vm_enough_memory: pid: 15770, comm: syz.2.5116, bytes: 8589934592 not enough memory for the allocation [ 256.009733][T15816] rust_binder: Error while translating object. [ 256.009826][T15816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 256.016390][T15816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 256.123959][T15836] netlink: 'syz.6.5138': attribute type 12 has an invalid length. [ 256.320239][T15867] 9pnet_fd: Insufficient options for proto=fd [ 256.327179][T15870] overlayfs: failed to clone upperpath [ 256.449312][ T306] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 256.602065][T15887] veth0_vlan: entered allmulticast mode [ 256.610360][ T306] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.620652][ T306] usb 3-1: config 0 has no interfaces? [ 256.626424][ T306] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 256.636150][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.645892][ T306] usb 3-1: config 0 descriptor?? [ 256.854043][T15842] rust_binder: Write failure EFAULT in pid:284 [ 256.854428][ T10] usb 3-1: USB disconnect, device number 25 [ 257.259872][T15918] 9pnet: p9_errstr2errno: server reported unknown error 2ꓒ۰|sdK [ 257.259872][T15918] NHo" hb [ 257.376783][T15923] binder: Unknown parameter 'seclabetl' [ 257.419989][T15926] tipc: Trying to set illegal importance in message [ 257.965381][T15959] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.972438][T15959] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.979572][T15959] bridge_slave_0: entered allmulticast mode [ 257.985833][T15959] bridge_slave_0: entered promiscuous mode [ 257.992528][T15959] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.001909][T15959] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.009221][T15959] bridge_slave_1: entered allmulticast mode [ 258.020226][T15959] bridge_slave_1: entered promiscuous mode [ 258.026359][ T323] bridge_slave_1: left allmulticast mode [ 258.035340][ T323] bridge_slave_1: left promiscuous mode [ 258.042473][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.056934][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 258.057141][ T36] audit: type=1400 audit(2000000014.030:8409): avc: denied { map } for pid=15966 comm="syz.2.5182" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 258.206644][T15959] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.213731][T15959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.221123][T15959] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.228172][T15959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.229156][T15973] rust_binder: 15972 RLIMIT_NICE not set [ 258.236867][ T36] audit: type=1400 audit(2000000014.211:8410): avc: denied { create } for pid=15971 comm="syz.2.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 258.267714][ T323] tipc: Disabling bearer [ 258.275338][ T323] tipc: Left network mode [ 258.282171][ T323] veth1_macvtap: left promiscuous mode [ 258.287680][ T323] veth0_vlan: left promiscuous mode [ 258.341815][T15959] veth0_vlan: entered promiscuous mode [ 258.353683][ T36] audit: type=1326 audit(2000000014.321:8411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15981 comm="syz.2.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbcd8e9a9 code=0x7ffc0000 [ 258.357880][T15959] veth1_macvtap: entered promiscuous mode [ 258.384277][ T36] audit: type=1326 audit(2000000014.351:8412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15981 comm="syz.2.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbcd8e9a9 code=0x7ffc0000 [ 258.410736][ T36] audit: type=1326 audit(2000000014.351:8413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15981 comm="syz.2.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdcbcd8e9a9 code=0x7ffc0000 [ 258.435141][ T36] audit: type=1326 audit(2000000014.351:8414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15981 comm="syz.2.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbcd8e9a9 code=0x7ffc0000 [ 258.459445][ T36] audit: type=1326 audit(2000000014.351:8415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15981 comm="syz.2.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbcd8e9a9 code=0x7ffc0000 [ 258.483876][ T36] audit: type=1326 audit(2000000014.351:8416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15981 comm="syz.2.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcbcd8e9a9 code=0x7ffc0000 [ 258.507696][ T36] audit: type=1326 audit(2000000014.351:8417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15981 comm="syz.2.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbcd8e9a9 code=0x7ffc0000 [ 258.531244][ T36] audit: type=1326 audit(2000000014.351:8418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15981 comm="syz.2.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbcd8e9a9 code=0x7ffc0000 [ 258.583606][T15996] block device autoloading is deprecated and will be removed. [ 258.595110][T15996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 258.595135][T15996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:319 [ 258.645651][T16003] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.655466][T16005] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 258.661966][T16004] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 258.671943][T16005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:321 [ 258.681419][T16004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:321 [ 258.888079][ T306] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 258.938118][ T10] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 258.974854][T16009] overlayfs: failed to clone upperpath [ 259.049041][ T306] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 259.058364][ T306] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.067176][ T306] usb 7-1: config 0 descriptor?? [ 259.099742][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 259.110762][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 259.121144][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 259.131910][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 259.139187][T16028] __nla_validate_parse: 2 callbacks suppressed [ 259.139205][T16028] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5199'. [ 259.140073][ T10] usb 3-1: SerialNumber: syz [ 259.163747][ T10] usb 3-1: bad CDC descriptors [ 259.169805][ T10] usb-storage 3-1:1.0: USB Mass Storage device detected [ 259.178776][ T10] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 259.186790][ T10] scsi host1: usb-storage 3-1:1.0 [ 259.369978][T16003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.378680][T16004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.381220][T16003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.387172][T16004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.475745][ T306] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 259.475767][T15999] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5189'. [ 259.476511][T15999] rust_binder: Failed to allocate buffer. len:4232, is_oneway:true [ 259.485975][ T306] asix 7-1:0.0: probe with driver asix failed with error -32 [ 259.752681][T16004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 259.825563][T16060] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5211'. [ 259.835088][T16060] fuse: Bad value for 'user_id' [ 259.839963][T16060] fuse: Bad value for 'user_id' [ 260.529268][T16082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5219'. [ 260.941205][T16097] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 261.197424][ T10] usb 3-1: USB disconnect, device number 26 [ 261.219321][T16129] rust_binder: 16122 RLIMIT_NICE not set [ 261.231211][T16138] 9pnet_fd: Insufficient options for proto=fd [ 261.288963][ T9] rust_binder: 16121: removing orphan mapping 0:4120 [ 261.310868][T16151] devpts: called with bogus options [ 261.628805][ T306] usb 7-1: USB disconnect, device number 2 [ 261.646699][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 261.786632][ T10] usb 3-1: device descriptor read/64, error -71 [ 262.026500][ T10] usb 3-1: device descriptor read/64, error -71 [ 262.046499][ T306] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 262.217826][ T306] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 262.228301][ T306] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 173, changing to 4 [ 262.241228][ T306] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 13312, setting to 1023 [ 262.253847][ T306] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 262.263014][ T306] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.266414][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 262.271073][ T306] usb 7-1: Product: syz [ 262.283009][ T306] usb 7-1: Manufacturer: syz [ 262.287911][ T306] usb 7-1: SerialNumber: syz [ 262.293360][ T306] usb 7-1: config 0 descriptor?? [ 262.299645][ T306] usb 7-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 52 [ 262.406322][ T10] usb 3-1: device descriptor read/64, error -71 [ 262.505631][ T306] usb 7-1: USB disconnect, device number 3 [ 262.513482][T12981] udevd[12981]: setting owner of /dev/snd/pcmC0D0p to uid=0, gid=29 failed: No such file or directory [ 262.515774][T13977] udevd[13977]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 262.651917][T16182] /dev/loop0: Can't lookup blockdev [ 262.656236][ T10] usb 3-1: device descriptor read/64, error -71 [ 262.766221][ T10] usb usb3-port1: attempt power cycle [ 263.017204][T16187] netlink: 'syz.6.5257': attribute type 12 has an invalid length. [ 263.106265][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 263.116813][T16194] 9pnet_fd: Insufficient options for proto=fd [ 263.116936][T16196] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5261'. [ 263.133195][ T10] usb 3-1: device descriptor read/8, error -71 [ 263.133847][T16196] /dev/loop0: Can't lookup blockdev [ 263.155122][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 263.155136][ T36] audit: type=1400 audit(2000000019.123:8493): avc: denied { listen } for pid=16193 comm="syz.6.5260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.266845][ T10] usb 3-1: device descriptor read/8, error -71 [ 263.516018][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 263.541641][ T10] usb 3-1: device descriptor read/8, error -71 [ 263.581632][T16216] 9pnet_fd: Insufficient options for proto=fd [ 263.620641][ T36] audit: type=1400 audit(2000000019.593:8494): avc: denied { relabelfrom } for pid=16207 comm="syz.6.5265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 263.640724][ T36] audit: type=1400 audit(2000000019.593:8495): avc: denied { relabelto } for pid=16207 comm="syz.6.5265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 263.686702][ T10] usb 3-1: device descriptor read/8, error -71 [ 263.795698][ T10] usb usb3-port1: unable to enumerate USB device [ 263.976417][T16233] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.983467][T16233] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.990573][T16233] bridge_slave_0: entered allmulticast mode [ 263.996817][T16233] bridge_slave_0: entered promiscuous mode [ 264.003066][T16233] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.010131][T16233] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.017239][T16233] bridge_slave_1: entered allmulticast mode [ 264.023743][T16233] bridge_slave_1: entered promiscuous mode [ 264.087819][T16233] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.094950][T16233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.102241][T16233] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.109285][T16233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.133109][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.140619][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.150351][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.157411][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.166665][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.173713][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.203377][T16233] veth0_vlan: entered promiscuous mode [ 264.217410][T16233] veth1_macvtap: entered promiscuous mode [ 264.240194][ T36] audit: type=1400 audit(2000000020.214:8496): avc: denied { ioctl } for pid=16241 comm="syz.6.5275" path="socket:[55979]" dev="sockfs" ino=55979 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 264.242769][T16242] netlink: 'syz.6.5275': attribute type 28 has an invalid length. [ 264.298678][ T36] audit: type=1400 audit(2000000020.274:8497): avc: denied { execute } for pid=16244 comm="syz.4.5271" path="/selinux/status" dev="selinuxfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 264.299468][T16245] rust_binder: 2: no such ref 3 [ 264.336137][T16248] FAULT_INJECTION: forcing a failure. [ 264.336137][T16248] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 264.349323][T16248] CPU: 0 UID: 0 PID: 16248 Comm: syz.2.5276 Not tainted 6.12.30-syzkaller-g15178d63ac5e #0 2e49b5e8bba3abd4e44f2eeb6ccfddb4f386a3cf [ 264.349354][T16248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.349367][T16248] Call Trace: [ 264.349374][T16248] [ 264.349383][T16248] __dump_stack+0x21/0x30 [ 264.349411][T16248] dump_stack_lvl+0x10c/0x190 [ 264.349434][T16248] ? __cfi_dump_stack_lvl+0x10/0x10 [ 264.349458][T16248] ? __kasan_check_write+0x18/0x20 [ 264.349482][T16248] ? proc_fail_nth_write+0x17e/0x210 [ 264.349505][T16248] dump_stack+0x19/0x20 [ 264.349526][T16248] should_fail_ex+0x3d9/0x530 [ 264.349551][T16248] should_fail+0xf/0x20 [ 264.349573][T16248] should_fail_usercopy+0x1e/0x30 [ 264.349597][T16248] _copy_from_user+0x22/0xb0 [ 264.349626][T16248] __sys_sendto+0x29e/0x6f0 [ 264.349648][T16248] ? __cfi___sys_sendto+0x10/0x10 [ 264.349670][T16248] ? __kasan_check_write+0x18/0x20 [ 264.349692][T16248] ? __cfi_ksys_write+0x10/0x10 [ 264.349714][T16248] __x64_sys_sendto+0xe9/0x100 [ 264.349734][T16248] x64_sys_call+0x2c2c/0x2ee0 [ 264.349756][T16248] do_syscall_64+0x58/0xf0 [ 264.349774][T16248] ? clear_bhb_loop+0x50/0xa0 [ 264.349797][T16248] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 264.349818][T16248] RIP: 0033:0x7fdcbcd8e9a9 [ 264.349833][T16248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.349848][T16248] RSP: 002b:00007fdcbdbba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 264.349867][T16248] RAX: ffffffffffffffda RBX: 00007fdcbcfb5fa0 RCX: 00007fdcbcd8e9a9 [ 264.349880][T16248] RDX: 000000000000dd86 RSI: 0000200000000040 RDI: 0000000000000003 [ 264.349894][T16248] RBP: 00007fdcbdbba090 R08: 0000200000000080 R09: 0000000000000010 [ 264.349913][T16248] R10: 0000000000000804 R11: 0000000000000246 R12: 0000000000000001 [ 264.349924][T16248] R13: 0000000000000000 R14: 00007fdcbcfb5fa0 R15: 00007ffc10900f08 [ 264.349938][T16248] [ 264.885090][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 265.015065][ T10] usb 3-1: device descriptor read/64, error -71 [ 265.097517][ T304] bridge_slave_1: left allmulticast mode [ 265.103174][ T304] bridge_slave_1: left promiscuous mode [ 265.105016][ T45] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 265.109061][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.123761][ T304] bridge_slave_0: left allmulticast mode [ 265.129467][ T304] bridge_slave_0: left promiscuous mode [ 265.135129][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.247036][ T304] veth1_macvtap: left promiscuous mode [ 265.252580][ T304] veth0_vlan: left promiscuous mode [ 265.254920][ T10] usb 3-1: device descriptor read/64, error -71 [ 265.258168][ T45] usb 7-1: device descriptor read/64, error -71 [ 265.494787][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 265.504788][ T45] usb 7-1: device descriptor read/64, error -71 [ 265.595284][ T304] bridge_slave_1: left allmulticast mode [ 265.600925][ T304] bridge_slave_1: left promiscuous mode [ 265.606560][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.613885][ T304] bridge_slave_0: left allmulticast mode [ 265.619556][ T304] bridge_slave_0: left promiscuous mode [ 265.625226][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.632305][ T10] usb 3-1: device descriptor read/64, error -71 [ 265.744664][ T45] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 265.756500][ T304] veth0_vlan: left promiscuous mode [ 265.874580][ T10] usb 3-1: device descriptor read/64, error -71 [ 265.884587][ T45] usb 7-1: device descriptor read/64, error -71 [ 265.984592][ T10] usb usb3-port1: attempt power cycle [ 266.134467][ T45] usb 7-1: device descriptor read/64, error -71 [ 266.244478][ T45] usb usb7-port1: attempt power cycle [ 266.324359][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 266.345310][ T10] usb 3-1: device descriptor read/8, error -71 [ 266.475308][ T10] usb 3-1: device descriptor read/8, error -71 [ 266.584242][ T45] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 266.605205][ T45] usb 7-1: device descriptor read/8, error -71 [ 266.714720][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 266.735190][ T10] usb 3-1: device descriptor read/8, error -71 [ 266.745318][ T45] usb 7-1: device descriptor read/8, error -71 [ 266.865090][ T10] usb 3-1: device descriptor read/8, error -71 [ 266.974116][ T10] usb usb3-port1: unable to enumerate USB device [ 266.994023][ T45] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 267.015356][ T45] usb 7-1: device descriptor read/8, error -71 [ 267.144979][ T45] usb 7-1: device descriptor read/8, error -71 [ 267.253949][ T45] usb usb7-port1: unable to enumerate USB device [ 267.766387][T16302] binder: Unknown parameter 'defcontext' [ 267.866980][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5302'. [ 267.885833][T16322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:382 [ 267.941841][T16332] Unsupported ieee802154 address type: 0 [ 267.941844][ T36] audit: type=1400 audit(2000000023.915:8498): avc: denied { bind } for pid=16331 comm="syz.4.5307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 267.966000][T16334] rust_binder: Failed to allocate buffer. len:65560, is_oneway:false [ 267.976629][T16334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 267.991486][T16334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:25 [ 268.071865][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5314'. [ 268.076051][T16357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 268.103955][T16361] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 131074 [ 268.109067][T16363] fuseblk: Bad value for 'source' [ 268.113069][T16361] rust_binder: Write failure EFAULT in pid:35 [ 268.127485][T16367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 268.134780][T16368] rust_binder: Failed copying into alloc: EFAULT [ 268.141272][T16368] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 268.147932][T16368] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 268.156255][T16368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:37 [ 268.190174][T16382] input: syz1 as /devices/virtual/input/input18 [ 268.232039][T16386] veth0_vlan: entered allmulticast mode [ 268.273389][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 268.280932][ T448] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 268.390585][T16399] rust_binder: Error while translating object. [ 268.390618][T16399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 268.396813][T16399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 268.433326][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 268.448698][ T448] usb 3-1: No LPM exit latency info found, disabling LPM. [ 268.455898][ T9] usb 7-1: config 11 has an invalid interface number: 79 but max is 1 [ 268.464186][ T9] usb 7-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 268.474497][ T9] usb 7-1: config 11 has 1 interface, different from the descriptor's value: 2 [ 268.483594][ T9] usb 7-1: config 11 has no interface number 0 [ 268.489826][ T448] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 268.500653][ T9] usb 7-1: config 11 interface 79 altsetting 19 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 268.513859][ T448] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.526655][ T9] usb 7-1: config 11 interface 79 has no altsetting 0 [ 268.535055][ T9] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0124, bcdDevice=b2.eb [ 268.544175][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.552195][ T9] usb 7-1: Product: Е [ 268.556357][ T9] usb 7-1: Manufacturer: ᡁ [ 268.561012][ T9] usb 7-1: SerialNumber: й [ 268.565591][ T448] usb 3-1: string descriptor 0 read error: -22 [ 268.571776][ T448] usb 3-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 268.581241][ T448] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.591919][T16338] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 268.829318][T16434] netlink: 'syz.1.5341': attribute type 12 has an invalid length. [ 268.843564][T16434] 9pnet_fd: Insufficient options for proto=fd [ 268.963188][ T448] usbhid 3-1:1.0: can't add hid device: -71 [ 268.969195][ T448] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 268.989375][ T448] usb 3-1: USB disconnect, device number 35 [ 269.076384][T16447] netlink: 'syz.1.5345': attribute type 4 has an invalid length. [ 269.085530][T16447] 9pnet_fd: Insufficient options for proto=fd [ 269.156350][T16452] x_tables: duplicate underflow at hook 1 [ 269.320305][T16455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 269.320338][T16455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:388 [ 270.040911][ T36] audit: type=1400 audit(2000000026.016:8499): avc: denied { create } for pid=16486 comm="syz.1.5358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 270.041608][T16487] netlink: 'syz.1.5358': attribute type 40 has an invalid length. [ 270.146207][T16496] rust_binder: Write failure EFAULT in pid:96 [ 270.157353][T16502] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 270.253838][ T36] audit: type=1400 audit(2000000026.237:8500): avc: denied { read write } for pid=16329 comm="syz.6.5306" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 270.283089][T16520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.291602][T16520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.301598][ T36] audit: type=1400 audit(2000000026.237:8501): avc: denied { open } for pid=16329 comm="syz.6.5306" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 270.331252][T16521] rust_binder: Error while translating object. [ 270.331292][T16521] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 270.345630][ T36] audit: type=1400 audit(2000000026.327:8502): avc: denied { getopt } for pid=16518 comm="syz.4.5368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 270.352862][T16521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:393 [ 270.776974][ T36] audit: type=1326 audit(2000000026.757:8503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16535 comm="syz.4.5373" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffbc298e9a9 code=0x0 [ 271.170908][T16546] binder: Bad value for 'max' [ 271.343523][ T45] usb 7-1: USB disconnect, device number 8 [ 271.357800][T16551] syz.6.5378: attempt to access beyond end of device [ 271.357800][T16551] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 271.370810][T16551] exFAT-fs (loop6): unable to read boot sector [ 271.377001][T16551] exFAT-fs (loop6): failed to read boot sector [ 271.383192][T16551] exFAT-fs (loop6): failed to recognize exfat type [ 271.421834][ T968] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 271.437636][T16557] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 271.582762][ T968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.593726][ T968] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 271.602790][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.618049][ T968] usb 3-1: config 0 descriptor?? [ 271.765969][ T9] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 271.932540][ T9] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 271.940804][ T9] usb 7-1: config 0 has no interface number 0 [ 271.946917][ T9] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 271.959447][ T9] usb 7-1: New USB device found, idVendor=0499, idProduct=6bab, bcdDevice=68.2f [ 271.968520][ T9] usb 7-1: New USB device strings: Mfr=20, Product=2, SerialNumber=3 [ 271.977395][ T9] usb 7-1: Product: syz [ 271.981595][ T9] usb 7-1: Manufacturer: syz [ 271.986205][ T9] usb 7-1: SerialNumber: syz [ 271.991752][ T9] usb 7-1: config 0 descriptor?? [ 272.028159][ T968] dragonrise 0003:0079:0006.0008: item fetching failed at offset 5/7 [ 272.036457][ T968] dragonrise 0003:0079:0006.0008: parse failed [ 272.042663][ T968] dragonrise 0003:0079:0006.0008: probe with driver dragonrise failed with error -22 [ 272.202376][ T9] usb 7-1: USB disconnect, device number 9 [ 272.208815][T12981] udevd[12981]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 272.242591][T16549] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 272.250796][ T45] usb 3-1: USB disconnect, device number 36 [ 272.535866][T16598] rust_binder: Write failure EINVAL in pid:121 [ 272.568849][ T36] audit: type=1400 audit(2000000028.548:8504): avc: denied { remount } for pid=16603 comm="syz.4.5398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 272.568854][T16605] proc: Bad value for 'gid' [ 272.635557][T16607] 9pnet_fd: Insufficient options for proto=fd [ 272.815975][ T36] audit: type=1400 audit(2000000028.798:8505): avc: denied { bind } for pid=16616 comm="syz.2.5403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 273.161043][ T45] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 273.200578][ T36] audit: type=1400 audit(2000000029.178:8506): avc: denied { read } for pid=16638 comm="syz.1.5411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 273.310850][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 273.317247][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 273.325696][ T45] usb 3-1: config 1 interface 0 altsetting 105 endpoint 0x81 has an invalid bInterval 215, changing to 11 [ 273.337182][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 273.345198][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 273.354259][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.362261][ T45] usb 3-1: Product: syz [ 273.366430][ T45] usb 3-1: SerialNumber: syz [ 273.576802][T16625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.585503][T16625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.597943][ T45] usbhid 3-1:1.0: can't add hid device: -71 [ 273.603925][ T45] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 273.612522][ T45] usb 3-1: USB disconnect, device number 37 [ 273.730023][T16644] 9pnet_fd: Insufficient options for proto=fd [ 273.769418][T16656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52555 sclass=netlink_route_socket pid=16656 comm=syz.1.5417 [ 273.811193][ T968] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 273.856185][T16673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5422'. [ 273.950540][ T968] usb 7-1: device descriptor read/64, error -71 [ 274.151101][T16691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.190418][ T968] usb 7-1: device descriptor read/64, error -71 [ 274.204139][T16696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:421 [ 274.281151][ T36] audit: type=1326 audit(2000000030.269:8507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16698 comm="syz.2.5431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcbcd8e9a9 code=0x0 [ 274.364600][T16700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:424 [ 274.440321][ T968] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 274.580232][ T968] usb 7-1: device descriptor read/64, error -71 [ 274.830103][ T968] usb 7-1: device descriptor read/64, error -71 [ 274.940113][ T968] usb usb7-port1: attempt power cycle [ 275.280003][ T968] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 275.300975][ T968] usb 7-1: device descriptor read/8, error -71 [ 275.431267][ T968] usb 7-1: device descriptor read/8, error -71 [ 275.679699][ T968] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 275.710691][ T968] usb 7-1: device descriptor read/8, error -71 [ 275.853597][ T968] usb 7-1: device descriptor read/8, error -71 [ 275.886313][T16741] futex_wake_op: syz.1.5442 tries to shift op by 144; fix this program [ 275.895908][T16741] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5442'. [ 275.904955][T16741] tc_dump_action: action bad kind [ 275.969829][ T968] usb usb7-port1: unable to enumerate USB device [ 275.976100][T16758] netlink: 'syz.4.5443': attribute type 1 has an invalid length. [ 275.991716][T16760] binder: Bad value for 'stats' [ 276.046854][T16766] netlink: 'syz.2.5451': attribute type 16 has an invalid length. [ 276.054742][T16766] netlink: 'syz.2.5451': attribute type 3 has an invalid length. [ 276.062674][T16766] netlink: 64054 bytes leftover after parsing attributes in process `syz.2.5451'. [ 276.073037][ T36] audit: type=1400 audit(2000000032.059:8508): avc: denied { map } for pid=16765 comm="syz.2.5451" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 276.259390][T16786] netlink: 'syz.1.5459': attribute type 21 has an invalid length. [ 276.267223][T16786] netlink: 388 bytes leftover after parsing attributes in process `syz.1.5459'. [ 276.276912][T16786] netlink: 'syz.1.5459': attribute type 21 has an invalid length. [ 276.284764][T16786] netlink: 388 bytes leftover after parsing attributes in process `syz.1.5459'. [ 276.306181][T16792] binder: Bad value for 'max' [ 276.348499][ T36] audit: type=1326 audit(2000000032.330:8509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16800 comm="syz.1.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bdb8e9a9 code=0x7fc00000 [ 276.362682][T16799] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 276.372088][T16799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:438 [ 276.494174][T16816] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 276.669050][ T36] audit: type=1326 audit(2000000032.640:8510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16824 comm="syz.1.5470" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2bdb8e9a9 code=0x0 [ 276.901229][T16838] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 277.679208][ T36] audit: type=1326 audit(2000000033.660:8511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16854 comm="syz.1.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bdb8e9a9 code=0x7fc00000 [ 277.737413][ T36] audit: type=1400 audit(2000000033.710:8512): avc: denied { bind } for pid=16863 comm="syz.1.5483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 277.899485][T16876] /dev/loop0: Can't lookup blockdev [ 278.031227][ T36] audit: type=1400 audit(2000000034.010:8513): avc: denied { create } for pid=16895 comm="syz.2.5495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 278.082220][T16906] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 278.082244][T16906] rust_binder: Read failure Err(EFAULT) in pid:467 [ 278.091978][T16906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 278.098540][T16906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:467 [ 278.121620][T16910] can0: slcan on ttyS3. [ 278.123878][ T36] audit: type=1400 audit(2000000034.100:8514): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 278.189842][T16910] can0 (unregistered): slcan off ttyS3. [ 278.201354][T16912] can0: slcan on ttyS3. [ 278.209400][ T36] audit: type=1400 audit(2000000034.181:8515): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.241519][ T36] audit: type=1400 audit(2000000034.181:8516): avc: denied { read } for pid=148 comm="dhcpcd" name="n16" dev="tmpfs" ino=4146 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.263421][ T36] audit: type=1400 audit(2000000034.181:8517): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=4146 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.321197][T16909] can0 (unregistered): slcan off ttyS3. [ 278.523982][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.531754][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.539398][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.546786][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.554219][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.561636][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.569073][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.576450][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.583857][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.588226][ T31] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 278.591252][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.606153][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.613652][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.621042][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.628547][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.635918][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.643303][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.650693][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.658066][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.665464][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.672861][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.680250][ T968] hid-generic 0000:007F:0001.0009: unknown main item tag 0x6 [ 278.687634][ T968] hid-generic 0000:007F:0001.0009: item fetching failed at offset 42/43 [ 278.696179][ T968] hid-generic 0000:007F:0001.0009: probe with driver hid-generic failed with error -22 [ 278.713514][T16963] sock: sock_set_timeout: `syz.6.5508' (pid 16963) tries to set negative timeout [ 278.748258][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 278.754470][ T31] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 278.762856][ T31] usb 3-1: config 0 has no interface number 0 [ 278.769082][ T31] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 278.780276][ T31] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 278.793661][ T31] usb 3-1: config 0 interface 255 has no altsetting 0 [ 278.801849][ T31] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 278.810919][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.818919][ T31] usb 3-1: Product: syz [ 278.823075][ T31] usb 3-1: Manufacturer: syz [ 278.827658][ T31] usb 3-1: SerialNumber: syz [ 278.832936][ T31] usb 3-1: config 0 descriptor?? [ 278.968022][ T65] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 279.046211][T16929] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 279.097982][ T65] usb 7-1: device descriptor read/64, error -71 [ 279.337868][ T65] usb 7-1: device descriptor read/64, error -71 [ 279.569625][T16979] netlink: 'syz.2.5513': attribute type 1 has an invalid length. [ 279.577752][ T65] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 279.717656][ T65] usb 7-1: device descriptor read/64, error -71 [ 279.957543][ T65] usb 7-1: device descriptor read/64, error -71 [ 280.087481][ T65] usb usb7-port1: attempt power cycle [ 280.142259][T17032] overlayfs: failed to clone upperpath [ 280.427304][ T65] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 280.448937][ T65] usb 7-1: device descriptor read/8, error -71 [ 280.469095][T17055] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5539'. [ 280.478139][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5539'. [ 280.578225][ T65] usb 7-1: device descriptor read/8, error -71 [ 280.817119][ T65] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 280.838099][ T65] usb 7-1: device descriptor read/8, error -71 [ 280.968033][ T65] usb 7-1: device descriptor read/8, error -71 [ 281.077043][ T65] usb usb7-port1: unable to enumerate USB device [ 282.002854][T17087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 282.002902][T17087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:157 [ 282.012760][T17088] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 282.057536][T17095] /dev/sr0: Can't lookup blockdev [ 282.148425][ T968] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 282.149262][T17103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.166788][T17103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.326808][ T968] usb 7-1: Using ep0 maxpacket: 32 [ 282.337729][ T968] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.358065][ T968] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.377572][ T968] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 282.386842][ T968] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.398418][ T968] usb 7-1: config 0 descriptor?? [ 282.404823][ T968] hub 7-1:0.0: USB hub found [ 282.622386][ T968] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 282.637023][ T968] usbhid 7-1:0.0: can't add hid device: -71 [ 282.643952][ T968] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 282.667673][ T968] usb 7-1: USB disconnect, device number 19 [ 282.681631][T17110] rust_binder: Failed copying into alloc: EFAULT [ 282.681652][T17110] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 282.688685][T17110] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 282.698162][T17110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:131 [ 282.743953][T17117] overlay: ./file0 is not a directory [ 282.795711][T17123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.805442][T17123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.095971][ T968] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 283.255888][ T968] usb 7-1: Using ep0 maxpacket: 8 [ 283.262828][ T968] usb 7-1: unable to get BOS descriptor or descriptor too short [ 283.271464][ T968] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 283.279208][ T968] usb 7-1: can't read configurations, error -71 [ 283.422664][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 283.422682][ T36] audit: type=1400 audit(2000000039.403:8531): avc: granted { setsecparam } for pid=17142 comm="syz.4.5566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 283.507231][T17151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.515906][T17150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.516347][T17151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.526832][T17150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.606132][ T36] audit: type=1400 audit(2000000039.593:8532): avc: denied { setcheckreqprot } for pid=17153 comm="syz.4.5569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 283.746589][T17163] fuse: Invalid rootmode [ 283.751158][T17163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5574'. [ 283.835241][T17171] rust_binder: 192: no such ref 2 [ 283.844586][T17171] rust_binder: Write failure EFAULT in pid:192 [ 283.886352][ T31] hub 3-1:0.255: bad descriptor, ignoring hub [ 283.898659][ T31] hub 3-1:0.255: probe with driver hub failed with error -5 [ 284.093693][T17176] netlink: 'syz.2.5579': attribute type 20 has an invalid length. [ 284.110725][ T36] audit: type=1400 audit(2000000040.093:8533): avc: denied { create } for pid=17175 comm="syz.2.5579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 284.227569][T17192] 9pnet_fd: Insufficient options for proto=fd [ 284.515299][ T968] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 284.526088][T17210] fuse: Bad value for 'rootmode' [ 284.675186][ T968] usb 7-1: device descriptor read/64, error -71 [ 284.766886][ T36] audit: type=1400 audit(2000000040.754:8534): avc: denied { map } for pid=17227 comm="syz.2.5595" path="socket:[60465]" dev="sockfs" ino=60465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 284.792903][ T36] audit: type=1400 audit(2000000040.754:8535): avc: denied { read accept } for pid=17227 comm="syz.2.5595" path="socket:[60465]" dev="sockfs" ino=60465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 284.916298][T17236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.926083][T17236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.945062][ T968] usb 7-1: device descriptor read/64, error -71 [ 285.194911][ T968] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 285.325106][ T968] usb 7-1: device descriptor read/64, error -71 [ 285.473230][ T36] audit: type=1400 audit(2000000041.454:8536): avc: denied { unmount } for pid=13653 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 285.574735][ T968] usb 7-1: device descriptor read/64, error -71 [ 285.650433][ T36] audit: type=1326 audit(2000000041.634:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17250 comm="syz.2.5602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcbcd8e9a9 code=0x0 [ 285.684764][ T968] usb usb7-port1: attempt power cycle [ 285.701209][T17252] binder: Bad value for 'max' [ 286.054550][ T968] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 286.075520][ T968] usb 7-1: device descriptor read/8, error -71 [ 286.214395][ T968] usb 7-1: device descriptor read/8, error -71 [ 286.464295][ T968] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 286.505026][ T968] usb 7-1: device descriptor read/8, error -71 [ 286.645236][ T968] usb 7-1: device descriptor read/8, error -71 [ 286.754255][ T968] usb usb7-port1: unable to enumerate USB device [ 287.065302][T17267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.074656][T17267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.468754][T17283] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5613'. [ 287.478820][T17283] rust_binder: 17282 RLIMIT_NICE not set [ 287.553367][ T36] audit: type=1400 audit(2000000043.535:8538): avc: denied { create } for pid=17284 comm="syz.6.5614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 287.649781][ T36] audit: type=1400 audit(2000000043.635:8539): avc: denied { append } for pid=17289 comm="syz.2.5616" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 287.769920][ T36] audit: type=1400 audit(2000000043.755:8540): avc: denied { lock } for pid=17300 comm="syz.2.5619" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 287.770463][T17301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.804968][T17301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.819628][T17301] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5619'. [ 288.642924][T17350] netlink: 'syz.2.5635': attribute type 4 has an invalid length. [ 288.663796][T17357] netlink: 'syz.2.5635': attribute type 4 has an invalid length. [ 288.943218][T17392] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 289.017471][T17393] overlayfs: failed to clone upperpath [ 289.310114][T17397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 289.323876][T17400] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 289.374707][T17404] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 289.385780][T17404] overlayfs: maximum fs stacking depth exceeded [ 289.627458][T17420] tipc: Started in network mode [ 289.632434][T17420] tipc: Node identity 7f000001, cluster identity 4711 [ 289.639666][T17420] tipc: Enabled bearer , priority 10 [ 289.704840][T17422] overlayfs: failed to clone upperpath [ 289.730192][ T36] audit: type=1326 audit(2000000045.716:8541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17425 comm="syz.2.5660" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fdcbcd8e9a9 code=0x0 [ 289.810756][T17437] bridge_slave_0: left allmulticast mode [ 289.816631][T17437] bridge_slave_0: left promiscuous mode [ 289.822298][T17437] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.044642][T17452] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 290.115012][T17461] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 290.129476][T17463] fuseblk: Bad value for 'fd' [ 290.298290][T17472] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.5677'. [ 290.398741][T17476] fuse: Bad value for 'fd' [ 290.625241][T17491] fuseblk: Bad value for 'fd' [ 290.630056][T17491] fuseblk: Bad value for 'fd' [ 290.633990][T17490] futex_wake_op: syz.6.5685 tries to shift op by 144; fix this program [ 290.642505][T17491] fuseblk: Bad value for 'fd' [ 290.652279][T17491] fuseblk: Bad value for 'fd' [ 290.672293][T17491] fuseblk: Bad value for 'fd' [ 290.677145][T17491] fuseblk: Bad value for 'fd' [ 290.687402][T17491] fuseblk: Bad value for 'fd' [ 290.697499][T17491] fuseblk: Bad value for 'fd' [ 290.709018][T17491] fuseblk: Bad value for 'fd' [ 290.717775][T17491] fuseblk: Bad value for 'fd' [ 290.727972][T17491] fuseblk: Bad value for 'fd' [ 290.738172][T17491] fuseblk: Bad value for 'fd' [ 290.748359][T17491] fuseblk: Bad value for 'fd' [ 290.758553][T17491] fuseblk: Bad value for 'fd' [ 290.768678][T17491] fuseblk: Bad value for 'fd' [ 290.772135][ T31] tipc: Node number set to 2130706433 [ 290.778780][T17491] fuseblk: Bad value for 'fd' [ 290.788866][T17491] fuseblk: Bad value for 'fd' [ 290.798961][T17491] fuseblk: Bad value for 'fd' [ 290.808850][T17491] fuseblk: Bad value for 'fd' [ 290.822284][T17491] fuseblk: Bad value for 'fd' [ 290.827121][T17491] fuseblk: Bad value for 'fd' [ 290.842412][T17491] fuseblk: Bad value for 'fd' [ 290.847240][T17491] fuseblk: Bad value for 'fd' [ 290.862315][T17491] fuseblk: Bad value for 'fd' [ 290.867143][T17491] fuseblk: Bad value for 'fd' [ 290.882156][T17491] fuseblk: Bad value for 'fd' [ 290.886957][T17491] fuseblk: Bad value for 'fd' [ 290.894001][T17491] fuseblk: Bad value for 'fd' [ 290.898994][T17491] fuseblk: Bad value for 'fd' [ 290.904705][T17491] fuseblk: Bad value for 'fd' [ 290.909759][T17491] fuseblk: Bad value for 'fd' [ 290.915058][T17491] fuseblk: Bad value for 'fd' [ 290.919856][T17491] fuseblk: Bad value for 'fd' [ 291.051472][ T9] rust_binder: 17517: removing orphan mapping 0:1048 [ 291.192860][ T36] audit: type=1400 audit(2000000047.187:8542): avc: denied { append } for pid=17536 comm="syz.4.5699" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 291.193617][T17537] rust_binder: Write failure EINVAL in pid:258 [ 291.286708][ T36] audit: type=1400 audit(2000000047.277:8543): avc: denied { attach_queue } for pid=17538 comm="syz.4.5700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 291.542424][ T36] audit: type=1400 audit(2000000047.527:8544): avc: denied { execute } for pid=17555 comm="syz.4.5706" name="file0" dev="ramfs" ino=61856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 291.590377][ T36] audit: type=1400 audit(2000000047.567:8545): avc: denied { execute_no_trans } for pid=17555 comm="syz.4.5706" path="/file0" dev="ramfs" ino=61856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 292.240385][T17591] 9pnet_fd: Insufficient options for proto=fd [ 292.352804][T17598] >: renamed from veth0_vlan (while UP) [ 292.371554][T17598] incfs_lookup_dentry err:-13 [ 292.386417][T17598] incfs: Can't find or create .index dir in ./bus [ 292.402162][T17598] incfs: mount failed -13 [ 292.683133][T17628] netlink: 'syz.6.5733': attribute type 15 has an invalid length. [ 292.721387][T17635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17635 comm=syz.6.5735 [ 293.436193][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5738'. [ 294.222421][T17681] 9pnet_fd: Insufficient options for proto=fd [ 294.805318][T17720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 294.805353][T17720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 294.815280][T17721] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 294.918314][T17739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5769'. [ 294.944877][T17739] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.962965][T17739] bridge_slave_1 (unregistering): left allmulticast mode [ 294.971798][T17739] bridge_slave_1 (unregistering): left promiscuous mode [ 294.978755][T17739] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.020311][T17755] fuse: Bad value for 'fd' [ 295.067478][T17761] netlink: 'syz.2.5777': attribute type 1 has an invalid length. [ 295.103523][T17765] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5779'. [ 296.066768][T17801] /dev/loop0: Can't lookup blockdev [ 296.072439][ T36] audit: type=1400 audit(2000000052.069:8546): avc: denied { nlmsg_write } for pid=17800 comm="syz.2.5793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 296.125639][T17807] tmpfs: Bad value for 'nr_blocks' [ 296.132096][T17807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5796'. [ 296.804589][ T36] audit: type=1400 audit(2000000052.790:8547): avc: denied { mount } for pid=17837 comm="syz.6.5808" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 296.871918][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5812'. [ 296.882044][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5812'. [ 296.890983][T17847] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 296.906900][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5812'. [ 296.916092][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5812'. [ 296.925374][T17848] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 297.498363][ T36] audit: type=1400 audit(2000000053.480:8548): avc: denied { map } for pid=17856 comm="syz.2.5816" path="pipe:[62403]" dev="pipefs" ino=62403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 298.082427][T17866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5820'. [ 298.122976][T17869] rust_binder: Error while translating object. [ 298.123016][T17869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 298.129379][T17869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:311 [ 298.146888][T17871] fuse: Unknown parameter 'b' [ 298.397046][T17894] IPv6: NLM_F_CREATE should be specified when creating new route [ 298.540305][T17898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.605414][T17902] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.612786][T17904] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 298.659666][T17908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.659874][T17908] rust_binder: 343: no such ref 3 [ 298.835806][T17918] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.843872][T17918] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.851094][T17918] bridge_slave_0: entered allmulticast mode [ 298.857432][T17918] bridge_slave_0: entered promiscuous mode [ 298.864138][T17918] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.871765][T17918] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.879122][T17918] bridge_slave_1: entered allmulticast mode [ 298.885703][T17918] bridge_slave_1: entered promiscuous mode [ 298.946101][T17918] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.953172][T17918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.960496][T17918] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.967529][T17918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.991172][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.999159][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.008590][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.015648][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.031010][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.038158][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.069176][T17918] veth0_vlan: entered promiscuous mode [ 299.084082][T17918] veth1_macvtap: entered promiscuous mode [ 299.243567][ T36] audit: type=1400 audit(2000000055.231:8549): avc: denied { connect } for pid=17959 comm="syz.7.5850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.281805][T17960] rust_binder: 9: no such ref 0 [ 299.287205][T17960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:9 [ 299.407510][T17970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 299.416609][T17970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:19 [ 299.505858][T17978] netlink: 'syz.7.5856': attribute type 4 has an invalid length. [ 299.522774][T17979] netlink: 'syz.7.5856': attribute type 4 has an invalid length. [ 299.531154][T17979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 299.531369][T17978] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 299.537880][T17978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:27 [ 299.617372][T17993] fuseblk: Bad value for 'user_id' [ 299.631694][T17993] fuseblk: Bad value for 'user_id' [ 300.567817][T18061] fuseblk: Bad value for 'user_id' [ 300.573070][T18061] fuseblk: Bad value for 'user_id' [ 300.663419][ T36] audit: type=1400 audit(2000000056.652:8550): avc: denied { relabelfrom } for pid=18068 comm="syz.2.5887" name="NETLINK" dev="sockfs" ino=63124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 300.688006][ T36] audit: type=1400 audit(2000000056.652:8551): avc: denied { relabelto } for pid=18068 comm="syz.2.5887" name="NETLINK" dev="sockfs" ino=63124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 300.999584][ T36] audit: type=1400 audit(2000000056.992:8552): avc: denied { create } for pid=18082 comm="syz.6.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 301.049118][T18091] tipc: New replicast peer: 255.255.255.255 [ 301.055235][T18091] tipc: Enabled bearer , priority 10 [ 301.279850][ T36] audit: type=1400 audit(2000000057.272:8553): avc: denied { setopt } for pid=18103 comm="syz.2.5899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 301.509393][ T36] audit: type=1400 audit(2000000057.502:8554): avc: denied { audit_write } for pid=18253 comm="syz.2.5908" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 301.530906][ T36] audit: type=1107 audit(2000000057.502:8555): pid=18253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='vP}Uu.qm^]V\jBZ)Z*IrB3X/\Pr2g)cv1\#TRE' [ 302.028561][T18393] binder: Unknown parameter 'fscontext?}' [ 302.046480][T18396] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.097788][T18399] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.104605][T18399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 302.116786][T18401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 302.126477][T18399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:373 [ 302.146376][T18401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:373 [ 302.209194][ T36] audit: type=1400 audit(2000000058.203:8556): avc: denied { getattr } for pid=18403 comm="syz.4.5923" path="socket:[63996]" dev="sockfs" ino=63996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 302.773283][T18472] overlayfs: failed to clone lowerpath [ 303.163129][T18488] overlayfs: failed to clone upperpath [ 304.029838][ T36] audit: type=1400 audit(2000000060.023:8557): avc: denied { create } for pid=18516 comm="syz.6.5964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 304.937523][T18548] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5975'. [ 304.974152][T18562] binder: Unknown parameter 'fsuuid' [ 305.445428][ T36] audit: type=1400 audit(2000000000.470:8558): avc: denied { map } for pid=18594 comm="syz.6.5992" path="socket:[64264]" dev="sockfs" ino=64264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 305.683391][T18604] cgroup: noprefix used incorrectly [ 305.690215][ T36] audit: type=1400 audit(2000000000.710:8559): avc: denied { write } for pid=18603 comm="syz.6.5994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 305.710967][ T36] audit: type=1400 audit(2000000000.710:8560): avc: denied { read } for pid=18603 comm="syz.6.5994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 305.738004][T18606] devpts: called with bogus options [ 305.771025][T18610] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5996'. [ 305.779996][T18610] bridge_slave_1: left allmulticast mode [ 305.786260][T18610] bridge_slave_1: left promiscuous mode [ 305.791990][T18610] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.799616][T18610] bridge_slave_0: left allmulticast mode [ 305.805324][T18610] bridge_slave_0: left promiscuous mode [ 305.810982][T18610] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.991574][T18638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:395 [ 306.008124][ T36] audit: type=1326 audit(2000000001.030:8561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.4.6006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x0 [ 306.050567][T18649] SELinux: security_context_str_to_sid () failed with errno=-22 [ 306.091203][T18658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18658 comm=syz.2.6012 [ 306.150408][T18672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6016'. [ 306.905831][T18715] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.000464][T18732] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6033'. [ 307.001141][ T36] audit: type=1400 audit(2000000002.020:8562): avc: denied { write } for pid=18731 comm="syz.7.6033" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 307.052402][T18736] /dev/loop0: Can't lookup blockdev [ 307.126034][ T36] audit: type=1400 audit(2000000002.150:8563): avc: denied { unmount } for pid=17918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 307.249593][T18766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.249621][T18766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.768068][T18819] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 308.130996][T18834] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6062'. [ 308.266803][T18837] netlink: 124 bytes leftover after parsing attributes in process `syz.6.6063'. [ 309.092700][T18845] netlink: 200 bytes leftover after parsing attributes in process `syz.6.6067'. [ 309.101805][T18845] tc_dump_action: action bad kind [ 309.109260][T18845] incfs: Options parsing error. -22 [ 309.114481][T18845] incfs: mount failed -22 [ 310.144640][T18871] netlink: 'syz.4.6074': attribute type 4 has an invalid length. [ 310.154287][T18871] netlink: 'syz.4.6074': attribute type 4 has an invalid length. [ 310.230246][T18874] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.230992][T18874] rust_binder: Error in use_page_slow: ESRCH [ 310.237501][T18874] rust_binder: use_range failure ESRCH [ 310.243559][T18874] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 310.249064][T18874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 310.257108][T18874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:433 [ 310.381987][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6080'. [ 310.860209][T18916] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 311.076952][T18933] binder: Unknown parameter 'fscontext?}' [ 311.127355][ T36] audit: type=1400 audit(2000000006.150:8564): avc: denied { append } for pid=18939 comm="syz.4.6098" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.489505][T18975] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6110'. [ 311.499009][T18975] /dev/loop0: Can't lookup blockdev [ 311.573330][T18980] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.635787][T18990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.718736][T18998] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.726071][ T36] audit: type=1107 audit(2000000006.750:8565): pid=18996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 311.726447][T18998] rust_binder: 479: no such ref 0 [ 311.750927][T18998] rust_binder: 479: no such ref 2 [ 311.755973][T18998] rust_binder: 479: no such ref 2 [ 311.760996][T18998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:479 [ 312.000921][T19029] fuse: Bad value for 'fd' [ 312.043080][T19033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6131'. [ 312.081620][T19041] x_tables: duplicate underflow at hook 1 [ 312.104078][ T36] audit: type=1326 audit(2000000007.120:8566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19044 comm="syz.6.6135" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ccb78e9a9 code=0x0 [ 312.138085][T19056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6139'. [ 312.189253][ T36] audit: type=1400 audit(2000000007.210:8567): avc: denied { create } for pid=19065 comm="syz.2.6143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 312.308577][ T36] audit: type=1326 audit(2000000007.330:8568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19090 comm="syz.2.6151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcbcd8e9a9 code=0x0 [ 312.575544][ T36] audit: type=1400 audit(2000000007.600:8569): avc: denied { getopt } for pid=19107 comm="syz.4.6158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 312.576055][T19108] rust_binder: 486: no such ref 3 [ 312.600638][T19108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:486 [ 312.619350][ T36] audit: type=1400 audit(2000000007.640:8570): avc: denied { lock } for pid=19109 comm="syz.4.6159" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 312.663423][ T36] audit: type=1400 audit(2000000007.680:8571): avc: denied { accept } for pid=19113 comm="syz.4.6160" path="socket:[66346]" dev="sockfs" ino=66346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 312.733707][T19121] SELinux: security_context_str_to_sid () failed with errno=-22 [ 314.015012][T19175] overlayfs: failed to clone upperpath [ 314.482591][T19183] fuse: Unknown parameter 'g200000000000000000000' [ 314.490546][T19183] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 314.588500][T19199] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 314.598487][ T36] audit: type=1400 audit(2000000009.620:8572): avc: denied { relabelto } for pid=19198 comm="syz.2.6191" name="439" dev="tmpfs" ino=2393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 314.625453][ T36] audit: type=1400 audit(2000000009.620:8573): avc: denied { associate } for pid=19198 comm="syz.2.6191" name="439" dev="tmpfs" ino=2393 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 314.653094][ T36] audit: type=1400 audit(2000000009.650:8574): avc: denied { write } for pid=13653 comm="syz-executor" name="439" dev="tmpfs" ino=2393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 314.678427][T19202] overlayfs: failed to clone upperpath [ 314.686400][ T36] audit: type=1400 audit(2000000009.650:8575): avc: denied { remove_name } for pid=13653 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 314.700835][T19204] xt_NFQUEUE: number of total queues is 0 [ 314.732471][T19206] netlink: 'syz.2.6194': attribute type 28 has an invalid length. [ 315.229810][T19208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19208 comm=syz.6.6195 [ 315.264615][T19213] 9pnet_fd: Insufficient options for proto=fd [ 315.464109][T19247] veth0_vlan: entered allmulticast mode [ 316.106142][T19289] overlay: Unknown parameter 'permit_directio' [ 316.627845][T19326] binder: Unknown parameter '00000000000000000000003' [ 316.665387][T19332] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 316.702512][T19342] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.702799][T19342] rust_binder: Error while translating object. [ 316.709473][T19342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 316.716744][T19342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 317.313484][T19364] netlink: 'syz.2.6246': attribute type 46 has an invalid length. [ 319.417488][T19423] veth1_to_team: mtu less than device minimum [ 319.453679][T19434] netlink: 'syz.2.6272': attribute type 1 has an invalid length. [ 319.461699][T19435] netlink: 'syz.2.6272': attribute type 1 has an invalid length. [ 319.529752][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 319.529769][ T36] audit: type=1400 audit(2000000014.550:8578): avc: denied { map } for pid=19450 comm="syz.2.6278" path="socket:[67821]" dev="sockfs" ino=67821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 320.090513][ T36] audit: type=1326 audit(2000000015.110:8579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19482 comm="syz.6.6288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ccb78e9a9 code=0x0 [ 320.267583][T19509] overlayfs: failed to clone upperpath [ 320.836429][T19558] futex_wake_op: syz.2.6313 tries to shift op by -1; fix this program [ 320.855927][T19561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52188 sclass=netlink_route_socket pid=19561 comm=syz.2.6314 [ 320.870234][T19561] netlink: 840 bytes leftover after parsing attributes in process `syz.2.6314'. [ 321.181688][T19591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19591 comm=syz.7.6323 [ 321.204513][T19594] incfs: Options parsing error. -22 [ 321.209785][T19594] incfs: mount failed -22 [ 321.342924][T19603] 9pnet_fd: Insufficient options for proto=fd [ 322.662385][T19672] netlink: 'syz.6.6352': attribute type 27 has an invalid length. [ 322.670772][T19672] /dev/loop0: Can't lookup blockdev [ 322.769005][T19676] tipc: Started in network mode [ 322.773915][T19676] tipc: Node identity aaaaaaaaaa3b, cluster identity 4711 [ 322.781588][T19676] tipc: Enabled bearer , priority 27 [ 322.811799][T19682] binder: Bad value for 'stats' [ 322.911320][T19701] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.911595][T19701] rust_binder: Error in use_page_slow: ESRCH [ 322.918433][T19701] rust_binder: use_range failure ESRCH [ 322.924594][T19701] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 322.930139][T19701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 322.939499][T19701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:551 [ 323.199019][T19710] fuse: Bad value for 'fd' [ 323.213230][T19710] overlayfs: failed to clone lowerpath [ 323.688226][ T36] audit: type=1400 audit(2000000018.711:8580): avc: denied { link } for pid=19733 comm="syz.2.6377" name="file1" dev="tmpfs" ino=2775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 323.714280][ T36] audit: type=1400 audit(2000000018.731:8581): avc: denied { create } for pid=19733 comm="syz.2.6377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 323.822649][T19756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 323.860853][T19763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6387'. [ 323.895033][ T65] tipc: Node number set to 9546410 [ 323.911728][T19764] binder: Unknown parameter 'fscontext?}0' [ 324.129140][T19781] devpts: called with bogus options [ 324.475119][T19803] netlink: 'syz.7.6404': attribute type 27 has an invalid length. [ 324.506414][T19803] veth0_vlan: left allmulticast mode [ 324.573864][ T36] audit: type=1400 audit(2000000019.591:8582): avc: denied { bind } for pid=19820 comm="syz.7.6409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.124048][T19852] /dev/loop0: Can't lookup blockdev [ 325.433988][T19863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=19863 comm=syz.7.6423 [ 325.446609][T19863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=19863 comm=syz.7.6423 [ 325.459498][T19863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=19863 comm=syz.7.6423 [ 325.472139][T19863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=19863 comm=syz.7.6423 [ 325.484934][T19863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=19863 comm=syz.7.6423 [ 325.497584][T19863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=19863 comm=syz.7.6423 [ 325.510210][T19863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=19863 comm=syz.7.6423 [ 325.522821][T19863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=19863 comm=syz.7.6423 [ 325.588221][T19878] 9pnet_fd: Insufficient options for proto=fd [ 325.603313][T19883] netlink: 328 bytes leftover after parsing attributes in process `syz.6.6428'. [ 326.316004][T19915] tipc: Enabling of bearer rejected, already enabled [ 326.408339][T19931] overlayfs: failed to clone upperpath [ 326.416228][T19932] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 326.423181][T19932] overlayfs: failed to set xattr on upper [ 326.431731][T19932] overlayfs: ...falling back to redirect_dir=nofollow. [ 326.438728][T19932] overlayfs: ...falling back to uuid=null. [ 326.457004][ T36] audit: type=1400 audit(2000000021.481:8583): avc: denied { relabelto } for pid=19935 comm="syz.7.6445" name="file0" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:zero_device_t:s0" [ 326.484381][ T36] audit: type=1400 audit(2000000021.481:8584): avc: denied { associate } for pid=19935 comm="syz.7.6445" name="file0" dev="tmpfs" ino=705 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:zero_device_t:s0" [ 326.562458][T19941] tipc: Bearer : already 2 bearers with priority 10 [ 326.569967][T19941] tipc: Bearer : trying with adjusted priority [ 326.577412][T19941] tipc: Enabled bearer , priority 9 [ 327.010717][T19965] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 327.028002][T19967] netlink: 'syz.2.6459': attribute type 4 has an invalid length. [ 327.073793][T19981] tipc: Started in network mode [ 327.080269][T19981] tipc: Node identity , cluster identity 4711 [ 327.086502][T19981] tipc: Failed to obtain node identity [ 327.091963][T19981] tipc: Enabling of bearer rejected, failed to enable media [ 327.240333][T20019] netlink: 'syz.4.6469': attribute type 11 has an invalid length. [ 328.081123][T20072] overlay: Unknown parameter 'fowner>00000000000000000000' [ 328.117078][T20081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 328.117401][T20081] rust_binder: Failed to allocate buffer. len:4128, is_oneway:true [ 328.123893][T20081] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 328.131822][T20081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:580 [ 328.185008][T20092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 328.194754][T20092] rust_binder: pid 20092 performed invalid decrement on ref [ 364.975890][T20120] overlayfs: failed to clone upperpath [ 364.984850][T20121] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 364.985626][T20121] rust_binder: Error in use_page_slow: ESRCH [ 364.992117][T20121] rust_binder: use_range failure ESRCH [ 364.998453][T20121] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 365.003983][T20121] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 365.012261][T20121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:595 [ 365.235789][T20142] veth0_vlan: left promiscuous mode [ 365.250623][T20142] veth0_vlan: entered allmulticast mode [ 365.256810][T20142] veth0_vlan: entered promiscuous mode [ 365.862172][T20156] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6528'. [ 366.351203][T20187] netlink: 'syz.7.6538': attribute type 25 has an invalid length. [ 366.381150][T20191] overlay: filesystem on ./bus not supported as upperdir [ 366.397778][T20193] fuse: Bad value for 'fd' [ 366.426121][T20200] /dev/loop0: Can't lookup blockdev [ 366.539105][ T36] audit: type=1400 audit(2000000061.561:8585): avc: denied { accept } for pid=20207 comm="syz.7.6547" path="socket:[70006]" dev="sockfs" ino=70006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 366.657231][T20223] fuse: Bad value for 'fd' [ 367.461220][T20243] overlayfs: failed to clone upperpath [ 367.568028][T20249] fuse: Bad value for 'fd' [ 367.662788][T20264] overlayfs: failed to clone lowerpath [ 367.708847][T20270] fuse: Bad value for 'fd' [ 367.782566][T20288] incfs: Options parsing error. -22 [ 367.787823][T20288] incfs: mount failed -22 [ 368.325510][T20304] selinux_netlink_send: 46 callbacks suppressed [ 368.325524][T20304] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=20304 comm=syz.6.6582 [ 368.842296][T20315] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.850162][T20316] rust_binder: Error in use_page_slow: ESRCH [ 368.850228][T20315] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 368.856308][T20316] rust_binder: use_range failure ESRCH [ 368.864641][T20315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 368.870650][T20315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:603 [ 368.880214][T20316] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 368.900108][T20316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 368.908457][T20316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:603 [ 368.919378][T20319] netlink: 'syz.6.6588': attribute type 7 has an invalid length. [ 368.936206][T20319] netlink: 'syz.6.6588': attribute type 5 has an invalid length. [ 368.943948][T20319] netlink: 17 bytes leftover after parsing attributes in process `syz.6.6588'. [ 368.968101][T20329] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6592'. [ 369.130297][T20359] netlink: 'syz.7.6601': attribute type 12 has an invalid length. [ 369.168769][ T36] audit: type=1400 audit(2000000064.191:8586): avc: denied { accept } for pid=20371 comm="syz.7.6604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 369.259713][T20381] 9pnet_fd: Insufficient options for proto=fd [ 369.267054][T20381] /dev/loop0: Can't lookup blockdev [ 369.671415][T20394] binder: Bad value for 'max' [ 369.678784][T20385] overlayfs: failed to resolve './file0': -2 [ 369.691505][T20396] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 369.691854][T20396] rust_binder: 616: no such ref 3 [ 369.711996][ T36] audit: type=1326 audit(2000000064.731:8587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.4.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x7ffc0000 [ 369.735795][ T36] audit: type=1326 audit(2000000064.731:8588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.4.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x7ffc0000 [ 369.759297][ T36] audit: type=1326 audit(2000000064.731:8589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.4.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ffbc298e9a9 code=0x7ffc0000 [ 369.782712][ T36] audit: type=1326 audit(2000000064.731:8590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.4.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x7ffc0000 [ 369.806268][ T36] audit: type=1326 audit(2000000064.731:8591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.4.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ffbc298e9a9 code=0x7ffc0000 [ 369.829691][ T36] audit: type=1326 audit(2000000064.731:8592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.4.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x7ffc0000 [ 369.853637][ T36] audit: type=1326 audit(2000000064.731:8593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.4.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ffbc298e9a9 code=0x7ffc0000 [ 369.877015][ T36] audit: type=1326 audit(2000000064.731:8594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.4.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x7ffc0000 [ 369.920062][T20404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 370.081969][T20412] overlayfs: failed to clone upperpath [ 370.217595][T20418] overlayfs: failed to clone upperpath [ 370.708597][T20436] overlayfs: failed to clone lowerpath [ 370.727622][T20438] overlayfs: failed to clone upperpath [ 370.878573][T20461] binder: Bad value for 'max' [ 371.142204][T20484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 371.143345][T20484] rust_binder: pid 20484 performed invalid decrement on ref [ 371.162286][T20487] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6643'. [ 371.472952][T20521] bridge0: port 3(veth1_macvtap) entered blocking state [ 371.480156][T20521] bridge0: port 3(veth1_macvtap) entered disabled state [ 371.487271][T20521] veth1_macvtap: entered allmulticast mode [ 371.493412][T20521] veth1_macvtap: left allmulticast mode [ 371.501280][T20521] tipc: Started in network mode [ 371.506229][T20521] tipc: Node identity 3c, cluster identity 4711 [ 371.512543][T20521] tipc: Node number set to 60 [ 371.518174][T20521] syz.4.6655: attempt to access beyond end of device [ 371.518174][T20521] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 371.531316][T20521] EXT4-fs (loop4): unable to read superblock [ 371.598994][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 371.599010][ T36] audit: type=1400 audit(2000000066.621:8625): avc: denied { ioctl } for pid=20527 comm="syz.4.6658" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xaece scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 371.634452][T20530] binder: Bad value for 'max' [ 371.648430][T20530] overlayfs: unescaped trailing colons in lowerdir mount option. [ 372.032463][T20566] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6669'. [ 372.042019][T20566] overlayfs: failed to clone lowerpath [ 372.597250][T20583] /dev/loop0: Can't lookup blockdev [ 372.602843][T20583] /dev/loop0: Can't lookup blockdev [ 372.608945][ T1436] vlan0: left allmulticast mode [ 372.613818][ T1436] vlan0: left promiscuous mode [ 372.621833][T20583] /dev/loop0: Can't lookup blockdev [ 372.629265][T20583] /dev/loop0: Can't lookup blockdev [ 372.634828][ T1436] bridge0: port 2(vlan0) entered disabled state [ 372.642016][T20583] /dev/loop0: Can't lookup blockdev [ 372.647887][ T1436] bridge_slave_0: left allmulticast mode [ 372.654106][T20583] /dev/loop0: Can't lookup blockdev [ 372.659538][ T1436] bridge_slave_0: left promiscuous mode [ 372.660579][T20583] /dev/loop0: Can't lookup blockdev [ 372.665382][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.670555][T20583] /dev/loop0: Can't lookup blockdev [ 372.683816][T20583] /dev/loop0: Can't lookup blockdev [ 372.689257][T20583] /dev/loop0: Can't lookup blockdev [ 372.694642][T20583] /dev/loop0: Can't lookup blockdev [ 372.700078][T20583] /dev/loop0: Can't lookup blockdev [ 372.705459][T20583] /dev/loop0: Can't lookup blockdev [ 372.710853][T20583] /dev/loop0: Can't lookup blockdev [ 372.716509][T20583] /dev/loop0: Can't lookup blockdev [ 372.723166][T20583] /dev/loop0: Can't lookup blockdev [ 372.728584][T20583] /dev/loop0: Can't lookup blockdev [ 372.733925][T20583] /dev/loop0: Can't lookup blockdev [ 372.739370][T20583] /dev/loop0: Can't lookup blockdev [ 372.744686][T20583] /dev/loop0: Can't lookup blockdev [ 372.750061][T20583] /dev/loop0: Can't lookup blockdev [ 372.755436][T20583] /dev/loop0: Can't lookup blockdev [ 372.760738][T20583] /dev/loop0: Can't lookup blockdev [ 372.766110][T20583] /dev/loop0: Can't lookup blockdev [ 372.771422][T20583] /dev/loop0: Can't lookup blockdev [ 372.776788][T20583] /dev/loop0: Can't lookup blockdev [ 372.782087][T20583] /dev/loop0: Can't lookup blockdev [ 372.787497][T20583] /dev/loop0: Can't lookup blockdev [ 372.792819][T20583] /dev/loop0: Can't lookup blockdev [ 372.798279][T20583] /dev/loop0: Can't lookup blockdev [ 372.803692][T20583] /dev/loop0: Can't lookup blockdev [ 372.809071][T20583] /dev/loop0: Can't lookup blockdev [ 372.814373][T20583] /dev/loop0: Can't lookup blockdev [ 372.836548][ T1436] veth0_vlan: left promiscuous mode [ 373.867151][T20605] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6682'. [ 374.112804][T20617] tipc: Enabling of bearer rejected, media not registered [ 374.709257][ T36] audit: type=1400 audit(2000000069.731:8626): avc: denied { create } for pid=20649 comm="syz.7.6699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 375.304440][T20662] netlink: 'syz.7.6702': attribute type 12 has an invalid length. [ 375.508999][T20669] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6705'. [ 375.518119][T20669] gretap0: entered promiscuous mode [ 375.523753][T20669] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6705'. [ 375.532720][T20669] 0{X: renamed from gretap0 [ 375.539465][T20669] 0{X: left promiscuous mode [ 375.544490][T20669] 0{X: entered allmulticast mode [ 375.550184][T20669] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 375.585176][T20681] fuse: Bad value for 'fd' [ 375.589992][T20682] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 375.590490][T20682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6707'. [ 375.655921][T20682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:700 [ 375.738661][T20702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20702 comm=syz.6.6717 [ 375.761448][T20702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20702 comm=syz.6.6717 [ 375.904181][T20730] /dev/loop0: Can't lookup blockdev [ 375.971000][ T36] audit: type=1400 audit(2000000070.991:8627): avc: denied { search } for pid=20743 comm="syz.6.6731" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 376.006325][ T36] audit: type=1400 audit(2000000071.011:8628): avc: denied { read } for pid=20743 comm="syz.6.6731" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 376.028211][ T36] audit: type=1400 audit(2000000071.011:8629): avc: denied { open } for pid=20743 comm="syz.6.6731" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 376.053732][T20749] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6733'. [ 376.113134][T20758] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6738'. [ 376.122328][T20758] netlink: 43 bytes leftover after parsing attributes in process `syz.6.6738'. [ 376.141008][T20758] netlink: 'syz.6.6738': attribute type 6 has an invalid length. [ 376.149019][T20758] netlink: 'syz.6.6738': attribute type 5 has an invalid length. [ 376.157024][T20758] netlink: 43 bytes leftover after parsing attributes in process `syz.6.6738'. [ 376.167873][T20758] 9pnet_fd: Insufficient options for proto=fd [ 376.194709][T20764] overlayfs: failed to resolve './file1': -2 [ 376.242331][T20774] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6744'. [ 376.267897][T20782] netlink: 'syz.7.6746': attribute type 16 has an invalid length. [ 376.750891][ T36] audit: type=1326 audit(2000000071.755:8630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20799 comm="syz.4.6753" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffbc298e9a9 code=0x0 [ 376.791776][T20808] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6754'. [ 376.838878][ T36] audit: type=1326 audit(2000000071.844:8631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20812 comm="syz.4.6756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x0 [ 376.862360][T20815] netlink: 165 bytes leftover after parsing attributes in process `syz.7.6757'. [ 376.976815][T20835] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6764'. [ 377.600651][T20886] netlink: 'syz.7.6778': attribute type 27 has an invalid length. [ 377.695410][T20896] fuse: Bad value for 'fd' [ 377.739362][T20906] bpf: Bad value for 'gid' [ 377.838801][T20917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=20917 comm=syz.7.6790 [ 378.046753][T20926] binder: Unknown parameter 'fscontext?}' [ 378.093497][T20930] netlink: 57 bytes leftover after parsing attributes in process `syz.4.6794'. [ 378.432184][T20967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:738 [ 378.464968][ T36] audit: type=1400 audit(2000000073.462:8632): avc: denied { lock } for pid=20970 comm="syz.4.6809" path="socket:[73067]" dev="sockfs" ino=73067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 378.767921][T20975] 9pnet_fd: Insufficient options for proto=fd [ 378.888455][T20993] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6818'. [ 378.910823][ T36] audit: type=1326 audit(2000000073.908:8633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20992 comm="syz.7.6818" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b1f78e9a9 code=0x0 [ 379.002354][T21001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=21001 comm=syz.6.6821 [ 379.379716][T21012] /dev/loop0: Can't lookup blockdev [ 379.668897][T21048] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6837'. [ 379.782719][T21065] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 379.886993][T21075] overlayfs: failed to clone upperpath [ 379.985206][T21083] overlayfs: failed to clone upperpath [ 380.020792][T21087] incfs: Options parsing error. -22 [ 380.026139][T21087] incfs: mount failed -22 [ 380.150625][T21111] overlayfs: failed to clone upperpath [ 380.289905][T21117] fuse: Unknown parameter 'fd0x0000000000000004' [ 380.394647][T21125] netlink: 'syz.6.6863': attribute type 12 has an invalid length. [ 380.542449][ T36] audit: type=1400 audit(2000000075.526:8634): avc: denied { execute } for pid=21144 comm="syz.2.6872" path="pipe:[73256]" dev="pipefs" ino=73256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 380.645051][T21157] IPv4: Oversized IP packet from 172.20.20.170 [ 380.651454][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 380.657710][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 380.671109][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6874'. [ 380.680640][T21157] IPv4: Oversized IP packet from 172.20.20.170 [ 380.687046][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 380.693295][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 380.721282][T21157] IPv4: Oversized IP packet from 172.20.20.170 [ 380.727646][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 380.733908][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 380.747626][T21157] IPv4: Oversized IP packet from 172.20.20.170 [ 380.861987][ T305] usb 3-1: USB disconnect, device number 38 [ 380.937215][T21162] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.952012][T21162] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.982043][T21162] bridge_slave_0: entered allmulticast mode [ 381.002747][T21162] bridge_slave_0: entered promiscuous mode [ 381.017670][T21162] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.034042][T21162] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.044304][T21162] bridge_slave_1: entered allmulticast mode [ 381.050641][T21162] bridge_slave_1: entered promiscuous mode [ 381.129554][T21162] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.136633][T21162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.143940][T21162] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.150984][T21162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.177277][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.185272][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.203838][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.210899][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.220009][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.227080][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.263015][T21162] veth0_vlan: entered promiscuous mode [ 381.285995][T21162] veth1_macvtap: entered promiscuous mode [ 381.330842][T21199] rust_binder: Error in use_page_slow: ESRCH [ 381.330861][T21199] rust_binder: use_range failure ESRCH [ 381.337492][T21199] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 381.343001][T21199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 381.350915][T21199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 381.494280][T21204] SELinux: security_context_str_to_sid () failed with errno=-22 [ 381.513086][ T36] audit: type=1326 audit(2000000076.489:8635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x50000 [ 381.531674][T21201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.536499][ T36] audit: type=1326 audit(2000000076.489:8636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x50000 [ 381.546563][T21201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.579508][ T36] audit: type=1326 audit(2000000076.489:8637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x50000 [ 381.602925][ T36] audit: type=1326 audit(2000000076.489:8638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x50000 [ 381.626468][ T36] audit: type=1326 audit(2000000076.489:8639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x50000 [ 381.657691][ T306] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 381.705025][T21209] binder: Unknown parameter 'context' [ 381.798673][ T36] kauditd_printk_skb: 1450 callbacks suppressed [ 381.798689][ T36] audit: type=1326 audit(2000000076.767:10090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x50000 [ 381.833635][ T36] audit: type=1326 audit(2000000076.797:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x50000 [ 381.857987][ T36] audit: type=1326 audit(2000000076.797:10092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x50000 [ 381.885044][ T36] audit: type=1326 audit(2000000076.797:10093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x50000 [ 381.908837][ T36] audit: type=1326 audit(2000000076.797:10094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x50000 [ 381.932996][ T36] audit: type=1326 audit(2000000076.797:10095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x50000 [ 381.959290][ T36] audit: type=1326 audit(2000000076.797:10096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x50000 [ 382.012618][ T36] audit: type=1326 audit(2000000076.807:10097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x50000 [ 382.060274][ T36] audit: type=1326 audit(2000000076.807:10098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x50000 [ 382.084564][ T36] audit: type=1326 audit(2000000076.807:10099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc298e9a9 code=0x50000 [ 382.242253][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6904'. [ 382.266584][T21244] erspan0: default FDB implementation only supports local addresses [ 382.913687][T21281] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6914'. [ 383.525138][T21291] 9pnet_fd: Insufficient options for proto=fd [ 383.608044][T21298] /dev/loop0: Can't lookup blockdev [ 383.656911][T21302] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6921'. [ 384.447613][T21310] binder: Bad value for 'stats' [ 384.523923][T21316] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6927'. [ 384.588406][T21334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6932'. [ 386.626758][T21476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:783 [ 386.697832][T21484] rust_binder: 21483 RLIMIT_NICE not set [ 386.707308][T21483] rust_binder: validate_parent_fixup: new_min_offset=540, sg_entry.length=0 [ 386.712996][T21483] rust_binder: Error while translating object. [ 386.721709][T21483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 386.727909][T21483] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 386.737336][T21483] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:790 [ 386.754021][ T65] rust_binder: 21482: removing orphan mapping 0:4120 [ 386.762764][T21486] cannot load conntrack support for proto=3 [ 386.851679][T21494] 9pnet: Could not find request transport: f= [ 386.985116][T21519] netlink: 'syz.7.6992': attribute type 4 has an invalid length. [ 387.198483][T21544] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 387.208873][T21544] overlayfs: missing 'lowerdir' [ 387.215396][T21544] 9pnet_fd: p9_fd_create_unix (21544): problem connecting socket: ./file0: -111 [ 387.224818][T21546] incfs: Options parsing error. -22 [ 387.230176][T21546] incfs: mount failed -22 [ 387.234849][T21544] fuseblk: Invalid rootmode [ 387.240165][T21546] 9pnet_fd: Insufficient options for proto=fd [ 387.283103][ T36] kauditd_printk_skb: 18501 callbacks suppressed [ 387.283119][ T36] audit: type=1326 audit(2000000082.219:28601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21497 comm="syz.6.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccb78e9a9 code=0x7fc00000 [ 387.313267][ T36] audit: type=1326 audit(2000000082.219:28602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21497 comm="syz.6.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccb78e9a9 code=0x7fc00000 [ 387.337439][ T36] audit: type=1326 audit(2000000082.219:28603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21497 comm="syz.6.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccb78e9a9 code=0x7fc00000 [ 387.363678][ T36] audit: type=1326 audit(2000000082.219:28604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21497 comm="syz.6.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccb78e9a9 code=0x7fc00000 [ 387.387397][ T36] audit: type=1326 audit(2000000082.219:28605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21497 comm="syz.6.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccb78e9a9 code=0x7fc00000 [ 387.411369][ T36] audit: type=1326 audit(2000000082.219:28606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21497 comm="syz.6.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccb78e9a9 code=0x7fc00000 [ 387.435031][ T36] audit: type=1326 audit(2000000082.219:28607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21497 comm="syz.6.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccb78e9a9 code=0x7fc00000 [ 387.458667][ T36] audit: type=1326 audit(2000000082.219:28608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21497 comm="syz.6.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccb78e9a9 code=0x7fc00000 [ 387.482635][ T36] audit: type=1326 audit(2000000082.219:28609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21497 comm="syz.6.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccb78e9a9 code=0x7fc00000 [ 387.506255][ T36] audit: type=1326 audit(2000000082.219:28610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21497 comm="syz.6.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccb78e9a9 code=0x7fc00000 [ 388.634774][T21599] /dev/loop0: Can't lookup blockdev [ 389.237062][T21629] 9pnet_fd: Insufficient options for proto=fd [ 389.271898][T21635] netlink: 'syz.7.7030': attribute type 1 has an invalid length. [ 389.286506][T21640] /dev/loop0: Can't lookup blockdev [ 390.026807][T21683] overlayfs: unescaped trailing colons in lowerdir mount option. [ 390.036166][T21683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7049'. [ 390.211178][T21689] /dev/loop0: Can't lookup blockdev [ 390.211386][T21690] /dev/loop0: Can't lookup blockdev [ 390.242682][T21697] veth0_vlan: entered allmulticast mode [ 390.446024][T21721] incfs: Options parsing error. -22 [ 390.451334][T21721] incfs: mount failed -22 [ 390.561824][T21734] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 390.969500][T21753] tipc: Enabling of bearer rejected, failed to enable media [ 390.978497][T21753] 9pnet_fd: p9_fd_create_tcp (21753): problem connecting socket to 127.0.0.1 [ 391.116423][T21778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7083'. [ 391.198400][T21802] TCP: TCP_TX_DELAY enabled [ 391.362397][T21824] incfs: Options parsing error. -22 [ 391.367721][T21824] incfs: mount failed -22 [ 391.372263][T21824] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7100'. [ 391.382267][T21824] incfs: Options parsing error. -22 [ 391.387593][T21824] incfs: mount failed -22 [ 392.138286][T21861] 9pnet_fd: Insufficient options for proto=fd [ 392.265486][T21870] 9p: Unknown uid 00000000004294967295 [ 393.062794][ T36] kauditd_printk_skb: 4360 callbacks suppressed [ 393.062810][ T36] audit: type=1326 audit(2000000087.953:32971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21895 comm="syz.7.7123" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b1f78e9a9 code=0x0 [ 393.201304][ T323] bridge_slave_1: left allmulticast mode [ 393.207052][ T323] bridge_slave_1: left promiscuous mode [ 393.212725][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.221809][ T323] bridge_slave_0: left allmulticast mode [ 393.230854][ T323] bridge_slave_0: left promiscuous mode [ 393.238082][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.386259][ T323] tipc: Disabling bearer [ 393.391559][ T323] tipc: Left network mode [ 393.576504][T21918] devpts: called with bogus options [ 393.606243][T21922] tipc: Enabling of bearer rejected, failed to enable media [ 393.696274][T21938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=21938 comm=syz.2.7137 [ 393.709125][T21938] netlink: 'syz.2.7137': attribute type 3 has an invalid length. [ 393.716915][T21938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7137'. [ 395.073267][T22044] overlayfs: failed to clone upperpath [ 395.889724][T22090] net_ratelimit: 86 callbacks suppressed [ 395.889745][T22090] sock: sock_set_timeout: `syz.4.7188' (pid 22090) tries to set negative timeout [ 396.066096][T22141] /dev/loop0: Can't lookup blockdev [ 396.098310][T22147] netlink: 4204 bytes leftover after parsing attributes in process `syz.2.7208'. [ 396.145568][T22167] fuse: Unknown parameter 'max_' [ 396.172017][ T36] audit: type=1326 audit(8000131427.073:32972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22169 comm="syz.6.7216" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ccb78e9a9 code=0x0 [ 396.652780][T22186] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7222'. [ 396.690551][T22191] cgroup: Invalid name [ 396.783205][ T36] audit: type=1400 audit(8000131427.683:32973): avc: denied { accept } for pid=22205 comm="syz.7.7228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 397.784182][ T36] audit: type=1400 audit(8000131428.683:32974): avc: denied { name_bind } for pid=22271 comm="syz.4.7252" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 397.828638][T22278] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7254'. [ 397.837953][T22278] netlink: 'syz.4.7254': attribute type 27 has an invalid length. [ 398.056376][T22286] TCP: out of memory -- consider tuning tcp_mem [ 398.063082][T22286] ------------[ cut here ]------------ [ 398.068600][T22286] WARNING: CPU: 1 PID: 22286 at net/ipv4/af_inet.c:157 inet_sock_destruct+0x681/0x790 [ 398.078174][T22286] Modules linked in: [ 398.082150][T22286] CPU: 1 UID: 0 PID: 22286 Comm: syz.6.7257 Not tainted 6.12.30-syzkaller-g15178d63ac5e #0 2e49b5e8bba3abd4e44f2eeb6ccfddb4f386a3cf [ 398.095726][T22286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.105862][T22286] RIP: 0010:inet_sock_destruct+0x681/0x790 [ 398.111837][T22286] Code: a3 e8 43 c3 c8 fc 0f 0b e9 53 fe ff ff e8 37 c3 c8 fc 0f 0b e9 92 fe ff ff e8 2b c3 c8 fc 0f 0b e9 c4 fe ff ff e8 1f c3 c8 fc <0f> 0b e9 f6 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 65 fc ff [ 398.131509][T22286] RSP: 0018:ffffc90003167be8 EFLAGS: 00010293 [ 398.137589][T22286] RAX: ffffffff84bce801 RBX: 0000000080006000 RCX: ffff88811cb33900 [ 398.145598][T22286] RDX: 0000000000000000 RSI: 0000000080006000 RDI: 0000000000000000 [ 398.153610][T22286] RBP: ffffc90003167c30 R08: ffff88811963337f R09: 1ffff110232c666f [ 398.161644][T22286] R10: dffffc0000000000 R11: ffffed10232c6670 R12: ffff888119633200 [ 398.169647][T22286] R13: ffff888119633200 R14: ffff888119633364 R15: 1ffff110232c6642 [ 398.177642][T22286] FS: 0000555586868500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 398.186601][T22286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.193229][T22286] CR2: 00002000000020c0 CR3: 000000013d324000 CR4: 00000000003526b0 [ 398.201243][T22286] DR0: 0000000060000014 DR1: 0000000000000000 DR2: 0000000000000000 [ 398.209252][T22286] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 398.217240][T22286] Call Trace: [ 398.220533][T22286] [ 398.223495][T22286] ? __cfi_inet_sock_destruct+0x10/0x10 [ 398.229065][T22286] __sk_destruct+0x68/0x6a0 [ 398.233579][T22286] ? __sk_free+0x304/0x410 [ 398.237990][T22286] __sk_free+0x313/0x410 [ 398.242282][T22286] sk_free+0x58/0xb0 [ 398.246198][T22286] tcp_close+0xc4/0x120 [ 398.250374][T22286] inet_release+0x1b4/0x2c0 [ 398.254890][T22286] sock_close+0xda/0x280 [ 398.259149][T22286] ? __cfi_sock_close+0x10/0x10 [ 398.264047][T22286] __fput+0x1fb/0xa00 [ 398.268024][T22286] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 398.273599][T22286] ____fput+0x20/0x30 [ 398.277607][T22286] task_work_run+0x1e3/0x250 [ 398.282222][T22286] ? __cfi_task_work_run+0x10/0x10 [ 398.287352][T22286] ? __kasan_check_write+0x18/0x20 [ 398.292498][T22286] resume_user_mode_work+0x36/0x50 [ 398.297623][T22286] syscall_exit_to_user_mode+0x64/0xb0 [ 398.303113][T22286] do_syscall_64+0x64/0xf0 [ 398.307546][T22286] ? clear_bhb_loop+0x50/0xa0 [ 398.312265][T22286] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 398.318175][T22286] RIP: 0033:0x7f6ccb78e9a9 [ 398.323242][T22286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.343041][T22286] RSP: 002b:00007ffe460f4aa8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 398.351500][T22286] RAX: 0000000000000000 RBX: 000000000006126e RCX: 00007f6ccb78e9a9 [ 398.359512][T22286] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 398.367507][T22286] RBP: 00007f6ccb9b7ba0 R08: 0000000000000001 R09: 0000001e460f4d9f [ 398.375518][T22286] R10: 00007f6ccb600000 R11: 0000000000000246 R12: 00007f6ccb9b5fac [ 398.383576][T22286] R13: 00007f6ccb9b5fa0 R14: ffffffffffffffff R15: 00007ffe460f4bc0 [ 398.391592][T22286] [ 398.394625][T22286] ---[ end trace 0000000000000000 ]---