last executing test programs: 17m39.304166777s ago: executing program 32 (id=602): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x202) write$evdev(r0, &(0x7f0000000140)=[{{}, 0x14, 0x1ff, 0xfffffff8}], 0x18) ptrace(0x10, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) close_range(r1, 0xffffffffffffffff, 0x0) 15m19.682446637s ago: executing program 33 (id=3362): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, 0xffffffffffffffff) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) (async) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10}) dup3(r4, r1, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x2000) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x2000) 11m14.229747644s ago: executing program 34 (id=7089): mprotect(&(0x7f00004fb000/0x1000)=nil, 0x1000, 0x300001a) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$netlink(r2, &(0x7f0000003a00)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003980), 0x0, &(0x7f00000039c0), 0x0, 0x20000000}, 0x4048000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x24, &(0x7f0000000200), 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) madvise(&(0x7f0000859000/0x2000)=nil, 0x2000, 0x12) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x13, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8m44.906153165s ago: executing program 35 (id=9710): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x111a02, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xb66c3409bf854d4a) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='pstore\x00', 0x4000, &(0x7f00000001c0)=',/[\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x12) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x0, 0xb}]}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) timer_gettime(r1, &(0x7f0000000000)) syz_clone3(&(0x7f0000000340)={0x105480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x101301) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580100001000120729bd700000000000ac1e0101000000000000000000000000ac145b09b99921dff0141b0000000000000000000000004e2300010000000302", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4, 0x1}, 0x51, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x3c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x4, 0xffff, 0xe, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x7, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x4, 0x7ff, 0xb8547353], [0x80000000, 0xfffffffc, 0x4, 0x5, 0x7fffffff, 0x1, 0x557, 0x7, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x80000000, 0x10099d, 0x8, 0x0, 0xd, 0x5, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x6, 0x8, 0x2, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0x107, 0x0, 0xffffffff, 0x1, 0x9, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x7, 0x0, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x7, 0x6, 0x5, 0x81, 0x61b7, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff01, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x800009, 0x80000001, 0x80002, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x6, 0xffffffff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x1000, 0xfffffffe, 0x15, 0x8002, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) timer_settime(r1, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}}, &(0x7f0000000540)) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x1bec39af700e7306}) 7m3.022467894s ago: executing program 36 (id=10752): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00') pread64(r0, &(0x7f0000000180)=""/116, 0x74, 0x27e) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x86) fchdir(r2) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3220000, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='hugetlb'}, {@xattr}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000c50000000000010a0224000100000021000000012c2238863c370c36e63897306fcc2205000905810300000000000000"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x4a, &(0x7f0000002900)=0x659c, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_tables_targets\x00') setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010100, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="1e1106f2008e", {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x8, 0xd, 0x8, 0x0, 0x6, 'batadv_slave_0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1002, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000080)={0xd}) setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000000000)=0x8, 0x16) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @mac=@broadcast, @multicast1, @local, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) cachestat(r9, &(0x7f0000000200)={0xffffffffffffffff, 0x80000000}, 0x0, 0x0) 4m50.04478135s ago: executing program 5 (id=12691): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="200000001100010000000000000000002100000006"], 0x20}], 0x1}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x2040403) unshare(0x24000400) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x80a0000}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000240)={0x50, 0x0, 0xa6, {0x7, 0x2b, 0x6, 0x2000000, 0xa61, 0x8, 0xffff7161, 0x1, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f0000000240)=ANY=[], 0xd0060) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1f0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r5) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x85, &(0x7f0000000240)=@req3={0x4, 0x0, 0x0, 0x5, 0x3, 0x10000004}, 0x1c) keyctl$KEYCTL_WATCH_KEY(0x6, r2, 0xffffffffffffffff, 0x4) keyctl$get_security(0x11, r2, &(0x7f0000000100)=""/152, 0x98) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed840, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000037c0)='projid_map\x00') write$binfmt_script(r10, 0x0, 0x0) ioctl$TCSETSF(r9, 0x5404, &(0x7f00000001c0)={0x2, 0x80000001, 0x2, 0x2, 0x6, "d4847e9a30efda1d0deded2621c3c81dff8adc"}) 4m49.836314053s ago: executing program 5 (id=12693): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x201) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000540)=[@acquire], 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0xc) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000140)=[@dead_binder_done], 0x0, 0x0, 0x0}) 4m49.665465065s ago: executing program 5 (id=12696): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x5501, &(0x7f0000000140)) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom$unix(r2, 0x0, 0x0, 0x10023, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r5, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) fcntl$setlease(r1, 0x400, 0x3) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x444200, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r6, &(0x7f0000000c40)=ANY=[@ANYBLOB='lock '], 0xc) futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x454000, 0x0) 4m48.768706248s ago: executing program 8 (id=12710): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r2, 0xaea2, &(0x7f0000000040)={[{0x3, 0x81, 0x0, 0x3, 0x0, 0xc5, 0x70, 0x8, 0x7, 0xc, 0xda, 0x19, 0x800}, {0x0, 0xf3f, 0x2, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x81}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x55, 0xe, 0xffffffffffffffb5}]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) unshare(0x28000600) r3 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) fcntl$addseals(r3, 0x409, 0x8) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000100)="55e170d4d9051dccc8dc5ce0631ec6b9", 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) mount$bpf(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000480)={[{@gid}]}) r7 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x245, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0xce5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xdc, 0x80, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x10, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x6, 0x9, 0x40, 0x8, 0x9}, 0x15, &(0x7f00000003c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x0, 0x8, 0xfffe, [0x0]}]}, 0x2, [{0x8b, &(0x7f00000004c0)=@string={0x8b, 0x3, "f597965c21c22ee73ee58ce2470145cf983a25dd90e9924870efe7864d81605fd318bbb2b0bd2e23e051449620d5dcd8feeba76002f7f98f3d999519728a9f7a8768be5a46f9ad2fd10b8fef54914960c20827e337e6f20d5ae0d6f082317076416d77ba611b70cc0c23f67af634ea7dcceeac95812d1c39972ed267e3e23e6016da105cac4d5cc4ee"}}, {0x75, &(0x7f0000000580)=@string={0x75, 0x3, "f24b0c7d3f23a6e20b3e53350347136624ca4a3d9ac8fca2c1842d174efcc51a0f88ecacc229d2b8ee321781b7b0c4db1f0b2eacc6ae8ffe6f9175ee39757e77b2d8f6e5c524585269603c3bc9ee4e2434f45ad272414a0d8aec4695beb210773b7f37e9dc08b53b6ef6ddb2d0294f084ce691"}}]}) syz_usb_control_io$hid(r7, &(0x7f0000000780)={0x24, &(0x7f0000000600)={0x40, 0x24, 0x68, {0x68, 0x32, "2d3cc3f01c8043b9b6c725968755b6cb1e6ee34f2b121e7a1c340aa3f9558a91f3867539514c78fbfc0f8769482f24946311df33e3fd37048769614ec9b64638839d8b057750f62bd2f3054a7b5e3a4096befbd3ead2dc56fe2d7e4abe93932bb71818109a84"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}, &(0x7f0000000700)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x8, "15528957"}, @global=@item_4={0x3, 0x1, 0x0, "7d482717"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xfb, 0x1, {0x22, 0x759}}}}, &(0x7f00000009c0)={0x2c, &(0x7f00000007c0)={0x0, 0x16, 0x60, "ccf8a248442f3b453d881da9c5b06596ffc1510f173151baa97d0f1eebdd2c618eed571f33c2b93599564b38fe05e29819ad7cb68f21d992cf166a4740772a8ac9b70bdabba28ebf50f1030e95637863d223412364ba9e8d53c83b78d67e9584"}, &(0x7f0000000840)={0x0, 0xa, 0x1}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000008c0)={0x20, 0x1, 0xb1, "4b289eb3b9233fd925a98210feb7be8f7f85adf194b553b70ba0c623d84b4cc72a930d3229247c00de8b465791f91d186fe07e06cc38f989ef94d62115e5fcf55fd644ad3353d9623610eafec5e2dc242f69fd2cdb067d3665f39522b1a855aa2f9ed83cd4b48b6791d7da2377808dd802cddba79ce91a28589c8861e3c4d2735439aa49a0fa08ada64389129e6cd0537115f1088c14bbf6e228c4f4d0714091c93ec6af37025f1f3f98f18ae4e197207a"}, &(0x7f0000000980)={0x20, 0x3, 0x1, 0x1}}) sendmsg$unix(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x20, 0x4000080}, 0x10004040) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r0}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_PIT2(r2, 0xaea2, &(0x7f0000000040)={[{0x3, 0x81, 0x0, 0x3, 0x0, 0xc5, 0x70, 0x8, 0x7, 0xc, 0xda, 0x19, 0x800}, {0x0, 0xf3f, 0x2, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x81}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x55, 0xe, 0xffffffffffffffb5}]}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) unshare(0x28000600) (async) memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) (async) fcntl$addseals(r3, 0x409, 0x8) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000100)="55e170d4d9051dccc8dc5ce0631ec6b9", 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) mount$bpf(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000480)={[{@gid}]}) (async) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x245, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0xce5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xdc, 0x80, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x10, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x6, 0x9, 0x40, 0x8, 0x9}, 0x15, &(0x7f00000003c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x0, 0x8, 0xfffe, [0x0]}]}, 0x2, [{0x8b, &(0x7f00000004c0)=@string={0x8b, 0x3, "f597965c21c22ee73ee58ce2470145cf983a25dd90e9924870efe7864d81605fd318bbb2b0bd2e23e051449620d5dcd8feeba76002f7f98f3d999519728a9f7a8768be5a46f9ad2fd10b8fef54914960c20827e337e6f20d5ae0d6f082317076416d77ba611b70cc0c23f67af634ea7dcceeac95812d1c39972ed267e3e23e6016da105cac4d5cc4ee"}}, {0x75, &(0x7f0000000580)=@string={0x75, 0x3, "f24b0c7d3f23a6e20b3e53350347136624ca4a3d9ac8fca2c1842d174efcc51a0f88ecacc229d2b8ee321781b7b0c4db1f0b2eacc6ae8ffe6f9175ee39757e77b2d8f6e5c524585269603c3bc9ee4e2434f45ad272414a0d8aec4695beb210773b7f37e9dc08b53b6ef6ddb2d0294f084ce691"}}]}) (async) syz_usb_control_io$hid(r7, &(0x7f0000000780)={0x24, &(0x7f0000000600)={0x40, 0x24, 0x68, {0x68, 0x32, "2d3cc3f01c8043b9b6c725968755b6cb1e6ee34f2b121e7a1c340aa3f9558a91f3867539514c78fbfc0f8769482f24946311df33e3fd37048769614ec9b64638839d8b057750f62bd2f3054a7b5e3a4096befbd3ead2dc56fe2d7e4abe93932bb71818109a84"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}, &(0x7f0000000700)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x8, "15528957"}, @global=@item_4={0x3, 0x1, 0x0, "7d482717"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xfb, 0x1, {0x22, 0x759}}}}, &(0x7f00000009c0)={0x2c, &(0x7f00000007c0)={0x0, 0x16, 0x60, "ccf8a248442f3b453d881da9c5b06596ffc1510f173151baa97d0f1eebdd2c618eed571f33c2b93599564b38fe05e29819ad7cb68f21d992cf166a4740772a8ac9b70bdabba28ebf50f1030e95637863d223412364ba9e8d53c83b78d67e9584"}, &(0x7f0000000840)={0x0, 0xa, 0x1}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000008c0)={0x20, 0x1, 0xb1, "4b289eb3b9233fd925a98210feb7be8f7f85adf194b553b70ba0c623d84b4cc72a930d3229247c00de8b465791f91d186fe07e06cc38f989ef94d62115e5fcf55fd644ad3353d9623610eafec5e2dc242f69fd2cdb067d3665f39522b1a855aa2f9ed83cd4b48b6791d7da2377808dd802cddba79ce91a28589c8861e3c4d2735439aa49a0fa08ada64389129e6cd0537115f1088c14bbf6e228c4f4d0714091c93ec6af37025f1f3f98f18ae4e197207a"}, &(0x7f0000000980)={0x20, 0x3, 0x1, 0x1}}) (async) sendmsg$unix(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x20, 0x4000080}, 0x10004040) (async) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) (async) syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r0}}) (async) 4m48.573431611s ago: executing program 8 (id=12713): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = dup3(r0, r0, 0x80000) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) 4m48.536599362s ago: executing program 8 (id=12715): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 64) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000007c0)=@newtclass={0x24, 0x28, 0x1d, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffe0, 0x3a8e58003da8072b}, {0x8, 0xf}, {0xf, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x19, 0x0, &(0x7f0000001dc0)) (async) r6 = open(&(0x7f0000000040)='./file0\x00', 0x28800, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000080)="1015053da9dddd249ad99df72c7464f9", 0x10) (async) getsockopt$inet_tcp_buf(r7, 0x6, 0x21, 0x0, &(0x7f0000000380)) fcntl$setlease(r6, 0x400, 0x1) (async) fcntl$setlease(r1, 0x400, 0x0) (async, rerun: 32) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') (rerun: 32) pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) (async) close_range(r0, 0xffffffffffffffff, 0x0) 4m48.349425394s ago: executing program 8 (id=12717): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fda={0x66646185, 0x8, 0x2, 0x19}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 4m48.335960134s ago: executing program 8 (id=12718): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) pipe2$9p(&(0x7f0000000280), 0x80080) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b"]) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r3 = userfaultfd(0x801) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = getuid() mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200840c, &(0x7f0000000440)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe1}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}, {@blksize}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r7, &(0x7f0000000c40)={0x2020}, 0x2020) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) close(0x3) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x64) fcntl$setstatus(r9, 0x4, 0x42000) close(0x3) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r10, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="9d5d7c3eea0f"}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8085) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x8) preadv2(r1, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000840)=""/56, 0x38}], 0x2, 0xa67, 0x2, 0xf) 4m48.282154145s ago: executing program 8 (id=12719): mkdir(&(0x7f0000000000)='./file0\x00', 0x148) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000340)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000000000001000000000000000000000000400000003000000000000000000010000a200000000000000000000060000000000000000000000000000000000000000000000000004000000000000000100000001000000f9de00000000000000000000000000000000000000000000022000000000000000000000000000000200000000000000030000000000ea000700"/186]) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r3 = dup3(r1, r2, 0x80000) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000080)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}, {@verity_require}]}) sendmsg$tipc(r3, &(0x7f0000000740)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x4}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="6b1a282931ba963e4caafa5810bb33fe329901ee5ca011487b2e25a9a8ad535d0406e84fde845f973372b481418df280f9b8ee36b76ad5cc1f8cd5e8e7c24a28d9", 0x41}, {&(0x7f0000000400)="566b361775db077f2f143891e0b9ef38ad3c47362ff8912bb4d57584452a79ce1ab4bb6428c2c33345c0aa84ca1b3ea272173063e0cb929548cce9266b9fe5557961c8c0f53bca3a728d38b4291b2f3329363ff1438ccef68019e81b67947c6565b57d6e3963a5020ff0b58fe85f9a493adc02c3cfcc3b1dfb26be0c1135449b0126de8a17997950913140adc73fefd5f90f0633d380323c7c066bd0bdf67804f6f63dff1c20f40708c1863b656dd2fe2f1db022f445b7b6bfc8b84d542eb196f7d4324c30c34b60fa53aa354b6f6dc38684b4a96c", 0xd5}, {&(0x7f0000000500)="daf08754f489f11433bf5521d168fae32db2382805782c2ae00607650d7e882b4c14977e5bfbe20086521db84b2e22c19ed2ab612d517cabd64258eb83ce1d6e2c1bce685a40fc011a505d649b8346cbf2d5e837ae966ec04822f9e2afc22fb8c1a921181a595f6dd1ab89a6af4f81609a3c3ee0c8e51b8c7f40b4b73b4816355627850654f16d75e1c2648e35aefb398114375d06ed76", 0x97}, {&(0x7f00000005c0)="c4c5ffa11b539d1478b5877a1799297375ebf47c7df6b90df11ae14d2a5f21163a41e29113e72020c831cbd247746675240c2ac3c30e0479a051a37de84d2f49688bdc86592a3459ac6d33d8aff0bbe3f9da45", 0x53}], 0x4, &(0x7f0000000640)="c0039db3f5adcd091541c5c2f201c19164cc455f17f0447c68c5ef2381bf4d81543809b252588e0596a6b66fb978a32d7ea591ea86ae2b90049c3298839f52c2ee163f9399b114af6313b9059445ea405814167c557aad656d81a4967d272d2a601a00025c2e59a22c98d892c12cee794533ed3d97e64d45a7ba2d5563447145b3291bd1088f17d8a777a93384386823e56517cdbdbb71f7b557299342c7454a8eb866bf432a1bb128f89386c6d9b00ff6997c8880bb902c16b7ed88c2d56013479943d0c51d89b159d755b78612c5c3a2345cbac7a3a3c1e9d7307daccb857558d5f14cfb0571aba5676899f9ba4428ed9408e61fe34d02adb8", 0xfa, 0x60}, 0x8040) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000f00)={0x2020}, 0x2020) 4m46.321452323s ago: executing program 5 (id=12729): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x4e24, @loopback}, {0x2, 0x3, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f00000001c0)="65b80b13e83202117a88586fccf446d4c0666c411853db14d7ccc6b2eecb4ff09fd1f7a43cb3343c0fcd74628a0fd9d51b9170415ab8b23b09da35dda9b16c865e4f45a7da8409b9ab2f301bf5779f2c3592646e29089e1d1c952d55e47319fb8bb5946566d83f734d798d4f3b24e4f4a271e85f1b88cb7c337373f382e33cdc2719de3d55595be56bf0a58021be6532eed904b4823211ccd2ea619c984645215865dc3e6f540c60f61c72eb5b5fc894cb0a7d2573eeea338282e2486193d9e5689daffea34655ab17950cbbd310a244b6", 0xd1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r1}], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"}) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x4e24, @loopback}, {0x2, 0x3, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) (async) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f00000001c0)="65b80b13e83202117a88586fccf446d4c0666c411853db14d7ccc6b2eecb4ff09fd1f7a43cb3343c0fcd74628a0fd9d51b9170415ab8b23b09da35dda9b16c865e4f45a7da8409b9ab2f301bf5779f2c3592646e29089e1d1c952d55e47319fb8bb5946566d83f734d798d4f3b24e4f4a271e85f1b88cb7c337373f382e33cdc2719de3d55595be56bf0a58021be6532eed904b4823211ccd2ea619c984645215865dc3e6f540c60f61c72eb5b5fc894cb0a7d2573eeea338282e2486193d9e5689daffea34655ab17950cbbd310a244b6", 0xd1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r1}], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"}) (async) close(r0) (async) 4m46.256455055s ago: executing program 5 (id=12730): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000380)=0x1, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f0000002440)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, 0x0, 0x0) write(r4, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0xa, 0x4, 0xffffffffffffffff, 0x1, 0x100000000005, 0x7, 0x1, 0xff, 0xffffffffffffffff, 0x2000000b, 0xffff, 0x4, 0x0, 0x105, 0x400000000000006, 0x2], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x0, 0x98, 0xb, '\x00', 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000240)={0xc0000, 0x0, [0x7, 0x8, 0x5, 0x6, 0x0, 0xe, 0x3, 0x5]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="20000000e3e9d5f9c5c308d4112f096330a338688a8951789b71c4628c295c97882148ce07a97695b101f9cab4bc21b3c7fac18f8830be0da7a84b2d4261948abc959feb6d4aa6c7796f04f92a162a9a2edaa9b74019a610c1c68e396f158169b75caa43ce82f77c30eabd959293be5badffce31746b415e7924a6a62b45d68375162a7fa96be29fb7266b5a08a4f5c305c567ad085fcf37997bf8df40b3a738a13692fbaae1572b5d22e557f706b130a912a3f0851c8a23d3397b1e97e93ade59c22df9ed7168027d45c9ab100f7a758b5011ba797eedd8e181424f4f00c9a371fd", @ANYRES16=r7, @ANYBLOB="01002cbd7000fedbdf25110000000c0009800800010006000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a4600, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x1) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000440)={"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"}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(r11, &(0x7f0000000100)='./file0\x00', 0x2, 0xfdf8) 4m45.940381129s ago: executing program 5 (id=12731): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0xfe, 0x2, 0x4038a09, 0x4, @loopback={0xe0}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f000468e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e52af0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0faad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bd9840e7597c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05412d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5effff7fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1bd8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m32.173645197s ago: executing program 37 (id=12719): mkdir(&(0x7f0000000000)='./file0\x00', 0x148) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000340)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000000000001000000000000000000000000400000003000000000000000000010000a200000000000000000000060000000000000000000000000000000000000000000000000004000000000000000100000001000000f9de00000000000000000000000000000000000000000000022000000000000000000000000000000200000000000000030000000000ea000700"/186]) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r3 = dup3(r1, r2, 0x80000) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000080)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}, {@verity_require}]}) sendmsg$tipc(r3, &(0x7f0000000740)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x4}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="6b1a282931ba963e4caafa5810bb33fe329901ee5ca011487b2e25a9a8ad535d0406e84fde845f973372b481418df280f9b8ee36b76ad5cc1f8cd5e8e7c24a28d9", 0x41}, {&(0x7f0000000400)="566b361775db077f2f143891e0b9ef38ad3c47362ff8912bb4d57584452a79ce1ab4bb6428c2c33345c0aa84ca1b3ea272173063e0cb929548cce9266b9fe5557961c8c0f53bca3a728d38b4291b2f3329363ff1438ccef68019e81b67947c6565b57d6e3963a5020ff0b58fe85f9a493adc02c3cfcc3b1dfb26be0c1135449b0126de8a17997950913140adc73fefd5f90f0633d380323c7c066bd0bdf67804f6f63dff1c20f40708c1863b656dd2fe2f1db022f445b7b6bfc8b84d542eb196f7d4324c30c34b60fa53aa354b6f6dc38684b4a96c", 0xd5}, {&(0x7f0000000500)="daf08754f489f11433bf5521d168fae32db2382805782c2ae00607650d7e882b4c14977e5bfbe20086521db84b2e22c19ed2ab612d517cabd64258eb83ce1d6e2c1bce685a40fc011a505d649b8346cbf2d5e837ae966ec04822f9e2afc22fb8c1a921181a595f6dd1ab89a6af4f81609a3c3ee0c8e51b8c7f40b4b73b4816355627850654f16d75e1c2648e35aefb398114375d06ed76", 0x97}, {&(0x7f00000005c0)="c4c5ffa11b539d1478b5877a1799297375ebf47c7df6b90df11ae14d2a5f21163a41e29113e72020c831cbd247746675240c2ac3c30e0479a051a37de84d2f49688bdc86592a3459ac6d33d8aff0bbe3f9da45", 0x53}], 0x4, &(0x7f0000000640)="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", 0xfa, 0x60}, 0x8040) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000f00)={0x2020}, 0x2020) 4m28.839361495s ago: executing program 38 (id=12731): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0xfe, 0x2, 0x4038a09, 0x4, @loopback={0xe0}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m10.946789943s ago: executing program 1 (id=12903): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000042000/0x3000)=nil, 0x400000, 0x3, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500) write$binfmt_script(r2, 0x0, 0xfdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYRES8=r0], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='8-N:2/N'], 0x6a) eventfd(0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x80000, 0x2f0c07f996e5f8c, 0xc, 0x0, 0x0, 0x1000}}, 0x50) open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x41, 0x2) read$FUSE(r6, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="100000", @ANYRES64=r8], 0x10) 4m7.657439561s ago: executing program 1 (id=12916): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0xfffffffffffffffd) syz_usb_connect(0x0, 0x33, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402010102"], 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r1, 0x0, 0x1f00) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x29}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a00)={0x9c, 0x0, &(0x7f0000001e00)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/237, 0xed, 0x2, 0x2d}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000001800)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000001940)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, 0x0}}, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x98, 0x0, &(0x7f0000000640)=[@request_death={0x400c630e, 0x1}, @acquire_done={0x40106309, 0x1}, @register_looper, @increfs_done={0x40106308, 0x1}, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x5, 0x1, 0x10}, @fda={0x66646185, 0x2, 0x0, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/228, 0xe4, 0x1, 0x33}}, &(0x7f0000000100)={0x0, 0x20, 0x40}}, 0x40}], 0x3b, 0x0, &(0x7f0000000440)="82b9bf85601c552c23b52cb0d01c46937fd360055dcafab31320db2333d3c03a59982c4e88b0642be5657082e9cdfa32383c24a4a589191d1d3128"}) 4m6.177529822s ago: executing program 1 (id=12934): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r1, 0x0}]) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x3f5, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x408c0}, 0x60804) r4 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x100) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x13, r5, 0xffffd000) ioctl$EVIOCSFF(r4, 0x40304580, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000500)=[@request_death], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 4m6.020462404s ago: executing program 1 (id=12938): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="4bd6"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) unshare(0x2a020400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000400)={0x0, 0x1, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0xa0}, 0x1, 0xfffff000}, 0x8000) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40106726, &(0x7f00000000c0)) chdir(&(0x7f0000000140)='./file0\x00') read$FUSE(r0, &(0x7f00000093c0)={0x2020}, 0x2020) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',\x00']) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0xc0085504, &(0x7f0000000140)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) mkdirat(r7, &(0x7f0000000000)='./file0\x00', 0x0) 4m5.060677228s ago: executing program 1 (id=12945): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140b000000001400000000000000000000000100000005000000000000002000000000000000000000000700000000440c5ba1ac1414bb000c00010000001400000000000000000000000100000006000000000000006c00000000000000000000000700000044140a11"], 0xe0}, 0x10) (fail_nth: 1) 4m4.95071645s ago: executing program 1 (id=12946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x200000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40086315, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 4m4.862617031s ago: executing program 39 (id=12946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x200000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40086315, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 3m42.961615026s ago: executing program 9 (id=13200): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140b000000001400000000000000000000000100000005000000000000002000000000000000000000000700000000440c5ba1ac1414bb000c00010000001400000000000000000000000100000006000000000000006c00000000000000000000000700000044140a11"], 0xe0}, 0x10) 3m42.959348866s ago: executing program 9 (id=13201): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00'], 0x38}, 0xc804) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000400)=""/251, 0xfb) geteuid() r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x97, &(0x7f0000000240)=ANY=[@ANYBLOB="050f2d42020c100a0020000000000f03008610fb0805be066da21d4ef4ed3d4235e4e89809a531f4dafd94944e64f11fcb7bb5251000c4e51d6a9b6b6ddca0a1db15f9e79f7e8935c990891d1ef057c6393f427801c9b9826d042c64854ccdf91f6c1da4e76aaddb1689fdeb1539fa2cdf9ad8acd184e712860d15404c943c5b91bad5922bade246cfd3d9bdd3"]}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x9) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',debug=0\x00\x00\x00\x0000000000000ff,access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x160e) 3m42.333498875s ago: executing program 9 (id=13212): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000000000001000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140b000000001400000000000000000000000100000005000000000000002000000000000000000000000700000000440c5ba1ac1414bb000c00010000001400000000000000000000000100000006000000000000006c00000000000000000000000700000044140a11"], 0xe0}, 0x10) 3m42.331075176s ago: executing program 9 (id=13213): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"2996acbf16803bb01c4b856180c82669", 0x0, 0x0, {0x1, 0x3}, {0x0, 0x400}, 0x6, [0x1, 0x7, 0x40, 0x2, 0xd1, 0x2, 0x1, 0x7, 0x10000, 0x5, 0x401, 0x100, 0x0, 0x9, 0xf, 0x8]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000240)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xb, "f97f4ca7a0b615"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001240)={{r2, 0xc2c6, 0x2, 0x9, 0x4, 0x1, 0x0, 0x8, 0x7, 0x10001, 0x4, 0x3, 0x7, 0x0, 0x3}, 0x10, [0x0, 0x0]}) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(r3, &(0x7f0000000100)='./file0\x00', 0x2, 0xfdf8) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x68}, {r1, 0x6100}], 0x2, &(0x7f00000012c0)={0x0, 0x989680}, &(0x7f0000001300)={[0xffffffffffffff81]}, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0xa, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0xb, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 3m42.316140606s ago: executing program 9 (id=13214): open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x3, [@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}]}) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000200)={0x1, 0x2, 0xa58c}, 0x10) (async) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000200)={0x1, 0x2, 0xa58c}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20141, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000002c0)={0x1, 0x8, [@multicast, @random="21d2ed0472fd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @remote, @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @broadcast, @broadcast]}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)={0x0, 0x6, [@remote, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @empty, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)={0x0, 0x6, [@remote, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @empty, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0x9, 0x101) (async) syz_open_dev$evdev(&(0x7f0000000380), 0x9, 0x101) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000400)=0x4) r3 = accept4$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14, 0x80000) getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) (async) getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) connect$packet(r3, &(0x7f0000000540)={0x11, 0x1b, r4, 0x1, 0x3, 0x6, @remote}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000580)={0x2, 0x0, [{0x210, 0x0, 0x80000001}, {0x40000097, 0x0, 0x9}]}) write$cgroup_devices(r0, &(0x7f00000005c0)={'b', ' *:* ', 'w\x00'}, 0x8) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000004940)='./file0\x00', &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) statx(r0, &(0x7f0000004a00)='./file0\x00', 0x0, 0x200, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000004bc0), &(0x7f0000004c00)=0x0, &(0x7f0000004c40)) lstat(&(0x7f0000004c80)='./file0\x00', &(0x7f0000004cc0)) (async) lstat(&(0x7f0000004c80)='./file0\x00', &(0x7f0000004cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004e40), &(0x7f0000004e80)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004e40)={0x0, 0x0}, &(0x7f0000004e80)=0xc) r11 = getegid() geteuid() (async) r12 = geteuid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000600)="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", 0x2000, &(0x7f0000005400)={&(0x7f0000002600)={0x50, 0xffffffffffffffda, 0x5, {0x7, 0x2b, 0x400, 0x400, 0x7f, 0x5, 0x5, 0x5, 0x0, 0x0, 0x4, 0x7}}, &(0x7f0000002680)={0x18, 0x0, 0x5, {0x3}}, &(0x7f00000026c0)={0x18, 0x0, 0x43, {0x9}}, &(0x7f0000002700)={0x18, 0x0, 0x9, {0x8000}}, &(0x7f0000002740)={0x18, 0x0, 0x5, {0x1e}}, &(0x7f00000047c0)={0x28, 0x0, 0x101, {{0x9, 0xe3, 0x1, r5}}}, &(0x7f0000004800)={0x60, 0x0, 0xbc, {{0x7fffffff, 0x7, 0x0, 0x3, 0x200, 0xdf, 0x5, 0x7}}}, &(0x7f0000004880)={0x18, 0x0, 0x3}, &(0x7f00000048c0)={0x13, 0xfffffffffffffff5, 0x8, {'$*\x00'}}, &(0x7f0000004900)={0x20, 0xfffffffffffffff5, 0x8, {0x0, 0x2}}, &(0x7f0000004b40)={0x78, 0x0, 0x6, {0x5, 0x8, 0x0, {0x1, 0xcd2, 0x7ff, 0x1, 0x3e7e, 0xa3, 0x0, 0x4, 0xd1, 0xc000, 0x2, r6, r7, 0x80, 0x6}}}, &(0x7f0000004d40)={0x90, 0x0, 0xf, {0x2, 0x1, 0x1019d447, 0x55cf, 0x1, 0x8, {0x4, 0x1ff, 0x3, 0x4f43d9ef, 0xfffffffffffffff9, 0x3, 0x1, 0x5, 0x8, 0x8000, 0x49d, r8, r9, 0x5, 0x73b}}}, &(0x7f0000004e00)={0x40, 0x0, 0x3, [{0x2, 0x0, 0x12, 0x2, '/dev/input/event#\x00'}]}, &(0x7f0000004ec0)={0xb0, 0x0, 0x8720, [{{0x2, 0x2, 0x7, 0xb, 0x4, 0x2, {0x1, 0xb, 0x6, 0x81, 0x9, 0x5, 0xa, 0x0, 0x27c, 0x4000, 0x6, r10, r11, 0x3, 0x6}}, {0x5, 0x100000000, 0x6, 0x5, '\xbb\xbb\xbb\xbb\xbb\xbb'}}]}, &(0x7f0000005040)={0xa0, 0x0, 0xffffffffffffffff, {{0x2, 0x3, 0x2, 0xcf62, 0x0, 0x200, {0x5, 0xffff, 0xd, 0x1, 0x7, 0xa65, 0xae7, 0xffffffff, 0x18a, 0x4000, 0x7, r12, 0x0, 0x9, 0x2}}, {0x0, 0xe}}}, &(0x7f0000005100)={0x20, 0x0, 0x81, {0xa548, 0x0, 0x3}}, &(0x7f00000052c0)={0x130, 0x0, 0x5, {0x1, 0x800, 0x0, '\x00', {0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4000, '\x00', 0x6, 0x10001, 0x8000000000000001, 0x4, {0x2, 0x200}, {0x6d1c, 0x8}, {0x7f}, {0x7, 0x2ca}, 0xb1, 0x5, 0x6, 0x3}}}}) 3m42.246342437s ago: executing program 9 (id=13215): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=']) write$P9_RRENAME(r1, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000200)) 3m42.208164367s ago: executing program 40 (id=13215): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=']) write$P9_RRENAME(r1, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000200)) 3m11.727632526s ago: executing program 7 (id=13593): timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {r1, r2+60000000}}, &(0x7f0000000200)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x1, 0x0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000500)={0x1, 0x0, &(0x7f0000000680)=""/228, &(0x7f00000004c0)=""/64, &(0x7f0000000780)=""/134, 0x100000}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) socketpair(0x18, 0x6, 0x4, &(0x7f0000000300)) r7 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r7, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xdc, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x1, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/163, 0xa3, 0x0, 0x17}, @fda={0x66646185, 0x4, 0x2, 0xa}}, &(0x7f0000000040)={0x0, 0x20, 0x48}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/221, 0xdd, 0x1, 0x1c}, @fda={0x66646185, 0xa, 0x1, 0x8}, @fda={0x66646185, 0x7, 0x2, 0x39}}, 0x0}}], 0x0, 0x0, 0x0}) 3m10.79980831s ago: executing program 7 (id=13599): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd, @fd, @fda={0x66646185, 0xa, 0x2, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd, @fd, @fda={0x66646185, 0xa, 0x2, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 3m10.77469214s ago: executing program 7 (id=13600): truncate(&(0x7f0000000000)='./file0\x00', 0x5) r0 = syz_usb_connect$uac1(0x3, 0xa9, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x81, 0x60, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff6a, 0xb7}, [@selector_unit={0x5, 0x24, 0x5, 0x2, 0x9}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x5, 0x1, "be"}, @processing_unit={0x7, 0x24, 0x7, 0x5, 0x2, 0x9b}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0xfffa, 0x10, "afee60fb3e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x3, 0x9c, 0xe, "28d5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2f, 0x6, 0x2, {0x7, 0x25, 0x1, 0x0, 0x86, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7, 0xe, 0x5c, "f696b4cc"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x9, 0x7, {0x7, 0x25, 0x1, 0x80, 0x6}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xfa, 0x7f, 0xff, 0x20, 0x6}, 0x4d, &(0x7f0000000140)={0x5, 0xf, 0x4d, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x7, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x4, 0x4, 0x7ff, 0xe}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5c, 0x98, 0xda1}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "691e8f04c122a58ce2128d298e29a799"}, @generic={0xb, 0x10, 0xb, "838bc04c2a504f5a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x1, 0x2, 0x3}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x401}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "5a5983d9c4cb3d00a0c4708d952482d88a22e148f817a8ad2b9364318c8b796cb97d9273e9b1d28623c1c7faa6ffccee7aebaf7be04ce82cf95aa8f870"}}, {0x31, &(0x7f0000000240)=@string={0x31, 0x3, "5acf7e622fa3497194cc4bc321583866c1c6006141d94ea96e732590749daa83e4106a058577d8651f33607ca03422"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x816}}, {0x57, &(0x7f0000000340)=@string={0x57, 0x3, "bb46a75a917d43b4f5b9c1db26398ebfc58630b61946021ba662e6f0f942a32e0b56b3032bfc5f48c54490b442d2c3f3ea104109fccf24767362323df4de012263479ad70ca8814064a1db3522e6839680e715249f"}}]}) syz_usb_control_io$uac1(r0, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x20, 0x8, 0x82, {0x82, 0x24, "c03034972d9abdcc3cf63d9766a8086cb3f18d546907a566828ce253a8e4f45220827cd4d93f6c79ad8ce28e5af35fd8ed46ca5e877a8cc00ad0aef0858d31186554a5cd1666a71c87af098919318e09d2867a8bde54e01b72d0ac264746d1e045a9c32e558146aae5e10a77a1ea32c30f26425ad52533c486d6a95348f6afbe"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000000800)={0x44, &(0x7f0000000580)={0x20, 0x16, 0x98, "701a3b87ce00e2ad129f50dbfb03045dbd1e0d5fc69710532f376cb18eb4455b677c2209e8d4a0730a0daafed9672f95db1bcc9f2bef7860446d3b4a3398ad9ab8e321eacb351d8b14d0f1c6ed1d9d06359f30b7793296d73ffc167fe0b76d0b000cdcdecfdaad1fa0f580b56eb3ca5a485658a8945bd964823a704c6130c02de5efecaa72576a069adf029509fd67681413038947951f16"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000006c0)={0x20, 0x81, 0x2, "77b4"}, &(0x7f0000000700)={0x20, 0x82, 0x3, "bc256d"}, &(0x7f0000000740)={0x20, 0x83, 0x2, "6301"}, &(0x7f0000000780)={0x20, 0x84, 0x2, "47c8"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "e677f9"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000900)={0x14, &(0x7f0000000880)={0x20, 0x4, 0x8, {0x8, 0x21, "00738a14efbc"}}, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000940)={0x20, 0xb, 0x43, "84f06db75dbabdcc12fb75aa48517044a5603c64bd7ab07fee7d6a2a1872767a5e637233346ac523be7f4f3915417ec754c7e04f3837296cd181a780c139bfa66a894b"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x80, 0x1c, {0x800, 0x0, 0x9, 0x0, 0x7, 0x5, 0x3, 0x4, 0x4, 0x7, 0x9321, 0x2}}, &(0x7f0000000a80)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000ac0)={0x20, 0x83, 0x2}, &(0x7f0000000b00)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000b40)={0x20, 0x89, 0x2}}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x2) r2 = getpgid(0xffffffffffffffff) prlimit64(r2, 0x7, 0x0, &(0x7f0000000c00)) openat$dir(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x288000, 0xc) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000c80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x27a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xb0, 0x1, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0xaef0, 0xb3, 0x1, {0x22, 0x95d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x4, 0x93}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x3, 0x59, 0x4}}]}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x310, 0x1, 0x2, 0x9, 0x40, 0x3}, 0x11, &(0x7f0000000d00)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x54, 0xf00, 0x5}]}, 0x4, [{0x76, &(0x7f0000000d40)=@string={0x76, 0x3, "71bea5d4f5528e1c1ab12b90d7e02339a30d2ecb0c7f354d2ddfe8d555ae4e1f8d07b153f84b9377088b873d8be0adcd2651b0020dbaa6ae830a9a3c7e065bdfeb949e77c28b52af24865278ed8702310687b10de67eaad9ccf2b5cfa316da44ddc64d3f5ab54c9542c1cea73e0c406d4dc4ed87"}}, {0xd7, &(0x7f0000000dc0)=@string={0xd7, 0x3, "a07b3bcbe8b9d30abad9ef6b7c972b3c118fb4484cd8bffd56e448fb820d5545c3e3b372ed7994705e4171aba408042aeccd5026f926113b9d8423640319ba216c94d3c92394013afcadfd983fe726e8dea2320e04950c9d41154ca35e970d81f4966dd8e0aaf5a983550df306276e2cc6433bd03a785e6f00491e46eb68815394f915b090ba06c4deb0795a5c0f19c80bf1371739be9b697d260b0d06bc3fa2a7ff5ef87292b464a1e82368af098b5def30310cdd30cc1f784eb0d3d716bf5bf38b1b38a48e94202499d161234851da2cd7980e36"}}, {0x51, &(0x7f0000000ec0)=@string={0x51, 0x3, "3c982bdba9925e058a06cb51acdd9724e4e104eb5cddb35cb8ac6b39db5b51bc04c8d3566f086d49250e76137b446760d6a430bda5b0c8f160f73a5c990496aa4284f533dc3b63b8b3b5d62e7630c3"}}, {0x48, &(0x7f0000000f40)=@string={0x48, 0x3, "19931cf37f7194a96aaea2132fda3a36ee084e812d481b053b5b712425c4224b722150b88e3b9cbbc4c63aab8ab65b70d941a523259eec459ffb614c2aa29be99d25226b0e3b"}}]}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000011c0)={0x14, &(0x7f0000001040)={0x20, 0xa, 0xc8, {0xc8, 0x11, "dfcd709c8938ed6daf0e12480dc44f2a984e4c629d400a4b97396f207e5586034f18318afcbca7d40dff6339ea427b2496a1650e99d0d63434877540d37ff3767dbb67acefd351b21ff871a1f1430706e18175afc93ab889a0ff8e2647f55abdefdd6b2904f5ba0b6231641751183cc589b267fa8ac7e30ca4b5505c4a5ffb8faad505bb443acdf46a6d914ade41b04b047067521a472da30d6cced6a557638ddba63bb80735fee2d05adef2519b0c48eb97964cd88731fce16ee427cf79afd6f6c03a898852"}}, &(0x7f0000001140)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "2b14f3139d8c8476f56fc57ea02916064d86adebd0596c7276ac42f6dfaa47acaff12f6108d5defcb5ba6ff634e67861b93ee1508add96cc5cda"}}}, &(0x7f0000001400)={0x34, &(0x7f0000001200)={0x40, 0x9, 0x7c, "f1049ec3349b6a474ef96ef6a3f25da752e26e3b8220973b97062dff491c7128f9db80a53ffce100068ba81608be5f66dcde6c09d11f527b73ddc22714ec8b2d4b22b3b4b1012c795481bbba4ff83ef9ba334b33b8de94ae064a66e99d5a1ce74ffdde6896a32ecbe06da2af086cf7958f97c7aa3f31bc778d671ca6"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x5d}, &(0x7f0000001340)={0x20, 0x0, 0x3a, {0x38, "6d87e313a6314cfe1237dfa697aa8037b56918e2718c64e5cc22c6b15eca4f2e4e69019703d02733d9ee00a9413b97d8e6f8fc04374d04cc"}}, &(0x7f0000001380)={0x20, 0x1, 0x1, 0x9}, &(0x7f00000013c0)={0x20, 0x0, 0x1, 0x6}}) r3 = gettid() syz_open_dev$char_usb(0xc, 0xb4, 0x8) r4 = syz_clone3(&(0x7f0000001600)={0x8000000, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0), {0x2d}, &(0x7f0000001500)=""/115, 0x73, &(0x7f0000001580)=""/31, &(0x7f00000015c0)=[r3, r2, r2, r2, r3, r3, r3, r2, r3, 0x0], 0xa}, 0x58) sched_setscheduler(r4, 0x0, &(0x7f0000001680)=0x7) r5 = socket$netlink(0x10, 0x3, 0x13) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000016c0)) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001840)={0x14, &(0x7f0000001700)={0x40, 0x9, 0xf3, {0xf3, 0x9, "689dde74b932b860e70f1ccf42138f6a66a1177d5e386d831da4c04e0958c26f6b0588b2376eccdf9fdbf5a446830b75811ef02f532ac9b0e28bf4d81c68928e970a407da351058c9a936891ce01c07c88d1c124cdb1e85f0f810fc07466d6d91abb176a95b185b2918d50ec4abec74ad5ebbed5c51ee51016d6cc37ed1f934c2d5164f37848e78312561d2793f1af3924967faab324489d1ba445a0b88c6db472470527f72c6e296cbe7ff5338a723fd978494716f6eac8b0055bf7942762086869a700861c4b7a9f40ef810f5ef10a1fbcc59639d676cdda683bcd9cac0068988f3c8ca85e382f58eafd418e996dca94"}}, &(0x7f0000001800)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001ac0)={0x44, &(0x7f0000001880)={0x0, 0x16, 0x55, "1ea4a81eace1b9dc3305eb3b103239bd31ef2c0f7a88fbfca7fc8e35421e18a343f6b2b9293d6c9dff47c48c0ea324e31d603db833c93d35128c9681eade17c11ffa34986c5febf8eb6eab005a38d73cfcf531b821"}, &(0x7f0000001900)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001940)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000001980)={0x20, 0x80, 0x1c, {0xfff, 0x2, 0x66d, 0x3, 0x1, 0x1, 0x5, 0x8, 0x1, 0x4, 0x7, 0x9}}, &(0x7f00000019c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000001a00)={0x20, 0x83, 0x2}, &(0x7f0000001a40)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000001a80)={0x20, 0x89, 0x2, 0x1}}) r6 = socket$netlink(0x10, 0x3, 0x6) fcntl$setlease(r6, 0x400, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001b80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000003bc0)={0x50, 0x0, r8, {0x7, 0x2b, 0x4, 0x20001040, 0x3, 0xad4, 0x6, 0x7, 0x0, 0x0, 0x50, 0x8}}, 0x50) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) read$FUSE(r7, &(0x7f0000003c40)={0x2020}, 0x2020) r9 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000005c80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xc0, 0xe2, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x2, 0xf7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x3, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x8, 0x5}}]}}}]}}]}}, &(0x7f0000005d80)={0xa, &(0x7f0000005cc0)={0xa, 0x6, 0x310, 0xc, 0x6, 0x0, 0x8, 0x7c}, 0x19, &(0x7f0000005d00)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba8e56dcb296cb10d2be668e1a7589ca"}]}, 0x1, [{0x4, &(0x7f0000005d40)=@lang_id={0x4, 0x3, 0x813}}]}) syz_usb_control_io$printer(r9, &(0x7f0000005e40)={0x14, &(0x7f0000005dc0)={0x0, 0x31, 0x38, {0x38, 0x24, "75ac07458dfe041c656ae78c63a32efc1f1fcc2212b9e86cea3163e37df86db0f4da3801aa2c2a454128153e1589f0d334f2395f0cd0"}}, &(0x7f0000005e00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}}, &(0x7f0000006100)={0x34, &(0x7f0000005e80)={0x20, 0x5, 0x68, "2df6b9eb5c46d114563a5a497a871f16c6d913d6d8a42e270c7d40671e10d53817f178d36ec40fe40c3fcc9549bc34b6b81fab0736bcb75e02bc7a146fc4780b2cd8ff66b0fe28adbe51f523dcb6ad7ea4656c39411d2aa6aa374932f4629f3f1ba638690df8f0a2"}, &(0x7f0000005f00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000005f40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000005f80)={0x20, 0x0, 0xd2, {0xd0, "d302133c0aa5d62719bf98f82372d70c0135175ec406f016c0f155ffb2ce3baebf9980bb956af4b362072d62ef5bca0e7ee94a06b3b029ee78dd0f8ddb3a27f1dc487a17ccc70def1ad561a7b001ff447fbb9486bb078b06790a02ba2c6ebb6cfb928f81796e30c5c7619c47a005aee8a1e2b89a8965dbdb79ebe05b22a17a2656df3b2eea3f72debe6634d52fc4bd3c0a77ae6bd073643b58338be49a7f4eec2a118e0bbc135d7bbb416aaa64b6f2d709509d079f6f2976308b61bf5176b6a9342aa070f1cb9492466740c068bddc9f"}}, &(0x7f0000006080)={0x20, 0x1, 0x1, 0x80}, &(0x7f00000060c0)={0x20, 0x0, 0x1, 0x25}}) read(r7, &(0x7f0000006140)=""/3, 0x3) 3m10.185925309s ago: executing program 7 (id=13601): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$FIONCLEX(r0, 0x5450) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60e41, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000200)={'bond0\x00', {0x2, 0x0, @empty}}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="9f7aa9878b0031955d3915826ab013291b0fcb6e980cc563c0ca89c71982cfc188183ff91a267a9cf8e3c599c8012afa0c2a38897dc71f1a30ba029128632a434a64cf9e59ffbc3f0cc12a9de7a9cae03bd45e1579172e6ffeb296d812e9ef85a852481fd89212363ab22d"}, {&(0x7f0000000080)="01c9eb8b5ecd42dcf1ce7e9ee6087669db8e9fdd53779bc96a37fcd90eee040267f24de3e8b1542df65b64bc6b4e067af39a86e4b4bd983cae1014f6d17ac2e8a052e6de424d888772357c1d3e81a53f57ec7adbbf18f71a47458f8bbf5ea73d10270a8d86a38b08533a045fb46b40cdc42114ee0379c74a3d85aa8acdaa3855ebb13d69539aa453e3b73253ba8c347c778e74bb5ae8afab41dbceea3e8fed8abb5145963d2b2146530a673ffbe80b0fefae39d6c4b0eeca5979f2b7a5cebf7071512868"}, {&(0x7f0000000180)="be6025e68f6b4e0346d120570ed1e10f889e56"}], 0x2) 3m10.10135697s ago: executing program 7 (id=13602): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x78, 0x0, 0x7fff, {0x0, 0xf6, 0x0, {0x6, 0x8, 0x9, 0xffffffffffffff81, 0x200000010001, 0x3, 0x837d, 0x7, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x800, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2, 0xffffffff}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0x5, 0x7ff, 0x0, {0x2, 0x8000000, 0x6, 0x0, 0xffffffff, 0x3, 0x201, 0x2, 0x42, 0xc000, 0x0, 0x0, r4, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = getegid() (async) lstat(&(0x7f00000004c0)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x4}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4}], {0x4, 0x4}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x2, r4}, {0x8, 0x1, 0xee01}, {0x8, 0x5, r5}, {0x8, 0x887dca72a4bcf013, r6}], {0x10, 0x7}, {0x20, 0x3}}, 0x64, 0x0) (async) r7 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000140)='syz0\x00', 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r10, &(0x7f0000000240)=ANY=[@ANYBLOB='unlock '], 0xe) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000083000000360000030008006dd0994d115218a65364cc8300000000008158aaa3bf0e020e7f224c71e56544bcd9f96340c580d4247995d0e12988e4e37dec6ad6a9505a91031ce3fa49100000000000000071866737c32115a7da4b068b9000000000000000000000000000002345"]) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) read(r0, &(0x7f0000000000)=""/175, 0xfffffe14) 3m10.100557s ago: executing program 7 (id=13603): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000082, 0x0, 0x90000000}]}) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x3c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000000000000000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x3c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000000000000000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) pipe2$9p(&(0x7f0000000140), 0x4000) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) getresuid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)=0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000000, &(0x7f00000029c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@privport}, {@version_L}, {@cache_mmap}, {@fscache}], [{@flag='nomand'}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xfb\xeb\xde\xe3\xbd\x9c\xac\x0f\xa7J0\xf6l\xd2Ah\xb2!\x14Q\x98p\xb8\x9f(\xff<\xd8\x11\xcf_!\xd0^\xad\x11\b\x00\xa3\x9e\xee\xc1\xc1\xefHo<\x9a\xcc\xd7\xcdo/\xd2?`\xce\xb2\xfa\xf2ih\x11r\x1a\xa5\x04\a\xbb\xb9?b\xf5\xb7\x84rB\xca\xc6\x05\xb8\xba\x9c\xfb\xf3\x83\xbb\xa0Mu\xc5\x9bTE\xb5\x93\xca\xe1T\xdaq\'\x02\xaf\xe5\x84yRd\x9c\x03u>\x05\xcf\x8d'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0xa0, 0x61, 0x62, 0x36, 0x37, 0x32, 0x65], 0x2d, [0x63, 0x35, 0x35, 0x35], 0x2d, [0x65, 0x66, 0x36, 0x32], 0x2d, [0x35, 0x37, 0x36], 0x2d, [0x5d, 0x62, 0x33, 0x64, 0x36, 0x32, 0x33, 0x65]}}}, {@audit}, {@uid_eq={'uid', 0x3d, r8}}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000000, &(0x7f00000029c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@privport}, {@version_L}, {@cache_mmap}, {@fscache}], [{@flag='nomand'}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xfb\xeb\xde\xe3\xbd\x9c\xac\x0f\xa7J0\xf6l\xd2Ah\xb2!\x14Q\x98p\xb8\x9f(\xff<\xd8\x11\xcf_!\xd0^\xad\x11\b\x00\xa3\x9e\xee\xc1\xc1\xefHo<\x9a\xcc\xd7\xcdo/\xd2?`\xce\xb2\xfa\xf2ih\x11r\x1a\xa5\x04\a\xbb\xb9?b\xf5\xb7\x84rB\xca\xc6\x05\xb8\xba\x9c\xfb\xf3\x83\xbb\xa0Mu\xc5\x9bTE\xb5\x93\xca\xe1T\xdaq\'\x02\xaf\xe5\x84yRd\x9c\x03u>\x05\xcf\x8d'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0xa0, 0x61, 0x62, 0x36, 0x37, 0x32, 0x65], 0x2d, [0x63, 0x35, 0x35, 0x35], 0x2d, [0x65, 0x66, 0x36, 0x32], 0x2d, [0x35, 0x37, 0x36], 0x2d, [0x5d, 0x62, 0x33, 0x64, 0x36, 0x32, 0x33, 0x65]}}}, {@audit}, {@uid_eq={'uid', 0x3d, r8}}]}}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@ignoreqv}]}}) getresuid(&(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r9, &(0x7f0000000980)={0x2020}, 0x2020) (async) read$FUSE(r9, &(0x7f0000000980)={0x2020}, 0x2020) 2m53.997422092s ago: executing program 41 (id=13603): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000082, 0x0, 0x90000000}]}) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x3c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000000000000000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x3c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000000000000000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) pipe2$9p(&(0x7f0000000140), 0x4000) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) getresuid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)=0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000000, &(0x7f00000029c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@privport}, {@version_L}, {@cache_mmap}, {@fscache}], [{@flag='nomand'}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xfb\xeb\xde\xe3\xbd\x9c\xac\x0f\xa7J0\xf6l\xd2Ah\xb2!\x14Q\x98p\xb8\x9f(\xff<\xd8\x11\xcf_!\xd0^\xad\x11\b\x00\xa3\x9e\xee\xc1\xc1\xefHo<\x9a\xcc\xd7\xcdo/\xd2?`\xce\xb2\xfa\xf2ih\x11r\x1a\xa5\x04\a\xbb\xb9?b\xf5\xb7\x84rB\xca\xc6\x05\xb8\xba\x9c\xfb\xf3\x83\xbb\xa0Mu\xc5\x9bTE\xb5\x93\xca\xe1T\xdaq\'\x02\xaf\xe5\x84yRd\x9c\x03u>\x05\xcf\x8d'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0xa0, 0x61, 0x62, 0x36, 0x37, 0x32, 0x65], 0x2d, [0x63, 0x35, 0x35, 0x35], 0x2d, [0x65, 0x66, 0x36, 0x32], 0x2d, [0x35, 0x37, 0x36], 0x2d, [0x5d, 0x62, 0x33, 0x64, 0x36, 0x32, 0x33, 0x65]}}}, {@audit}, {@uid_eq={'uid', 0x3d, r8}}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000000, &(0x7f00000029c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@privport}, {@version_L}, {@cache_mmap}, {@fscache}], [{@flag='nomand'}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xfb\xeb\xde\xe3\xbd\x9c\xac\x0f\xa7J0\xf6l\xd2Ah\xb2!\x14Q\x98p\xb8\x9f(\xff<\xd8\x11\xcf_!\xd0^\xad\x11\b\x00\xa3\x9e\xee\xc1\xc1\xefHo<\x9a\xcc\xd7\xcdo/\xd2?`\xce\xb2\xfa\xf2ih\x11r\x1a\xa5\x04\a\xbb\xb9?b\xf5\xb7\x84rB\xca\xc6\x05\xb8\xba\x9c\xfb\xf3\x83\xbb\xa0Mu\xc5\x9bTE\xb5\x93\xca\xe1T\xdaq\'\x02\xaf\xe5\x84yRd\x9c\x03u>\x05\xcf\x8d'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0xa0, 0x61, 0x62, 0x36, 0x37, 0x32, 0x65], 0x2d, [0x63, 0x35, 0x35, 0x35], 0x2d, [0x65, 0x66, 0x36, 0x32], 0x2d, [0x35, 0x37, 0x36], 0x2d, [0x5d, 0x62, 0x33, 0x64, 0x36, 0x32, 0x33, 0x65]}}}, {@audit}, {@uid_eq={'uid', 0x3d, r8}}]}}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@ignoreqv}]}}) getresuid(&(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r9, &(0x7f0000000980)={0x2020}, 0x2020) (async) read$FUSE(r9, &(0x7f0000000980)={0x2020}, 0x2020) 2m48.891040836s ago: executing program 4 (id=13753): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xb, 0x3}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000400)=@ethtool_cmd={0x4d, 0x2, 0xffbf, 0xffff, 0x7, 0x6, 0x40, 0x80, 0x5, 0xb4, 0x5, 0x81, 0x6, 0x2c, 0x40, 0x8, [0x8, 0xc]}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xb4, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m48.788910138s ago: executing program 4 (id=13755): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000240)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) 2m48.724484608s ago: executing program 4 (id=13756): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f000016e000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x3, 0x2}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r3, 0x10e, 0xb, 0x0, &(0x7f0000000040)) chroot(0x0) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r5, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffffffffffb) (async) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2m48.64670841s ago: executing program 4 (id=13758): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/76, 0x4c}], 0x7}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x34}}, 0x0) socket$inet6(0xa, 0x5, 0x0) 2m45.319519477s ago: executing program 4 (id=13786): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) 2m45.217259719s ago: executing program 4 (id=13790): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r0, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m45.13566531s ago: executing program 42 (id=13790): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r0, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 40.635300045s ago: executing program 6 (id=15523): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) fstat(0xffffffffffffffff, 0x0) (async) setreuid(0x0, 0x0) (async) syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x7, 0x0, 0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) (async, rerun: 64) ioctl$BLKFLSBUF(r2, 0x1261, 0x0) (rerun: 64) 40.420543777s ago: executing program 6 (id=15525): clock_nanosleep(0x1, 0xfcfd, &(0x7f0000000000), 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x200}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) 40.290288319s ago: executing program 6 (id=15527): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002300), 0x800, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, 0x0) read$char_usb(r2, &(0x7f0000002440)=""/139, 0x8b) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f0000000340)={[{@readahead={'readahead', 0x3d, 0x6}}]}) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0xff}}, {@access_uid}]}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x160e) 40.022145833s ago: executing program 6 (id=15529): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) socket$unix(0x1, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000d40)={0x0, 0x0, 0xd6, &(0x7f00000004c0)={0x5, 0xf, 0xd6, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x7fffff9, 0xf000, 0x0, [0x1013f0f, 0x1800f, 0x0, 0x7, 0x3f00, 0xf]}, @generic={0x6b, 0x10, 0xa, "51426fe02bb39a227ab0fce579b905dc7e657032b1e936485d482dfa7b185a9359a33760413a6ff5e85da6f00c14fd3a8529127d11466a87f70e1d838b88e8f4d2d73ac46f70287b6b6a56670c80980614c6b0e61b34b5df3c9d88e9ac39a7649108ffbdc84639cf"}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x3, 0xff0f, 0xfff, [0x30, 0x0, 0xff30, 0xff0000, 0x30]}, @generic={0x22, 0x10, 0x4, "397998ab274886087e9882c1aab537e59ec62d3b9274d68f9a098ac370dda0"}]}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000ddfd99685c0000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c000000020000"], 0x23c}}, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10, 0x581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550c, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000}) 37.007685556s ago: executing program 0 (id=15569): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x1, 0xeeee0000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) (async, rerun: 64) r4 = syz_clone3(&(0x7f00000002c0)={0x80000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), {0x2e}, &(0x7f00000001c0)=""/46, 0x2e, &(0x7f0000000200)=""/116, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) (rerun: 64) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000240)="ea", 0x1) (async, rerun: 64) r5 = socket$inet(0x2, 0x2, 0x0) (rerun: 64) close(r5) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="ea00000198000000", 0x8) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000340)={r4, 0x1, 0x4fe1}) (async) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000240)={0x60, 0x4000000, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4, 0x0, 0x0, 0x8, 0x40, 0x15, 0x4d}) syz_pidfd_open(0x0, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) 36.641642922s ago: executing program 0 (id=15572): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x4, 0xfd, 0x0, 0x1, 0x7e, 0xd5, 0x99, 0x8, 0x5, 0x9, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x6, 0x5, 0x12, '\x00', 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) ioctl$BLKRRPART(r0, 0x125f, 0x0) 35.972546991s ago: executing program 0 (id=15577): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x81, @any, 0x0, 0x2}, 0xe) listen(r2, 0x5) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000002c0)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r3, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x40045402) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 35.904008922s ago: executing program 0 (id=15579): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f000098e000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0xf6892000) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, 0x0) (async) write$FUSE_OPEN(r1, &(0x7f0000000b40)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x2, 0x14, 0x8, 0x9, 0x9, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x7633, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}]}, 0x48}}, 0x4041) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x301101) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da0000"]) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000bc0), &(0x7f0000000c40)=0x68) (async) bind$pptp(r6, &(0x7f0000000b80)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) (async) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000300)={0x24, &(0x7f0000000200)={0x20, 0x22, 0xde, {0xde, 0x23, "dc18c3dae51641386eb1cb44e8602f36830c1209f71cdd3ba06dcf793d14633b492f8c2095f10dbf785c1d0ba711f455c6ec4df21d44646be6d1cf041b4e2f124bfeed51bbf8d3957fe2420557d328154704216ea22e78da1189a2b7c3df313fac84668b714eaac68e6d936485be01077a0f3e9efa4a4d56d878eac85a1c82dc6e5de8ef4d7bd326dfd2b2a98ca6a2f72177899e8465d2cec0961497841f1806d130dd19407236a0fbee0ac962a1a6606ddad0d3f6733822338510074f0129659843127b12b6a769fc41879a7d4b1170bad0ff581537db280890075d"}}, 0x0, 0x0, 0x0}, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x0, 0x6, 0x23, "507401cb6552a5f256bc99ab081c376b63ce01b48ffea8680cf3fb25cade8b6c1725a8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, &(0x7f0000000480)={0x2c, &(0x7f0000000080)={0x40, 0x2, 0xf1, {0xf1, 0xe, "cec312ccd99d61d3f38c5caa539d245f9bbbd546bac8ec473b577f7ccc902cf422068db20de722718a8bbb8c0bc03d8fcd74584746cb9d8c7eb37cb51fc37107e519e8496ff244df475dda62eef1c363d73336a9e554aa33796d121f8c249f81e47aa298f7065adda79e0d4f204056b6784e782ff9683c3cae11f58561a41f06eeb2c1b40efb90a93ac94fb6e0ea42ccec0a754123411f48361b1309065ca6e71d3915d973c1c50f95f4f821b1fa5e83980cdb0a20fb8bde6410616c88b66ac9a078e6e2ba6c67c7dcf2c86c43099352c33e3a9e3d1dec92efe8d34314a7a109bf19bb6b2c4956a71cf628c1c9cdf1"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, &(0x7f0000000380)={0x0, 0xf, 0xa1, {0x5, 0xf, 0xa1, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x6, 0x7, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "5c99b41c36e3a8d17e54d63fe2aa2b01"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x45, 0xc, 0x0, 0x6eb, 0x7}, @generic={0x73, 0x10, 0xa, "42f44484ceef8d1159931f1ae7eae7a00a35ce6d0822c1f480fb7bfe2007b9c5c32f147e93b2dafcdba80de77f304d1ea2422fc9db881fda1ae9c13164e1bda5fdb8625d9c70a18f8786d703fcea29cb7d888fb5ab7b2d33df783d0c89e705b148dfb427e73d1d53b59290000f6a68b9"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2e, 0x70, 0x8, 0x8, "2741ea67", "dc20b20a"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x10, 0xb1, 0x2, 0x68, 0x400, 0x560}}}, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x20, 0x10, 0x41, "0928ca3b29f906fa697d6c554cd8f2e5eb368100a5c9c2dd1a395690e7a977acbdcd7f25c864606a5577ce17db2e316d8fe3d59a870f54d73680a02f218cb271f5"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x200, 0x80, [0xf77f]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "b5c3"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000800)={0x40, 0x19, 0x2, "d3a5"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xe0}}) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0xef, 0x1) 35.40196794s ago: executing program 6 (id=15587): syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x9, 0x90, 0x4, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xfffe, 0xf3, 0x67}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x81, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0xc, 0x7f}}}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240), &(0x7f0000000300)=@v3={0x3000000, [{0x4, 0x9}, {0x0, 0x4}], r0}, 0x18, 0x2) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) mount$9p_unix(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10400, &(0x7f00000003c0)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0x147a5000) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f0000000000)) 34.117307488s ago: executing program 3 (id=15594): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8000000000020104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280"], 0x80}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x64000600) (async) syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x1d39, &(0x7f0000000180)={0x0, 0x2079d9, 0x0, 0x1, 0x29d}, 0x0, 0x0) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x3f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0xb, {0x9, 0x21, 0x2, 0x10, 0x1, {0x22, 0xd1e}}, {{{0x9, 0x5, 0x81, 0x3, 0x408, 0x1, 0x5, 0x2}}}}}]}}]}}, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) 34.095783698s ago: executing program 3 (id=15595): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x69c517e28be01d7d, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@arm64={0x77, 0x0, 0x1, '\x00', 0x8}) inotify_add_watch(0xffffffffffffffff, 0xfffffffffffffffe, 0x700008c0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0']) ftruncate(0xffffffffffffffff, 0xc17a) lseek(0xffffffffffffffff, 0x2000, 0x4) io_setup(0x201, 0x0) io_submit(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r5, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x81, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, r7) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000080)={0x100000, 0x105000, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 34.046177349s ago: executing program 3 (id=15596): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) socket$unix(0x1, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000ddfd99685c0000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c000000020000"], 0x23c}}, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10, 0x581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550c, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000}) 33.95745683s ago: executing program 3 (id=15597): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e400f6"], 0x66) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0103040000000407a608"], 0x0, 0x0, 0x0}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x4ab00, 0x0) r5 = epoll_create1(0x80000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030109025c00020108007f09358a6a80df6a4500334efcb5b504000001020d00000524060001052400ff0f0d240f010b000000010100040e06241ae4291209058103080002f4000904e5ffff010d00000904010102020d"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x2000000) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000200)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0xfffffffd, 0x8, 0x29, 0x10, "0062ba7d8200000000f7ffffff00"}) r7 = syz_open_pts(r4, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r8, 0x80045519, &(0x7f0000000040)=0x5) 33.932422971s ago: executing program 2 (id=15598): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000180)=@gcm_256={{}, "2474794233890da1", "d830005894bf527ae179a740634a1236f3678de8ea2d0d661607e24300", "5615d9f5", "7c5cec21691a43fe"}, 0xfe2e) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC=0x0], 0x9) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x2000008000) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) pread64(r1, &(0x7f0000000000)=""/31, 0x1f, 0x3ff) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x30, r1, 0x4d75d000) 33.885263952s ago: executing program 2 (id=15599): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/92, 0x5c, 0x0, 0x3c}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/92, 0x5c, 0x0, 0x3c}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 33.661060035s ago: executing program 2 (id=15600): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff803000000000000000000080008000d0000000000", 0x24) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x2c011, r0, 0xd0eb4000) 33.660682345s ago: executing program 2 (id=15601): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = pidfd_getfd(r0, r1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x0, 0xc, 0x3, 0x1}, {0x4, 0x9, 0x6, 0x200}, {0xf, 0x0, 0x65, 0x2}, {0x2, 0xc, 0x0, 0xcc}, {0x8, 0x6, 0x80, 0xfffffffa}, {0x0, 0x0, 0x8, 0x6ab}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000000)={0x1f, 0x0, 0x0}) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) 33.437781188s ago: executing program 2 (id=15602): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800), 0x40000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) capset(&(0x7f0000005980)={0x19980330}, &(0x7f00000059c0)={0x1, 0xfff, 0x9, 0x5, 0x3, 0x9}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r4}, 0x14) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}], 0x28}}], 0x1, 0x4000005) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r4, 0x4, 0x1, 0x44, 0x9, 0xa0, @mcast1, @mcast2, 0x10, 0x7800, 0x6, 0x9}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xa, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x3}], 0x57, 0x0, &(0x7f0000000000)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e62005000000000000000000000000000000000000003229cff96eb47c0000000000"}) 33.405260828s ago: executing program 3 (id=15603): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x801b, &(0x7f0000000800)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r0, @ANYBLOB="2c005b25efbe171a2bca19138a1838018692fa9bcf555b90836bd26d07254ecfef9458f8a32ecfbf8d80c8f6f50c3d73c144425e26ac96ffdaa0772c46055adda2be0cfc7d003ffb05538aba6b3a4ff7d86191d17ebac61b0859314579d6074cd65af786a24bd3ddda8c18d101d6de77f36c28dc61116e93ece54b5a9a14b80a72f151153724aa6b4d615f4675ce2c8d6683334c271b4ea85f30013920510f5506a0cc4fbb4b7e34a31a4a7be5cb44ac04d46a6804979720e895ab0b248db728b7d1dbe70ab271245accea"]) ptrace$getregset(0x4205, 0x0, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1000000, @remote, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="842a0a65bd", 0x5) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x8000) memfd_create(&(0x7f0000000300)='gre0\x00', 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000540), 0x53, 0x0, &(0x7f00000006c0)="fd500af25c361e948d2e42cbea4b418ac2e7bd2eba38a9fcda3493dc8cc14e7317d1d2c0f902000000ee4f30474f7646a18bcedb487cf4748921271efcbed2a0967d8b09bd443400ab065b60c2334aa0b2899a"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8001) r6 = getpgid(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r6}) sendmmsg$unix(r4, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000780)={0x2e, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x352}, @generic={0x0, 0xd, "67b97e19e84153304945438d13"}, @pad1, @calipso={0x7, 0x8, {0x0, 0x0, 0xe1, 0x4}}, @hao={0xc9, 0x10, @loopback}, @generic={0x8c}]}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', r10, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @local}}}}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 33.3094271s ago: executing program 2 (id=15604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="7a391670fc4a4e84132acb9e190403e146c841316fc4631c9aa062f25ca49bcb4ab6cfbb54a77af51bf33445a9f136ad3a8a7d81e2ae25f90f6452d2ef5c74806c7d9e69c6d94563f481f4848855aa247db96d83cac651a8bd3b13c0b111"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000395000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000000)="f33e0f068fc9180123262e0f009a0600bad00466ed440f20c0663504000000440f22c00fb46d000fc73bba4100b8fb00ef0fc7b400000f017e36", 0x3a}], 0x1, 0x1, &(0x7f0000000140)=[@cstype3={0x5, 0x9}], 0x1) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000001a00)={{&(0x7f0000978000/0x3000)=nil, 0x3000}, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001300010002000000f6dbdf2507000000130000000800ff00", @ANYRES32, @ANYBLOB="0c0080"], 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0x1a, r8, 0xb9, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 32.513362441s ago: executing program 3 (id=15605): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) socket$unix(0x1, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000ddfd99685c0000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c000000020000"], 0x23c}}, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10, 0x581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550c, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000}) 31.725761213s ago: executing program 0 (id=15606): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x1222080, 0x0, 0xfffffffffffffdd5, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r2, &(0x7f0000002780)=[{&(0x7f00000005c0)="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", 0x9c1}], 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) syz_usb_connect(0x1, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x26, 0xa6, 0x9, 0x8, 0x7a6, 0x7c2, 0x3712, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xf9, 0x10, 0x4, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x6f, 0xaa, 0xd}}]}}]}}, &(0x7f0000001440)={0x0, 0x0, 0x16, &(0x7f0000001080)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x4, 0x80, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xf, 0x5aec}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async) syz_usb_connect(0x1, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x26, 0xa6, 0x9, 0x8, 0x7a6, 0x7c2, 0x3712, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xf9, 0x10, 0x4, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x6f, 0xaa, 0xd}}]}}]}}, &(0x7f0000001440)={0x0, 0x0, 0x16, &(0x7f0000001080)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x4, 0x80, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xf, 0x5aec}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) fsetxattr$security_ima(r3, 0x0, &(0x7f0000000140)=@v2={0x3, 0x1, 0xc, 0x66b7, 0x2d, "cd5dd39c760bfe14430096d73df1ab49794c983ee1ee9870c024d91428c5d2230fb18ed939277a90227daee307"}, 0x36, 0x2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x3, 0x1000, 0x1000, &(0x7f0000ff3000/0x1000)=nil}) 31.455560086s ago: executing program 6 (id=15607): socket$tipc(0x1e, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xa, 0x4, 0xffffffffffffffff, 0x1, 0x100000000005, 0x7, 0x1, 0xff, 0xffffffffffffffff, 0x2000000b, 0xffff, 0x4, 0x0, 0x105, 0x400000000000006, 0x2], 0x8000000, 0x141200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0xc0000, 0x0, [0x7, 0x8, 0x5, 0x6, 0x0, 0xe, 0x3, 0x5]}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e61740000000000000013000000000000000000000000000000000000000000020000"], 0x48) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)) 21.341460272s ago: executing program 0 (id=15608): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) socket$netlink(0x10, 0x3, 0xb) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x8044, &(0x7f00000003c0)={0x11, 0x806, r1, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={[{@huge_advise}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) 15.109456392s ago: executing program 43 (id=15605): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) socket$unix(0x1, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000ddfd99685c0000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c000000020000"], 0x23c}}, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10, 0x581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550c, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000}) 11.891333718s ago: executing program 44 (id=15604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="7a391670fc4a4e84132acb9e190403e146c841316fc4631c9aa062f25ca49bcb4ab6cfbb54a77af51bf33445a9f136ad3a8a7d81e2ae25f90f6452d2ef5c74806c7d9e69c6d94563f481f4848855aa247db96d83cac651a8bd3b13c0b111"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000395000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000000)="f33e0f068fc9180123262e0f009a0600bad00466ed440f20c0663504000000440f22c00fb46d000fc73bba4100b8fb00ef0fc7b400000f017e36", 0x3a}], 0x1, 0x1, &(0x7f0000000140)=[@cstype3={0x5, 0x9}], 0x1) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000001a00)={{&(0x7f0000978000/0x3000)=nil, 0x3000}, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001300010002000000f6dbdf2507000000130000000800ff00", @ANYRES32, @ANYBLOB="0c0080"], 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0x1a, r8, 0xb9, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 45 (id=15607): socket$tipc(0x1e, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xa, 0x4, 0xffffffffffffffff, 0x1, 0x100000000005, 0x7, 0x1, 0xff, 0xffffffffffffffff, 0x2000000b, 0xffff, 0x4, 0x0, 0x105, 0x400000000000006, 0x2], 0x8000000, 0x141200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0xc0000, 0x0, [0x7, 0x8, 0x5, 0x6, 0x0, 0xe, 0x3, 0x5]}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e61740000000000000013000000000000000000000000000000000000000000020000"], 0x48) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)) kernel console output (not intermixed with test programs): vc: denied { shutdown } for pid=8800 comm="syz.0.14013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1000.562638][ T36] audit: type=1400 audit(951.830:182936): avc: denied { write } for pid=8800 comm="syz.0.14013" path="socket:[185010]" dev="sockfs" ino=185010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1000.722857][ T8812] overlayfs: failed to resolve './file1/file0': -2 [ 1000.775064][ T8811] kvm_pr_unimpl_wrmsr: 649 callbacks suppressed [ 1000.775086][ T8811] kvm: kvm [8809]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x7c2 [ 1001.350408][T27551] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 1001.566346][ T8840] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1001.566372][ T8840] rust_binder: Read failure Err(EFAULT) in pid:131 [ 1002.227157][T27551] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1002.304286][ T8875] overlayfs: failed to clone upperpath [ 1002.355175][ T8877] /dev/loop0: Can't lookup blockdev [ 1002.412464][T27551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.426964][T27551] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1002.451514][T27551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.461542][T27551] usb 4-1: config 0 descriptor?? [ 1003.058411][T27551] holtek_kbd 0003:04D9:A055.006C: unknown global tag 0xc [ 1003.065587][T27551] holtek_kbd 0003:04D9:A055.006C: item 0 0 1 12 parsing failed [ 1003.074663][T27551] holtek_kbd 0003:04D9:A055.006C: probe with driver holtek_kbd failed with error -22 [ 1003.255141][ T8910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1003.281908][T27543] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1003.324086][T27543] hid-generic 0000:0000:0000.006D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1003.366054][ T8910] rust_binder: Error in use_page_slow: ESRCH [ 1003.366083][ T8910] rust_binder: use_range failure ESRCH [ 1003.381660][ T8910] rust_binder: Failed to allocate buffer. len:4192, is_oneway:false [ 1003.392601][ T8910] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1003.410528][ T8910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:957 [ 1003.570513][ T8937] ªªªªªª†³?ÂHº: renamed from lo (while UP) [ 1003.877282][ T8963] overlayfs: failed to clone upperpath [ 1004.111191][ T8978] 9pnet_fd: Insufficient options for proto=fd [ 1004.856996][ T9000] /dev/loop0: Can't lookup blockdev [ 1004.882446][T27543] usb 4-1: USB disconnect, device number 101 [ 1004.978627][ T9015] /dev/loop0: Can't lookup blockdev [ 1005.108420][ T9021] netlink: 596 bytes leftover after parsing attributes in process `syz.2.14084'. [ 1005.267381][ T9035] 9pnet_fd: Insufficient options for proto=fd [ 1005.391466][T27543] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1005.438446][ T9044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9044 comm=syz.2.14092 [ 1005.458033][ T9044] netlink: 112 bytes leftover after parsing attributes in process `syz.2.14092'. [ 1005.565690][T27543] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1005.587543][T27543] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.611882][T27543] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1005.639729][T27543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.647441][ T36] kauditd_printk_skb: 530 callbacks suppressed [ 1005.647465][ T36] audit: type=1400 audit(956.629:183467): avc: denied { create } for pid=9047 comm="syz.2.14094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1005.675861][T27543] usb 4-1: config 0 descriptor?? [ 1005.707093][ T36] audit: type=1400 audit(956.666:183468): avc: denied { setopt } for pid=9047 comm="syz.2.14094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1005.742939][ T36] audit: type=1400 audit(956.666:183469): avc: denied { create } for pid=9047 comm="syz.2.14094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1005.781359][ T36] audit: type=1400 audit(956.666:183470): avc: denied { setopt } for pid=9047 comm="syz.2.14094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1005.806998][ T36] audit: type=1400 audit(956.666:183471): avc: denied { create } for pid=9047 comm="syz.2.14094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1005.880267][ T36] audit: type=1400 audit(956.666:183472): avc: denied { ioctl } for pid=9047 comm="syz.2.14094" path="socket:[186402]" dev="sockfs" ino=186402 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1005.946144][ T36] audit: type=1400 audit(956.666:183473): avc: denied { create } for pid=9047 comm="syz.2.14094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1005.969366][ T36] audit: type=1400 audit(956.666:183474): avc: denied { write } for pid=9047 comm="syz.2.14094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1006.007328][ T36] audit: type=1400 audit(956.666:183475): avc: denied { read } for pid=9047 comm="syz.2.14094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1006.076812][ T36] audit: type=1400 audit(956.675:183476): avc: denied { read } for pid=9047 comm="syz.2.14094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1006.134677][T27543] kye 0003:0458:4018.006E: unknown main item tag 0x0 [ 1006.148164][T27543] kye 0003:0458:4018.006E: unknown main item tag 0x2 [ 1006.157468][T27543] kye 0003:0458:4018.006E: item fetching failed at offset 5/7 [ 1006.166040][T27543] kye 0003:0458:4018.006E: parse failed [ 1006.171734][T27543] kye 0003:0458:4018.006E: probe with driver kye failed with error -22 [ 1006.360681][T27543] usb 4-1: USB disconnect, device number 102 [ 1007.017342][ T9085] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 1007.024524][ T9085] rust_binder: Write failure EINVAL in pid:147 [ 1007.164521][ T9097] fuse: Bad value for 'fd' [ 1007.362758][ T9115] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14115'. [ 1007.380154][ T9115] overlayfs: failed to resolve './file1/file0': -20 [ 1008.424742][ T9130] fuseblk: Unknown parameter 'groŽp_id' [ 1008.724133][ T9145] overlayfs: missing 'lowerdir' [ 1008.940726][T27543] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1009.133146][T27543] usb 4-1: Using ep0 maxpacket: 8 [ 1009.137580][ T9170] fuse: Bad value for 'fd' [ 1009.141836][T27543] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1009.151863][T27543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.162899][T27543] usb 4-1: config 0 descriptor?? [ 1009.598029][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14140'. [ 1009.616586][T27543] prodikeys 0003:041E:2801.006F: unknown main item tag 0x4 [ 1009.634883][T27543] prodikeys 0003:041E:2801.006F: item fetching failed at offset 4/5 [ 1009.651556][T27543] prodikeys 0003:041E:2801.006F: hid parse failed [ 1009.665103][T27543] prodikeys 0003:041E:2801.006F: probe with driver prodikeys failed with error -22 [ 1009.834505][ T9143] binder: Unknown parameter '' [ 1009.847781][ T8030] usb 4-1: USB disconnect, device number 103 [ 1010.687078][ T9217] binder: Bad value for 'defcontext' [ 1011.053862][ T36] kauditd_printk_skb: 1421 callbacks suppressed [ 1011.053883][ T36] audit: type=1400 audit(961.689:184898): avc: denied { read write } for pid=3181 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1011.120196][ T36] audit: type=1400 audit(961.717:184899): avc: denied { read write open } for pid=3181 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1011.150638][ T36] audit: type=1400 audit(961.717:184900): avc: denied { ioctl } for pid=3181 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1011.195128][ T36] audit: type=1400 audit(961.820:184901): avc: denied { mounton } for pid=9235 comm="syz.6.14159" path="/339/file0" dev="tmpfs" ino=1847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1011.218194][ T9236] incfs: Error accessing: ./file0. [ 1011.223374][ T9236] incfs: mount failed -20 [ 1011.228485][ T36] audit: type=1400 audit(961.820:184902): avc: denied { create } for pid=9237 comm="syz.0.14160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1011.231940][ T9236] incfs: Error accessing: ./file0. [ 1011.251946][ T36] audit: type=1400 audit(961.820:184903): avc: denied { create } for pid=9237 comm="syz.0.14160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1011.266216][ T9236] incfs: mount failed -20 [ 1011.280415][ T36] audit: type=1400 audit(961.820:184904): avc: denied { setopt } for pid=9237 comm="syz.0.14160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1011.301388][ T36] audit: type=1400 audit(961.820:184905): avc: denied { create } for pid=9237 comm="syz.0.14160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1011.324914][ T36] audit: type=1400 audit(961.820:184906): avc: denied { write } for pid=9237 comm="syz.0.14160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1011.359769][ T36] audit: type=1400 audit(961.820:184907): avc: denied { read } for pid=9237 comm="syz.0.14160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1011.998258][ T8030] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1012.161198][ T8030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.172216][ T8030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.182105][ T8030] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1012.191303][ T8030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.201009][ T8030] usb 4-1: config 0 descriptor?? [ 1013.174726][ T9312] incfs: Error accessing: ./file0. [ 1013.179923][ T9312] incfs: mount failed -20 [ 1013.207294][ T9312] incfs: Error accessing: ./file0. [ 1013.212488][ T9312] incfs: mount failed -20 [ 1013.275151][ T9318] 9p: Unknown access argument 00000000000000000000ÌÍ$8).0·ŒÇ™‹`?“ÝŦ‡%^: -22 [ 1014.219368][ T9361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1014.221252][ T9361] rust_binder: Error in use_page_slow: ESRCH [ 1014.227896][ T9361] rust_binder: use_range failure ESRCH [ 1014.234038][ T9361] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 1014.239597][ T9361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1014.247686][ T9361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1035 [ 1014.299536][ T9363] sit0: entered promiscuous mode [ 1014.319937][ T9363] netlink: 'syz.6.14199': attribute type 1 has an invalid length. [ 1014.327813][ T9363] netlink: 1 bytes leftover after parsing attributes in process `syz.6.14199'. [ 1014.799691][ T9373] netlink: 'syz.3.14203': attribute type 46 has an invalid length. [ 1014.807822][ T9373] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14203'. [ 1015.563606][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14217'. [ 1015.591413][ T9422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.612124][ T9422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.923849][ T9444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14225'. [ 1016.414921][ T36] kauditd_printk_skb: 693 callbacks suppressed [ 1016.414943][ T36] audit: type=1400 audit(966.704:185601): avc: denied { read } for pid=9474 comm="syz.3.14235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1016.458341][ T9479] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 1016.458370][ T9479] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 1016.477182][ T36] audit: type=1400 audit(966.704:185602): avc: denied { read write } for pid=9477 comm="syz.6.14236" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1016.497416][ T9479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:241 [ 1016.529351][ T36] audit: type=1400 audit(966.704:185603): avc: denied { read open } for pid=9477 comm="syz.6.14236" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1016.564971][ T36] audit: type=1400 audit(966.751:185604): avc: denied { map } for pid=9474 comm="syz.3.14235" path="/dev/binderfs/binder1" dev="binder" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1016.589491][ T36] audit: type=1400 audit(966.751:185605): avc: denied { read } for pid=9474 comm="syz.3.14235" path="/dev/binderfs/binder1" dev="binder" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1016.614097][ T36] audit: type=1400 audit(966.751:185606): avc: denied { ioctl } for pid=9474 comm="syz.3.14235" path="/dev/binderfs/binder1" dev="binder" ino=48 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1016.640330][ T36] audit: type=1400 audit(966.751:185607): avc: denied { call } for pid=9474 comm="syz.3.14235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1016.659930][ T36] audit: type=1400 audit(966.845:185608): avc: denied { write } for pid=9472 comm="syz.0.14234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1016.681408][ T36] audit: type=1400 audit(966.845:185609): avc: denied { create } for pid=9472 comm="syz.0.14234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1016.703265][ T36] audit: type=1400 audit(966.845:185610): avc: denied { write } for pid=9472 comm="syz.0.14234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1017.508419][ T9498] fuse: Unknown parameter 'rootŠode' [ 1017.614759][ T9505] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1017.614784][ T9505] rust_binder: Read failure Err(EFAULT) in pid:256 [ 1017.737352][ T9510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1017.846799][ T8030] usbhid 4-1:0.0: can't add hid device: -32 [ 1017.859350][ T8030] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1018.767274][ T9522] rust_binder: Write failure EINVAL in pid:266 [ 1019.069141][ T9536] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=85 sclass=netlink_tcpdiag_socket pid=9536 comm=syz.2.14256 [ 1019.306958][ T9552] 9pnet_fd: Insufficient options for proto=fd [ 1019.313900][ T9553] 9pnet_fd: Insufficient options for proto=fd [ 1019.422358][ T9556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.445624][ T9556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.466022][ T9558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.475836][ T9558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.522900][ T9561] IPv6: NLM_F_CREATE should be specified when creating new route [ 1019.531009][ T9561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1019.538286][ T9561] IPv6: NLM_F_CREATE should be set when creating new route [ 1019.794248][ T9576] overlay: Unknown parameter 'appraise_type' [ 1019.882192][ T9580] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1020.022970][ T9586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.031616][ T9586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.076054][ T9586] random: crng reseeded on system resumption [ 1020.994955][ T9608] overlayfs: failed to clone upperpath [ 1021.226767][ T9613] bridge0: port 3(vlan0) entered blocking state [ 1021.233299][ T9613] bridge0: port 3(vlan0) entered disabled state [ 1021.240983][ T9613] vlan0: entered allmulticast mode [ 1021.247113][ T9613] veth0_vlan: entered allmulticast mode [ 1021.253269][ T9613] vlan0: entered promiscuous mode [ 1021.259980][ T9613] bridge0: port 3(vlan0) entered blocking state [ 1021.266293][ T9613] bridge0: port 3(vlan0) entered forwarding state [ 1021.795666][ T36] kauditd_printk_skb: 609 callbacks suppressed [ 1021.795687][ T36] audit: type=1400 audit(1200.736:186220): avc: denied { create } for pid=9636 comm="syz.6.14289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1021.822450][ T36] audit: type=1400 audit(1200.736:186221): avc: denied { setopt } for pid=9636 comm="syz.6.14289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1021.831205][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14290'. [ 1021.843264][ T36] audit: type=1400 audit(1200.764:186222): avc: denied { create } for pid=9639 comm="syz.0.14290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1021.871644][ T36] audit: type=1400 audit(1200.764:186223): avc: denied { write } for pid=9639 comm="syz.0.14290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1021.893433][ T36] audit: type=1400 audit(1200.764:186224): avc: denied { nlmsg_write } for pid=9639 comm="syz.0.14290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1021.914256][ T36] audit: type=1400 audit(1200.792:186225): avc: denied { read write } for pid=9636 comm="syz.6.14289" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1021.937555][ T36] audit: type=1400 audit(1200.792:186226): avc: denied { read open } for pid=9636 comm="syz.6.14289" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1021.961292][ T36] audit: type=1400 audit(1200.792:186227): avc: denied { map } for pid=9636 comm="syz.6.14289" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1021.984414][ T36] audit: type=1400 audit(1200.792:186228): avc: denied { read } for pid=9636 comm="syz.6.14289" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1022.007592][ T36] audit: type=1400 audit(1200.801:186229): avc: denied { read execute } for pid=9636 comm="syz.6.14289" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1022.255891][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.264814][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.352004][ T9673] netlink: 'syz.2.14301': attribute type 27 has an invalid length. [ 1022.371260][ T9673] bridge0: port 3(vlan0) entered disabled state [ 1022.377595][ T9673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.384839][ T9673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.408422][ T9674] overlayfs: failed to clone upperpath [ 1022.473973][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.492487][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.516715][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.540565][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.561377][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.571381][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.584958][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.596716][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.607005][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.620159][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.801664][ T9692] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1022.820697][ T9692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1082 [ 1023.409602][ T9705] /dev/loop0: Can't lookup blockdev [ 1023.595253][ T9710] tipc: Enabling of bearer rejected, failed to enable media [ 1024.041501][ T9745] fuse: Unknown parameter 'grup_id' [ 1024.650218][ T9750] batadv_slave_1: entered promiscuous mode [ 1024.980135][ T9749] batadv_slave_1: left promiscuous mode [ 1025.593534][ T9776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.623771][ T9776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.273384][ T9795] overlayfs: failed to clone upperpath [ 1026.656730][ T9825] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1026.657086][ T9820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1026.862939][ T9837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1026.862991][ T9837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337 [ 1026.873373][ T9839] fuse: Bad value for 'fd' [ 1026.952311][ T9843] rust_binder: Write failure EFAULT in pid:339 [ 1026.952376][ T9846] FAT-fs (rnullb0): bogus number of reserved sectors [ 1026.997161][ T9846] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1027.039148][ T9846] FAT-fs (rnullb0): bogus number of reserved sectors [ 1027.048426][ T9846] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1027.178884][ T36] kauditd_printk_skb: 792 callbacks suppressed [ 1027.178906][ T36] audit: type=1400 audit(1205.768:187022): avc: denied { read write } for pid=3181 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1027.250537][ T36] audit: type=1400 audit(1205.768:187023): avc: denied { read write open } for pid=3181 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1027.317912][ T36] audit: type=1400 audit(1205.768:187024): avc: denied { ioctl } for pid=3181 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1027.382002][ T36] audit: type=1400 audit(1205.806:187025): avc: denied { read } for pid=9855 comm="syz.3.14366" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1027.409546][ T36] audit: type=1400 audit(1205.806:187026): avc: denied { read open } for pid=9855 comm="syz.3.14366" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1027.436423][ T36] audit: type=1400 audit(1205.834:187027): avc: denied { map } for pid=9855 comm="syz.3.14366" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1027.459451][ T36] audit: type=1400 audit(1205.834:187028): avc: denied { read } for pid=9855 comm="syz.3.14366" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1027.488227][ T36] audit: type=1400 audit(1205.862:187029): avc: denied { mounton } for pid=9857 comm="syz.6.14367" path="/375/file0" dev="tmpfs" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1027.512005][ T36] audit: type=1400 audit(1205.862:187030): avc: denied { mount } for pid=9857 comm="syz.6.14367" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1027.533615][ T36] audit: type=1400 audit(1205.871:187031): avc: denied { mount } for pid=9859 comm="syz.2.14368" name="/" dev="ramfs" ino=190287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1027.651267][T27546] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 1027.670807][T27546] hid-generic 0000:0000:0000.0070: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1027.741674][ T9879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14374'. [ 1027.899163][ T9889] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14378'. [ 1028.139694][ T9905] binder: Bad value for 'max' [ 1028.486894][ T9933] batadv_slave_1: entered promiscuous mode [ 1028.505731][ T9934] batadv_slave_1: left promiscuous mode [ 1028.814109][ T9958] netlink: 'syz.2.14400': attribute type 64 has an invalid length. [ 1028.823103][ T9958] netlink: 5 bytes leftover after parsing attributes in process `syz.2.14400'. [ 1028.946395][ T9966] /dev/nullb0: Can't lookup blockdev [ 1029.217171][ T9985] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1029.355586][ T9996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1132 [ 1029.527100][T10002] overlayfs: failed to clone lowerpath [ 1030.262067][T10039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1030.264108][T10039] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1030.270693][T10039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1140 [ 1030.494704][T10050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1030.665484][T10059] rust_binder: Error while translating object. [ 1030.675334][T10059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1030.685097][T10059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1152 [ 1030.702090][T10059] rust_binder: 10059: no such ref 2 [ 1030.716771][T10059] rust_binder: Read failure Err(EAGAIN) in pid:1152 [ 1031.157272][T10072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.195648][T10072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.384269][T10088] overlayfs: failed to resolve './file0': -2 [ 1031.627840][T10107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.643124][T10107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.109874][T10117] kvm: pic: non byte write [ 1032.114533][T10117] kvm: pic: non byte write [ 1032.125379][T10117] kvm: pic: level sensitive irq not supported [ 1032.125875][T10117] kvm: pic: level sensitive irq not supported [ 1032.132347][T10117] kvm: pic: level sensitive irq not supported [ 1032.143026][T10117] kvm: pic: level sensitive irq not supported [ 1032.154081][T10117] kvm: pic: level sensitive irq not supported [ 1032.160410][T10117] kvm: pic: level sensitive irq not supported [ 1032.177452][T10118] binder: Unknown parameter 'defcontext01777777777777777777777' [ 1032.187946][T10121] overlayfs: failed to clone upperpath [ 1032.539728][ T36] kauditd_printk_skb: 676 callbacks suppressed [ 1032.539749][ T36] audit: type=1400 audit(1210.791:187708): avc: denied { read } for pid=10134 comm="syz.3.14459" name="binder0" dev="binder" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1032.582691][T10136] rust_binder: Error while translating object. [ 1032.582730][T10136] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1032.599083][T10136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:375 [ 1032.608585][ T36] audit: type=1400 audit(1210.829:187709): avc: denied { read open } for pid=10134 comm="syz.3.14459" path="/dev/binderfs/binder0" dev="binder" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1032.703347][ T36] audit: type=1400 audit(1210.829:187710): avc: denied { ioctl } for pid=10134 comm="syz.3.14459" path="/dev/binderfs/binder0" dev="binder" ino=47 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1032.773883][ T36] audit: type=1400 audit(1210.829:187711): avc: denied { set_context_mgr } for pid=10134 comm="syz.3.14459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1032.820632][ T36] audit: type=1400 audit(1210.829:187712): avc: denied { map } for pid=10134 comm="syz.3.14459" path="/dev/binderfs/binder0" dev="binder" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1032.898425][ T36] audit: type=1400 audit(1210.829:187713): avc: denied { read } for pid=10134 comm="syz.3.14459" path="/dev/binderfs/binder0" dev="binder" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1032.973293][ T36] audit: type=1400 audit(1210.829:187714): avc: denied { ioctl } for pid=10134 comm="syz.3.14459" path="/dev/binderfs/binder0" dev="binder" ino=47 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1033.047302][ T36] audit: type=1400 audit(1210.829:187715): avc: denied { call } for pid=10134 comm="syz.3.14459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1033.087700][ T36] audit: type=1400 audit(1210.829:187716): avc: denied { transfer } for pid=10134 comm="syz.3.14459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1033.155175][ T36] audit: type=1400 audit(1210.903:187717): avc: denied { read write } for pid=8165 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1033.299847][T10157] netlink: 188 bytes leftover after parsing attributes in process `syz.2.14469'. [ 1033.730935][T10177] batadv_slave_0: entered promiscuous mode [ 1033.742739][T10177] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1033.746324][T10177] rust_binder: Error while translating object. [ 1033.753081][T10177] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1033.773232][T10177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1187 [ 1033.804328][T10175] batadv_slave_0: left promiscuous mode [ 1034.268117][T10196] 9pnet_fd: Insufficient options for proto=fd [ 1034.373815][T10203] binder: Bad value for 'defcontext' [ 1034.451264][T10206] overlayfs: missing 'lowerdir' [ 1034.501716][T10206] 9pnet_fd: Insufficient options for proto=fd [ 1034.864323][T10218] netlink: 'syz.6.14491': attribute type 4 has an invalid length. [ 1034.902407][T10218] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1034.916695][T10219] rust_binder: Got transaction with invalid offset. [ 1034.929617][T10218] rust_binder: Got transaction with invalid offset. [ 1034.932438][T10219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1034.954637][T10218] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1034.985772][T10218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1201 [ 1035.025865][T10219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1201 [ 1035.345619][T10235] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 1035.378883][T10235] rust_binder: Error while translating object. [ 1035.416835][T10235] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1035.432374][T10235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1204 [ 1035.465552][T10239] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1035.608365][T10243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.635350][T10243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.657639][T10244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.678038][T10244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.914978][T10257] rust_binder: 10257: no such ref 0 [ 1035.935184][T10257] rust_binder: Write failure EINVAL in pid:414 [ 1035.935719][T10257] rust_binder: Read failure Err(EAGAIN) in pid:414 [ 1036.230811][T10265] binder: Unknown parameter 'ealab²Ãeì' [ 1036.276236][T10269] netlink: 'syz.0.14509': attribute type 9 has an invalid length. [ 1036.279065][T10267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.320248][T10267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.469763][T10278] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1036.469791][T10278] rust_binder: Read failure Err(EFAULT) in pid:1220 [ 1036.637259][T10282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1036.668990][T10282] rust_binder: 10282: no such ref 1 [ 1036.680918][T10282] rust_binder: Write failure EINVAL in pid:1222 [ 1036.829204][T10293] tmpfs: Bad value for 'uid' [ 1036.843259][T10293] tmpfs: Bad value for 'uid' [ 1037.184014][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14521'. [ 1037.682452][T10330] tipc: Enabling of bearer rejected, failed to enable media [ 1038.096333][ T36] kauditd_printk_skb: 648 callbacks suppressed [ 1038.096352][ T36] audit: type=1400 audit(1215.992:188366): avc: denied { read write } for pid=8165 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1038.137877][T10337] block device autoloading is deprecated and will be removed. [ 1038.149070][T10337] 9pnet_fd: Insufficient options for proto=fd [ 1038.158848][T10337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.167555][T10337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.175481][ T36] audit: type=1400 audit(1215.992:188367): avc: denied { read write open } for pid=8165 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1038.215855][ T36] audit: type=1400 audit(1215.992:188368): avc: denied { ioctl } for pid=8165 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1038.241267][ T36] audit: type=1400 audit(1216.011:188369): avc: denied { read write } for pid=10336 comm="syz.3.14531" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1038.264739][ T36] audit: type=1400 audit(1216.011:188370): avc: denied { read open } for pid=10336 comm="syz.3.14531" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1038.289299][ T36] audit: type=1400 audit(1216.020:188371): avc: denied { read write } for pid=10336 comm="syz.3.14531" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1038.314720][ T36] audit: type=1400 audit(1216.020:188372): avc: denied { read open } for pid=10336 comm="syz.3.14531" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1038.340510][ T36] audit: type=1400 audit(1216.020:188373): avc: denied { read write } for pid=10336 comm="syz.3.14531" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1038.363567][ T36] audit: type=1400 audit(1216.020:188374): avc: denied { read write open } for pid=10336 comm="syz.3.14531" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1038.387563][ T36] audit: type=1400 audit(1216.039:188375): avc: denied { mounton } for pid=10336 comm="syz.3.14531" path="/134" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1038.533254][T10350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.541825][T10350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.672128][T10352] netlink: 220 bytes leftover after parsing attributes in process `syz.0.14537'. [ 1038.714592][T10357] netlink: 'syz.0.14538': attribute type 58 has an invalid length. [ 1038.905119][T10367] binder: Bad value for 'max' [ 1038.913174][T10372] overlayfs: missing 'lowerdir' [ 1039.109785][T10388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14548'. [ 1039.241803][T10406] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1039.249667][T10406] rust_binder: Error while translating object. [ 1039.256226][T10406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 1039.283976][T10406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1244 [ 1039.384285][T10413] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1039.393550][T10413] rust_binder: Read failure Err(EFAULT) in pid:445 [ 1039.581025][T10421] __vm_enough_memory: pid: 10421, comm: syz.3.14559, bytes: 70373039144960 not enough memory for the allocation [ 1039.658407][T10427] netlink: 'syz.6.14561': attribute type 16 has an invalid length. [ 1039.672471][T10427] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.14561'. [ 1039.794149][T10434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.802722][T10434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.417164][T10472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.435271][T10472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.594776][T10480] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1040.660135][T31913] Bluetooth: hci0: Frame reassembly failed (-84) [ 1040.673582][T10486] netlink: 'syz.6.14583': attribute type 7 has an invalid length. [ 1040.782579][T10494] 9pnet_fd: Insufficient options for proto=fd [ 1041.039321][T10497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.048018][T10497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.385187][T10502] overlayfs: failed to resolve './file1': -2 [ 1041.467503][T10507] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.14591'. [ 1041.828155][T10527] overlayfs: failed to clone upperpath [ 1042.255191][T10554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.278567][T10554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.819321][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 1042.819319][ T3869] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1042.974119][T10569] batadv_slave_1: entered promiscuous mode [ 1042.980211][T10566] batadv_slave_1: left promiscuous mode [ 1043.447939][T10578] rust_binder: pid 10578 performed invalid decrement on ref [ 1043.457419][ T36] kauditd_printk_skb: 481 callbacks suppressed [ 1043.457440][ T36] audit: type=1400 audit(1220.996:188857): avc: denied { read } for pid=10577 comm="syz.6.14618" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1043.486235][ T36] audit: type=1400 audit(1220.996:188858): avc: denied { read open } for pid=10577 comm="syz.6.14618" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1043.511193][ T36] audit: type=1400 audit(1220.996:188859): avc: denied { map } for pid=10577 comm="syz.6.14618" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1043.535363][ T36] audit: type=1400 audit(1220.996:188860): avc: denied { read } for pid=10577 comm="syz.6.14618" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1043.563176][ T36] audit: type=1400 audit(1221.006:188861): avc: denied { read } for pid=10577 comm="syz.6.14618" dev="nsfs" ino=4026532378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1043.585953][ T36] audit: type=1400 audit(1221.006:188862): avc: denied { read open } for pid=10577 comm="syz.6.14618" path="net:[4026532378]" dev="nsfs" ino=4026532378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1043.611242][ T36] audit: type=1400 audit(1221.006:188863): avc: denied { create } for pid=10577 comm="syz.6.14618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1043.632131][ T36] audit: type=1400 audit(1221.015:188864): avc: denied { connect } for pid=10577 comm="syz.6.14618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1043.652955][ T36] audit: type=1400 audit(1221.025:188865): avc: denied { read write } for pid=3181 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1043.684169][ T36] audit: type=1400 audit(1221.025:188866): avc: denied { read write open } for pid=3181 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1043.788619][T31918] tipc: Subscription rejected, illegal request [ 1044.052053][T10603] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1044.861411][T10611] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1044.864430][T10611] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4 [ 1044.879993][T10611] rust_binder: Write failure EINVAL in pid:1275 [ 1045.019636][T10615] netlink: 1 bytes leftover after parsing attributes in process `syz.6.14631'. [ 1045.076893][T10615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1045.092860][T10615] rust_binder: Error while translating object. [ 1045.100624][T10615] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1045.110195][T10615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1279 [ 1045.230522][T10631] fuse: Unknown parameter 'gž/_id' [ 1045.289229][T10642] overlayfs: failed to clone lowerpath [ 1045.540544][T10660] overlayfs: failed to clone upperpath [ 1045.614636][T10663] overlayfs: failed to clone upperpath [ 1045.727389][T10669] overlayfs: failed to resolve './file0/file0': -2 [ 1045.955945][T10680] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14655'. [ 1045.965149][T10680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14655'. [ 1045.975529][T10680] netlink: 'syz.2.14655': attribute type 1 has an invalid length. [ 1046.313252][T10704] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1046.315286][T10704] rust_binder: Error while translating object. [ 1046.321865][T10704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1046.328069][T10704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1287 [ 1046.884256][T10715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.903649][T10715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.916612][T10715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.925357][T10715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.253768][T10721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.267534][T10721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.279644][T10721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.288409][T10721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.590080][T10729] netlink: 80 bytes leftover after parsing attributes in process `syz.3.14672'. [ 1047.613000][T10729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14672'. [ 1047.794904][T10745] overlayfs: failed to clone upperpath [ 1048.087445][T10771] loop8: detected capacity change from 0 to 79 [ 1048.147949][T10769] loop8: detected capacity change from 79 to 0 [ 1048.457852][T10804] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1048.462655][T10804] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 21) [ 1048.477315][T10804] rust_binder: Error while translating object. [ 1048.512236][T10804] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1048.526834][T10804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1307 [ 1048.664353][T10816] tap0: tun_chr_ioctl cmd 1074025677 [ 1048.688471][T10816] tap0: linktype set to 776 [ 1048.745393][T10820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1048.748628][T10820] rust_binder: Error while translating object. [ 1048.755374][T10820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1048.761875][T10820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1314 [ 1048.811367][ T36] kauditd_printk_skb: 665 callbacks suppressed [ 1048.811390][ T36] audit: type=1400 audit(1226.010:189532): avc: denied { read } for pid=10821 comm="syz.6.14700" name="binder1" dev="binder" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1048.849640][ T36] audit: type=1400 audit(1226.020:189533): avc: denied { read open } for pid=10821 comm="syz.6.14700" path="/dev/binderfs/binder1" dev="binder" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1048.873858][ T36] audit: type=1400 audit(1226.048:189534): avc: denied { ioctl } for pid=10821 comm="syz.6.14700" path="/dev/binderfs/binder1" dev="binder" ino=60 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1048.899170][ T36] audit: type=1400 audit(1226.048:189535): avc: denied { set_context_mgr } for pid=10821 comm="syz.6.14700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1048.918955][ T36] audit: type=1400 audit(1226.048:189536): avc: denied { ioctl } for pid=10821 comm="syz.6.14700" path="/dev/binderfs/binder1" dev="binder" ino=60 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1048.944279][ T36] audit: type=1400 audit(1226.094:189537): avc: denied { map } for pid=10821 comm="syz.6.14700" path="/dev/binderfs/binder1" dev="binder" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1048.967959][ T36] audit: type=1400 audit(1226.094:189538): avc: denied { read } for pid=10821 comm="syz.6.14700" path="/dev/binderfs/binder1" dev="binder" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1048.991740][ T36] audit: type=1400 audit(1226.094:189539): avc: denied { ioctl } for pid=10821 comm="syz.6.14700" path="/dev/binderfs/binder1" dev="binder" ino=60 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1049.017009][ T36] audit: type=1400 audit(1226.094:189540): avc: denied { call } for pid=10821 comm="syz.6.14700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1049.035972][ T36] audit: type=1400 audit(1226.094:189541): avc: denied { ioctl } for pid=10821 comm="syz.6.14700" path="/dev/binderfs/binder1" dev="binder" ino=60 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1049.213961][T10837] fuse: Bad value for 'user_id' [ 1049.218877][T10837] fuse: Bad value for 'user_id' [ 1049.229539][T10837] overlayfs: failed to clone upperpath [ 1050.089228][T10870] tap1: tun_chr_ioctl cmd 1074025677 [ 1050.094732][T10870] tap1: linktype set to 776 [ 1050.431859][T10874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.440514][T10874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.731967][T10876] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1050.794270][T10877] rust_binder: Write failure EINVAL in pid:1328 [ 1050.967791][T10882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.982982][T10882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.043809][T10887] overlay: filesystem on ./bus is read-only [ 1051.250819][T10899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.268386][T10899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.297287][T10902] random: crng reseeded on system resumption [ 1051.344236][T10902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.364626][T10902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.505037][T10918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:525 [ 1052.183251][T10948] binder: Unknown parameter 'fscontext?}' [ 1052.208843][T10945] overlay: ./file0 is not a directory [ 1052.242073][T10950] fuseblk: Unknown parameter 'ÝLw]^f^ÿ‚ݱâ;„Ðè¶ÈxÑôqh1%X˜™#Áá¼Ùµ¥êµ\]í¸µ"e„`bס#%ÌÈ®ž<‚älGhŠ6rÒBç6S|ÃpŠò™úà&' [ 1052.525248][T10969] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1052.559674][T10969] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1052.947201][T10983] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1052.957630][T10983] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1053.659115][T11019] overlayfs: failed to resolve './file1': -2 [ 1053.728871][T11021] binder: Binderfs stats mode cannot be changed during a remount [ 1053.965783][T11030] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1054.007179][T11030] rust_binder: Error in use_page_slow: ESRCH [ 1054.033687][T11030] rust_binder: use_range failure ESRCH [ 1054.039783][T11030] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 1054.087855][T11030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1054.106952][T11030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1369 [ 1054.122397][T11027] overlayfs: failed to clone upperpath [ 1054.163148][ T36] kauditd_printk_skb: 800 callbacks suppressed [ 1054.163167][ T36] audit: type=1400 audit(1231.015:190342): avc: denied { read write open } for pid=8165 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1054.247034][ T36] audit: type=1400 audit(1231.052:190343): avc: denied { ioctl } for pid=8165 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1054.248176][T27551] hid-generic 0000:0000:0000.0071: item fetching failed at offset 0/1 [ 1054.283716][ T36] audit: type=1400 audit(1231.080:190344): avc: denied { create } for pid=11040 comm="syz.0.14776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1054.347971][T27551] hid-generic 0000:0000:0000.0071: probe with driver hid-generic failed with error -22 [ 1054.358307][ T36] audit: type=1400 audit(1231.089:190345): avc: denied { read write } for pid=11041 comm="syz.3.14775" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1054.444869][ T36] audit: type=1400 audit(1231.089:190346): avc: denied { read write open } for pid=11041 comm="syz.3.14775" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1054.536166][ T36] audit: type=1400 audit(1231.127:190347): avc: denied { write } for pid=11041 comm="syz.3.14775" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1054.643139][ T36] audit: type=1400 audit(1231.127:190348): avc: denied { write } for pid=11041 comm="syz.3.14775" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1054.707200][ T36] audit: type=1400 audit(1231.127:190349): avc: denied { read write } for pid=11041 comm="syz.3.14775" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1054.730283][T11069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.738843][T11069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.756165][ T36] audit: type=1400 audit(1231.127:190350): avc: denied { read write open } for pid=11041 comm="syz.3.14775" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1054.835489][ T36] audit: type=1400 audit(1231.174:190351): avc: denied { read write } for pid=3181 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1054.873748][T11073] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1054.891856][T11071] SELinux: Context system_u:object_r:getty_etc_t:s0 is not valid (left unmapped). [ 1055.006663][T11077] netlink: 868 bytes leftover after parsing attributes in process `syz.2.14783'. [ 1055.077627][T11079] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 1055.112778][T11079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.139745][T11079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.960043][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14797'. [ 1055.981826][T11107] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1055.983845][T11106] bridge_slave_1: left allmulticast mode [ 1055.998430][T11106] bridge_slave_1: left promiscuous mode [ 1056.009292][T11106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.052895][T11106] bridge_slave_0: left allmulticast mode [ 1056.075681][T11106] bridge_slave_0: left promiscuous mode [ 1056.081471][T11106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.216906][T11123] overlayfs: failed to clone upperpath [ 1056.411872][T11134] 9pnet_fd: Insufficient options for proto=fd [ 1056.902129][T11153] overlayfs: failed to clone upperpath [ 1056.916680][T11155] 9pnet_fd: Insufficient options for proto=fd [ 1057.259205][T11164] overlayfs: failed to resolve './file1': -2 [ 1057.283508][T11173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.317240][T11173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.412486][T11176] overlayfs: failed to clone upperpath [ 1057.842521][T11201] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1057.851288][T11201] rust_binder: Error while translating object. [ 1057.868636][T11201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 1057.893007][T11201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1421 [ 1058.228560][T11206] overlayfs: failed to resolve './file1': -2 [ 1058.403867][T11217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.441433][T11217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.978422][T11235] overlayfs: failed to resolve './file1': -2 [ 1059.224291][T11246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.240245][T11246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.276154][T11246] SELinux: failed to load policy [ 1059.438309][T11259] 9pnet_virtio: no channels available for device syz [ 1059.518454][ T36] kauditd_printk_skb: 472 callbacks suppressed [ 1059.518475][ T36] audit: type=1400 audit(1236.028:190821): avc: denied { write } for pid=11257 comm="syz.2.14846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1059.554789][ T36] audit: type=1400 audit(1236.056:190822): avc: denied { write } for pid=11257 comm="syz.2.14846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1059.578345][T11268] overlayfs: failed to clone upperpath [ 1059.594737][ T36] audit: type=1400 audit(1236.056:190823): avc: denied { write } for pid=11257 comm="syz.2.14846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1059.618086][ T36] audit: type=1400 audit(1236.056:190824): avc: denied { write } for pid=11257 comm="syz.2.14846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1059.637457][ T36] audit: type=1400 audit(1236.056:190825): avc: denied { write } for pid=11257 comm="syz.2.14846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1059.656962][ T36] audit: type=1400 audit(1236.056:190826): avc: denied { write } for pid=11257 comm="syz.2.14846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1059.676345][ T36] audit: type=1400 audit(1236.056:190827): avc: denied { write } for pid=11257 comm="syz.2.14846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1059.717259][ T36] audit: type=1400 audit(1236.056:190828): avc: denied { write } for pid=11257 comm="syz.2.14846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1059.742475][ T36] audit: type=1400 audit(1236.056:190829): avc: denied { write } for pid=11257 comm="syz.2.14846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1059.774548][ T36] audit: type=1400 audit(1236.056:190830): avc: denied { write } for pid=11257 comm="syz.2.14846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1060.247683][T11294] overlayfs: failed to clone upperpath [ 1060.690607][T11307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.732261][T11306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.738070][T11307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.798352][T11306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.061079][T11320] fuse: Unknown parameter 'euid' [ 1061.077278][T11321] fuse: Unknown parameter 'euid' [ 1061.097344][T11321] fuse: Bad value for 'fd' [ 1061.105658][T11320] fuse: Bad value for 'fd' [ 1061.238947][T11326] overlayfs: failed to clone upperpath [ 1061.338388][T11330] fuse: Bad value for 'fd' [ 1061.594526][T11346] rust_binder: Error while translating object. [ 1061.594568][T11346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 1061.600864][T11346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1459 [ 1061.611617][T11346] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1061.762173][T11352] tap1: tun_chr_ioctl cmd 1074025677 [ 1061.780836][T11352] tap1: linktype set to 776 [ 1062.049985][T11365] overlayfs: failed to clone upperpath [ 1062.499806][T11399] binder: Bad value for 'stats' [ 1062.542733][T11403] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1062.551817][T11403] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1062.779325][T31905] tipc: Subscription rejected, illegal request [ 1062.847651][T11419] binder: Bad value for 'max' [ 1063.133549][T11427] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1063.153000][T11427] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1063.522201][T11453] incfs: Options parsing error. -22 [ 1063.533081][T11453] incfs: mount failed -22 [ 1063.825966][T11476] rust_binder: 11476: no such ref 7 [ 1063.831986][T11476] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1063.832008][T11476] rust_binder: Read failure Err(EFAULT) in pid:1489 [ 1064.385011][T11510] overlay: Unknown parameter 'euid<00000000000000000000' [ 1064.645106][T11529] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 1064.810184][T11539] overlayfs: failed to clone upperpath [ 1064.956766][ T36] kauditd_printk_skb: 504 callbacks suppressed [ 1064.956791][ T36] audit: type=1400 audit(1241.098:191335): avc: denied { mounton } for pid=11544 comm="syz.2.14941" path="/319/file0" dev="tmpfs" ino=1760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1064.993152][T11545] overlayfs: failed to clone upperpath [ 1065.021189][ T36] audit: type=1400 audit(1241.145:191336): avc: denied { mounton } for pid=11544 comm="syz.2.14941" path="/319/bus" dev="tmpfs" ino=1761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1065.074980][ T36] audit: type=1400 audit(1241.220:191337): avc: denied { read write } for pid=3181 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1065.130584][ T36] audit: type=1400 audit(1241.248:191338): avc: denied { read write open } for pid=3181 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1065.216242][ T36] audit: type=1400 audit(1241.248:191339): avc: denied { ioctl } for pid=3181 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1065.244140][T11554] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 1065.286735][ T36] audit: type=1400 audit(1241.341:191340): avc: denied { create } for pid=11551 comm="syz.3.14945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1065.348844][ T36] audit: type=1400 audit(1241.360:191341): avc: denied { read } for pid=11550 comm="syz.6.14943" name="binder0" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1065.384923][T11562] batadv_slave_1: entered promiscuous mode [ 1065.399931][T11562] batadv_slave_1: left promiscuous mode [ 1065.422603][ T36] audit: type=1400 audit(1241.360:191342): avc: denied { read open } for pid=11550 comm="syz.6.14943" path="/dev/binderfs/binder0" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1065.472283][ T36] audit: type=1400 audit(1241.360:191343): avc: denied { ioctl } for pid=11550 comm="syz.6.14943" path="/dev/binderfs/binder0" dev="binder" ino=42 ioctlcmd=0x6210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1065.515962][ T36] audit: type=1400 audit(1241.360:191344): avc: denied { read write } for pid=11550 comm="syz.6.14943" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1065.828898][T11581] overlayfs: failed to clone upperpath [ 1066.180100][T31905] tipc: Subscription rejected, illegal request [ 1067.646441][T11634] rust_binder: Read failure Err(EFAULT) in pid:1527 [ 1067.726411][T11652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.745116][T11652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.983878][T11662] overlayfs: failed to clone upperpath [ 1068.077789][T11675] overlayfs: failed to clone upperpath [ 1068.147289][T11679] fuse: Bad value for 'fd' [ 1068.159448][T11679] fuse: Unknown parameter '¸¨gÐ' [ 1068.205302][T11681] batadv_slave_1: entered promiscuous mode [ 1068.216007][T11681] netlink: 200 bytes leftover after parsing attributes in process `syz.0.14986'. [ 1068.225892][T11681] tc_dump_action: action bad kind [ 1068.231075][T11682] netlink: 200 bytes leftover after parsing attributes in process `syz.0.14986'. [ 1068.240218][T11682] tc_dump_action: action bad kind [ 1068.245679][T11680] batadv_slave_1: left promiscuous mode [ 1068.313388][T11686] overlayfs: failed to clone upperpath [ 1068.456154][T11692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.466013][T11692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.475945][T11692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.509670][T11692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.529912][T11692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.545396][T11692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.563317][T11692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.579757][T11692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.598748][T11692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.615376][T11692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.633864][T11692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.651591][T11692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.798410][T11699] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14993'. [ 1069.671461][T11713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.717344][T11713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.802937][T11717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.827202][T11717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.022537][T11724] 9pnet_fd: Insufficient options for proto=fd [ 1070.471348][ T36] kauditd_printk_skb: 693 callbacks suppressed [ 1070.471370][ T36] audit: type=1400 audit(1246.271:192038): avc: denied { create } for pid=11732 comm="syz.0.15003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1070.498171][ T36] audit: type=1400 audit(1246.271:192039): avc: denied { write } for pid=11732 comm="syz.0.15003" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1070.560469][ T36] audit: type=1400 audit(1246.346:192040): avc: denied { create } for pid=11736 comm="syz.2.15005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1070.581193][ T36] audit: type=1400 audit(1246.346:192041): avc: denied { write } for pid=11736 comm="syz.2.15005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1070.602665][ T36] audit: type=1400 audit(1246.346:192042): avc: denied { read } for pid=11736 comm="syz.2.15005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1070.630275][ T36] audit: type=1400 audit(1246.346:192043): avc: denied { create } for pid=11736 comm="syz.2.15005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1070.650321][ T36] audit: type=1400 audit(1246.346:192044): avc: denied { ioctl } for pid=11736 comm="syz.2.15005" path="socket:[196482]" dev="sockfs" ino=196482 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1070.675358][ T36] audit: type=1400 audit(1246.346:192045): avc: denied { write } for pid=11736 comm="syz.2.15005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1070.721730][ T36] audit: type=1400 audit(1246.346:192046): avc: denied { connect } for pid=11736 comm="syz.2.15005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1070.763369][ T36] audit: type=1400 audit(1246.346:192047): avc: denied { write } for pid=11736 comm="syz.2.15005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1070.828806][T11753] overlayfs: failed to clone upperpath [ 1070.883080][T11751] overlay: ./file0 is not a directory [ 1071.318302][T11790] netlink: 9 bytes leftover after parsing attributes in process `syz.3.15028'. [ 1071.333065][T11790] gretap0: entered promiscuous mode [ 1071.572665][T11806] overlayfs: failed to clone lowerpath [ 1071.664951][T11808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.695984][T11808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.901163][T31918] bridge_slave_1: left allmulticast mode [ 1071.906866][T31918] bridge_slave_1: left promiscuous mode [ 1071.913586][T31918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.922620][T31918] bridge_slave_0: left allmulticast mode [ 1071.928517][T31918] bridge_slave_0: left promiscuous mode [ 1071.935440][T31918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.185069][T31918] veth1_macvtap: left promiscuous mode [ 1072.190798][T31918] veth0_vlan: left promiscuous mode [ 1072.249035][T11826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.256231][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.264640][T11826] bridge_slave_0: entered allmulticast mode [ 1072.271222][T11826] bridge_slave_0: entered promiscuous mode [ 1072.279145][T11826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.295534][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.302662][T11826] bridge_slave_1: entered allmulticast mode [ 1072.309848][T11826] bridge_slave_1: entered promiscuous mode [ 1072.513534][T11826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.520668][T11826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.528120][T11826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.535233][T11826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.590759][T11854] rust_binder: 11854: no such ref 0 [ 1072.607838][T31918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.617075][T31918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.635520][T11854] rust_binder: 11854: no such ref 0 [ 1072.644240][T11854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1562 [ 1072.653625][T31905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.670058][T31905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.698154][T31918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.705277][T31918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.857182][T11826] veth0_vlan: entered promiscuous mode [ 1072.915770][T11826] veth1_macvtap: entered promiscuous mode [ 1073.016740][T11867] netlink: 144 bytes leftover after parsing attributes in process `syz.3.15054'. [ 1073.700453][T11901] netlink: 140 bytes leftover after parsing attributes in process `syz.6.15066'. [ 1074.084359][T11928] overlayfs: failed to clone upperpath [ 1074.127213][T11931] netlink: 596 bytes leftover after parsing attributes in process `syz.2.15076'. [ 1074.129521][T11930] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1074.732453][T11969] rust_binder: Write failure EINVAL in pid:27 [ 1074.794945][T11973] binder: Bad value for 'stats' [ 1074.808727][T11974] binder: Bad value for 'stats' [ 1074.911807][T11978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15095'. [ 1075.043501][ T306] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 1075.072976][ T306] hid-generic 0000:0000:0000.0072: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1075.163594][T11981] fido_id[11981]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1075.436100][T11992] tipc: Enabling of bearer rejected, failed to enable media [ 1075.472455][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15101'. [ 1075.514324][T11996] overlayfs: failed to clone upperpath [ 1075.548992][T11998] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 1076.241768][ T36] kauditd_printk_skb: 852 callbacks suppressed [ 1076.241799][ T36] audit: type=1400 audit(1251.668:192900): avc: denied { create } for pid=12009 comm="syz.6.15107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1076.267584][ T36] audit: type=1400 audit(1251.668:192901): avc: denied { setopt } for pid=12009 comm="syz.6.15107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1076.288386][ T36] audit: type=1400 audit(1251.687:192902): avc: denied { sys_module } for pid=12009 comm="syz.6.15107" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1076.746920][ T36] audit: type=1400 audit(1252.136:192903): avc: denied { mounton } for pid=12019 comm="syz.2.15112" path="/373/bus" dev="tmpfs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1076.748227][T12020] overlayfs: failed to clone upperpath [ 1076.808854][ T36] audit: type=1400 audit(1252.201:192904): avc: denied { create } for pid=12021 comm="syz.2.15113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1076.813527][T12022] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 1076.828350][ T36] audit: type=1400 audit(1252.201:192905): avc: denied { create } for pid=12021 comm="syz.2.15113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1076.840541][T12022] fuse: Bad value for 'fd' [ 1076.856463][ T36] audit: type=1400 audit(1252.201:192906): avc: denied { mounton } for pid=12021 comm="syz.2.15113" path="/374/file0" dev="tmpfs" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1076.884111][ T36] audit: type=1400 audit(1252.220:192907): avc: denied { getopt } for pid=12021 comm="syz.2.15113" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1076.905544][ T36] audit: type=1400 audit(1252.220:192908): avc: denied { mounton } for pid=12021 comm="syz.2.15113" path="/374/file0" dev="tmpfs" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1076.928064][ T36] audit: type=1326 audit(1252.295:192909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.2.15114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f932938e929 code=0x0 [ 1077.114192][T12040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15118'. [ 1077.127677][T12042] overlayfs: failed to clone upperpath [ 1077.587303][T12046] tmpfs: Unknown parameter 'nÏÞmock_üg' [ 1078.226457][T12072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43690 sclass=netlink_route_socket pid=12072 comm=syz.6.15132 [ 1078.402983][T12075] rust_binder: 12074 RLIMIT_NICE not set [ 1078.753044][T12081] fuseblk: Unknown parameter 'default_permis?D† Jâú风ç5<*Ûsions' [ 1079.625592][T12121] overlayfs: failed to clone upperpath [ 1081.191178][T12177] overlayfs: failed to resolve './file0': -2 [ 1081.630626][ T36] kauditd_printk_skb: 154 callbacks suppressed [ 1081.630646][ T36] audit: type=1400 audit(1256.710:193064): avc: denied { create } for pid=12196 comm="syz.3.15177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1081.657345][ T36] audit: type=1400 audit(1256.710:193065): avc: denied { write } for pid=12196 comm="syz.3.15177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1081.701533][ T36] audit: type=1400 audit(1256.710:193066): avc: denied { read } for pid=12196 comm="syz.3.15177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1081.710779][T12199] overlayfs: failed to resolve './file0': -2 [ 1081.721710][ T36] audit: type=1400 audit(1256.710:193067): avc: denied { read } for pid=12196 comm="syz.3.15177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1081.748839][ T36] audit: type=1400 audit(1256.710:193068): avc: denied { mounton } for pid=12196 comm="syz.3.15177" path="/266/file0" dev="tmpfs" ino=1510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1081.773554][ T36] audit: type=1400 audit(1256.738:193069): avc: denied { read write } for pid=11826 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1081.798612][ T36] audit: type=1400 audit(1256.738:193070): avc: denied { read write open } for pid=11826 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1081.824517][ T36] audit: type=1400 audit(1256.738:193071): avc: denied { ioctl } for pid=11826 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1081.850966][ T36] audit: type=1400 audit(1256.775:193072): avc: denied { mounton } for pid=12198 comm="syz.0.15178" path="/15/bus" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1081.874773][ T36] audit: type=1400 audit(1256.860:193073): avc: denied { read write } for pid=11826 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1081.912267][T12208] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 1082.057152][T12222] tap0: tun_chr_ioctl cmd 1074025677 [ 1082.070952][T12222] tap0: linktype set to 776 [ 1082.245399][T12243] overlayfs: failed to resolve './file0': -2 [ 1082.401436][T12258] overlayfs: failed to clone upperpath [ 1083.620607][T12307] fuseblk: Bad value for 'fd' [ 1083.636816][T12307] fuseblk: Bad value for 'fd' [ 1083.732282][T31905] tipc: Subscription rejected, illegal request [ 1084.823052][T12363] overlayfs: failed to clone upperpath [ 1085.186889][T12386] /dev/rnullb0: Can't lookup blockdev [ 1085.716504][T12412] netlink: 'syz.0.15252': attribute type 12 has an invalid length. [ 1085.846154][T12425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1085.846188][T12425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 1086.331479][T12439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 1086.340849][T12439] rust_binder: Read failure Err(EFAULT) in pid:76 [ 1086.589567][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15266'. [ 1087.167084][ T36] kauditd_printk_skb: 470 callbacks suppressed [ 1087.167103][ T36] audit: type=1400 audit(1261.892:193544): avc: denied { create } for pid=12464 comm="syz.2.15272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1087.195031][ T36] audit: type=1400 audit(1261.892:193545): avc: denied { connect } for pid=12464 comm="syz.2.15272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1087.217712][ T36] audit: type=1400 audit(1261.939:193546): avc: denied { execute } for pid=12469 comm="syz.2.15273" path="/dev/rnullb0" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1087.261015][ T36] audit: type=1400 audit(1261.976:193547): avc: denied { create } for pid=12471 comm="syz.2.15274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1087.281226][ T36] audit: type=1400 audit(1261.976:193548): avc: denied { create } for pid=12471 comm="syz.2.15274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1087.300701][ T36] audit: type=1400 audit(1261.976:193549): avc: denied { connect } for pid=12471 comm="syz.2.15274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1087.350279][ T36] audit: type=1400 audit(1262.061:193550): avc: denied { mounton } for pid=12478 comm="syz.3.15276" path="/279" dev="tmpfs" ino=1577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1087.385633][ T36] audit: type=1400 audit(1262.061:193551): avc: denied { mount } for pid=12478 comm="syz.3.15276" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1087.408069][ T36] audit: type=1400 audit(1262.098:193552): avc: denied { mounton } for pid=12480 comm="syz.3.15278" path="/280/file0" dev="tmpfs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1087.430936][ T36] audit: type=1400 audit(1262.098:193553): avc: denied { mounton } for pid=12480 comm="syz.3.15278" path="/280/file0" dev="tmpfs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1087.461268][T12487] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15277'. [ 1087.474176][T12487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15277'. [ 1087.483446][T12488] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15277'. [ 1087.493911][T12488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15277'. [ 1088.165076][T12506] tipc: Enabling of bearer rejected, failed to enable media [ 1088.282045][T12512] overlayfs: failed to clone upperpath [ 1088.296410][T12513] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15287'. [ 1089.742252][T12561] overlayfs: failed to clone upperpath [ 1090.022921][T12566] fuse: Unknown parameter 'fÿ0x0000000000000004' [ 1090.118819][T12574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1090.118861][T12574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:94 [ 1090.409639][T12586] tap0: tun_chr_ioctl cmd 1074025677 [ 1090.441975][T12586] tap0: linktype set to 776 [ 1090.465531][T12589] overlayfs: failed to clone upperpath [ 1090.536772][T12587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.544178][T12587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.551350][T12587] bridge_slave_0: entered allmulticast mode [ 1090.559018][T12587] bridge_slave_0: entered promiscuous mode [ 1090.570778][T12587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.589701][T12587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.597530][T12587] bridge_slave_1: entered allmulticast mode [ 1090.604019][T12587] bridge_slave_1: entered promiscuous mode [ 1090.621025][T12601] overlayfs: failed to clone upperpath [ 1090.636380][T12601] batadv_slave_0: entered promiscuous mode [ 1090.648876][T12600] batadv_slave_0: left promiscuous mode [ 1090.739209][T12587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.746354][T12587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.753696][T12587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.760793][T12587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.834010][T31913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.841368][T31913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.856369][T31918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.863467][T31918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.875490][T31913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.882662][T31913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.011316][T12587] veth0_vlan: entered promiscuous mode [ 1091.063804][T12587] veth1_macvtap: entered promiscuous mode [ 1091.623175][T12656] 9pnet: Could not find request transport: nd(rfdno=0x0000000000000005 [ 1092.537684][ T36] kauditd_printk_skb: 600 callbacks suppressed [ 1092.537706][ T36] audit: type=1400 audit(1266.906:194154): avc: denied { create } for pid=12677 comm="syz.3.15347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1092.572399][ T36] audit: type=1400 audit(1266.906:194155): avc: denied { create } for pid=12677 comm="syz.3.15347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1092.594537][ T36] audit: type=1400 audit(1266.906:194156): avc: denied { create } for pid=12677 comm="syz.3.15347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1092.618657][T12680] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1092.625203][T12680] audit: audit_lost=76 audit_rate_limit=0 audit_backlog_limit=64 [ 1092.634357][ T36] audit: type=1400 audit(1266.906:194157): avc: denied { create } for pid=12677 comm="syz.3.15347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1092.655199][ T36] audit: type=1400 audit(1266.906:194158): avc: denied { create } for pid=12677 comm="syz.3.15347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1092.676767][ T36] audit: type=1400 audit(1266.906:194159): avc: denied { create } for pid=12677 comm="syz.3.15347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1092.677099][T12680] audit: backlog limit exceeded [ 1092.697608][ T36] audit: type=1400 audit(1266.906:194160): avc: denied { create } for pid=12677 comm="syz.3.15347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1092.794710][T12685] batadv_slave_1: entered promiscuous mode [ 1092.801188][T12684] batadv_slave_1: left promiscuous mode [ 1092.866142][T12689] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1092.873369][T12689] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1092.880547][T12689] veth0_to_bridge: entered allmulticast mode [ 1092.887255][T12689] veth0_to_bridge: entered promiscuous mode [ 1092.893281][T12689] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1092.905740][T12689] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1092.912876][T12689] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1093.065693][T12694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=12694 comm=syz.2.15353 [ 1093.942811][T12730] xfrm0: mtu less than device minimum [ 1094.114294][T12738] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 1094.224880][T12742] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1094.674138][T12770] overlayfs: failed to clone upperpath [ 1094.851571][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15376'. [ 1094.927974][T12781] rust_binder: Error while translating object. [ 1094.928017][T12781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1094.946789][T12781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 1094.951170][T12779] overlayfs: failed to resolve './bus': -2 [ 1095.228146][T12796] 9pnet_fd: Insufficient options for proto=fd [ 1095.301083][T12799] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 1097.144514][T12836] overlayfs: failed to resolve './file0': -2 [ 1097.878126][T12876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15409'. [ 1097.942204][ T36] kauditd_printk_skb: 567 callbacks suppressed [ 1097.942224][ T36] audit: type=1400 audit(1271.966:194728): avc: denied { execmem } for pid=12879 comm="syz.3.15411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1098.027259][ T36] audit: type=1400 audit(1272.051:194729): avc: denied { create } for pid=12879 comm="syz.3.15411" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1098.051046][ T36] audit: type=1400 audit(1272.069:194730): avc: denied { ioctl } for pid=12879 comm="syz.3.15411" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=201754 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1098.078014][ T36] audit: type=1400 audit(1272.079:194731): avc: denied { ioctl } for pid=12879 comm="syz.3.15411" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=201754 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1098.104657][ T36] audit: type=1400 audit(1272.079:194732): avc: denied { ioctl } for pid=12879 comm="syz.3.15411" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=201754 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1098.419611][ T36] audit: type=1400 audit(1272.406:194733): avc: denied { create } for pid=12882 comm="syz.2.15412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1098.442493][ T36] audit: type=1400 audit(1272.406:194734): avc: denied { bind } for pid=12882 comm="syz.2.15412" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1098.463936][ T36] audit: type=1400 audit(1272.415:194735): avc: denied { name_bind } for pid=12882 comm="syz.2.15412" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1098.495935][ T36] audit: type=1400 audit(1272.415:194736): avc: denied { node_bind } for pid=12882 comm="syz.2.15412" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1098.517697][ T36] audit: type=1400 audit(1272.462:194737): avc: denied { mac_admin } for pid=12884 comm="syz.2.15413" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1099.070276][T12928] binder: Unknown parameter 'fscontext?}' [ 1099.113474][T12930] overlayfs: failed to clone upperpath [ 1099.175005][T12936] rust_binder: 12936: no such ref 7 [ 1099.215078][T12939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15431'. [ 1099.230720][T12936] rust_binder: Read failure Err(EFAULT) in pid:151 [ 1099.286493][T12944] netlink: 'syz.0.15432': attribute type 27 has an invalid length. [ 1099.676677][T12966] 9pnet_fd: Insufficient options for proto=fd [ 1099.830244][T12976] overlayfs: failed to clone upperpath [ 1099.841544][T12976] netlink: 'syz.3.15443': attribute type 10 has an invalid length. [ 1100.325494][T12991] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 1100.329168][T12989] overlayfs: failed to clone upperpath [ 1100.330596][T12992] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1100.434492][T12997] tracefs: Bad value for 'gid' [ 1100.457740][T12997] tracefs: Bad value for 'gid' [ 1100.472380][T12997] /dev/rnullb0: Can't lookup blockdev [ 1100.496439][T13003] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1101.448190][T13026] /dev/loop0: Can't lookup blockdev [ 1101.927784][T13039] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13039 comm=syz.2.15466 [ 1102.745410][T13102] batadv_slave_1: entered promiscuous mode [ 1102.804414][T13103] batadv_slave_1: left promiscuous mode [ 1103.022694][T13134] netlink: 'syz.2.15497': attribute type 12 has an invalid length. [ 1103.296609][ T36] kauditd_printk_skb: 1183 callbacks suppressed [ 1103.296629][ T36] audit: type=1400 audit(1276.980:195921): avc: denied { write } for pid=13132 comm="syz.2.15497" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1103.326768][ T36] audit: type=1400 audit(1276.980:195922): avc: denied { write } for pid=13132 comm="syz.2.15497" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1103.332267][T13135] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1103.350641][ T36] audit: type=1400 audit(1276.980:195923): avc: denied { write } for pid=13132 comm="syz.2.15497" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1103.358568][T13135] audit: audit_lost=77 audit_rate_limit=0 audit_backlog_limit=64 [ 1103.381487][ T36] audit: type=1400 audit(1276.980:195924): avc: denied { write } for pid=13132 comm="syz.2.15497" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1103.389868][T13135] audit: backlog limit exceeded [ 1103.412286][ T36] audit: type=1400 audit(1276.980:195925): avc: denied { write } for pid=13132 comm="syz.2.15497" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1103.420415][T13135] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1103.442107][ T36] audit: type=1400 audit(1276.980:195926): avc: denied { write } for pid=13132 comm="syz.2.15497" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1103.626060][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15498'. [ 1103.884748][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.896861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.909109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.921268][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.933464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.945659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.957917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.970208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.982389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.994492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.164468][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15505'. [ 1104.177795][T13158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13158 comm=syz.3.15505 [ 1104.193371][T13158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13158 comm=syz.3.15505 [ 1104.999643][T13174] devpts: called with bogus options [ 1105.009967][T13174] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 1105.009995][T13174] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 1105.018977][T13174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:68 [ 1105.886924][T13195] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1105.947708][T13195] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1105.967281][T13195] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1106.539797][T13220] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 1106.539827][T13220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 1106.559041][T13220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:93 [ 1106.609225][T13223] rust_binder: Error while translating object. [ 1106.636268][T13223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1106.660480][T13223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 1106.772759][T13227] incfs: Error accessing: ./file0. [ 1106.802596][T13227] incfs: mount failed -20 [ 1107.231393][T13243] binder: Bad value for 'max' [ 1107.273204][T13243] rust_binder: 13243: no such ref 3 [ 1107.679175][T13260] /dev/rnullb0: Can't lookup blockdev [ 1107.803346][T13268] tracefs: Bad value for 'gid' [ 1107.812126][T13268] tracefs: Bad value for 'gid' [ 1107.939528][T13278] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 1108.066234][T13284] netlink: 'syz.0.15547': attribute type 12 has an invalid length. [ 1108.120962][T13282] rust_binder: Error while translating object. [ 1108.120995][T13282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1108.127352][T13282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 1108.733001][ T36] kauditd_printk_skb: 915 callbacks suppressed [ 1108.733056][ T36] audit: type=1400 audit(1282.059:196690): avc: denied { create } for pid=13305 comm="syz.3.15557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1108.832417][T13307] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1108.839159][ T36] audit: type=1400 audit(1282.097:196691): avc: denied { write } for pid=13305 comm="syz.3.15557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1108.866109][T13307] audit: audit_lost=129 audit_rate_limit=0 audit_backlog_limit=64 [ 1108.882146][T13307] audit: backlog limit exceeded [ 1108.894999][ T36] audit: type=1400 audit(1282.097:196692): avc: denied { read } for pid=13305 comm="syz.3.15557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1108.961383][ T36] audit: type=1400 audit(1282.097:196693): avc: denied { read } for pid=13305 comm="syz.3.15557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1109.014675][T13315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1109.028301][ T36] audit: type=1400 audit(1282.097:196694): avc: denied { create } for pid=13305 comm="syz.3.15557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1109.052043][T13315] audit: audit_lost=130 audit_rate_limit=0 audit_backlog_limit=64 [ 1109.079800][T13315] syz_tun: tun_net_xmit 54 [ 1109.240036][ C1] net_ratelimit: 97735 callbacks suppressed [ 1109.240062][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.258147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.270255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.282404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.294593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.306754][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.318867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.331031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.343207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.355366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.202271][T13382] overlayfs: failed to resolve './file1/file0': -2 [ 1111.779039][T13409] overlayfs: failed to clone upperpath [ 1112.769224][T13420] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15594'. [ 1112.827334][T13425] fuse: Invalid rootmode [ 1113.030768][T13433] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15599'. [ 1113.040105][T13433] netlink: 43 bytes leftover after parsing attributes in process `syz.2.15599'. [ 1113.051092][T13433] netlink: 'syz.2.15599': attribute type 6 has an invalid length. [ 1113.060349][T13433] netlink: 'syz.2.15599': attribute type 5 has an invalid length. [ 1113.069161][T13433] netlink: 43 bytes leftover after parsing attributes in process `syz.2.15599'. [ 1113.109303][T13435] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15599'. [ 1113.120047][T13435] netlink: 43 bytes leftover after parsing attributes in process `syz.2.15599'. [ 1113.131044][T13435] netlink: 'syz.2.15599': attribute type 6 has an invalid length. [ 1113.139438][T13435] netlink: 'syz.2.15599': attribute type 5 has an invalid length. [ 1113.148564][T13435] netlink: 43 bytes leftover after parsing attributes in process `syz.2.15599'. [ 1114.518757][ T36] kauditd_printk_skb: 310 callbacks suppressed [ 1114.518779][ T36] audit: type=1400 audit(1287.466:197004): avc: denied { read write } for pid=11826 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1114.595987][ C0] net_ratelimit: 120379 callbacks suppressed [ 1114.596012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.596066][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.602091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.614183][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.626206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.638166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.650030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.662044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.674042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.685972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1115.740246][ T36] audit: type=1400 audit(1287.709:197005): avc: denied { read write open } for pid=11826 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1118.626971][ T36] audit: type=1400 audit(1287.709:197006): avc: denied { ioctl } for pid=11826 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1119.951970][ C0] net_ratelimit: 185359 callbacks suppressed [ 1119.951995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.952012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.958099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.970197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.982195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.994104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1120.006134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1120.018109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1120.029970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1120.041863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1120.088024][T31905] bridge_slave_1: left allmulticast mode [ 1122.282506][ C0] sched: DL replenish lagged too much [ 1122.294040][T31905] bridge_slave_1: left promiscuous mode [ 1122.753759][ T36] audit: type=1400 audit(1288.130:197007): avc: denied { read write } for pid=12587 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1122.828157][T31905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.308009][ C1] net_ratelimit: 190131 callbacks suppressed [ 1125.308034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.308079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:6a:21:94:09:14, vlan:0) [ 1125.314330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.326197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.338157][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1125.350159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.362171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.374153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.386103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.397992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.663957][ C0] net_ratelimit: 192880 callbacks suppressed [ 1130.663984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.664025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.670118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.681991][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1130.694015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:6a:21:94:09:14, vlan:0) [ 1130.705967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.717857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.729902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.741820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.753798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1131.723317][ T36] audit: type=1400 audit(1288.130:197008): avc: denied { read write open } for pid=12587 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1131.780988][T31905] bridge_slave_0: left allmulticast mode [ 1131.872731][T31905] bridge_slave_0: left promiscuous mode [ 1132.194033][T31905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.258523][ T36] audit: type=1400 audit(1288.130:197009): avc: denied { ioctl } for pid=12587 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1133.434743][ T36] audit: type=1400 audit(1289.879:197010): avc: denied { read write } for pid=13450 comm="syz.0.15606" name="binder1" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1135.284037][ T36] audit: type=1400 audit(1289.879:197011): avc: denied { read write open } for pid=13450 comm="syz.0.15606" path="/dev/binderfs/binder1" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1136.019977][ C1] net_ratelimit: 164473 callbacks suppressed [ 1136.020003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.020033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.026147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.038067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.050035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1136.062056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:6a:21:94:09:14, vlan:0) [ 1136.074024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.085912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.097944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.109818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.375995][ C1] net_ratelimit: 173628 callbacks suppressed [ 1141.376024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.376070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.382190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.394058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.406049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1141.418058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.429963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.441840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.453828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.465766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1142.115998][ T36] audit: type=1400 audit(1291.385:197012): avc: denied { read } for pid=13450 comm="syz.0.15606" dev="nsfs" ino=4026533579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1142.167281][T27542] usb 4-1: USB disconnect, device number 104 [ 1146.681694][ T36] audit: type=1400 audit(1291.385:197013): avc: denied { read open } for pid=13450 comm="syz.0.15606" path="net:[4026533579]" dev="nsfs" ino=4026533579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1146.731970][ C0] net_ratelimit: 168817 callbacks suppressed [ 1146.731995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.732038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.738125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.750017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1146.762069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:6a:21:94:09:14, vlan:0) [ 1146.774032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.785927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.798027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.810039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.821989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1152.087951][ C0] net_ratelimit: 171000 callbacks suppressed [ 1152.087977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1152.088005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1152.094123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1152.106307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1152.118202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1152.130269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1152.142165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1152.154261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1152.166289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:6a:21:94:09:14, vlan:0) [ 1152.178247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.537296][ T36] audit: type=1400 audit(1291.385:197014): avc: denied { create } for pid=13450 comm="syz.0.15606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1157.443940][ C1] net_ratelimit: 171081 callbacks suppressed [ 1157.443964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.443969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.444023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.450094][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.461996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.474161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1157.486150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.498079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.509932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.521870][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.704898][ T36] audit: type=1400 audit(1304.097:197015): avc: denied { read write } for pid=11826 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1162.799965][ C0] net_ratelimit: 173611 callbacks suppressed [ 1162.799989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.800000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1162.800072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.806187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.818051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.829960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.841824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1162.853822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.865839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.877898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.155937][ C1] net_ratelimit: 170408 callbacks suppressed [ 1168.155962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1168.155985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:6a:21:94:09:14, vlan:0) [ 1168.162051][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.173983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.185999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.197846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.209855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1168.221850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.233745][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.245659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.963510][ T36] audit: type=1400 audit(1304.097:197016): avc: denied { read write open } for pid=11826 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1173.511937][ C0] net_ratelimit: 175171 callbacks suppressed [ 1173.511962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.511976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.512028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1173.518069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.529981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.541976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.553897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.565741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.577633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1173.589649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.205373][ T36] audit: type=1400 audit(1304.097:197017): avc: denied { ioctl } for pid=11826 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1178.867942][ C1] net_ratelimit: 173674 callbacks suppressed [ 1178.867968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.867995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.874043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.886186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.898048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.910181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:6a:21:94:09:14, vlan:0) [ 1178.921971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.934003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.945921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.958008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.579570][ T36] audit: type=1400 audit(1306.352:197018): avc: denied { execmem } for pid=13455 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1181.698490][T13460] ================================================================== [ 1181.706628][T13460] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 1181.713431][T13460] Write of size 8 at addr 0000000000000098 by task kworker/0:0/13460 [ 1181.721534][T13460] [ 1181.723885][T13460] CPU: 0 UID: 0 PID: 13460 Comm: kworker/0:0 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 1181.723921][T13460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1181.723937][T13460] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 1181.724003][T13460] Call Trace: [ 1181.724011][T13460] [ 1181.724021][T13460] __dump_stack+0x21/0x30 [ 1181.724051][T13460] dump_stack_lvl+0x10c/0x190 [ 1181.724077][T13460] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1181.724104][T13460] ? check_preempt_wakeup_fair+0x886/0xae0 [ 1181.724138][T13460] print_report+0x3d/0x70 [ 1181.724160][T13460] kasan_report+0x163/0x1a0 [ 1181.724195][T13460] ? down_write+0x83/0x2a0 [ 1181.724243][T13460] ? down_write+0x83/0x2a0 [ 1181.724270][T13460] kasan_check_range+0x299/0x2a0 [ 1181.724303][T13460] __kasan_check_write+0x18/0x20 [ 1181.724331][T13460] down_write+0x83/0x2a0 [ 1181.724368][T13460] ? __cfi_down_write+0x10/0x10 [ 1181.724396][T13460] ? _raw_spin_lock+0x8c/0x120 [ 1181.724431][T13460] ? __cfi__raw_spin_lock+0x10/0x10 [ 1181.724463][T13460] ? mutex_unlock+0x8b/0x240 [ 1181.724489][T13460] ? __cfi_mutex_unlock+0x10/0x10 [ 1181.724516][T13460] rust_binderfs_remove_file+0x6c/0x110 [ 1181.724543][T13460] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 1181.724590][T13460] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 1181.724618][T13460] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 1181.724659][T13460] ? update_load_avg+0x506/0x19a0 [ 1181.724686][T13460] ? detach_entity_load_avg+0x7b0/0x7b0 [ 1181.724719][T13460] ? dequeue_entity+0xa9c/0x1750 [ 1181.724743][T13460] ? __cfi_ip6_output+0x10/0x10 [ 1181.724772][T13460] ? tg_unthrottle_up+0x980/0x980 [ 1181.724794][T13460] ? __cfi_ip6_local_out+0x10/0x10 [ 1181.724824][T13460] ? __cfi_dst_output+0x10/0x10 [ 1181.724851][T13460] ? kvm_sched_clock_read+0x15/0x30 [ 1181.724879][T13460] ? sched_clock_noinstr+0xd/0x30 [ 1181.724905][T13460] ? sched_clock+0x44/0x60 [ 1181.724928][T13460] ? sched_clock_cpu+0x75/0x400 [ 1181.724954][T13460] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 1181.724980][T13460] ? __cfi_sched_clock_cpu+0x10/0x10 [ 1181.725006][T13460] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 1181.725037][T13460] ? __kasan_check_write+0x18/0x20 [ 1181.725065][T13460] ? __switch_to+0xc7b/0x1310 [ 1181.725091][T13460] ? psi_group_change+0xb44/0x1130 [ 1181.725117][T13460] ? __cfi___switch_to+0x10/0x10 [ 1181.725143][T13460] ? set_next_entity+0x11c/0x430 [ 1181.725167][T13460] ? _raw_spin_unlock+0x45/0x60 [ 1181.725188][T13460] ? __switch_to_asm+0x3d/0x70 [ 1181.725217][T13460] ? __schedule+0x1463/0x1f10 [ 1181.725241][T13460] ? kick_pool+0xb9/0x550 [ 1181.725263][T13460] process_scheduled_works+0x7d2/0x1020 [ 1181.725298][T13460] worker_thread+0xc58/0x1250 [ 1181.725328][T13460] ? try_to_wake_up+0xdd2/0x1aa0 [ 1181.725370][T13460] ? schedule+0xc6/0x240 [ 1181.725394][T13460] kthread+0x2ca/0x370 [ 1181.725426][T13460] ? __cfi_worker_thread+0x10/0x10 [ 1181.725456][T13460] ? __cfi_kthread+0x10/0x10 [ 1181.725488][T13460] ret_from_fork+0x64/0xa0 [ 1181.725514][T13460] ? __cfi_kthread+0x10/0x10 [ 1181.725548][T13460] ret_from_fork_asm+0x1a/0x30 [ 1181.725579][T13460] [ 1181.725589][T13460] ================================================================== [ 1182.061661][T13460] Disabling lock debugging due to kernel taint [ 1182.070041][T13460] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 1182.077874][T13460] #PF: supervisor write access in kernel mode [ 1182.083959][T13460] #PF: error_code(0x0002) - not-present page [ 1182.090130][T13460] PGD 0 P4D 0 [ 1182.093539][T13460] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 1182.099635][T13460] CPU: 0 UID: 0 PID: 13460 Comm: kworker/0:0 Tainted: G B 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 1182.114786][T13460] Tainted: [B]=BAD_PAGE [ 1182.118960][T13460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1182.129135][T13460] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 1182.145982][T13460] RIP: 0010:down_write+0x9a/0x2a0 [ 1182.151168][T13460] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 1182.170813][T13460] RSP: 0018:ffffc90001417500 EFLAGS: 00010256 [ 1182.176927][T13460] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 1182.184937][T13460] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90001417520 [ 1182.192940][T13460] RBP: ffffc90001417598 R08: ffffc90001417527 R09: 1ffff92000282ea4 [ 1182.200946][T13460] R10: dffffc0000000000 R11: fffff52000282ea5 R12: dffffc0000000000 [ 1182.208943][T13460] R13: 1ffff92000282ea0 R14: ffffc90001417520 R15: 0000000000000000 [ 1182.216957][T13460] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1182.225929][T13460] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1182.232629][T13460] CR2: 0000000000000098 CR3: 0000000123018000 CR4: 00000000003526b0 [ 1182.240635][T13460] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 1182.248630][T13460] DR3: 1000000100000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1182.256632][T13460] Call Trace: [ 1182.259931][T13460] [ 1182.262886][T13460] ? __cfi_down_write+0x10/0x10 [ 1182.267773][T13460] ? _raw_spin_lock+0x8c/0x120 [ 1182.272573][T13460] ? __cfi__raw_spin_lock+0x10/0x10 [ 1182.277807][T13460] ? mutex_unlock+0x8b/0x240 [ 1182.282430][T13460] ? __cfi_mutex_unlock+0x10/0x10 [ 1182.287497][T13460] rust_binderfs_remove_file+0x6c/0x110 [ 1182.293084][T13460] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 1182.305894][T13460] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 1182.311996][T13460] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 1182.325237][T13460] ? update_load_avg+0x506/0x19a0 [ 1182.330308][T13460] ? detach_entity_load_avg+0x7b0/0x7b0 [ 1182.335903][T13460] ? dequeue_entity+0xa9c/0x1750 [ 1182.340873][T13460] ? __cfi_ip6_output+0x10/0x10 [ 1182.345759][T13460] ? tg_unthrottle_up+0x980/0x980 [ 1182.350816][T13460] ? __cfi_ip6_local_out+0x10/0x10 [ 1182.355961][T13460] ? __cfi_dst_output+0x10/0x10 [ 1182.360847][T13460] ? kvm_sched_clock_read+0x15/0x30 [ 1182.366102][T13460] ? sched_clock_noinstr+0xd/0x30 [ 1182.371189][T13460] ? sched_clock+0x44/0x60 [ 1182.375635][T13460] ? sched_clock_cpu+0x75/0x400 [ 1182.380528][T13460] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 1182.386631][T13460] ? __cfi_sched_clock_cpu+0x10/0x10 [ 1182.392041][T13460] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 1182.397977][T13460] ? __kasan_check_write+0x18/0x20 [ 1182.403138][T13460] ? __switch_to+0xc7b/0x1310 [ 1182.407846][T13460] ? psi_group_change+0xb44/0x1130 [ 1182.412986][T13460] ? __cfi___switch_to+0x10/0x10 [ 1182.417958][T13460] ? set_next_entity+0x11c/0x430 [ 1182.422934][T13460] ? _raw_spin_unlock+0x45/0x60 [ 1182.427809][T13460] ? __switch_to_asm+0x3d/0x70 [ 1182.432608][T13460] ? __schedule+0x1463/0x1f10 [ 1182.437315][T13460] ? kick_pool+0xb9/0x550 [ 1182.441668][T13460] process_scheduled_works+0x7d2/0x1020 [ 1182.447259][T13460] worker_thread+0xc58/0x1250 [ 1182.451972][T13460] ? try_to_wake_up+0xdd2/0x1aa0 [ 1182.456956][T13460] ? schedule+0xc6/0x240 [ 1182.461227][T13460] kthread+0x2ca/0x370 [ 1182.465330][T13460] ? __cfi_worker_thread+0x10/0x10 [ 1182.470476][T13460] ? __cfi_kthread+0x10/0x10 [ 1182.475112][T13460] ret_from_fork+0x64/0xa0 [ 1182.479576][T13460] ? __cfi_kthread+0x10/0x10 [ 1182.484217][T13460] ret_from_fork_asm+0x1a/0x30 [ 1182.489021][T13460] [ 1182.492062][T13460] Modules linked in: [ 1182.495980][T13460] CR2: 0000000000000098 [ 1182.500145][T13460] ---[ end trace 0000000000000000 ]--- [ 1182.505612][T13460] RIP: 0010:down_write+0x9a/0x2a0 [ 1182.510674][T13460] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 1182.530310][T13460] RSP: 0018:ffffc90001417500 EFLAGS: 00010256 [ 1182.536414][T13460] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 1182.544411][T13460] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90001417520 [ 1182.552420][T13460] RBP: ffffc90001417598 R08: ffffc90001417527 R09: 1ffff92000282ea4 [ 1182.560424][T13460] R10: dffffc0000000000 R11: fffff52000282ea5 R12: dffffc0000000000 [ 1182.568424][T13460] R13: 1ffff92000282ea0 R14: ffffc90001417520 R15: 0000000000000000 [ 1182.576426][T13460] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1182.585386][T13460] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1182.591995][T13460] CR2: 0000000000000098 CR3: 0000000123018000 CR4: 00000000003526b0 [ 1182.599994][T13460] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 1182.607991][T13460] DR3: 1000000100000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1182.616001][T13460] Kernel panic - not syncing: Fatal exception [ 1182.622394][T13460] Kernel Offset: disabled [ 1182.626720][T13460] Rebooting in 86400 seconds..