last executing test programs: 10.174031939s ago: executing program 0 (id=26): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, 0x0}, 0x10) r1 = socket(0x10, 0x803, 0x0) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0}, 0x142) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x8, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000200)={0x7, 0x4000, 0x0, r4}) close_range(r0, 0xffffffffffffffff, 0x0) 10.101163925s ago: executing program 0 (id=28): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x55c, 0x20100) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x60a00, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000037c0), 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904"], 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r2, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6, 0x20010, r1, 0xe6685000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) madvise(&(0x7f000099a000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f00006e6000/0x1000)=nil, 0x1000, 0xd) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000128000/0x2000)=nil, 0x2000) 9.991393424s ago: executing program 3 (id=30): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000140)="66b9800000c066b9800000c00f326635010000000f306635002000000f300f790a66b9840a00000f32f264609a86171200660fc77228ea533cca0036670f009ae60000009a6e56a2000fc26b010766efbafc0c0f08", 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000000c0)) chown(&(0x7f00000022c0)='./cgroup\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') openat2(r5, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x10400, 0x0, 0x8}, 0x18) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000140)="66b9800000c066b9800000c00f326635010000000f306635002000000f300f790a66b9840a00000f32f264609a86171200660fc77228ea533cca0036670f009ae60000009a6e56a2000fc26b010766efbafc0c0f08", 0x55}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000000c0)) (async) chown(&(0x7f00000022c0)='./cgroup\x00', 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r4, 0x0, 0x18) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') (async) openat2(r5, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x10400, 0x0, 0x8}, 0x18) (async) 9.809407288s ago: executing program 3 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_procfs(r3, &(0x7f00000001c0)='attr/exec\x00') r5 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) 7.076317189s ago: executing program 0 (id=39): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.792062642s ago: executing program 3 (id=40): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fb8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0xe6683000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000009480)={'bridge_slave_1\x00', &(0x7f0000009440)=@ethtool_cmd={0x48, 0xeaa, 0x0, 0x34, 0xd2, 0x85, 0x3, 0x6, 0xed, 0x1, 0xfff, 0x3, 0x4, 0x67, 0x7, 0x4, [0x10000, 0x6]}}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r9, &(0x7f00000004c0)={0x18}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x2, 0x7, 0xf, 0x43089d59}, {0x4c30, 0x3, 0x9, 0xc}, {0x7fff, 0x4, 0xf9, 0x7fffffff}, {0x6, 0xd5, 0x6, 0x6}, {0x400, 0x15, 0x4, 0x2}, {0x4, 0x3, 0x2, 0x4}]}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_INIT(r9, &(0x7f0000000200)={0x50, 0x0, r10, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 6.595534508s ago: executing program 3 (id=41): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='rootcontext', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x40040b0) rt_sigaction(0x40000022, &(0x7f0000000080)={0x0, 0x80000000, 0x0, {[0x400fff]}}, 0x0, 0x8, &(0x7f0000000180)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 6.595095268s ago: executing program 3 (id=42): socket$inet6(0xa, 0xa, 0x2000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) fadvise64(r0, 0x0, 0x9, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000001140)='./file0/../file0\x00', 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0xa53, 0x7f, 0xc00, 0x10, 0x5180000}) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6002a, &(0x7f0000000380)=ANY=[@ANYBLOB="736d61636b66736861743d677265300057de171f0cd53dd818b784a6e6c88917047775bc66626d00e44f00953014b607f26520095a35b586f38ea070dbefe77b467db987a8cd8ccba29cf0dcdb727e597260b9330019f27e4c725039c75ee51d3b6d5dd16628da2d0c111d515d82f1637b83bd624c01a6e5a2199eb54d5cf00044d62c1eccecc4363692a9f5a4d74c46f25ef588c550ea9572167b1bb02c00"]) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x181341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0x2f, 0x0, &(0x7f0000000a80)={0x11, 0x88b5, r2, 0x1, 0xf7, 0x6, @multicast}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130303030302c757365725f69643d11469de64a1ddf3021ab380ad8d1efb72489d0f935fbc3f166b5", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x2b, 0x3, 0xc0c719fe1b69ce50, 0x0, 0xfffd, 0x0, 0x1}}, 0x50) socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 6.570915439s ago: executing program 3 (id=43): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1101, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000240)="78b67111b9cb1ce68f7c9c0c91c21b1bdc49fb7cb1c1064fe9e7c6b32df4dc922ef5f848935af290de7861e00c8987c7ab7cd8d6ed2c4a1b55415a536354a8309bd64ff9dd31f4f8c98d2054c6c3040f777be86633e8ffbc833ae9eebfab1b21c86317e4892f74a0cac9e9eb7e3e8b57436fe7c231562f4db7bfb28c7c6b136571ca286cf3e6a98ac0ac0e2421103aec1e1c41b7294be5628ec12658b515fb1f83b45584e6741f435c2474264bf3d1427fe503707b1911a8f44cb14bc8b0fb27a4", 0xc1}], 0x1) 6.541423502s ago: executing program 32 (id=43): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1101, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000240)="78b67111b9cb1ce68f7c9c0c91c21b1bdc49fb7cb1c1064fe9e7c6b32df4dc922ef5f848935af290de7861e00c8987c7ab7cd8d6ed2c4a1b55415a536354a8309bd64ff9dd31f4f8c98d2054c6c3040f777be86633e8ffbc833ae9eebfab1b21c86317e4892f74a0cac9e9eb7e3e8b57436fe7c231562f4db7bfb28c7c6b136571ca286cf3e6a98ac0ac0e2421103aec1e1c41b7294be5628ec12658b515fb1f83b45584e6741f435c2474264bf3d1427fe503707b1911a8f44cb14bc8b0fb27a4", 0xc1}], 0x1) 5.275796864s ago: executing program 0 (id=56): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80000c, 0x10012, r0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000a700000007022dc0500000000000056efb20ecf60ae23f3d5d53243f1ad682e0e3fe607525d4dfee22c110998bbf391f0dfbdc281bfd4fee031c468e99d4a2350dd55474a5f50824fcbc7000000000000003dd9ce5bd1bec0e671b9407c5c28203c6252050205dfee030ca794823845d5ec320f00"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) 4.861367008s ago: executing program 4 (id=71): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[]) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000c40)={0x1, 0x1, {0x0, 0x28, 0x10, 0x1e, 0x8, 0xa, 0x5, 0xbd, 0x1}}) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x14, 0x30, 0xf, 0x15, 0xa, 0x100, 0x0, 0xa1, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setlease(r2, 0x400, 0x1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}]}, 0x68}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@mcast2}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xd0, 0x1, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0x9c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1408}, @CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4c080}, 0x4801) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000300)) 4.83073808s ago: executing program 4 (id=72): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x8, 0x7, 0x7ff, 0x1, {{0x5, 0x4, 0x2, 0x2a, 0x14, 0x64, 0x0, 0x40, 0x2f, 0x0, @private=0xa010100, @loopback}}}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x130, 0x240, 0x0, 0x240, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = inotify_init() poll(&(0x7f0000000000)=[{r3, 0xd408}], 0x1, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x4b, 0xe, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x1, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8a, 0x8, 0x101, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0xa, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x5, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x10000, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}}) r5 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x5, 0x200000) close_range(r5, 0xffffffffffffffff, 0x0) 3.707934131s ago: executing program 0 (id=80): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f00000001c0)=0x100) flock(r0, 0x8) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904"], 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@handle={0x73682a85, 0x10a, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.21819072s ago: executing program 2 (id=85): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1080201}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x140, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x43d0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "59ed42aa04761b73b7aaf1a49fc93c371afe420531133a3b"}}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9ba7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4cf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x44000}, 0x49bdf25fd978ff50) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000300)={0x8, 'veth0_virt_wifi\x00', {'macvlan0\x00'}, 0xa}) r3 = openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.freeze\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002400), r3) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x24, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000001) ioctl$BLKPG(r0, 0x1269, &(0x7f00000025c0)={0x2, 0x0, 0x98, &(0x7f0000002500)={0x8, 0x800, 0x2}}) setsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000002600)="6df955e0ddf46fbcba4e0fd015501f7fc3a363b1b62d45af84ecc1d8e0d4ee70dc225f5379c862b6b53c45adfcb498deb5d20855dd71475217f30a6a8b27dfe167b23e0de4de964a0776c786f95b89edd73a5e9984d0ef368a324e237f0ca1e8bad1faccd05e7b6b284b6245ef98bc7f75e212918f6a21cb51b15d2e4cb100605fa40438fda66ac1d06d7afa19d62b91fadc3efdba15d827428bee02137fbd63a865f7d7098ff667484ae3f1a2464e9379717cdb233a687c9094d9000a550f5b81ad3d1d9fbd1776a28330ea34268a7c4248550cb1204f1d0f40998b8ace33aeaaa360e78938c4aca304", 0xea) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002800)={'sit0\x00', &(0x7f0000002700)={'tunl0\x00', 0x0, 0x0, 0x8, 0x2, 0x824, {{0x29, 0x4, 0x0, 0x20, 0xa4, 0x65, 0x0, 0x5, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0x52, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @generic={0x88, 0x3, "e5"}, @timestamp_addr={0x44, 0x44, 0x4a, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x5}, {@loopback, 0x6}, {@loopback, 0x1}, {@empty, 0x87}, {@broadcast, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x8}, {@local, 0x40e}]}, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0xb, 0xc8, [@broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0x51, 0x1, 0x6, [{@private=0xa010101, 0x4}, {@loopback, 0xe3}, {@multicast2, 0xfffffffa}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x5de27837}]}, @end]}}}}}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002840)={{{@in6=@empty, @in6=@mcast2, 0x4e21, 0x0, 0x4e23, 0x2, 0x2, 0x80, 0x80, 0x3c, r7, r4}, {0x100000000, 0xfffffffffffff62f, 0xa, 0x2, 0x64eb, 0x23d7, 0x427, 0x486}, {0x4, 0x73, 0xd5ce, 0x80000000}, 0x9, 0x6e6bb8, 0x0, 0x0, 0x2, 0x2}, {{@in=@broadcast, 0x4d3, 0x33}, 0x2, @in6=@remote, 0x3505, 0x3, 0x0, 0x0, 0xf, 0x1, 0x8000}}, 0xe8) sendto$inet(r1, &(0x7f0000002940)="45a837f3eecad3068697e04ca6df5002318515c045991ffe05e4785b749de8e7fe315dc7475a6ae42c35a124a5b84d8d29b8cfc315b22bfb76f9ba77e2930e67e41bc34cf2bc2fdec1a49a95338d31c105a33745326222a6d01dee1618d6da1cdca7cb9bbe", 0x65, 0x400c040, &(0x7f00000029c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x6c, r6, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa58b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc040}, 0xc0800) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000002b80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x37a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x38, 0x2, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0xac7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x2, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x6, 0x4, 0x9}}]}}}]}}]}}, &(0x7f0000002d80)={0xa, &(0x7f0000002bc0)={0xa, 0x6, 0x110, 0x6, 0xf2, 0x2, 0x8, 0xc}, 0x5, &(0x7f0000002c00)={0x5, 0xf, 0x5}, 0x3, [{0xb1, &(0x7f0000002c40)=@string={0xb1, 0x3, "445cb223a5084aa214bb7e2b9128e706715163310a6bdd40c05fc22f8420844d7054658ec128f80993ebb53ba3eb9c05adf6eb37ecac9474267e748ea71c0b415e2caa86a09ce335e29bfff6bd7810271fa97ada158ebf2d7c6424398233808208e30819465fcb76e8fd71508b40009cdae394b4bf51b760a3ed42e618dee566b50bd6a639b14d9c03d2c4e4a8f0bc09cf794e38742cd599da529026ce3bf4e75a8a119728ec6612fb8ce13f939f64"}}, {0x4, &(0x7f0000002d00)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000002d40)=@lang_id={0x4, 0x3, 0x2801}}]}) bind$inet(r1, &(0x7f0000002dc0)={0x2, 0x4e24, @loopback}, 0x10) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000002e00)=""/4096, &(0x7f0000003e00)=0x1000) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000003e40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf7, 0xf0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x4, 0xb7, 0x1, {0x22, 0x19f}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x6, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x2, 0x5, 0x70}}]}}}]}}]}}, &(0x7f0000004000)={0xa, &(0x7f0000003e80)={0xa, 0x6, 0x200, 0x7, 0x9, 0x6, 0x8, 0x1}, 0xa2, &(0x7f0000003ec0)={0x5, 0xf, 0xa2, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x1, 0x1100, 0x4, [0x0, 0xff000f, 0x0, 0x0, 0xff3f00, 0xff000f]}, @generic={0x5a, 0x10, 0x4, "a4826c25d473cb5d3c7747543a2b56cabf6293899e466f8a3bad99f9dbf3e1eb8da22ac720235a7eaaa2e3f0f820805ff96ec410d935fd51ddc4d2e7d4347959e2a8643584b78f3a9e2d58288b5f66d256a9da76f55451"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x2, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0xfa, 0x1, 0x95ad}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0xe, 0xa}]}, 0x1, [{0x76, &(0x7f0000003f80)=@string={0x76, 0x3, "b23ed8af4584d2cdab1b09f583b006532f9068e728d128f720cf9721971cc95f80ad4b24bec8ed2c8af8bd02e3f0b76dbfe704fb626f443e799784ddb5e16dec2685f518d99278160bfc195183482ea32aec5f7676b717c20e3c6264213722d0712ded9b30c76ec3f24df034e30d511dbf9c4183"}}]}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000004100)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x1c, r6, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x24000050) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000004140)) r9 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000004780)={0xffffffffffffffff}, 0x800) r11 = syz_open_dev$mouse(&(0x7f00000047c0), 0x9, 0x600) r12 = syz_open_dev$evdev(&(0x7f0000004800), 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000048c0)={&(0x7f0000004180)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004740)=[{&(0x7f00000041c0)={0x2a8, 0x30, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0xf7, 0x11d, 0x0, 0x1, [@generic="ca9107d43713e402a1d724066627906b8d1b5bf0645ce70f18bbdd46472455f6b628", @nested={0x4, 0x111}, @nested={0x4, 0xb8}, @generic="0d6b668216e45877167d201884d07be8202fe3e3615ab71380fcb920d00d88bd2381111a78d566118466103dae3d38ab8367762d5e2c2fab2b83eec04c17ac61595d4a01431c24a07ba84b037666ddd4d97d5cf705336d55b6fda43e7c54cbf6c15257413c6417bc4ca355938da769804b99f4fbc1d13b02d687b5f9e6a484285b1886655ec066b72e8dbe83642c8fb5501287744c97f96c95fde5c6d0c353bfe620d9750e5fe485168605b74b783c985ddc3a8a1f0650c8a62a6605b83d0b609f757b1ed26b0d0a50"]}, @nested={0x19e, 0x142, 0x0, 0x1, [@nested={0x4, 0xbe}, @generic="f40a36e82fb5bb33c4d2c9f72ba9264690f223bb679982cdf2df1911b8e09ca38425f7be25d17cbc51b52db9c5d825691adfbbe65bbc99af08ad31ca8e1c0969567291a6f913c51ce95f0b0652243b07d74bdcc89c281e7a11a15ae3a638e75a4cc85f739a46e00e3d4c906eab7b0a9e849fb0e4007a02ae2609dd9a0663ec0efb67289db507f169c0869ec349f5c9c8bebd21d1497b0ee994a864d1a38456cc3084779c5ca877db889b4ee9be1534ffc28e750956104375aa63e24a27f45f63f7aa1220da59b932cc17e107", @generic="3bece7b5f4d5df33c7e91b7157d4e57c8b83b0805514b1a4b78aee49710e7ee9a00d3c00cebc688feaaedfddd3da2336f29903ed4f0700811b48d01f180d9978", @typed={0x8, 0xb9, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x10}, @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0xc, 0x135, 0x0, 0x0, @u64=0x3}, @generic="bacf78b611cea262308361fc084d4603c28a7e2a9b83ddfd0590dbfe9b71e89242ff04645eda9358065afbd42d91eef7fcb62e0519ffd22a0f2a0d7eeac447c60ee82457d5d7fff27daa1fd4646d9e2ecf4187e1872a4c21402c", @nested={0x4, 0xc}]}]}, 0x2a8}, {&(0x7f0000004480)={0x24, 0x24, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@nested={0xc, 0xbd, 0x0, 0x1, [@nested={0x4, 0x78}, @typed={0x4, 0x3}]}, @typed={0x8, 0x21, 0x0, 0x0, @pid=r5}]}, 0x24}, {&(0x7f00000044c0)={0x270, 0x2f, 0x800, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x50, 0x127, 0x0, 0x1, [@typed={0x8, 0x151, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0xd1, 0x0, 0x0, @u32=0x2}, @generic="6f90a3fe2d714593752c28af0a234fdd38267df218ad6976bc171649bb9b3ef60e890125d5e01b2c4885c01f", @typed={0x8, 0x21, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2b}}, @nested={0x4, 0x10a}, @nested={0x4, 0x7e}]}, @typed={0x8, 0x142, 0x0, 0x0, @u32=0x52f9876a}, @nested={0x119, 0x7f, 0x0, 0x1, [@nested={0x4, 0x14e}, @nested={0x4, 0x7c}, @typed={0x8, 0xfb, 0x0, 0x0, @uid=r4}, @generic="20e48a9c07772c739f387ccfc29ed0b4771f5cae57e4bab26779fe257343ee009d5c5010056733be94bfd28fd35626e4943c7b66676d1d8429638449f243f85f52e99419eaa9b96b0f737bbc69c571230ab0dbec1c1d6063655113d564bc6cd12471ac3c8257b58bff125f7e085dd63fbbc921919635b6d67b159f141f01d6ecb1b3716bc278870922536e32af4a8be46f2b61a49cae3e26d5fdc253cc0e7e5d7f77551d10d561ecafd688cf6af406bf54f1e35f800591566f087589c37933ddff417e57216e7419be714b60b3a91cfe833835142cceb82c55d9a7024c23972a33bdde3f972e88daf3", @typed={0x8, 0x134, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x32}}, @nested={0x4, 0x55}, @typed={0x8, 0xa8, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @generic="103ef42bd93bc20114fea386b237146b4aafeb8d54ffdb419b0533f6115e866272d4df0949a9912d9d6ee1cb466a8e2e4f6beafd0a328db2402d28ed2e05ff8ca89a10d6722507f749c95ca8328fda69db6ff33168c7c9d136598f9c3b8d7abe841000cc14e8a65ce2886c5bce0d7b8b4c5b5b7e3e82ea1feaa2ec135a64be8d5c407987fddc3999358119926aa3546f8f968568a170e2aa9a1658c712bdad6b274773703694c5484709f854e8266564fa08bcb8edebec9fab8f9797681f82a4944ab8c4565edeaf1573973aff6bf4ddb1918a82ab5d063b", @typed={0xc, 0x2a, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x89, 0x0, 0x0, @u32=0x74}]}, 0x270}], 0x3, &(0x7f0000004840)=[@rights={{0x28, 0x1, 0x1, [r2, r3, r10, r0, r3, r2]}}, @rights={{0x28, 0x1, 0x1, [r0, r11, r12, r2, r2, 0xffffffffffffffff]}}], 0x50, 0x4000}, 0x4000) write$selinux_load(r0, &(0x7f0000004900)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x1010) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000005a40)={&(0x7f0000005940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005a00)={&(0x7f0000005980)={0x74, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x2}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x401, 0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0xf}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x800000, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x12}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1e}}]}, 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x8050) 2.812114133s ago: executing program 4 (id=88): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x3, 0x40002) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 2.717144751s ago: executing program 4 (id=89): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r2, &(0x7f0000000880)=[{0x0}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRESDEC=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=r6], 0x80}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet(0x2, 0x2, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000340)={&(0x7f0000000140), 0x10, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000000800000000020000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0400002001000000010000a00e010000cea835cf537c017176c670cb2004e463317370e4f942647dcbc8747a95e9274410487e923731f3ed29b403edb1dade74beedd038d30c3cea47ba5b24d07dcb58"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x40000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000540)={@multicast2, @loopback}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0xf5a, 0x2000) mount$9p_fd(0x0, 0x0, 0x0, 0x80080, 0x0) ioctl$EVIOCGMASK(r10, 0x80104592, &(0x7f0000000480)={0x17, 0x0, 0x0}) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r11 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) fcntl$getown(r11, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fsopen(0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 2.645580447s ago: executing program 4 (id=90): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r2 = getuid() setreuid(0x0, r2) (async) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', r6, 0xee01) (async) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x6}, [{0x2, 0x7, r6}], {}, [], {0x10, 0x3}}, 0x2c, 0x0) (async) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8000, &(0x7f00000004c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfshat={'smackfshat', 0x3d, '@'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r4}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@fowner_gt={'fowner>', r6}}, {@measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141b82, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x294) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r8, @ANYRESDEC=r7], 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) (async) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0000fddbdf25170000000c3c4b5b512d37a3740000001c000380088602cc3a126041b58b0003000400000008000100b0ad00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) 1.454614383s ago: executing program 4 (id=114): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r0, 0x0, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') openat$zero(0xffffffffffffff9c, 0x0, 0x111000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syz_tun\x00', 0xa03}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x800, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600030000000800090001000000050002"], 0x44}}, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x7, @private2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000480)="93122ccef65e05f6a8a91eac4f40b8b955768ded7902e7765346acda3ea90a2c6e8343dde9376f634ff4ec4f52e4359bf6bd483c9b8cbf3e64ef443730a51e8c7652811d5dca870bff83b3ea47c9f23b3f6243d167931fd8ce325d46bc8eec4d1097558f0e8071849b78b37c6b5b94c9cf062bb764ed41334f4fb29332ace97c6483c30bdd0dba999fea95e1d68386005cc1b8834e68d4b6e95dca93ad66917aacdfd3a90408f1854e2b22c9f98d5630d360ac09f8020e2352f5c19eec5542fa7764ca47b86ef363ed4c9c3bd0cab1a875b3b9e1444ce84da576f635a2da7227965d7f", 0xe3}, {&(0x7f0000000240)="e5fc84eecf07b2a2f6e0bba0f4f3e702483f70770aae9ac9d99fd8768dd483bc786960aa847f93a063d8edb38faf82ef8b205e7060ad2dad9df26ea64de67d514895f2dbc85cc4dd42589f84cd334586cf57eb482bbc0e78c6daf1e3966a", 0x5e}, {&(0x7f0000000340)="1d4e0b01ca67a074c7ec0b6972a5d450bc72cb13c28358edcd4a79cbe1a2fd527c580f9ad9f79c818df164147c72474603d5de7b2a220c8f5d18273af8d225b772101356a5206bc63f6d5e62e2991acc9f19822cfc3b30e3ffd68a75b53f28e52cabbfc07cf1e770e7457f68d1645d5e9e8b8c8ea793b7ee1d7133", 0x7b}], 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="140000000000000029000001340000000517000000000000720efc1ff5bcd16b1f2ee4c9df005a42f98d48e4c6692f29cef805dc14e0f27a9e0aa6"], 0x18}}], 0x1, 0x4044) 713.858893ms ago: executing program 1 (id=121): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x9}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x6) (rerun: 64) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000640)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000600)="c1130389", 0x4}], 0x2) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) 639.662539ms ago: executing program 0 (id=122): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 32) r1 = gettid() (async, rerun: 32) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x446002, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0xffffffffc52b58cf) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) fadvise64(r0, 0xf, 0x3, 0x1) sendfile(r0, r0, 0x0, 0x7ffff000) 637.641128ms ago: executing program 1 (id=123): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x460c0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 635.908229ms ago: executing program 1 (id=124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003b00)=ANY=[@ANYBLOB="680300001900010000000000000000001d0109004d00128008002100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x368}, 0x1, 0x0, 0x0, 0x4}, 0x804) stat(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000480)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19ad08df21e408d1) read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x2, r2}, {0x2, 0x0, r3}, {0x2, 0x2, r4}, {0x2, 0x1, 0xffffffffffffffff}], {0x4, 0x4}, [{0x8, 0x6, r5}, {0x8, 0x1, r6}], {0x10, 0x4}, {0x20, 0x5}}, 0x54, 0x1) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x206101, 0x0) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r9, 0xffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_usb_connect(0x3, 0x7f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000044d6b2099042510f69c0000000109026d0001022440020904c20004a2f8ab000524060000052400f5ff0d240f01080000000700008036042402050524060000052400ec000d240301030000000600050081052401000309050904100000050f09058203ff03060c0309050a03300607"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) fcntl$addseals(r9, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000100)={r9, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000080)=0x161e87556f3eea5b) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r11, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x2003, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r11, 0x4, &(0x7f0000000600)='/dev/udmabuf\x00', &(0x7f0000003f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628) 204.724923ms ago: executing program 2 (id=125): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x51, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x2}, [], {}, [{}], {0x10, 0x2}}, 0x2c, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x14, r3, 0x20b, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 118.502981ms ago: executing program 2 (id=126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) shutdown(r0, 0x1) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x74886000) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x47bb) unshare(0x28000600) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000931000/0x1000)=nil, 0x1000) 54.928146ms ago: executing program 1 (id=127): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x5c, r2, 0x1, 0x0, 0x4, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x1ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="5debe970ffc6e9f306bd5e58f04133a22697a049aab691dc6b52c308d6a77de5ac39d9a74c78909a0c0fc331b1e258e66f1a18f1df565206adc7abd42ebbca797c702ce15995d596aac074b804323b047bc27831541097c2e00346823724d22267a6c758117454183a9530e3d2b8", 0x6e}, {&(0x7f0000000500)="b809e54c6e119750425626a34796b3b09c5901d79a9f9306090ff5546c5da3d3d4e003940754d855af8e17966683a97fc373114b4987a05ab50988622869fe3bbfbe6b7be3f21b12a3d1706e3ea52c19f66bbe8e8ad87dd9df45fc637c4e5ca4c7aa8af496b9f32f131cc471bc837e4ec3ec4e85044251be064b1d5d7bbaab4de056a47af8909360a781156fd22116df20b84909ec5f7f60960f322b96cc048c0ef9538b0f517abf45772566fcf08153d2b1657a4526182310ddc68201aa085c4a19e772e38c7a2e2f3e98bf15261a3d", 0xd0}], 0x2}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0x3, @private1, 0xe3}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="c906cca319fe076471c142aaa6ec90fcca2659a3a0874dfbf570d0a4561a3a04d580679588240d9ed7bd5ee683fda1dde3feaec2aa73728da6174cbf7de616ba5715842b39887cb868a9436adee9df32d930921522446e283a9111dcc8521a8d15b2068f2f6b87d2", 0x68}], 0x1, &(0x7f0000005180)=[@dstopts={{0x168, 0x29, 0x37, {0x87, 0x29, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xfa, 0xbe, "504d5a4752714dd07d40404823f4d15787ad619881c9c959300be71b5943c5a784de8b7daf63fd915a92c3880a424fe5012e8a9fc0434fa30a06cfdfc486dbcad249544614c7763124db360b74123b7b4e05009781dd7320a66b46e76d1e866461ed4105bad2a33f509ba3283ca0eb1f730bfc9ed529c24ca7c594255afe99ac9d32e6388036e0cf867ce0adbce8080b61b84435598fabf0a684491efa1c51f3652097d6361cd55269a5e2658ae89635708c0b83471269b7e0d817542e8b"}, @generic={0x10, 0x7a, "aea6ae9221d9c4f1d2f6ad7c3818cbad71ac4edbd0500bc2ef5d334b13c6c3f9f5fc77b30b4a1ac114c12c2465f55cb6d2b31e8545588a4ad80cf849daec210cf4664f1ba76988543ac5a525aff6e089e43701e9bf0c96051da10f4dbc4e8a522b81990a22da17af418b77f99d2080d36ccf00bedd7e7501dd70"}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hopopts={{0x1e8, 0x29, 0x36, {0x89, 0x39, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x25}, @pad1, @generic={0x0, 0x60, "60c0809156be9eccfad09b601793c8c3c3005df181a2ad3ce8121272b28348f4eaf40bd28a5d34e45beee373c92033545225bbeeaca57df85c47cb76fd347f6d4d835187d1684536562ef2518da6681404c4d6f19bc60675b595678fc01f7cab"}, @calipso={0x7, 0x30, {0x0, 0xa, 0x6, 0x9, [0x1ff, 0xda, 0x1, 0x10001, 0x9]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x9d, 0x400, [0xf76, 0xc888, 0xb86]}}, @calipso={0x7, 0x40, {0x1, 0xe, 0xc3, 0x4a8, [0x100000001, 0x8000, 0xaf8c, 0x7, 0x1, 0x5, 0x7f]}}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x3}, @generic={0xe3, 0xa7, "2c0b16a68b52c11218ee50ef3de120bf5a7cfb2ae4a98e93fbfbc7028d33021743af5ff0b035ceda57f34aabf7a4d73c81e9a95f628bcb4f2dedb6e1ce52033ea2dcd61c138e54cf13314179e2e07f7334b294093250b4bfa3c4504b84d95da5c4be775ec386ff007f6e9d7b6286a077effc345488d3204696f705f4192af272bd19af4525cd34a97e9cb85d14eb05cb97d06d717e9e63bab5ed6a320f5048462e5de1d6eeef47"}, @hao={0xc9, 0x10, @mcast1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x3b0}}, {{&(0x7f0000000900)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0x3}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000940)="98daeb2396714ba1838765f5b3538ea70f1e246e1034c06df32a802302827146bae99c88511f5245b856fd9a3839fac5ef7865b118f75699a9b506310ab8fcc067cab8bdd68ce514944e740d72cea22b1688fe42b6fcba82f76eed3fcdda8fc2e946d0d17ff60dd8862270391f3c0a3acdea5d7483fe91c18db9b3ecd257726c46d5a588241af39e6536619b88df0a70f3b71a62297db61918453c2e142e3f2b58b965187055d27589a116537870fb38ecd9dd189b8f06a3cb65ca3807c77535c0b72bf6f3", 0xc5}, {&(0x7f0000000a40)="e322a079c4aa14797058f353dc1fa9df88136781469c57931a88f206426ac96f7e8b380912edfd157fbe59f7bb9e7862da93a7c4e7a5568987cef6bfd98690b1d9169d4263b37a31c6754ac4cefbf050e136a7be5827fafdb8df7fb0aa", 0x5d}, {&(0x7f0000000ac0)="f8dc18287e8851d1a67b692ddf10be1f4089f25db1cc01bd89f0d65732bba49281bcc778e38e01f1aa5bd68a4833c0c96f8331e7d69302f67d3b44edee5c79b3de3e3a643d0159fd106c9758a2e73b432eb415c2c6c6a51e3f91c04f0f4a050676222043acf2d31db1f7af93980eedf56bad130ae3b45ce6d10387df9c76945581db316901ee0f7a9a71f426ccb930043f3d76346396ebf2313fc605733f476eed1156bd1f8a77166abcd0c2a27f029edea7932b55a8d5f0015c0ee24ad3bc4074089574e8ad033e02857c10c0ed46f9d88328d8b44016e795640ed4389c70e8309be864f002a4faf3519d97e9d9b4e0", 0xf0}, {&(0x7f0000000bc0)="02ff52d9f91821098f818c77105114619bac63ed482a19fc3a83398835f200044619fc01f2898ee94b57b79826456b6675da23a38f28d1cfbfc663c14f60c4619d749f5499cb957e6cfc93d54351d578e53b653a11", 0x55}, {&(0x7f0000000c40)="5422afc96dde5f623ce6ae4714e6acf4e977f52cf49a2b4e4dfbc08c9497a443d94666e3aebc7c532bfca9b33ae86ab4861f7d228244e0bb86d885e0736ed0463ddb56f88cc36f1bff4390b0f8c06a43731dda91b727b07796716dd1b8dc8eb44a030401d427a1fd291492f7bdec1044f4dd961e67d440431b0b6018c9a81cbe376001edd585b136aaa328d95cf7689ded659363cf9aefd7a049af7802c1727da9633f3f3b4efbd3ef", 0xa9}, {&(0x7f0000000d00)="64b11f48909f093797033eae19ac13cc4a510b74e5ae2b6c0023b895a73703f607d01d203fa54ca806c02a0a1733161181b0e286a4eacf19", 0x38}], 0x6}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000dc0)="ac2a5e1f91a84657159a66fd06c450eed11b0f165a4d68ede4b67af894d00d3562f2f0945354e7b0a0c149f687e0c43880", 0x31}, {&(0x7f0000000e00)="d9d3fa36146c7d8d890019fc7e15846dfb7594ebf8646b83f536b9fd9a5d96bef5fcb9df47920576c89219da7b5daeb2bd3599550ad7cbfed358009d8dc16458c3e55a591ec06c3c733d5d178b104a9d", 0x50}, {&(0x7f0000000e80)="090b77f747e5aa1ce8b0a8b59ba3dd03cb8c8a15e84a26d06846eacd2ffb5aadf4576fb0b71a3898b2a274ceec8f6aa69598a30d11243a3635a1aa428778f0e9aaad2d4da5b8f37aa47ba32182e2ea10a1a8163f966a04c28204cda65feebfb96b6be108b92d7e553b42f98c4c2de02cec46818ae803be574afda7e5beb6be405ab8490da1512050bf2b9f7cfbb77b82fa37b4cf", 0x94}, {&(0x7f0000000f40)="172ae7ea3c", 0x5}, {&(0x7f0000000f80)="dadffd35cbdb944033fa7d8c0ceccfd68d70e592c24e3ca1dcc62a097c789c318a925c59d8e4036423bd8ca6e7542dc2d9553a5828cc2169d60e9666f3152bf2908f2399677d5b03f754ec90005706e0e463c3e9362d3bba0747b2746e59423ada864db8ecbb8a6efee9ab23b48d77232a77b7c7f44a73e153cf2298136a21c25b264dd16ad06e22acb0dbb4bb136dd7b1a6801bdeccb65ec848aa63df115fac44384cbf5484a895a807ee7e38f6d17cf5ea7fd4cf4bcecc85716268b36677c0812e097d5682b17564da4bacea64974ec0a740f1923f63d0a62f983a", 0xdc}], 0x5, &(0x7f0000001100)=[@tclass={{0x14, 0x29, 0x43, 0x20}}, @pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x40}}, {{&(0x7f0000001140)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000001180)="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", 0xfd}, {&(0x7f0000001280)="9cf72dd0d2d15d81972f1eb01a99e46fb7bf7328e8db1bdfd70886238f9ad70e586169b6018fc08bbdbab4952d98a3c15ee1b9ed13b7972981ddc06f64e67cf4806e51a3bf5c5735a89c3f9265bd222a3e73ddaa1078263c8163b6e653c9f429395f7616e75c1c5feac61d91b2ba6179b7cfcd48cbaf49dadf61f723e785be73dc61497c04ef6c54583b755521cf81fbf76ac63c20cfa33559dceab80ee16e592c6af1a5b479546d2bffaecb7868fe", 0xaf}, {&(0x7f0000001340)="521be5738736c1ef5856ccc6933ae5dd3dc857c18f9549bad7ce2e8125199fa0d8df22efd4c35632b95e802b4abd6febc332f5bd600b40442dad8378859cd91a", 0x40}, {&(0x7f0000001380)="4d9b2a45c6718eb386180e493b447f7c2f7bc95a7d846ae0acd66131ca01aa265483d3e5717aca9b7f3033305eff64ba273fec8607a1c085b9d56a82e81c4a2764170df98d0773af9000bdbfde77c031f54915af0b019d2f2972d2793a018c963d31044f8b10798815bb76318553ff9871fbf380ac65049081f5694c6ed61cd3b4c18d16d90ef7", 0x87}], 0x4, &(0x7f0000001480)=[@tclass={{0x14, 0x29, 0x43, 0x800}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x0, 0x6, '\x00', [@generic={0x80, 0x34, "81deac00641bd16f3215da6cb063ce1c1d0c6eb323c7dd618d5ce9b18ffe847286545fb335f091c0953b4ec0331e615b2f2ba13e"}]}}}], 0x68}}, {{&(0x7f0000001500)={0xa, 0x4e20, 0xae62, @private2, 0x1}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000001540)="ea2b690f4ba7e21707974f3d69266f3ea23c132ec84f10a0d778dea9aac9417e934a9dba9b3124677e90989b6e37f051ec3f832010c7fe05b18f3793a7803e76764875f00e679f3b6fcfab08e7754eb792", 0x51}, {&(0x7f00000015c0)="3dbb01d790080897ba41e551836a8c5b6d2ec95537b13747fcd0d80fcaa60ad35df4bec8346d3c2b126d857335a4ae3bdab451d3fb07d0f59e688f4dcab525d8ac94407f47cb6e3b90207836c93348e99a25fd63452f1faec7665403a0df6f11472a6a297aec92cad9f4997188b817c1dcf5589f6f24997790d28ac6bb60c7775aa1d1711a7d44e8aaf2394c0b1b08ffcdab360f8d9961d70ea5f0a6009285be4f7f959bf8e98c0960a632e06c827f79fbcb8aac3aab364e243352a1bcdcd01d88a0140d16b563c7a56704417ff457f8a25085d19030cfab703d03275cd012f47c2bc76d22", 0xe5}], 0x2, &(0x7f0000001700)=[@hopopts_2292={{0x90, 0x29, 0x36, {0x87, 0xe, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0xf000, [0x1]}}, @generic={0xec, 0x5a, "a333d8e5469d0197bb1dd3502f8cc7ea098ae9f824d2bb1c17f3d33109dacb503128e0c7a43aaf38d7aa43a0b5d23509696319a0d7da9dc855ae74d21136e7004c3cc3a2390c4e3f1ecc91de371441f37adee43bad6e47cd4ed7"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7999}}, @hopopts={{0x20, 0x29, 0x36, {0x3b, 0x1, '\x00', [@ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x1}]}}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x5c, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0x3, [0x8, 0x6]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0xfe, 0xcea5, [0xf906, 0x80, 0x52f, 0x6]}}]}}}], 0x138}}, {{&(0x7f0000001840)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000001880)="d24bf047fa62424cd278aeb4b1", 0xd}, {&(0x7f0000004180)="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", 0x1000}], 0x2, &(0x7f0000001900)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x10000}}], 0x18}}, {{&(0x7f00000019c0)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x2}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001a00)="87e8ab4bdd001a", 0x7}, {&(0x7f0000001a40)="fa28e604143f4ae8f7f313e069ca02c472c88d9642d94db534744dd1fedf0cd57da30daf8514e97dda338db3f181aabbd39d6d202be4d677f80cfc5e86fe3e6049a6786bfa4853d0878a44f1a6abebfd396e4ad4d656b984ff1f26531d7dc4b790cbe3e473997d55ce60933becc637b0bbee8d3cf72736be8e1a59d854098f05e5f36f571682ea23169728033d6e60acfdaa423532cd0912d61343cbaee5c2", 0x9f}, {&(0x7f0000001b00)="011fbf980fbb996081d90f778f1be244b89b373a44256dc4fb402c3c3713667bd31f1552339b41bacbbb6ba5f66aef308c80a4d6e66be43280c408f1ef103a25e9fbd042456340e38832d6cced2ea45b09fb6a99bb3062fae526fd49f2b8390f5f2f98e2b4513c10fe061c889981f81cfb368cb6c4a6ac3c12f52fdaee5fcedd1f5fd9c632a0d6c226f0a2dada0aba2474e4cbe5a6a05337cfb6a897ebe99c920ff62313d598e326348040c04f49ef59aeaddebf8424d79037970045e77b297371ebb0e932aba3ed8b4db5", 0xcb}], 0x3, &(0x7f0000001c40)=[@dstopts_2292={{0x98, 0x29, 0x4, {0x5e, 0xf, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x80}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x1, 0x1, [0x6, 0xdca, 0x27, 0x10000000, 0x0, 0x4]}}, @ra={0x5, 0x2, 0x101}, @hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x9}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r3}}}], 0xc0}}], 0x8, 0x8008801) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xdd, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f00000013c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0xded4a1e4217ab166) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000001f80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001980)={&(0x7f0000001f00)={0x48, r6, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa9b}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x4000) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7dd, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r7, 0xae80, 0x0) get_robust_list(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2020) 52.549526ms ago: executing program 2 (id=128): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffe, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) cachestat(r2, &(0x7f0000000340)={0xffffffffffffffff, 0x4}, &(0x7f00000004c0), 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x8, 0x7fffffff, 0x3d1, 0x8001, 0x7, 0x5, 0x5, 0x80, 0x8000, 0xffffffffffffff7f, 0x4, 0xb83e, 0x2, 0x9, 0x5], 0xdddd0000, 0x21000}) getsockopt$inet6_buf(r1, 0x29, 0x1f, 0x0, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0xa, 0xffff, 0x40, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @rand_addr=' \x01\x00', 0x8000, 0x10, 0x9, 0x3}}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000100)={@loopback, r4}, 0x14) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x8, 0x0) r6 = eventfd2(0xd, 0x1) r7 = fsopen(&(0x7f00000005c0)='virtiofs\x00', 0x0) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="a90303000000000000003200000008004001"], 0x1c}}, 0x4004050) r11 = epoll_create(0x3) io_submit(0x0, 0x7, &(0x7f0000000840)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x81, r1, &(0x7f0000000240), 0x0, 0x8000000000, 0x0, 0x3, r5}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x101, r2, &(0x7f00000002c0)="190200fbfdbb39cb6851c4bed1f9ec13aaff3609e526e4bea1d6acd7ab8b9b911e7e1d51ff75f5747ecc86ed194c3e90b984b2457bc7c6afb33ae2a5a1b4087adde5219dc0d4631f4929ce47b27c12b9cf4a112338685beba7bfada22958853bd66ef9af", 0x64, 0x1, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f00000003c0)="da533250f18f36a5902916a85d880500be2b9a9b0a0b3cc6358fcf693f06d8c6cacda004334f1ba1f2f0dfea1ac66a748939f3845bfb59db91f14a65d9a307d8177732aafc3d2fc7f44aec486321122daa7cf16587735adcc0f6c985939a8cde4f7329ff0a7688166d41a4a804214aacdc2552b30ed9dbd43c58bf70e64ad1c9aaf69c5e2727e1bc76e5a6d821a4ce8694999f05144658690070f2f46595b4542254766f157a058183aa9b27c8156b83c66d5949423750a7410317da41f099abf9e846353ab59d73bd46ba8fa27924cc44170f4689d0e7d7fd199bf726d45339c5f320620f7c5af816a1", 0xea, 0xfffffffffffff41f, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x9, 0xe045, r2, &(0x7f0000000540)="03a0636065ac", 0x6, 0x7, 0x0, 0x0, r6}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x0, r7, &(0x7f0000000600)="a5d0b00ba12f9780386282b5d37cc018f70611b6cac1de2ded43abbb10e36644209182fd15ce1e7c2ebbdb954fa9a34a14", 0x31, 0x7, 0x0, 0x3, r8}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x7, r11, &(0x7f00000006c0)="9c80910b632482aad491a37421887ee278974d8eb9d0ea2d45f7", 0x1a, 0xb, 0x0, 0x2, r2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x8, 0xb, r1, &(0x7f0000000740)="489811d2547134b6bbcc3de5e555097d060f8267ef303b16d6f434c0d2ea74839e1484670d2af160dcc8f09746dea1e3bc0aebc62fef3f9aceb309c1f3f4ea4c66de0e538923446780200b05b2c63f20802e35bc0535955877160b94f4ae19a7a4436cf0516fa06836225a1b8caee955653b17bf64f5ec51fe910e819affcdf63e0c70", 0x83, 0x3, 0x0, 0x2, r2}]) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 51.268846ms ago: executing program 2 (id=129): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) setreuid(0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000180)=ANY=[@ANYBLOB="0500"/24]) ptrace(0x11, r1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x801, 0x159) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="a400000000010104000000000000000002000200240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000002c001980"], 0xa4}}, 0x0) r3 = socket(0x10, 0x3, 0x1) write(r3, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x2003c1) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000080)) r6 = getpid() r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x2202, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='-5'], 0x9) syz_clone3(&(0x7f0000000600)={0x100000900, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0), {0x2}, &(0x7f00000004c0)=""/97, 0x61, &(0x7f0000000540)=""/151, &(0x7f0000000300)=[r1, r1, r6], 0x3, {r7}}, 0x58) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x148) fstat(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r9) eventfd(0x2) 42.809717ms ago: executing program 1 (id=130): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000dc0)={0x5, &(0x7f0000000d80)=[{0x200, 0xd1, 0x2, 0x6}, {0xe, 0x7, 0x5, 0x10000}, {0x0, 0x81, 0x9, 0x9}, {0xfff9, 0x40, 0x99, 0x8}, {0x7fff, 0x4a, 0x81, 0x4a237e29}]}, 0x10) (async, rerun: 64) fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) setuid(r3) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfe, 0x3a, '/_', 0x3a, ':$@K-^{', 0x3a, './file0'}, 0x30) (async) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 32) r6 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 32) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async, rerun: 32) close(r6) (async, rerun: 32) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) (async, rerun: 32) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000e00)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000e40)=0x2c) r9 = accept4$inet(0xffffffffffffffff, &(0x7f0000000d00)={0x2, 0x0, @broadcast}, &(0x7f0000000d40)=0x10, 0x80800) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000b00)=[@acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0xa}, @flat, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000080)}, 0x1440}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/135, 0x0, 0x0, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/239, 0x0, 0x0, 0x2}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000100)}}, @clear_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/255, 0x0, 0x0, 0x8}, @flat=@weak_handle={0x77682a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/168, 0x0, 0x1, 0x15}}, &(0x7f0000000740)}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={@fd={0x66642a85, 0x0, r8}, @flat=@handle={0x73682a85, 0x1108, 0x3}, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000800)}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={@flat=@handle={0x73682a85, 0xb, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000840)=""/77}, @ptr={0x70742a85, 0x1, &(0x7f00000008c0)=""/70, 0x0, 0x2, 0x8}}, &(0x7f0000000a00)}}, @increfs_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={@flat=@binder={0x73622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1101, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000ac0)}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @flat=@weak_handle, @flat=@binder={0x73622a85, 0x1001, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000e80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x44, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x491}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd, 0xd7, 0x1}}}}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x412, 0x4, 0x2, 0x97, 0x40, 0x1}, 0x13e, &(0x7f0000000f00)={0x5, 0xf, 0x13e, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x8, 0xc, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x4, 0x4, 0x7ff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x8, 0xff}, @ssp_cap={0xc, 0x10, 0xa, 0x5e, 0x0, 0x20000, 0xf, 0x1ff}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "7b37d8fc3fd1a0be0b4116573b96a9ef"}, @generic={0xfe, 0x10, 0x1, "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"}]}, 0x5, [{0x57, &(0x7f0000001040)=@string={0x57, 0x3, "ee7d1eed3e7d3319edead2a159943d88fabc3865dd972faab5952e62e9ce863a53c81b9b0765a1501db9d196edbb785e342c7db70e6ca68c30e6f08ddfae424596c8b037c119acd98c34a73476c0f0b00ee47ed1ee"}}, {0x54, &(0x7f00000010c0)=@string={0x54, 0x3, "a540a5131ee15e82683f89be0d1ce533d8125ce75675cdde706750aa97a92ce2b2d2f46a9c065ae046c9a228254a0607fbd0a4b9e3ac2462e29e4bcd81e2a2f8234f660eb26d218e160eb08d2b75067475ab"}}, {0xe1, &(0x7f0000001140)=@string={0xe1, 0x3, "82cf07c9acbdc8cb4a6ea59d9097040b629b074c276ab255827ed88babf979f904525de5b4123ce49391b43d25c645afa9dc7ad64aada2b4425144ba8f04c87f55abb925f8952170c04b38498856535f52e3429312665fb3b1b1be222406825305e1a6098781e9097edaeb6a858a796aeeed9a187b5525396693ce203f61b9e95aadb7bcdedb14e8bd16821fd8b9a4bc55838f6ec1e7dd652c26c12d9eba845bed0347e1b11a1951f1d3e206a362efea0f50f82adcf94a1ee41b82b711c988caf6c3aa2a958dcfbe1947dd5e8a76b8bfbbd1f61b53356c4ca43d4c99d9b9a7"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x448}}, {0xb, &(0x7f0000001280)=@string={0xb, 0x3, "813352f87d38ec0761"}}]}) (rerun: 64) 3.889469ms ago: executing program 1 (id=131): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4dd99000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000000)={0x55}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xc00, 0x18, 0xa}, 0x18) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000704000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000100)="f04729b6b8794bf73e0f3800f966f2a766baf80cb8b4452688ef66bafc0cb806000000ef0f4058cab99f0300000f3248b8ba000000000000000f23c80f21f8350800d0000f23f8b9800000c00f3235000100000f3066ba4000ed48b8a63b0000000000000f23c80f21f835040000000f23f8", 0x72}], 0x1, 0x54, &(0x7f0000000200), 0x0) 0s ago: executing program 2 (id=132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = userfaultfd(0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000300)={0xcc, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x544}) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x544}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x30, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x30, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f00007b4000/0x1000)=nil, 0x1000}}) (async) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f00007b4000/0x1000)=nil, 0x1000}}) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 30.454819][ T36] audit: type=1400 audit(1756180188.260:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.456221][ T281] cgroup: Unknown subsys name 'net' [ 30.477857][ T36] audit: type=1400 audit(1756180188.260:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.505706][ T36] audit: type=1400 audit(1756180188.300:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.505891][ T281] cgroup: Unknown subsys name 'devices' [ 30.629634][ T281] cgroup: Unknown subsys name 'hugetlb' [ 30.635418][ T281] cgroup: Unknown subsys name 'rlimit' [ 30.767527][ T36] audit: type=1400 audit(1756180188.580:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.791276][ T36] audit: type=1400 audit(1756180188.580:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.816899][ T36] audit: type=1400 audit(1756180188.580:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.825688][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.849070][ T36] audit: type=1400 audit(1756180188.670:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.874599][ T36] audit: type=1400 audit(1756180188.670:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.908178][ T36] audit: type=1400 audit(1756180188.720:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.908677][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.934509][ T36] audit: type=1400 audit(1756180188.720:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.203872][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.211369][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.218640][ T291] bridge_slave_0: entered allmulticast mode [ 32.225422][ T291] bridge_slave_0: entered promiscuous mode [ 32.233032][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.240664][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.248013][ T291] bridge_slave_1: entered allmulticast mode [ 32.254458][ T291] bridge_slave_1: entered promiscuous mode [ 32.289240][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.296433][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.303823][ T290] bridge_slave_0: entered allmulticast mode [ 32.310160][ T290] bridge_slave_0: entered promiscuous mode [ 32.324516][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.331814][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.338967][ T290] bridge_slave_1: entered allmulticast mode [ 32.345159][ T290] bridge_slave_1: entered promiscuous mode [ 32.388613][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.395848][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.403146][ T288] bridge_slave_0: entered allmulticast mode [ 32.410029][ T288] bridge_slave_0: entered promiscuous mode [ 32.422282][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.429859][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.437083][ T289] bridge_slave_0: entered allmulticast mode [ 32.443452][ T289] bridge_slave_0: entered promiscuous mode [ 32.453450][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.460900][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.469789][ T288] bridge_slave_1: entered allmulticast mode [ 32.476162][ T288] bridge_slave_1: entered promiscuous mode [ 32.486614][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.493876][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.501324][ T289] bridge_slave_1: entered allmulticast mode [ 32.507598][ T289] bridge_slave_1: entered promiscuous mode [ 32.618536][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.625683][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.632995][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.640222][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.701066][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.708487][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.716046][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.723295][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.734004][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.741345][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.748641][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.755847][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.765956][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.773116][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.781040][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.788274][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.809922][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.817725][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.825375][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.832913][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.840337][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.847772][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.855394][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.863765][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.884777][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.892190][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.900173][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.907353][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.920368][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.927532][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.953320][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.960685][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.995951][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.003133][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.033013][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.040120][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.048131][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.055173][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.065140][ T290] veth0_vlan: entered promiscuous mode [ 33.071710][ T291] veth0_vlan: entered promiscuous mode [ 33.079407][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.086540][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.111000][ T290] veth1_macvtap: entered promiscuous mode [ 33.121082][ T288] veth0_vlan: entered promiscuous mode [ 33.148848][ T291] veth1_macvtap: entered promiscuous mode [ 33.161251][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.179511][ T288] veth1_macvtap: entered promiscuous mode [ 33.236017][ T289] veth0_vlan: entered promiscuous mode [ 33.244965][ T337] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 33.264766][ T289] veth1_macvtap: entered promiscuous mode [ 33.308072][ T343] rust_binder: Error while translating object. [ 33.308144][ T343] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.322715][ T343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 33.375532][ T359] fuse: Bad value for 'user_id' [ 33.403008][ T359] fuse: Bad value for 'user_id' [ 33.410716][ T359] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.435967][ T359] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.448532][ T367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 33.478736][ T365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.478762][ T365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 33.512270][ T369] syzkaller0: entered promiscuous mode [ 33.527049][ T369] syzkaller0: entered allmulticast mode [ 33.591866][ T371] rust_binder: Error while translating object. [ 33.591921][ T371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 33.598655][ T371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:10 [ 33.637584][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.723888][ T379] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.723917][ T379] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.748499][ T383] rust_binder: 22: no such ref 1 [ 33.760504][ T383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22 [ 33.807319][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 33.824298][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.834671][ T10] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 33.843817][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.851866][ T10] usb 2-1: Product: syz [ 33.856101][ T10] usb 2-1: Manufacturer: syz [ 33.860939][ T10] usb 2-1: SerialNumber: syz [ 33.884365][ T385] binder: Bad value for 'stats' [ 33.906687][ T388] rust_binder: Error while translating object. [ 33.906687][ T387] rust_binder: Error while translating object. [ 33.906713][ T388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 33.913079][ T387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 33.920556][ T388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:26 [ 33.929732][ T387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:26 [ 34.069004][ T363] Zero length message leads to an empty skb [ 34.107983][ T10] asix 2-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 34.127887][ T10] asix 2-1:7.0: probe with driver asix failed with error -71 [ 34.139319][ T10] usb 2-1: USB disconnect, device number 2 [ 34.193640][ T401] SELinux: failed to load policy [ 34.268086][ T409] ======================================================= [ 34.268086][ T409] WARNING: The mand mount option has been deprecated and [ 34.268086][ T409] and is ignored by this kernel. Remove the mand [ 34.268086][ T409] option from the mount to silence this warning. [ 34.268086][ T409] ======================================================= [ 34.305410][ T409] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 34.577292][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.587291][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 34.707240][ T45] usb 1-1: device descriptor read/64, error -71 [ 34.738336][ T10] usb 3-1: config index 0 descriptor too short (expected 162, got 34) [ 34.754366][ T10] usb 3-1: config 127 has an invalid interface number: 54 but max is 0 [ 34.773902][ T10] usb 3-1: config 127 has no interface number 0 [ 34.787003][ T10] usb 3-1: New USB device found, idVendor=1b3f, idProduct=2002, bcdDevice=fc.57 [ 34.806504][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.967360][ T45] usb 1-1: device descriptor read/64, error -71 [ 35.111426][ T10] usb 3-1: string descriptor 0 read error: -71 [ 35.120139][ T10] usb 3-1: USB disconnect, device number 2 [ 35.227196][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.367245][ T45] usb 1-1: device descriptor read/64, error -71 [ 35.627216][ T45] usb 1-1: device descriptor read/64, error -71 [ 35.634141][ T36] kauditd_printk_skb: 104 callbacks suppressed [ 35.634158][ T36] audit: type=1400 audit(1756180193.440:178): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 35.650569][ T430] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 35.671190][ T36] audit: type=1400 audit(1756180193.490:179): avc: denied { ioctl } for pid=431 comm="syz.2.34" path="socket:[4502]" dev="sockfs" ino=4502 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.716179][ T36] audit: type=1400 audit(1756180193.490:180): avc: denied { create } for pid=431 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.735785][ T36] audit: type=1400 audit(1756180193.490:181): avc: denied { ioctl } for pid=431 comm="syz.2.34" path="socket:[4508]" dev="sockfs" ino=4508 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.761199][ T36] audit: type=1400 audit(1756180193.490:182): avc: denied { ioctl } for pid=431 comm="syz.2.34" path="socket:[4509]" dev="sockfs" ino=4509 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.767358][ T45] usb usb1-port1: attempt power cycle [ 35.787775][ T36] audit: type=1400 audit(1756180193.490:183): avc: denied { create } for pid=431 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 35.813332][ T36] audit: type=1400 audit(1756180193.490:184): avc: denied { read write } for pid=429 comm="syz.1.33" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.839106][ T36] audit: type=1400 audit(1756180193.490:185): avc: denied { open } for pid=429 comm="syz.1.33" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.863684][ T36] audit: type=1400 audit(1756180193.490:186): avc: denied { ioctl } for pid=429 comm="syz.1.33" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.890089][ T36] audit: type=1400 audit(1756180193.520:187): avc: denied { execute } for pid=434 comm="syz.2.35" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 36.016622][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.039094][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.157205][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.175233][ T443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=443 comm=syz.2.37 [ 36.188621][ T45] usb 1-1: device descriptor read/8, error -71 [ 36.330507][ T45] usb 1-1: device descriptor read/8, error -71 [ 36.377207][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.457199][ T330] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.547197][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 36.553902][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 36.563152][ T9] usb 2-1: config 0 has no interface number 0 [ 36.569921][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 36.580427][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 36.583222][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.592269][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 36.598798][ T330] usb 3-1: device descriptor read/64, error -71 [ 36.614998][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.623149][ T9] usb 2-1: Product: syz [ 36.627515][ T9] usb 2-1: Manufacturer: syz [ 36.628168][ T45] usb 1-1: device descriptor read/8, error -71 [ 36.632204][ T9] usb 2-1: SerialNumber: syz [ 36.646563][ T9] usb 2-1: config 0 descriptor?? [ 36.654268][ T439] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 36.662415][ T439] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 36.768428][ T45] usb 1-1: device descriptor read/8, error -71 [ 36.837212][ T330] usb 3-1: device descriptor read/64, error -71 [ 36.871260][ T439] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 36.878858][ T439] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 36.886541][ T45] usb usb1-port1: unable to enumerate USB device [ 37.077398][ T330] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.207228][ T330] usb 3-1: device descriptor read/64, error -71 [ 37.296115][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 37.306359][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 37.319044][ T9] asix 2-1:0.251: probe with driver asix failed with error -61 [ 37.457345][ T330] usb 3-1: device descriptor read/64, error -71 [ 37.500826][ T31] usb 2-1: USB disconnect, device number 3 [ 37.577237][ T330] usb usb3-port1: attempt power cycle [ 37.747319][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.849611][ T46] bridge_slave_1: left allmulticast mode [ 37.855372][ T46] bridge_slave_1: left promiscuous mode [ 37.861862][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.869975][ T46] bridge_slave_0: left allmulticast mode [ 37.875744][ T46] bridge_slave_0: left promiscuous mode [ 37.882241][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.898473][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 37.909642][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.920793][ T330] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.930039][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.940807][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 37.954859][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 37.967271][ T45] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 37.975727][ T45] usb 1-1: Manufacturer: syz [ 37.980871][ T330] usb 3-1: device descriptor read/8, error -71 [ 37.990408][ T45] usb 1-1: config 0 descriptor?? [ 38.007017][ T46] veth1_macvtap: left promiscuous mode [ 38.012960][ T46] veth0_vlan: left promiscuous mode [ 38.106436][ T460] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.113995][ T460] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.118295][ T330] usb 3-1: device descriptor read/8, error -71 [ 38.122121][ T460] bridge_slave_0: entered allmulticast mode [ 38.136415][ T460] bridge_slave_0: entered promiscuous mode [ 38.143675][ T460] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.151045][ T460] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.158422][ T460] bridge_slave_1: entered allmulticast mode [ 38.164851][ T460] bridge_slave_1: entered promiscuous mode [ 38.214417][ T460] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.221508][ T460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.229007][ T460] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.236033][ T460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.258337][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.266084][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.276612][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.283906][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.295237][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.302414][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.317630][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.334872][ T460] veth0_vlan: entered promiscuous mode [ 38.349413][ T460] veth1_macvtap: entered promiscuous mode [ 38.367327][ T330] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 38.389604][ T330] usb 3-1: device descriptor read/8, error -71 [ 38.394160][ T473] rust_binder: Write failure EINVAL in pid:2 [ 38.399778][ T45] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 38.415439][ T45] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 38.428863][ T45] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 38.467242][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 38.480396][ T483] tmpfs: Unknown parameter 'qµsÄ' [ 38.480491][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 38.496135][ T9] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 38.506371][ T9] usb 2-1: config 0 has no interface number 0 [ 38.513226][ T9] usb 2-1: config 0 interface 253 has no altsetting 0 [ 38.518628][ T483] process 'syz.4.47' launched './file0' with NULL argv: empty string added [ 38.523440][ T9] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=47.2a [ 38.542523][ T330] usb 3-1: device descriptor read/8, error -71 [ 38.542557][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.559612][ T9] usb 2-1: Product: syz [ 38.565859][ T9] usb 2-1: Manufacturer: syz [ 38.571067][ T9] usb 2-1: SerialNumber: syz [ 38.577334][ T9] usb 2-1: config 0 descriptor?? [ 38.601121][ T31] usb 1-1: USB disconnect, device number 6 [ 38.631632][ T485] rust_binder: Error while translating object. [ 38.631663][ T485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.638809][ T485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 38.658708][ T330] usb usb3-port1: unable to enumerate USB device [ 38.797427][ T9] usb_ehset_test 2-1:0.253: probe with driver usb_ehset_test failed with error -32 [ 38.812608][ T9] usb 2-1: USB disconnect, device number 4 [ 38.835456][ T501] /dev/md0: Can't lookup blockdev [ 38.950894][ T505] kvm: kvm [504]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xc88e0137 [ 38.963504][ T505] kvm: kvm [504]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x186) = 0xc88e0137 [ 38.972860][ T505] kvm: kvm [504]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x187) = 0xc88e0137 [ 38.984026][ T505] kvm_intel: kvm [504]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x1d9) = 0xc88e0137 [ 39.381564][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.393321][ T538] input: syz0 as /devices/virtual/input/input4 [ 39.469602][ T551] binder: Bad value for 'defcontext' [ 39.537732][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 39.544062][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.555614][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.566587][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 39.577235][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.586639][ T31] usb 1-1: config 0 descriptor?? [ 39.593229][ T31] hub 1-1:0.0: USB hub found [ 39.667259][ T330] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.793962][ T31] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 39.817285][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 39.824713][ T330] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 39.836127][ T330] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.847275][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.848404][ T330] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.867760][ T330] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 39.883033][ T330] usb 2-1: config 7 interface 0 has no altsetting 0 [ 39.890256][ T330] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 39.900091][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.005369][ T31] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x7 [ 40.007226][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 40.014811][ T31] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 40.019994][ T10] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 40.044413][ T10] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.056618][ T10] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.067793][ T10] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 40.082493][ T10] usb 5-1: config 7 interface 0 has no altsetting 0 [ 40.089518][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 40.099352][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.130083][ T330] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0004/input/input5 [ 40.161113][ T330] kye 0003:0458:5010.0004: input,hiddev96,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 40.178542][ T330] usb 2-1: USB disconnect, device number 5 [ 40.194912][ T566] fido_id[566]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 40.317280][ T400] usb 1-1: USB disconnect, device number 7 [ 40.367619][ T572] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.399205][ T575] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 40.407043][ T575] netlink: 'syz.1.76': attribute type 2 has an invalid length. [ 40.415449][ T576] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 40.423318][ T576] netlink: 'syz.1.76': attribute type 2 has an invalid length. [ 40.521107][ T10] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.0005/input/input6 [ 40.536041][ T10] kye 0003:0458:5010.0005: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 40.735909][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 40.735926][ T36] audit: type=1400 audit(1756180199.542:225): avc: denied { lock } for pid=590 comm="syz.0.80" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.747711][ T592] rust_binder: Error while translating object. [ 40.789537][ T592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 40.796056][ T592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28 [ 40.859432][ T579] usb 5-1: USB disconnect, device number 2 [ 40.967225][ T31] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 41.107256][ T31] usb 1-1: device descriptor read/64, error -71 [ 41.169023][ T36] audit: type=1400 audit(1756180199.982:226): avc: denied { setattr } for pid=599 comm="syz.1.83" name="file0" dev="incremental-fs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.347326][ T31] usb 1-1: device descriptor read/64, error -71 [ 41.371512][ T36] audit: type=1400 audit(1756180200.182:227): avc: denied { write } for pid=609 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 41.457293][ T330] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 41.597407][ T31] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 41.606708][ T330] usb 3-1: device descriptor read/64, error -71 [ 41.635304][ T617] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 41.635330][ T617] rust_binder: Read failure Err(EFAULT) in pid:24 [ 41.657530][ T36] audit: type=1400 audit(1756180200.472:228): avc: denied { append } for pid=618 comm="syz.4.89" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.690386][ T36] audit: type=1400 audit(1756180200.502:229): avc: denied { read } for pid=618 comm="syz.4.89" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 41.692757][ T619] netlink: 'syz.4.89': attribute type 4 has an invalid length. [ 41.714679][ T36] audit: type=1400 audit(1756180200.502:230): avc: denied { open } for pid=618 comm="syz.4.89" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 41.749721][ T31] usb 1-1: device descriptor read/64, error -71 [ 41.756657][ T36] audit: type=1400 audit(1756180200.502:231): avc: denied { connect } for pid=618 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.777126][ T36] audit: type=1400 audit(1756180200.502:232): avc: denied { write } for pid=618 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.907330][ T330] usb 3-1: device descriptor read/64, error -71 [ 41.964531][ T626] fuse: Bad value for 'fd' [ 41.987311][ T31] usb 1-1: device descriptor read/64, error -71 [ 42.027301][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 42.094286][ T36] audit: type=1400 audit(1756180200.902:233): avc: denied { create } for pid=649 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 42.115430][ T31] usb usb1-port1: attempt power cycle [ 42.126466][ T655] tipc: Started in network mode [ 42.131952][ T655] tipc: Node identity 4, cluster identity 4711 [ 42.138641][ T655] tipc: Node number set to 4 [ 42.150028][ T330] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 42.156548][ T36] audit: type=1400 audit(1756180200.962:234): avc: denied { setopt } for pid=656 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.178465][ T657] fuse: Bad value for 'rootmode' [ 42.196010][ T659] >: renamed from veth0_vlan (while UP) [ 42.203940][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.215664][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.230339][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.239781][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.248384][ T10] usb 5-1: Product: syz [ 42.252578][ T10] usb 5-1: Manufacturer: syz [ 42.257401][ T10] usb 5-1: SerialNumber: syz [ 42.287237][ T330] usb 3-1: device descriptor read/64, error -71 [ 42.457256][ T31] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 42.471071][ T10] usb 5-1: 0:2 : does not exist [ 42.478575][ T31] usb 1-1: device descriptor read/8, error -71 [ 42.479891][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 42.498277][ T10] usb 5-1: USB disconnect, device number 3 [ 42.507831][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.527526][ T330] usb 3-1: device descriptor read/64, error -71 [ 42.608830][ T31] usb 1-1: device descriptor read/8, error -71 [ 42.637416][ T330] usb usb3-port1: attempt power cycle [ 42.812887][ T672] IPv6: Can't replace route, no match found [ 42.847241][ T31] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 42.869555][ T31] usb 1-1: device descriptor read/8, error -71 [ 42.884796][ T678] cgroup: Invalid name [ 42.977216][ T330] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 42.998244][ T31] usb 1-1: device descriptor read/8, error -71 [ 43.008637][ T330] usb 3-1: device descriptor read/8, error -71 [ 43.107417][ T31] usb usb1-port1: unable to enumerate USB device [ 43.138324][ T330] usb 3-1: device descriptor read/8, error -71 [ 43.377277][ T330] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 43.398708][ T330] usb 3-1: device descriptor read/8, error -71 [ 43.528440][ T330] usb 3-1: device descriptor read/8, error -71 [ 43.636154][ T703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 43.638585][ T330] usb usb3-port1: unable to enumerate USB device [ 43.646306][ T703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 43.665097][ T703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 43.676743][ T703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 43.686824][ T703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 43.698887][ T703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 43.709682][ T703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 43.721257][ T703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 43.731707][ T703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 43.741951][ T703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 44.304158][ T330] rust_binder: 715: removing orphan mapping 0:24 [ 44.359481][ T723] overlayfs: failed to clone upperpath [ 44.386869][ T726] PM: Enabling pm_trace changes system date and time during resume. [ 44.386869][ T726] PM: Correct system time has to be restored manually after resume. [ 44.490529][ T736] ------------[ cut here ]------------ [ 44.497019][ T736] WARNING: CPU: 0 PID: 736 at arch/x86/kvm/x86.c:11569 kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0 [ 44.508293][ T736] Modules linked in: [ 44.514026][ T736] CPU: 0 UID: 0 PID: 736 Comm: syz.2.132 Not tainted syzkaller #0 6e51b6b85230f66418c68cf4df55f7a3259ed786 [ 44.528270][ T736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.542070][ T736] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0 [ 44.550282][ T736] Code: 7e 3b e8 44 0c 6a 00 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 20 4c 8b 64 24 40 48 8b 5c 24 28 e9 26 fd ff ff e8 21 0c 6a 00 <0f> 0b e9 e4 fc ff ff e8 15 0c 6a 00 0f 0b e9 0e fd ff ff e8 09 0c [ 44.572812][ T736] RSP: 0018:ffffc9000cf9f9c0 EFLAGS: 00010293 [ 44.580413][ T736] RAX: ffffffff811bd81f RBX: ffff888126b74300 RCX: ffff88811f19b900 [ 44.589003][ T736] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 44.597997][ T736] RBP: ffffc9000cf9fc70 R08: ffff88811f19b907 R09: 1ffff11023e33720 [ 44.606843][ T736] R10: dffffc0000000000 R11: ffffed1023e33721 R12: ffff8881201a3000 [ 44.616530][ T736] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888126b74378 [ 44.625936][ T736] FS: 00007fbd1d3236c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 44.635390][ T736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.642406][ T736] CR2: 00007fbd1c5746a0 CR3: 0000000111194000 CR4: 00000000003526b0 [ 44.651066][ T736] Call Trace: [ 44.654527][ T736] [ 44.657717][ T736] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 44.665719][ T736] ? try_to_wake_up+0xe40/0x1b00 [ 44.671083][ T736] ? plist_del+0x3e3/0x400 [ 44.676554][ T736] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 44.682323][ T736] ? ioctl_has_perm+0x1aa/0x4d0 [ 44.688292][ T736] ? __cfi_autoremove_wake_function+0x10/0x10 [ 44.694718][ T736] ? ioctl_has_perm+0x3e0/0x4d0 [ 44.699626][ T736] ? has_cap_mac_admin+0xd0/0xd0 [ 44.704755][ T736] ? synchronize_rcu+0x77/0x2e0 [ 44.709642][ T736] ? __cfi_synchronize_rcu+0x10/0x10 [ 44.715114][ T736] ? __kasan_check_write+0x18/0x20 [ 44.720312][ T736] kvm_vcpu_ioctl+0x96f/0xee0 [ 44.725103][ T736] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 44.730539][ T736] ? do_futex+0x356/0x500 [ 44.734906][ T736] ? __cfi_do_futex+0x10/0x10 [ 44.739622][ T736] ? __fget_files+0x2c5/0x340 [ 44.744587][ T736] ? bpf_lsm_file_ioctl+0xd/0x20 [ 44.749600][ T736] ? security_file_ioctl+0x34/0xd0 [ 44.774916][ T736] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 44.780271][ T736] __se_sys_ioctl+0x132/0x1b0 [ 44.785078][ T736] __x64_sys_ioctl+0x7f/0xa0 [ 44.789808][ T736] x64_sys_call+0x1878/0x2ee0 [ 44.794597][ T736] do_syscall_64+0x58/0xf0 [ 44.799253][ T736] ? clear_bhb_loop+0x50/0xa0 [ 44.804196][ T736] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.810328][ T736] RIP: 0033:0x7fbd1c58ebe9 [ 44.815026][ T736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.835957][ T736] RSP: 002b:00007fbd1d323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.844965][ T736] RAX: ffffffffffffffda RBX: 00007fbd1c7b5fa0 RCX: 00007fbd1c58ebe9 [ 44.853449][ T736] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 44.862166][ T736] RBP: 00007fbd1c611e19 R08: 0000000000000000 R09: 0000000000000000 [ 44.870991][ T736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.880807][ T736] R13: 00007fbd1c7b6038 R14: 00007fbd1c7b5fa0 R15: 00007ffd4fb2f398 [ 44.889974][ T736] [ 44.893368][ T736] ---[ end trace 0000000000000000 ]---