last executing test programs: 4m45.038637685s ago: executing program 32 (id=26): syz_open_dev$loop(&(0x7f00000002c0), 0x2, 0x20000) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="66b9800000c00f326635000800000f30d375027f00f20faef10f01712e0fc76ac8660f3880a1717a660f382431f00fba2c30660f66f1"}], 0x1, 0x0, 0x0, 0xffffffffffffff9a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x8) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000708000/0x4000)=nil) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r7 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) fcntl$lock(r8, 0x25, &(0x7f00000001c0)={0x0, 0x1, 0x6, 0x81}) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x0, 0x0) read$rfkill(r9, &(0x7f0000000040), 0x8) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000080)={0x100, 0x3}) 4m43.946063652s ago: executing program 33 (id=38): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x804, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110014a696d40030410604101010203010902240001000000020904098402a1d760010905060000005003050905", @ANYRESDEC], 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0xfffffffffffffff2, 0x0, 0x0}) (async) socket$packet(0x11, 0x3, 0x300) 3m45.954422117s ago: executing program 34 (id=948): r0 = socket$inet(0x2, 0x1, 0x0) unshare(0x2040400) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = fcntl$dupfd(r0, 0x406, r2) setns(r3, 0x2000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, &(0x7f00000000c0), 0x4001) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000000010104000000000000003a02000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000001d0800074000000000100006800c000380060002004e220000"], 0x74}}, 0x4010) 3m30.114608876s ago: executing program 35 (id=962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0xbb5, 0x4}]}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x80, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5e}, {@in6=@loopback, 0x4d3, 0x32}, @in=@remote, {0xfffffffffffffffd, 0x101}, {0x0, 0x200000000, 0x0, 0x100000}, {}, 0x1, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x4e23, @in=@broadcast}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) accept4(r4, &(0x7f0000000400)=@ax25={{0x3, @rose}, [@remote, @netrom, @remote, @default, @default, @null, @rose, @rose]}, &(0x7f00000003c0)=0x80, 0x0) (async) bind$can_raw(r3, &(0x7f0000000100), 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) getrlimit(0xc, &(0x7f0000000140)) (async, rerun: 32) quotactl_fd$Q_GETQUOTA(r2, 0x0, 0xee01, &(0x7f0000000040)) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x100000}) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000140)) (async) ioctl$RTC_AIE_OFF(r7, 0x7002) (async) socket$netlink(0x10, 0x3, 0x15) 3m15.558188796s ago: executing program 36 (id=1569): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc0, 0x4) r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r2, 0x4, 0x42000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000003c0)={0x3, r1, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r6, &(0x7f00000046c0)=""/4096, 0x1000) getdents64(r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x10200, 0x0, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r7, 0x4, 0x2400) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x9, &(0x7f00000002c0)=""/241, 0xf1, 0x0, 0x30}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 2m58.533755365s ago: executing program 7 (id=1818): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) readv(r0, &(0x7f0000003440)=[{&(0x7f0000002200)=""/75, 0x4b}], 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x48c0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x7fff, 0x0, 0x81, 0xffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendfile(r5, r4, 0x0, 0x1ff) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f00000001c0)=0x1, 0x4) 2m58.403238146s ago: executing program 7 (id=1819): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES32], 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000240)={0x73}, 0x8) setsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x9, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) 2m58.16179252s ago: executing program 7 (id=1821): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0xfd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x319081) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x25a4, 0xffffffff00000001, 0x0, 0x4, 0x1d, 0x8, "1122f76efb5994ebd47aee398421ff40a6e464d5fedb69e1f7313292c9c11c34a0588eea54cd84875e3be0b94123fc42b6333f5538730a4bbe8f6c58eeb82e4e", "460200796f533d35e7bb3977a7ee866e6e58f9ad95259e52d3bdae95508f8d79ad9db89137ff983bb90a59afb8f292dcc25fc478f4bbcc3bdcb40059085159f6", "ad176a336987c58c50de1974d53d120f0f7dd58cf08127e8dd32979a7666fa04", [0x1246, 0xc]}) 2m58.113704941s ago: executing program 7 (id=1824): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x112f451, 0x0) timer_create(0x7, 0x0, &(0x7f00000001c0)) timer_create(0x1, 0x0, &(0x7f0000000440)=0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000080)='vfat\x00', 0x20e0c8, 0x0) r3 = socket(0x200000100000011, 0x803, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_control_io(r6, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000000)="4d01000000000000000100e50414090b00000000", 0x14, 0x0, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) timer_delete(r2) r7 = getpid() fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x8, r7}) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') 2m55.056898289s ago: executing program 7 (id=1858): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000a40)={0x0, 0x14, 0x8, "1d0d06f2afe59f1e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x4, &(0x7f0000000180)=@gcm_256={{}, "2474794233890da1", "d830005894bf527ae179a740634a1236f3678de8ea2d0d661607e24300", "5615d9f5", "7c5cec21691a43fe"}, 0xfe2e) 2m54.954302291s ago: executing program 7 (id=1861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 2m54.902432512s ago: executing program 37 (id=1861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 2m17.436595153s ago: executing program 5 (id=2377): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioperm(0x3, 0x7, 0x7) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioperm(0x40, 0x4, 0xfffffffffffffff4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/53, 0x35, 0x2, 0x9}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 2m17.357299803s ago: executing program 5 (id=2378): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="740000ac7108f504000000000000000002000000240001801400018008000100e011000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000001d0800074000000000100006800c000380060002004e"], 0x74}, 0x1, 0x0, 0x0, 0x14044890}, 0x4c850) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xbc, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0xfff, 0xfffffffe, 0x7f, 0x101, 0x6, 0x10000, 0x0, 0x9]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xd4}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x52b}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x60}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x250}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x410}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4008084}, 0x20000001) 2m17.261785395s ago: executing program 5 (id=2379): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x32, 0x0, &(0x7f0000000300)="8bc474a3fd91df6339159fbd69eefe1eb44d71e0aa0f46941673946fa48d8a81b663eb7d873b8ffe203b9b55b2a60f0794a3"}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x8010, r1, 0x4d75d000) 2m17.218137456s ago: executing program 5 (id=2381): syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {0x7fffffff}, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_iso={0x4, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fadvise64(r3, 0x10, 0x0, 0x5) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4be}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x53e}, 0x17) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000), 0x4) sendto$inet6(r4, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x102) keyctl$search(0xa, 0x0, &(0x7f00000003c0)='asymmetric\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 2m17.049729689s ago: executing program 5 (id=2382): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "d56d9847bfcb49e2", "16549f18408d640d012ebcc31bd9870b", "bcd58d40", "4f5b22bc20c62b22"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) 2m16.95144849s ago: executing program 5 (id=2385): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x4020c1, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "45701d157a620207a64a5c73010ec72c4a7531a2"}, 0x15, 0x1) (async) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "45701d157a620207a64a5c73010ec72c4a7531a2"}, 0x15, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x16}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6409a585bb"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "52ce38eeb6442c1640cc7f5f56"}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x90) fsetxattr$security_evm(r0, &(0x7f0000000200), &(0x7f0000000240)=@sha1={0x1, "bbd42b447b143f859a969fa171d155f3279696f9"}, 0x15, 0x3) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x184a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xe0, 0xfc, [{{0x9, 0x4, 0x0, 0x49, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x7, 0xa8, 0x1, {0x22, 0x44c}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x4, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1, 0x6b, 0x8}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x40, 0xf9, 0x80}, 0x89, &(0x7f0000000300)={0x5, 0xf, 0x89, 0x1, [@generic={0x84, 0x10, 0x4, "e05f0e39bc060eac0b3d8b736e9021248e7a3cbee333e72501b9bf0f0181a4173f2034e6c22ca55f75020d3005bdb53e25426ebe482f1a4e11478254324fcdef1ca6fb119fc2bd6f8722e8f043cd4772522bc042dc0c94a735468d4b5f3c1eb37dff70beab40e6eb4393a3502fc3cd00c7ee47a56f8b15d8a763a56e6c9d2abb9a"}]}, 0x6, [{0xb2, &(0x7f00000003c0)=@string={0xb2, 0x3, "ac8d9259bcd9bedf0320c3282fb6b90976d343d691f90c484c8cd8fde72565c1467deafb99a1bf203b63402ea85475ae8c06d87e54a84975ecc415c13d1dd9561e6d74be27b79269d9ba113ccd4475387631dcb21b6a6099f6a4f0cb0f591ced7790be958023e4a8df645602c845e08c676bf4e5ab81ab84b1e6d41b52ff7aa4c13b28f4d6e21b8afb5486f6a79bfaf2eca2bb3cfedf8c1e7aea99948c803bdf5fa3627f31bbbd6a2762cda1facee57b"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x180c}}, {0x9b, &(0x7f00000004c0)=@string={0x9b, 0x3, "b8a5894b1443035daacd12f3e8c5841d06ddd3eb2728df8e3dcfdd989772f332e8c49aad08a7aa309074c23fc65698d18f76f5a072628706e529d4f9a688237088d4f233c3baaf10af6f47041740c290515231bb4acc505945ecaaed469534fc85bcac17e8a25e9e3bb7d0710916c5dca7958568b842071eeb4021c49614b71fecaf25d3e9e1acf457a244ea0ad231ede0be08064b14cbd280"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x4042}}, {0xf3, &(0x7f0000000600)=@string={0xf3, 0x3, "89b857c4c379bc96ffcb1eb5d2b346fbbafeadaf676a19bac51928073d53d3a4b8e22c6099e62da32c3121b743bd1518e25f83526514f8cb98f0a9d4ad7029f215be388f25f11dd6d68f85f7b2e487ababe3f90036b6c4920bd4a4d76cc6623e0f38c81d278e65fd65eb0da72d368b9a7a5a5106289417c1630158903c8fcf314934d14047faaf10afaadc639f08e77be83705fe633e6295ca43b17bf3d4fe21f6f29c37660eb1adf84d435a0d8ac0e067d49a3013dda74fb17deff3f43706d482451bd14635785aa6064413f828f3627fe372f459e1b7e6dbf6ca4374f6859cba48b356a7fded88a28b12d5c3c05964da"}}]}) syz_usb_control_io(r2, &(0x7f0000000980)={0x2c, &(0x7f0000000780)={0x0, 0x1, 0x4e, {0x4e, 0x23, "6e7f5af173340c226fc1e6d4b474225916e4feddfdc4a82093645fba1e7a0ea6f725542e2f7c0236025d5cc14763df9abeca72a13edffa7596efb9eff1cbfec9e3ec5cb8e997a74ac5c12501"}}, &(0x7f0000000800)={0x0, 0x3, 0x84, @string={0x84, 0x3, "37045574d99ed565841a4f7c915664a585e89c99ad5ed41e7b2e018b32e61be4a723e2ebf30d86089a1ad947d6793ade24a27eb155ef82946f9b3231b17bf08faa6e5d7db1a978c2df43588d51e1482c0cd2f7081f1658f47e507fcc34eada62bb83148e80e4756b399bc78fbe006c0c2446c66ce95e85979d25c87a96c10b726917"}}, &(0x7f00000008c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x4, 0x7}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0x6, 0x40}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x2, 0x17, "d539b86d", "8c229891"}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0x2, 0x8, 0x57, 0x0, 0x6}}}, &(0x7f0000000e40)={0x84, &(0x7f00000009c0)={0x40, 0x11, 0xa4, "e6a1a7e91b8c9e8a9fdf5aa696f49b553ff754a719ca150a7b3f06cb0f9ea362b3d66512724fd3b96d5e46b4cbd5c60f1d15c4c9c5af32bca759cc9ff21d6e17a1fec32f04998e48f0e90a1580c845330d36a12ba667ee04704be27fe2d16402dcc3edc5bbe18e8f04fc0702f021817a798e8ba3a2c53641ea100794a03b07296d41eec2266c5612af6801536d192874992caa18af837bf7543c76ed397a5f33d08a89ad"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000b40)={0x20, 0x0, 0x8, {0x1e0, 0x40, [0x0]}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000c00)={0x40, 0xb, 0x2, 'jB'}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "c077"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x5b}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0xc9}}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000f00)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x608, 0x23}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x243}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) fcntl$setsig(r4, 0xa, 0x41) ioctl$int_in(r4, 0x5421, &(0x7f0000001080)) recvmsg(r3, &(0x7f0000001240)={&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000001200)=[{&(0x7f0000001140)=""/29, 0x1d}, {&(0x7f0000001180)=""/89, 0x59}], 0x2}, 0x100) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f0000001280)={0xa4, 0x0, 0x1}) rename(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)='./file0\x00') socket$can_bcm(0x1d, 0x2, 0x2) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x810, r7, 0xbf025000) openat$fuse(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) timer_create(0x4, &(0x7f00000014c0)={0x0, 0x19, 0x0, @thr={&(0x7f00000013c0)="a6e0312f5f0d3c2e0b98f52bf04886408e88eda766d5e011f2901ff53a799d36b52b7c152689b6f05c015fbe61a000060be11fe7c6c355b8c776da1fbbd5ac84ece2", &(0x7f0000001440)="c95cd5f037b46688c4e149a6368f5cdd1fdbf7eca28ff098b5797406fda410bf3e95f14a0b8118ba1d4b5523335f4237ee39e98c68c2d78dc4d2d3ca91d2f4b7a60ab7b57261cd751b56582d"}}, &(0x7f0000001500)) (async) timer_create(0x4, &(0x7f00000014c0)={0x0, 0x19, 0x0, @thr={&(0x7f00000013c0)="a6e0312f5f0d3c2e0b98f52bf04886408e88eda766d5e011f2901ff53a799d36b52b7c152689b6f05c015fbe61a000060be11fe7c6c355b8c776da1fbbd5ac84ece2", &(0x7f0000001440)="c95cd5f037b46688c4e149a6368f5cdd1fdbf7eca28ff098b5797406fda410bf3e95f14a0b8118ba1d4b5523335f4237ee39e98c68c2d78dc4d2d3ca91d2f4b7a60ab7b57261cd751b56582d"}}, &(0x7f0000001500)) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001540)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001580), 0x141000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000015c0), 0x2001, 0x0) (async) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000015c0), 0x2001, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r9, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x3800c100}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r1, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x60}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x24004844) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r9, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x3800c100}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r1, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x60}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x24004844) getsockname$unix(r8, &(0x7f0000001700)=@abs, &(0x7f0000001780)=0x6e) (async) getsockname$unix(r8, &(0x7f0000001700)=@abs, &(0x7f0000001780)=0x6e) read(r4, &(0x7f00000017c0)=""/173, 0xad) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001880)) 2m16.872308161s ago: executing program 38 (id=2385): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x4020c1, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "45701d157a620207a64a5c73010ec72c4a7531a2"}, 0x15, 0x1) (async) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "45701d157a620207a64a5c73010ec72c4a7531a2"}, 0x15, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x16}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6409a585bb"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "52ce38eeb6442c1640cc7f5f56"}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x90) fsetxattr$security_evm(r0, &(0x7f0000000200), &(0x7f0000000240)=@sha1={0x1, "bbd42b447b143f859a969fa171d155f3279696f9"}, 0x15, 0x3) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x184a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xe0, 0xfc, [{{0x9, 0x4, 0x0, 0x49, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x7, 0xa8, 0x1, {0x22, 0x44c}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x4, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1, 0x6b, 0x8}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x40, 0xf9, 0x80}, 0x89, &(0x7f0000000300)={0x5, 0xf, 0x89, 0x1, [@generic={0x84, 0x10, 0x4, "e05f0e39bc060eac0b3d8b736e9021248e7a3cbee333e72501b9bf0f0181a4173f2034e6c22ca55f75020d3005bdb53e25426ebe482f1a4e11478254324fcdef1ca6fb119fc2bd6f8722e8f043cd4772522bc042dc0c94a735468d4b5f3c1eb37dff70beab40e6eb4393a3502fc3cd00c7ee47a56f8b15d8a763a56e6c9d2abb9a"}]}, 0x6, [{0xb2, &(0x7f00000003c0)=@string={0xb2, 0x3, "ac8d9259bcd9bedf0320c3282fb6b90976d343d691f90c484c8cd8fde72565c1467deafb99a1bf203b63402ea85475ae8c06d87e54a84975ecc415c13d1dd9561e6d74be27b79269d9ba113ccd4475387631dcb21b6a6099f6a4f0cb0f591ced7790be958023e4a8df645602c845e08c676bf4e5ab81ab84b1e6d41b52ff7aa4c13b28f4d6e21b8afb5486f6a79bfaf2eca2bb3cfedf8c1e7aea99948c803bdf5fa3627f31bbbd6a2762cda1facee57b"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x180c}}, {0x9b, &(0x7f00000004c0)=@string={0x9b, 0x3, "b8a5894b1443035daacd12f3e8c5841d06ddd3eb2728df8e3dcfdd989772f332e8c49aad08a7aa309074c23fc65698d18f76f5a072628706e529d4f9a688237088d4f233c3baaf10af6f47041740c290515231bb4acc505945ecaaed469534fc85bcac17e8a25e9e3bb7d0710916c5dca7958568b842071eeb4021c49614b71fecaf25d3e9e1acf457a244ea0ad231ede0be08064b14cbd280"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x4042}}, {0xf3, &(0x7f0000000600)=@string={0xf3, 0x3, "89b857c4c379bc96ffcb1eb5d2b346fbbafeadaf676a19bac51928073d53d3a4b8e22c6099e62da32c3121b743bd1518e25f83526514f8cb98f0a9d4ad7029f215be388f25f11dd6d68f85f7b2e487ababe3f90036b6c4920bd4a4d76cc6623e0f38c81d278e65fd65eb0da72d368b9a7a5a5106289417c1630158903c8fcf314934d14047faaf10afaadc639f08e77be83705fe633e6295ca43b17bf3d4fe21f6f29c37660eb1adf84d435a0d8ac0e067d49a3013dda74fb17deff3f43706d482451bd14635785aa6064413f828f3627fe372f459e1b7e6dbf6ca4374f6859cba48b356a7fded88a28b12d5c3c05964da"}}]}) syz_usb_control_io(r2, &(0x7f0000000980)={0x2c, &(0x7f0000000780)={0x0, 0x1, 0x4e, {0x4e, 0x23, "6e7f5af173340c226fc1e6d4b474225916e4feddfdc4a82093645fba1e7a0ea6f725542e2f7c0236025d5cc14763df9abeca72a13edffa7596efb9eff1cbfec9e3ec5cb8e997a74ac5c12501"}}, &(0x7f0000000800)={0x0, 0x3, 0x84, @string={0x84, 0x3, "37045574d99ed565841a4f7c915664a585e89c99ad5ed41e7b2e018b32e61be4a723e2ebf30d86089a1ad947d6793ade24a27eb155ef82946f9b3231b17bf08faa6e5d7db1a978c2df43588d51e1482c0cd2f7081f1658f47e507fcc34eada62bb83148e80e4756b399bc78fbe006c0c2446c66ce95e85979d25c87a96c10b726917"}}, &(0x7f00000008c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x4, 0x7}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0x6, 0x40}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x2, 0x17, "d539b86d", "8c229891"}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0x2, 0x8, 0x57, 0x0, 0x6}}}, &(0x7f0000000e40)={0x84, &(0x7f00000009c0)={0x40, 0x11, 0xa4, "e6a1a7e91b8c9e8a9fdf5aa696f49b553ff754a719ca150a7b3f06cb0f9ea362b3d66512724fd3b96d5e46b4cbd5c60f1d15c4c9c5af32bca759cc9ff21d6e17a1fec32f04998e48f0e90a1580c845330d36a12ba667ee04704be27fe2d16402dcc3edc5bbe18e8f04fc0702f021817a798e8ba3a2c53641ea100794a03b07296d41eec2266c5612af6801536d192874992caa18af837bf7543c76ed397a5f33d08a89ad"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000b40)={0x20, 0x0, 0x8, {0x1e0, 0x40, [0x0]}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000c00)={0x40, 0xb, 0x2, 'jB'}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "c077"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x5b}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0xc9}}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000f00)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x608, 0x23}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x243}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) fcntl$setsig(r4, 0xa, 0x41) ioctl$int_in(r4, 0x5421, &(0x7f0000001080)) recvmsg(r3, &(0x7f0000001240)={&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000001200)=[{&(0x7f0000001140)=""/29, 0x1d}, {&(0x7f0000001180)=""/89, 0x59}], 0x2}, 0x100) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f0000001280)={0xa4, 0x0, 0x1}) rename(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)='./file0\x00') socket$can_bcm(0x1d, 0x2, 0x2) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x810, r7, 0xbf025000) openat$fuse(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) timer_create(0x4, &(0x7f00000014c0)={0x0, 0x19, 0x0, @thr={&(0x7f00000013c0)="a6e0312f5f0d3c2e0b98f52bf04886408e88eda766d5e011f2901ff53a799d36b52b7c152689b6f05c015fbe61a000060be11fe7c6c355b8c776da1fbbd5ac84ece2", &(0x7f0000001440)="c95cd5f037b46688c4e149a6368f5cdd1fdbf7eca28ff098b5797406fda410bf3e95f14a0b8118ba1d4b5523335f4237ee39e98c68c2d78dc4d2d3ca91d2f4b7a60ab7b57261cd751b56582d"}}, &(0x7f0000001500)) (async) timer_create(0x4, &(0x7f00000014c0)={0x0, 0x19, 0x0, @thr={&(0x7f00000013c0)="a6e0312f5f0d3c2e0b98f52bf04886408e88eda766d5e011f2901ff53a799d36b52b7c152689b6f05c015fbe61a000060be11fe7c6c355b8c776da1fbbd5ac84ece2", &(0x7f0000001440)="c95cd5f037b46688c4e149a6368f5cdd1fdbf7eca28ff098b5797406fda410bf3e95f14a0b8118ba1d4b5523335f4237ee39e98c68c2d78dc4d2d3ca91d2f4b7a60ab7b57261cd751b56582d"}}, &(0x7f0000001500)) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001540)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001580), 0x141000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000015c0), 0x2001, 0x0) (async) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000015c0), 0x2001, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r9, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x3800c100}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r1, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x60}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x24004844) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r9, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x3800c100}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r1, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x60}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x24004844) getsockname$unix(r8, &(0x7f0000001700)=@abs, &(0x7f0000001780)=0x6e) (async) getsockname$unix(r8, &(0x7f0000001700)=@abs, &(0x7f0000001780)=0x6e) read(r4, &(0x7f00000017c0)=""/173, 0xad) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001880)) 1m46.961433853s ago: executing program 0 (id=2809): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) rt_sigaction(0x17, &(0x7f0000000080)={0x0, 0x8000000, 0x0, {[0xbdb]}}, 0x0, 0x4, &(0x7f0000000180)) stat(0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m46.889701534s ago: executing program 0 (id=2811): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async) modify_ldt$write(0x1, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'veth1_to_team\x00', 0x400}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000}) (async) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x1f8c) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x5, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) 1m46.816723335s ago: executing program 0 (id=2812): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x4040000) (async) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x4040000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40050}, 0x448c4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r5, 0x610, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40804}, 0x20004000) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000040) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x2f, 0xf4, 0x4, 0x6, 0x4, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40, 0x80, 0x1, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x2f, 0xf4, 0x4, 0x6, 0x4, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40, 0x80, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', r7, 0x2f, 0x8, 0x6, 0x0, 0x8, @loopback, @private0, 0x8000, 0x8007, 0x8, 0x800}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', r7, 0x2f, 0x8, 0x6, 0x0, 0x8, @loopback, @private0, 0x8000, 0x8007, 0x8, 0x800}}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xb}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40000) syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r4) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r4) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r8, 0x2, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000085}, 0x800) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000009c0)) (async) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000009c0)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000a80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r9, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x6c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r9, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x6c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) fsmount(0xffffffffffffffff, 0x0, 0x70) (async) r12 = fsmount(0xffffffffffffffff, 0x0, 0x70) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r12, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r13, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x4000850) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x1010, r6, 0x152a1000) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r15, &(0x7f0000001140)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f0000000d80)={0x350, 0xd, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x324, 0x3, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffff01}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x17, 0x6, 0x1, 0x0, "7aba8a92680fed9189f3b2b03fa46815354a95"}]}, {0x298, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x61, 0x6, 0x1, 0x0, "2ae81a965cfe25b51dbd2df98814c71b3e10b4fa297f668ea05cd9bc5779ca637b8e96105cdde1b62bc500d1ab8e3e7a3d0eef26dc075d717ff7c3f88ddc5d4ac44ca268720866bce71f6f4ee557c48074c6afc4f389849027f1187c9e"}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY={0x204, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6f, 0x1, "2d239663cd364d8b401251a6fc1e1f62056f7a71561327ac914945dc050fa4dccce4b889c75978a279d0589313230cb8dc0d8bc3045c381263684e5272ca6381a1b90650df5a657ddd6e8c8df2352e1ea03188e56ecb7b8ea4972a9728e73bc5ba4a1f3d42ae6af3540c6a"}, @NFTA_DATA_VALUE={0x46, 0x1, "17a1506276d4f502c9faa86afcc45b3f48b5546a4785d6bb98e95e9e8f4391de1460f59d8cdfcf8f347f8cfdee31bcc1e5488c4f06d07deb40de80eb3615d281ed80"}, @NFTA_DATA_VALUE={0xa5, 0x1, "9e80b4b571ac96db24cf80ed053b64baeaad91b48a65319aa0da89c4a4593aa127474d619ab7746273e7f1910dde294647a4427748f435555685af45dba7de76429eee38fe504b85ada93123ddcf486a9b6922081391c71388a5c109b6708f0fc18b5e0b8c95d3a531eea102ee98c15a3865eb1821e3215e2a20e5150b27b5552e6af68ed4fbefb264dbc006d326f9447311cc4773bac8afa838e920ac0d38ad1f"}, @NFTA_DATA_VALUE={0x9e, 0x1, "ff6cbbdbde879d9ecf9ad0a2becdf770d1a799da8699b0ac83162eae3e654265b6e7851b4081242555e115857c438a75c845846a3648f008fa65b01bfff76944d99303c344e621c5ce0357bdcd51be086a28997f60c9c15a0f534fcc12742ac783c091e8442b5b3c57024f085921652ccff9ce56b52fa7a9a765b5bd29df7380c8f79eff3ee16186342a3c0f68a0aa6c6f8cf24e7f316ab8e59e"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x350}, 0x1, 0x0, 0x0, 0x40010}, 0x40804) 1m46.694573327s ago: executing program 0 (id=2813): syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000600)={0x8, 0x4, {0x7e0, @struct={0x0, 0x100}, 0x0, 0x6, 0x0, 0x8, 0xe9, 0xbd, 0x400, @usage=0x6, 0x8, 0x7fff, [0x4, 0x4, 0x6, 0x7, 0x5, 0x76]}, {0x50a, @usage=0x4, 0x0, 0x5ef, 0x8, 0x1, 0x29fa, 0x7f, 0x400, @usage=0xfffffffffffffff1, 0x10000, 0x3ff, [0xa7a8, 0x4d, 0x9, 0x0, 0x400, 0x1]}, {0x3, @usage=0xfffffffffffffff9, 0x0, 0x200, 0x5, 0x9b, 0x7fffffff, 0x4, 0x12, @struct={0x80000001, 0xf1f}, 0x1, 0x3, [0x3470, 0xb6e5, 0x4, 0x1, 0xc0, 0x9]}, {0x6, 0x1, 0xfffffffffffffff1}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000002f40)={{r0}, r1, 0x2, @inherit={0x60, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x461f, {0x4, 0x14, 0x9, 0x4, 0x9}, [0xd, 0x8000000000000000, 0xc5a]}}, @devid=r2}) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 1m46.606632839s ago: executing program 0 (id=2815): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'geneve1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x5}}) (async) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f3, 0x100, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0xc000000) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x99b33000) (async) io_setup(0x4, &(0x7f0000000100)) 1m46.498445411s ago: executing program 0 (id=2818): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000140000021000054"], 0x14}}, 0x4004800) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003e80)={0x10, 0x34, 0x11, 0x70bd28, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x4800}, 0x40) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1m46.436723891s ago: executing program 39 (id=2818): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000140000021000054"], 0x14}}, 0x4004800) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003e80)={0x10, 0x34, 0x11, 0x70bd28, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x4800}, 0x40) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1m31.399077198s ago: executing program 8 (id=3020): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x4, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = getuid() setreuid(0x0, r2) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r2], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) clock_gettime(0x0, &(0x7f0000003180)) recvmmsg(r1, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000001f40)=""/72, 0x48}, {0x0}, {&(0x7f0000002fc0)=""/66, 0x42}], 0x3}, 0x1}], 0x2, 0x23a0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r5, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x6, 0x309, 0x38, 0xfffffffc, 0xe, 0xffff, 0x20, 0x2, 0x5, 0x0, 0x6}, [{0x60000000, 0x8, 0x40, 0xed, 0xb80, 0xff, 0xfffffffb, 0x1000}, {0x3, 0x6a4, 0x0, 0x8, 0x8, 0x800, 0x1ff, 0x3ff}]}, 0x78) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x5) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xee) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$sock_bt_hci(r3, 0x400448cc, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) socket$inet6_tcp(0xa, 0x1, 0x0) 1m29.110898404s ago: executing program 8 (id=3058): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0}) (async) 1m29.005938546s ago: executing program 8 (id=3060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c000280050001001100"], 0x74}}, 0x4010) 1m28.963764957s ago: executing program 8 (id=3061): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ftruncate(r1, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f00000024c0)={{0x1, 0x0, 0x80, {0x2000, 0x100000, 0x1}}, "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", "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"}) setsockopt$sock_int(r5, 0x28, 0xa, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0xffff, 0x0) setreuid(0x0, r9) ioctl$BLKFLSBUF(r3, 0x1261, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040)=0xef, 0x1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) 1m28.907152728s ago: executing program 8 (id=3062): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) io_setup(0x8, &(0x7f0000004200)) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) (async) 1m28.677884182s ago: executing program 8 (id=3063): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x3002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x1001, 0x2}, 0x1c) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg$tipc(r5, &(0x7f0000000600)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48154}, 0x4008011) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100, 0x100) open_tree(r9, &(0x7f0000000140)='./file0\x00', 0x1100) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) r11 = openat$cgroup_type(r10, &(0x7f00000001c0), 0x2, 0x0) read(r11, &(0x7f0000000240)=""/123, 0x7b) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='selinuxfs\x00', 0x0, 0x0) 1m28.665354702s ago: executing program 40 (id=3063): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x3002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x1001, 0x2}, 0x1c) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg$tipc(r5, &(0x7f0000000600)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48154}, 0x4008011) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100, 0x100) open_tree(r9, &(0x7f0000000140)='./file0\x00', 0x1100) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) r11 = openat$cgroup_type(r10, &(0x7f00000001c0), 0x2, 0x0) read(r11, &(0x7f0000000240)=""/123, 0x7b) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='selinuxfs\x00', 0x0, 0x0) 31.385702395s ago: executing program 9 (id=3635): r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x6e, 0x800) (async, rerun: 64) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4010}, 0xe) (async) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4310}, {r0, 0x2200}, {r1, 0x1400}, {r3, 0x402}], 0x4, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={[0x7]}, 0x8) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) accept4$bt_l2cap(r1, &(0x7f00000003c0), &(0x7f0000000400)=0xe, 0x80800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 31.334529116s ago: executing program 9 (id=3636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000001340)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) personality(0x5400004) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 31.193586208s ago: executing program 9 (id=3637): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) setfsgid(r3) listen(r1, 0x80000001) ioprio_set$uid(0x3, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x581, 0x0, 0x79d}]}) r8 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0xb, 0x81, 0x0, 0x2000000000000021, 0x0, 0x70bd2d, 0x25df9bff, [@sadb_sa={0x0, 0x1, 0x4d2, 0x5b, 0x50, 0x51, 0x4, 0x80000000}, @sadb_spirange={0x29, 0x10, 0x4d4, 0x4d3}]}, 0x30}}, 0x80) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001300f19a0000000000000000fe8000000000000000000000000000aaac1e040100000000000000000000000000000000000000000a00003000000000", @ANYRES64=r9, @ANYRES32=0xee01, @ANYBLOB="00000000000000000300000000000000010000000000100000018000000000000400000000000000010000000000000000000000000000000100000000000000000000000000000005000000000000000300"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendfile(r8, r8, 0x0, 0x7ffdf000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r11, &(0x7f0000000040)=""/27, 0x1b) getdents(r11, &(0x7f0000001f80)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6, 0x2, 0xff, 0x8, 0x3}, 0x20) 31.07722968s ago: executing program 9 (id=3639): r0 = socket$inet(0x2, 0x1, 0x0) unshare(0x2040400) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = fcntl$dupfd(r0, 0x406, r2) setns(r3, 0x2000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, &(0x7f00000000c0), 0x4001) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c000280050001000000000024000a801400018008000100e000000108000200e00000010c000280050001000000001d0800074000000000100006800c000380060002004e220000"], 0x74}}, 0x4010) 30.860075743s ago: executing program 9 (id=3640): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2180203010902120001000001000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000a00)={0x40, 0x31, 0x4, "068b6ff5"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x20, 0xe, 0x2, '\nI'}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x20, 0xe, 0x2, '\nI'}, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x231, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0xffff, 0x3, 0x46, 0x8, 0x100, 0x2, 0x8, 0x300, 0x8, 0x7, 0x3, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0x9], 0x8080000, 0xc2083}) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 29.080683721s ago: executing program 9 (id=3651): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x60341, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0xfffffff7) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x42, 0x0, &(0x7f0000000180)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async) timerfd_create(0x8, 0x80800) (async) socket$nl_generic(0x10, 0x3, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) (async) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x8044, &(0x7f00000003c0)={0x11, 0x806, 0x0, 0x1, 0x7, 0x6, @local}, 0x14) (async) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB="2c726f6f746d6f64653d303030303030ec303030303030303030303034303030302c757345725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x82, 0xfffffffffffffff5, 0x4, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) syz_fuse_handle_req(r3, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000700)={0x50, 0xffffffffffffffda, 0x200000003, {0x7, 0x29, 0x0, 0x21, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wake_unlock', 0x1a1881, 0x90) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r9, 0x107, 0x15, 0x0, &(0x7f0000000140)) (async) write$khugepaged_scan(r8, &(0x7f0000000000), 0x8) epoll_create(0x3) 13.025593635s ago: executing program 41 (id=3651): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x60341, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0xfffffff7) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x42, 0x0, &(0x7f0000000180)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async) timerfd_create(0x8, 0x80800) (async) socket$nl_generic(0x10, 0x3, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) (async) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x8044, &(0x7f00000003c0)={0x11, 0x806, 0x0, 0x1, 0x7, 0x6, @local}, 0x14) (async) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB="2c726f6f746d6f64653d303030303030ec303030303030303030303034303030302c757345725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x82, 0xfffffffffffffff5, 0x4, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) syz_fuse_handle_req(r3, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000700)={0x50, 0xffffffffffffffda, 0x200000003, {0x7, 0x29, 0x0, 0x21, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wake_unlock', 0x1a1881, 0x90) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r9, 0x107, 0x15, 0x0, &(0x7f0000000140)) (async) write$khugepaged_scan(r8, &(0x7f0000000000), 0x8) epoll_create(0x3) 8.88793151s ago: executing program 1 (id=3821): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 8.662040283s ago: executing program 1 (id=3825): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) eventfd(0xc) (async) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r3, &(0x7f00000002c0)=""/124, 0x7c, 0x7) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @local, @local}, &(0x7f0000000400)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r4, 0x29, 0x4, 0x5, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x8ff5, 0x3}}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)=""/251, 0x0, 0xeeef0000}) (async, rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async, rerun: 32) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000380)=0x30) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) (rerun: 32) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) eventfd2(0x0, 0x800) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000180)={0x20, 0x101, 0x9, 0x7, 0x0, 0x0, 0x5}, 0xc) 8.514217035s ago: executing program 1 (id=3828): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt(r1, 0xff, 0xf, 0x0, &(0x7f0000000000)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x3}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, 0xfffffffffffffffc, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 8.346783708s ago: executing program 1 (id=3832): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc004ae0a, &(0x7f0000000080)=""/1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) read$FUSE(r0, &(0x7f0000004f80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f00000001c0)={0x18, 0x0, r4, {0x3}}, 0x18) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214050, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc)=0x2, 0xa, 0x0, 0x0, 0x0, 0x1000000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r5, 0x89e0, 0x0) chroot(&(0x7f0000000000)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) read$FUSE(r0, &(0x7f0000002f40)={0x2020}, 0x2020) 7.776738247s ago: executing program 4 (id=3841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000000001010400000000000000000284ff00240001801400018008000100e011000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000001d0800074000000000100006800c000380060002004e"], 0x74}}, 0x4010) 7.707616008s ago: executing program 4 (id=3843): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000001380)) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc0046209, 0x0) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) (async) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) 7.58747777s ago: executing program 4 (id=3845): mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) socket$inet6(0x10, 0x3, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000540)=@known='trusted.overlay.redirect\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xc2, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a36950b544877661c265c83f6f3de2879e0e7dbb5c4335e434c6d8f42f75fc75d10d6f7da01da140ffd57cf696187efc0c35cecfeb6839374632c99b76479234ca7fc472792e6349a7e2f275a2361681d4d69881cd41da136fa1a5dba9f2451520d18d715554dd1a1a075f67f215a498e39ed80"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)}) 7.317678504s ago: executing program 1 (id=3849): r0 = socket(0x28, 0x5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r2 = openat$kvm(0x0, &(0x7f0000000180), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000240)={0x0, 0x4, 0xf000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x5}) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000300)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) close_range(r4, 0xffffffffffffffff, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r7 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r7, 0x0) (async) ftruncate(r7, 0x3) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x103041, 0x80) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) close_range(r2, 0xffffffffffffffff, 0x2) (async) poll(&(0x7f0000000000)=[{r4, 0x100}, {r4, 0x3643}], 0x2, 0xe8) 7.252026205s ago: executing program 1 (id=3851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000000010104000000000000000002f5ff00240001801400018008000100e011000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000001d0800074000000000100006800c000380060002004e"], 0x74}}, 0x4010) 7.148401277s ago: executing program 42 (id=3851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000000010104000000000000000002f5ff00240001801400018008000100e011000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000001d0800074000000000100006800c000380060002004e"], 0x74}}, 0x4010) 7.142607947s ago: executing program 2 (id=3854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) fstat(r2, &(0x7f0000000440)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000140)={0x7f, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000240)=@arm64) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 6.825786762s ago: executing program 2 (id=3855): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000001080)) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x1e, 0x0, 0x101}}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2000040, &(0x7f0000000240)={[{@index_on}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_on}], [{@obj_user={'obj_user', 0x3d, 'team_slave_0\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '[+'}}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, '#:#\\'}}, {@obj_type={'obj_type', 0x3d, '*'}}]}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x14, 0x0) syz_open_procfs(r1, &(0x7f0000000140)='smaps\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120110038a3a0110030451a912180102030109021200fa0503c00009048e050039040002"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.587583206s ago: executing program 4 (id=3859): r0 = memfd_create(&(0x7f0000000000)='\x01\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x5, 0x7, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1094c2, 0x0) ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, &(0x7f00000000c0)={0x800, 0x4}) tee(r1, r0, 0xfffffffffffffffb, 0x7) pwrite64(r1, &(0x7f0000000100)="5b7e3ef769f0c41f1c7121a3a83501c1240ccdc36885ae74912fc3ef09112854a7e318ac4b8eb7f8ead2f4510c38c73cd8c34a88885976f2fa0530a2520b0e0e3ea003d34c8fb7848e51deb72e3a5394637d05ea1efe6416083bb3c10a598562189dc9c80a5823ad55c47ad41e1f403dea21cec1e908d730986cd04d29587625557e7908b4f46a6ad6b7e5c6ed877dcc807ab0319217d7aac23d6500146155d07d6eab60fe5c6e3b4a33591ba4358d70e2149649d141d21e3f9fcfadb17b08", 0xbf, 0x400) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = inotify_init1(0x80800) sendfile(r3, r0, &(0x7f0000000200)=0x7fff, 0x5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x181a42, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xef6ecac0b151c5a9) r4 = eventfd(0x6) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xea8) write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="4c9c32cbe9a2a50f9cd73a3e24f204e4ef6411e557d23a09ce8d8f7ff6b47232d7b2f8260b41eddaf779e73c", 0x2c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000001540)={0x2, 0x0, &(0x7f0000000380)=""/132, &(0x7f0000000440)=""/219, &(0x7f0000000540)=""/4096, 0x1000}) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000001580)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000015c0)={0x0, @initdev}, &(0x7f0000001600)=0xc) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000001640)={0x1, 0x1, 0x80, r6, 0x9}, 0xc) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000016c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x54, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000801}, 0x40800) poll(&(0x7f0000001800)=[{0xffffffffffffffff, 0x130}, {r4, 0x8032}, {r5, 0x8000}], 0x3, 0x66a6) r8 = openat$cgroup_type(r2, &(0x7f0000001840), 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r8, 0xc0389423, &(0x7f00000018c0)={0x3, 0x10, [0x9, 0x0, 0xdb2, 0x8], &(0x7f0000001880)=[0x0, 0x0]}) r9 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000001900)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xeeb663bfb8febedb, 0xb8c, 0x92, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0xe2, 0x1, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x7ff, 0x0, 0x1, {0x22, 0xbd7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xbe, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000001ec0)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x201, 0x7, 0x7, 0x0, 0x20, 0x18}, 0x38, &(0x7f0000001980)={0x5, 0xf, 0x38, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x68, 0x2, 0x3, 0x0, 0x7, [0x3f00, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "62e1d08795ddf27ae8c74c4eaea4403c"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe0, 0x7, 0xf, 0x3, 0x8}]}, 0x8, [{0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x36, &(0x7f0000001a00)=@string={0x36, 0x3, "0276e49dbeb966ccb4246a2342c28919359a80f9005247fc2ce309aca3bea0800abbec1cc22031b31f172ebbe477c09cb4dbd377"}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x280a}}, {0xd9, &(0x7f0000001a80)=@string={0xd9, 0x3, "d391bf8f129ad4a56b142629b241b75a06a346e7cd3831ea488516fba9ccc90640bf3de39f7be667e2f54401a30d731445f759621deffb86a48b3779ec6017cda1b11b0bed50c712cafc77ab1ea26b48802979672d02d02f7d7d444f1fa2d61322aced8c921d7dc19a15fe3b51b5ae222392f6fc8d1733b54ddec29107774d9de639b0ec9dc1e2b877905eba9134575020915cb55487d1dcfef2026ffa2968870d73776dd52e84f0f362bfd487c8cc34c178f0756b8086286caa146c90808cc0bb3121cc0a0e458445610428f255dead9fbb1616921eab"}}, {0xc2, &(0x7f0000001b80)=@string={0xc2, 0x3, "50e879849a3f6da34acaf1e3405ab11f4031242229b2e61aae479df5b12e57924584103a43411ddf30da570a5379063aa609f3e029ed9fe73e8c66cf91f84407252bbcd2fa62c627a28394f9618c78fd37c3aa343c82651045c174debf3c917fd20ae3c4db0b5bd4c27dea2890e79329680309cd542296c452a1ad8d48384e136269a443a5d901bc614a89b126f5f2f8c8e6498df2f9a37e5c1fde10704a9e4f3db336b147f9090e526a66dd3dd55c3075bf37eb0967042760e80a2255607245"}}, {0x60, &(0x7f0000001c80)=@string={0x60, 0x3, "49d015380625c91e428eb060fac05072cc4e81040ba46104c201dc03d081d940b1eb2bb7c89e6b6df0d74b1e02978b71778262651504fcd5f882c1334ce6bd42c72be7ed8f3bf5ff7cde5ce4cbcad041d0e8ed11e386a135207f2df834ce"}}, {0xae, &(0x7f0000001d00)=@string={0xae, 0x3, "4baa9001db74cd9b7473a712d0c26a3cbfd8ccd3fef9d34e0820a88028b07aac36a25e23292488f7c5f92c8f4fff94837cfbc2227c954ba888a5e141704df3dd036fcc32de37fff0efb09601c5c73c9ca810af95f450efdfa203061c7b70a1e6e226d7ed7552f95c5e78c6a420fe494820e9899a7c73faab0beda194af4fcdb137871ed80646f3668f9ff34b264bf63f536c2b4166ec82c90cd61cd5d7058cbb820f15b1af1dec51d81e64be"}}, {0xd6, &(0x7f0000001dc0)=@string={0xd6, 0x3, "4a7d6608f6f89bc0d3007f9c976394793c0e962921239fd8001755862ffc6344e22845dfd121bacf9add2579e52957b0324e02d6e6b54d88e07cc5803d0e6258879d41170cd2fe6ee1cbdff433584e43605ae7120b9128823f0180fd9a05e5cbffc115118803e177b0e104279f917d9b5d8be3db19833f34533012fe5ed55035c24d357cce80eb90d015e1a613e93e0227c6c6b305bdeffdc7c8d605649a00d9f7b2b769278f6657823535a73c0909597cd9eb069f48c9f51a490cfafca45e41cd21b23dbc064b3d6483a383771b611070c26c1d"}}]}) syz_usb_control_io$hid(r9, &(0x7f0000002100)={0x24, &(0x7f0000001f40)={0x0, 0xb, 0xd6, {0xd6, 0x31, "8284e561aad60f0257521315ea1569f7d416f275d925a32c272380d4b0c23ef8563b653b880801a38a6a2fabc8efba1cee8db89ce6c929895d38f8992e7539926d3d283dca8c3776f56d523493abbd0ef617ff0f9d5d64ef905cd893370df83b16c0cdfc0d2d6887de78918ec20b354f61afcedb8c306600a6d0486bff4816cd9205861083593d4cf11182c75f817e79db2c96b27890981613df017390e0b111050067a016d0402500382252892b7c4a5f47749ce0b2e8e4d22c140b4d67e8253d1cf6fc97a829b7a94c8388b393ddf42bdacb29"}}, &(0x7f0000002040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f0000002080)={0x0, 0x22, 0x1f, {[@local=@item_4={0x3, 0x2, 0xa, "35ab7650"}, @global=@item_012={0x0, 0x1, 0x9}, @main=@item_4={0x3, 0x0, 0x9, "32e4e9b2"}, @main=@item_4={0x3, 0x0, 0x9, "4c9fff62"}, @local=@item_4={0x3, 0x2, 0xa, "91559645"}, @main=@item_4={0x3, 0x0, 0xb, "b4b32bdf"}, @main=@item_4={0x3, 0x0, 0x6, "bb2cf8fd"}]}}, &(0x7f00000020c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0xf66}}}}, &(0x7f0000002340)={0x2c, &(0x7f0000002140)={0x20, 0xb, 0x73, "8deede32ba0adfd0fa28f6f896b904d10f35af4e772394fb79e2dfde94216bb6a6921ddb96b256a190d33ac7a731a23948750abc2c5dbaf0c7462e03497695fe9ae67c2c2154dea37e88d5646995fd7ab940135491140a36273287fb1d58f811a87c1e77f932ae0f83a90e98993c96be6bdbbb"}, &(0x7f00000021c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002200)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000002240)={0x20, 0x1, 0x98, "ea0227c0280bfbac13e219a8125c4cd5cf26193727ddc00ec6a4d2e6e9a6a2dd4d50ef90e9bc9a95c1885bf7d6b6300e38a76b239e79a7a51bd94dc94a272f4ef1c027f38efaf486e02bfc947e2d6075b93857ae56c4685b5c6cc0d6d9216227713e2ca6fa83eb2bfc1209a928f93eb1dd5f87f198f42e80ca5ec394dff06b57ca79c74189a18a142be81daf83df8120f229663abcad6a3a"}, &(0x7f0000002300)={0x20, 0x3, 0x1, 0x9}}) 3.624576622s ago: executing program 2 (id=3876): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000004002000000220000000a0001007725dd73f2d8"], 0x20}}, 0x2008c0d4) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='syst']) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x7000000) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) pipe2$9p(&(0x7f00000001c0), 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder-control\x00', 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000004400)=0x5, 0x4) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000007, 0x810, r5, 0x2ec36000) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000007, 0x810, r5, 0x2ec36000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c0, 0x5506, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xe2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "ce798c1d"}]}}, 0x0}, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000540)={'binder1\x00'}) (async) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000540)={'binder1\x00'}) 3.328460367s ago: executing program 4 (id=3877): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a"], 0x38}, 0x1, 0x0, 0x0, 0x24020800}, 0x20040810) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2180203010902120001000001000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)={0x40, 0x12, 0x2, "af7e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0xb, 0x2, "d036"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x20, 0xe, 0x3, "0a49f7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000300)={0x14, &(0x7f0000000200)={0x40, 0x30, 0x9e, {0x9e, 0xc, "718eab8fd54ef172e6f8faf20dbd01f9afe6559a74b74a29ecb555ce4ff6556202c2c970bea8155925f90e421b9a17be9b03893c5046e38652ede3bd37497b33bc798cf7c58d26d5b1a428ac3b19ae1aad50ef104ec6a04c5493a756cd6c1f02ff6311d664d13833b93dc5a47363deab7ea91501ef5ed922d22e29881c3386af51a3dac0c955f5ab82862d14a7a8261ce990e16adf8f82b4fcc139dd"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x1c, &(0x7f0000000340)={0x0, 0x1, 0x5c, "b77d77463f170e9d1909101999f81a79afc20eb9e32799d5705780ffc8e076ca16bb65407429525e255f4f79b133064a2688eb43ce4e657b6b3fc20f9f52ea2f34e11f6faca808b3d3a279c4144a4269aae4a9fe9da44dfe416957f2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000040)={0xdf, 0xfffffffffffff9f0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) memfd_create(0x0, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(r5, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) ioctl$sock_SIOCGIFBR(r4, 0x8940, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd, @fd, @fda={0x66646185, 0xa, 0x2, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x4, 0x2, 0x3}}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r6, 0x1, 0x9, &(0x7f0000000040), 0x29) setsockopt$inet6_tcp_int(r6, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3}) 2.190787395s ago: executing program 6 (id=3890): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7b) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 2.093797117s ago: executing program 6 (id=3891): r0 = socket$inet(0x2, 0x1, 0x0) unshare(0x2040400) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = fcntl$dupfd(r0, 0x406, r2) setns(r3, 0x2000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, &(0x7f00000000c0), 0x4001) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000110108000200e00000010c000280050001000000001d0800074000000000100006800c000380060002004e220000"], 0x74}}, 0x4010) 1.979114478s ago: executing program 2 (id=3892): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'netpci0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x6958, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x45833af92e4b39ff, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4da2c71e2c18e4ce180000000e089323f5796a5f07d02299c3b92c120271f4c7574fa630881fd6677d33775a90f", @ANYRES16=r6, @ANYBLOB="08002bbd7000fddbdf2517000000800004801300010062726f6164636173742d6c696e6b0000240007800800010007000000080002000a0000000800020003000000080002000f0000001300010062726f6164636173742d6c696e6b00002400078008000300020000000800030003000000080003000001000008000300030000000c00078008000100060000002400028008000200090000000400040008000100000000000400040008000200ff010000740004803c00078008000300060000000800010008000000080003000200000008000300020000000800040003000000080004007a05000008000300f8ffffff3400078008000200050000000800030004000000080002000100000008000200c9000000080001001a00000008000400d2000000"], 0x12c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"}) 1.932521609s ago: executing program 6 (id=3893): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x4}, @cpuid={0x2, 0x18, {0x81, 0x5}}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x8, 0x3ff}}, @code={0x1, 0x77, {"b905030000b800280000ba000000000f30b922030000b800000000ba008000000f30f3470f00c90f23623e470f72f0ba41dd1fc7442400c4000000c744240200280000ff2c24b9970b00000f3266baf80cb8f28a9683ef66bafc0cec66660f38820d00080000"}}, @code={0x1, 0x52, {"66ba6100b800800000ef650f2367f22edf43e4460f01f8f302ea66b81b000f00d0c443c15f78285ab8010000000f01d966bad10466b8000066ef2e0f8ef9000000"}}, @cpuid={0x2, 0x18, {0x4, 0x2}}, @code={0x1, 0x4f, {"f00fc70c5cf3f20f30400f01c367440fd310b9e90b00000f3266baf80cb8857edc82ef66bafc0cb0b7ee2e0fc77f0166b886008ec836f30faee80fc75b63"}}, @cpuid={0x2, 0x18, {0x0, 0x7}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x64, {"3e66450f3882bca47d000000b9800000c00f3235000100000f30c7f8e0a5000066baa000b8bbac0000efc744240009010000c744240200600000ff1c24450f01f80f01ca2e3e2e360f01c3260f180a400f20d0"}}, @cpuid={0x2, 0x18, {0x0, 0xfffffffa}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x2}], 0x26c}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f00000002c0)) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000400)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x68801, 0x0) bind$bt_hci(r1, &(0x7f0000000480)={0x1f, 0x0, 0x3}, 0x6) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, &(0x7f00000004c0)="66b90b0b000066b80040000066ba000000000f30f26d0fc7bd0c0066b97307000066b84f09000066ba000000000f30660f38806600baf80c66b86086258866efbafc0c66b88b00000066ef0f786c00e8ba000f30f30f09", 0x57}], 0x1, 0x1, &(0x7f0000000580), 0x0) bind$inet(r1, &(0x7f00000005c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg(r1, &(0x7f0000001b40)=[{{&(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)="8624d816773ca76aae67edd6c2ddf049f6442de761241d8a11e05d9160c1fa608ae7347dc762270860671f278e961521a256667dc7b63e13ba91ca66d88ba67eba35331d91fcd07eddc478bbe12369b001c30e3402639b26474dda9510375843a7355e2191", 0x65}, {&(0x7f0000000700)="9d73b3af23f2f47159feb3a9a9b1bc7604ae2de5ce4c791d26bf7e4e2ec0d4", 0x1f}, {&(0x7f0000000740)="402bcccb2e35a34ff00c08d2bb60a420fbb37315bb8d7ec8cf6a8edd1d0ce829793f69e8413f349f0ab59c92d6c7fffa243b5d5f02906dfb55217df386fe69cde0d65f38abcd8fab92b62c12597b68cd0309c782c27ccc4529fd837aa3970ab03989500321386d2d28d9d99b775c38d264953b9ed7e4e16d6fdcba30a8a69bc4f5640b100d148152fc81a635c691c1d8b7b22b3bca921fbc23e2be95", 0x9c}, {&(0x7f0000000800)="b0118d88e15bc930", 0x8}, {&(0x7f0000000840)="1329017eb30323122df623350b6ce99a4f1dec0475", 0x15}, {&(0x7f0000000880)="b1b9b913ddefece952f44bc02aac1d0bc691f4e3ae8419fb07ab466abf39dbab1d69dff9d65cfe7b48f13a33ed769864fb55ce47c084996650cb2199c48a419d5b37a0ec2ffa8f0df294c66dcd92683c6293db40c8c51aefa9f5c7b48de33277457c7e79a41fcf18ad3ff728db300e0009ddc16972cd905740bbd37fea8577e5b671fbd20030232fb05107fa295c0a36db", 0x91}], 0x6, &(0x7f00000009c0)=[{0xe0, 0x1, 0x10000, "cee694fb54b8aca4b1169fd4c6f2c82bfbdb1fcaac0f4e92a73e0f04042fc27799309f9d9e513ae5926008bdd75f75ddbf5186f8d261bafa00d2c6bf901d9e5e05a976ee314f94e6c0ce56443c16f5e5b479ae87f5997f225c210b4c7a4689dbe5c47f5bbcfe47e4d8961bd6a73a03160bc21f3f37b6066426fa5efa281782dfe9b7dbea28db6c7b202535574a1cca3b6c18ca69e10adac5dd6ffa9b9a0d9e26fa1077709d2702601d8ededb2a8ff11a2902b65b2163172109c313a432464d495fcb44dc04d6f91c53"}, {0x1010, 0x10c, 0x6dfc, "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"}, {0x30, 0x112, 0x364000, "1a982349015b0e2212b2b395aca5ba4f017af6b397229ab27c1b"}, {0x30, 0x115, 0x2b40, "015540122bdb225ea57a318c19558216dc88439ae26cbc4045c6d5d2"}], 0x1150}}], 0x1, 0x48011) mount$bind(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00), 0x10, 0x0) r2 = openat2(r1, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x10a00, 0x80, 0x18}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001cc0), 0x2, 0x0) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, 0x0, &(0x7f0000001d00)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000001d40)) r4 = geteuid() mount$cgroup2(0x0, &(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0), 0x1100000, &(0x7f0000001e00)={[{@subsystem='memory'}, {@memory_recursiveprot}, {@subsystem='memory'}, {@memory_hugetlb_accounting}, {@memory_hugetlb_accounting}, {@memory_localevents}, {@memory_hugetlb_accounting}, {@memory_hugetlb_accounting}, {}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@subj_type={'subj_type', 0x3d, ',-){(\x05!r%&\x1a!!-'}}, {@pcr={'pcr', 0x3d, 0xf}}]}) r5 = getpgid(0xffffffffffffffff) fstat(r3, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004300)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000004400)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000004540)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000004640)=0xe8) fstat(r3, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000004700)=[0xee01]) read$FUSE(r3, &(0x7f0000004740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r12 = getgid() fstat(r2, &(0x7f0000006780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() lstat(&(0x7f0000006c40)='./file0\x00', &(0x7f0000006c80)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000006d00)='./file0\x00', 0x800, 0x4, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000001f00)="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", 0x2000, &(0x7f0000006f80)={&(0x7f0000003f00)={0x50, 0x0, 0x1, {0x7, 0x2b, 0x3, 0x1, 0x4, 0x5, 0x7, 0x8, 0x0, 0x0, 0x8, 0x5}}, &(0x7f0000003f80)={0x18, 0x0, 0xc, {0x8000000000000000}}, &(0x7f0000003fc0)={0x18, 0x0, 0xa4300000000000, {0x2}}, &(0x7f0000004000)={0x18, 0xfffffffffffffff5, 0x0, {0x8}}, &(0x7f0000004040)={0x18, 0x0, 0xc5, {0x1a}}, &(0x7f0000004080)={0x28, 0xfffffffffffffffe, 0x9, {{0x3, 0x8000000000000001, 0x2, r5}}}, &(0x7f00000040c0)={0x60, 0x0, 0x9, {{0x6, 0x8000, 0xd, 0x4, 0x2, 0x56f, 0x0, 0x2}}}, &(0x7f0000004140)={0x18, 0x0, 0x9364, {0x6}}, &(0x7f0000004180)={0x15, 0x7fffffffffffffed, 0x1, {'([@^\x00'}}, &(0x7f00000041c0)={0x20, 0xfffffffffffffffe, 0xfffffffffffffffa, {0x0, 0x4}}, &(0x7f0000004280)={0x78, 0x0, 0xfffffffffffffffc, {0x4, 0x2, 0x0, {0x1, 0x100000001, 0x1, 0x6, 0x2, 0x8, 0x7f, 0x93, 0x9, 0x1000, 0x916, r4, r6, 0x6, 0x7}}}, &(0x7f0000004440)={0x90, 0x0, 0x7fffffffffffffff, {0x3, 0x1, 0x200, 0xfffffffffffffffd, 0xe, 0x5, {0x5, 0x40, 0x1d52, 0x81, 0x6, 0x2, 0xfffffffa, 0x3, 0xfffffffc, 0xc000, 0x80000000, r7, 0xee01, 0x1, 0x2}}}, &(0x7f0000004500)={0x30, 0x0, 0x1, [{0x4, 0x80, 0x1, 0x8, ']'}]}, &(0x7f0000006800)={0x338, 0x0, 0x5daa, [{{0x5, 0x1, 0x6, 0x9, 0x5, 0x9, {0x5, 0x668, 0x6, 0xff, 0x5, 0x2, 0x3de, 0x81, 0x5d, 0x4000, 0x40, r8, r9, 0xff, 0x6}}, {0x3, 0x80000001, 0x5, 0x6, '^[[}\\'}}, {{0x2, 0x2, 0xff, 0x7f, 0x1, 0x5, {0x5, 0xfffffffffffffffd, 0x6922, 0xd, 0x6, 0x9, 0x480, 0x56, 0x10001, 0x8000, 0xee37, r4, r10, 0x0, 0xffffffff}}, {0x5, 0x0, 0x3, 0x6, ']$#'}}, {{0x9e, 0x1, 0x9, 0xffffffffffffffff, 0x3ff, 0x1, {0x3, 0x0, 0xfb, 0xcf8f, 0x4e, 0x5, 0x3, 0x6, 0xfffffff8, 0x1000, 0x0, r4, r11, 0x4d, 0x6}}, {0x0, 0x80, 0xb, 0xb67, '/dev/hwrng\x00'}}, {{0x1, 0x0, 0x9, 0x0, 0xb41, 0x10249322, {0x6, 0x0, 0x1000, 0x8001, 0xa58, 0x2, 0x42, 0x1, 0x893, 0x2000, 0x10000, r4, r12, 0x4, 0x8}}, {0x3, 0x8, 0x2, 0x3, '}{'}}, {{0x5, 0x3, 0xfffffffffffffffd, 0xf7, 0x276, 0x3ff, {0x4, 0x6, 0x3, 0x4, 0x7ff, 0x3, 0x1ff, 0x7, 0x7, 0x8000, 0x9, r4, r13, 0x3, 0x1}}, {0x4, 0x5ed, 0x1, 0x2, '\\'}}]}, &(0x7f0000006b40)={0xa0, 0x0, 0xfff, {{0x5, 0x3, 0x3, 0x10000, 0x401, 0x10001, {0x6, 0x9be9, 0xa7, 0x6, 0x3, 0x3, 0x1, 0x3, 0x59, 0x1000, 0xfffffffa, r4, r14, 0x40b6, 0x8}}}}, &(0x7f0000006c00)={0x20, 0x0, 0x6, {0x4, 0x4, 0xfffffff8, 0x1}}, &(0x7f0000006e40)={0x130, 0x0, 0x7, {0x8, 0x9, 0x0, '\x00', {0x2000, 0x4, 0x7, 0x9, r15, r16, 0xa000, '\x00', 0x7d42, 0x2e3, 0x5, 0x0, {0x60000, 0x7}, {0x2000000, 0x5}, {0x4, 0x1}, {0x8, 0x1}, 0x2, 0x9, 0x4, 0x6}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000007040), 0x0, 0x0) 1.805824721s ago: executing program 6 (id=3894): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) personality(0x5400004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, &(0x7f0000000140)="f09bda31", 0x4) sendfile(r1, r2, &(0x7f0000000000), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 1.718022643s ago: executing program 2 (id=3895): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[], 0x7) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r4, 0xf9f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140000006a00150080000008fbffffff15000000"], 0x14}], 0x1}, 0x4000080) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0xc3bcf000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.617458334s ago: executing program 2 (id=3897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x3ff, 0x0, 0xffffff88, 0xad5, 0x5}) faccessat(0xffffffffffffffff, 0x0, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_usb_connect$cdc_ncm(0x6, 0x72, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x5, 0xa8, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x2, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x2}, [@acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x0, 0x66}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0xf0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x2, 0x5a}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x21, 0x3, 0x40, 0x10, 0x7}, 0xc, &(0x7f00000002c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0x1, 0x101}]}, 0x1, [{0x6, &(0x7f0000000300)=@string={0x6, 0x3, "32438ffe"}}]}) syz_usb_control_io(r3, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x20, 0x5, 0xea, {0xea, 0x5, "9f50e1f82efcc310bbaf6da576de1e93717b78649ed3da5f4b118eeb8b97d2b917c8c758d409d4f1cae2a473b8270a5409011cab551f7df81a433d0afe0dc195c5e7dff78a8951c9c1f0381e16a8c407d0ebde1e5d2aed48b7be4307dc72574c2f7cd03eb5114e66e612dc22af8f14f6c56061d938caeea97f9f7a829f9188e671193b430430ab0fb387edb7b66077c3d8ada171832ea33fc721f06c1109d42043bb01f3b1c8f1ac7db201dbeda1cfc671a93f066c1ddf53e39de6c7f64ab71dfc2c91d713167be15d397349a22aeb83ec21671be04074515c3934a5a817fbeeb50af282b6ca9757"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000580)={0x0, 0xf, 0x21, {0x5, 0xf, 0x21, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0xc, 0x9c5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x11, 0x2, 0x15, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0x97, 0x8, 0xa}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0xf, 0x1, "9c1f5b52", "50499625"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0xa, 0x0, 0x6, 0xb0e, 0x80}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000680)={0x20, 0xd, 0x6d, "f26d6aeab931c0598d9ce592535eb2de6e158cf3be6b060399b9648e50d23710fb57b6362e40836bc0749063b4b15f6a07edd2397ce355a30388106fa742f39ae90ffd015ac468b8e72f41a9a609825136592a51c145308aaf5420c72f1341112a618dd14867d4caa29ec4d094"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2, 0x40}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000880)={0x40, 0xb, 0x2, "bd3a"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000900)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000940)={0x40, 0x17, 0x6, @local}, &(0x7f0000000980)={0x40, 0x19, 0x2, "a74b"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x8}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="019b000000000000b1000040000000005e00000000000000"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f0000000380)=@ethtool_perm_addr={0x20, 0x6, "8d068ad2c2d1"}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x44, &(0x7f0000000500)={[{0x3d, 0x4e00, "3c33b7ed517b703099adda799acb2f627c1cac13fe839adf879439c9350f643d06a72f22fb7b256144d03c42c23b92ebfd109cf30ba269755236c683f4"}]}) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0}) 1.568852195s ago: executing program 6 (id=3899): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x806, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x2, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x3, 0x4, 0xd42b, 0xa0, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x6, 0x41, {0x7, 0x25, 0x1, 0x81, 0xb, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x38, 0x10, {0x7, 0x25, 0x1, 0x3, 0x40, 0x3}}}}}}}]}}, 0x0) syz_clone(0x800000, &(0x7f0000000380)="f9771277369cf2aceefa828e7bd408f151197a3f28f87767cb8d4d6b85460ed77d1193015777ba6bae14faeb87e35495b34a75489bfaca916fed23952a8feff4ba6dcee535ad982c14aaaa653cca7cfa4fbaa277ed0c3476e8de9e5984372fae372708e09e80cc3123bb86dba3d4f91ccd10c74502f53d6c80280b4c488dc0e8c27ddf6dcc45497f8a61e4731666ed1c21111533a5898459", 0x98, &(0x7f0000000200), &(0x7f0000000440), &(0x7f0000000500)="fbdb57efa32415bea8ebad45b4e6072bdd35d6f20204891d9d177dc5e74ebf8d1a04f19f27d0d832cc125306b2cd4113014e92c955a36ff2abf272f50fcb0c8c86066c49c9634c22d18e6be6044afa95295f3cadda66884f302108a999294ec93e764ea8b9b06b02f68b1f3fe0a7acaa345a186670dc07172f77540c1a75953f3639e91f1b3d843697215f69c8676c63a600718f9060aa0a5bc4da20201928602cf819a38eb9dbede7f3258958e20b1dcb17bc685e3d01dc1b849b64f8d2387c24ac3bdc9baa698da63b9986818833719ba811082db65f9ef4786cfb55b6df0d80223b9a141f329b761f6ae862062f") socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f0000000600)=""/101, 0x2000, 0x5f79368ced7982d, 0x7, 0x3}, 0x20) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x20000000029}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 781.738687ms ago: executing program 3 (id=3906): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5414, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x400008c5) (async) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x400008c5) socket$nl_audit(0x10, 0x3, 0x9) (async) socket$nl_audit(0x10, 0x3, 0x9) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000004c0)='./file0\x00', 0x80000000) r6 = inotify_init() inotify_add_watch(r6, &(0x7f00000001c0)='./file0\x00', 0x800) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 655.38145ms ago: executing program 3 (id=3907): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000001b40), &(0x7f0000001b80)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000001c40), &(0x7f0000001c80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r3, r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x40, 0x1}, 0x2}}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000040)="e171afe0b54f7687368a3ae699150967442ac20afa01ae8f2dcd7f0877758e3c4f90aab8", 0x24}, {&(0x7f0000001300)="e5beae400f79a29414fb8cf8dfa5541b57dfba099abe1a37fe155a7778a8f59dc667e617e80d92a05fac99f423d5d2046976cdccd6d329e9425a9bf3d6d193c9d2a8dc55882c8a9c4f6e34dda261d35354c2708b8aaa22b508c46c9054591a53c506e64285981d27826e8a67586a9cbc8a47889ff1dd41ad3d00ae3b9ce400b88d66cdbba06940d2f42d28dba028702d81ba68f46d2a49d591f998117ef21f4e1676748d08b48a2f3d5f9eca956889d2d23a64f4bf3b617e6391b881e0", 0xbd}, {&(0x7f00000001c0)="5126bca7cdc52d94bcfc033eb97c0cf4c03f6964bb5a89ad0220bf31e68da2a2861fe6dd67ea9e005e23bdc297f7348919d2e124c5feeffd3a9fd970ef376134ad3a4817e010d6a97560ca886dd1fcc105a06b8dfd664ecc0526ab07ba0eb4e9277bb8f603e15c6e489275a57bdf0b689f8b959579", 0x75}, {&(0x7f00000013c0)="a7baf971d57f03b17026b991ff501648bf9401be17fe258095daf5dead352dd69c03129ba99613491d75063c6796409c82e8f0a302a30a8bb16f95c03a63797615f28c4e254d534336e83c8ce554cb0c5c8d9e913ea2274b2249ae2592dff2e11a5a3697ba72da4a2ef4470411514b672f8508cfa297b6c319314d2378d1b74eab2f62ddee314fbf92ac815c12e462be5c95104e1ac743001912ddd72f6e29976b1abbb09fafb7aac3e71f8384f52ab1055c25d600d00703bf4cf6659f858635bf9c4ebc54eb7ef6ba6f44bef586b23bd5bf7b", 0xd3}, {&(0x7f00000014c0)="888ff179383424b079ad829d25a673faac258f50a9721d6930503754928bc02c2916a2a833a8bd3844814fb942565aca55929f29c57b2f8f372b18d17c036bd62d92de3ea6c20975de52974f3eb90367bb0a3f431b045750c941d229fbf241fdb16b29d77fa1fb81ce3eb2dd60694cf740d1f398877dcecd04d822afe6b023f751bdba03b413600f3e0e67f8807463d16bf9f3fe9f36511c7c", 0x99}, {&(0x7f0000001580)="38d9f98ec62f0d9f7fd2af3306532b9c155d28bdea7cc9ff73d2bb96f83abd3696ba488aedda061a4b723954919fbe0bd0ac331b80d166e6ce7e4170401dc594f65bd90fdc38642bdb8cadcdcabbaa", 0x4f}, {&(0x7f0000001600)="c91f1f1d7a33d9ff1929b4c4945d67e324ddbe51311f6303fa570515cc8d415beba90fdab5ad2005f9514536aa86dcde227fee6c65f8b465cda6163271f685791963ceb03589859a925b39a2a40d7bd94d8f536e65804e8a791f8d71cbf2416b3bcd0bdbcd275586d3e01e54b362d8ab8b0028c0ababd1186aa61ccf687d31b600f5e6d9e6e1cd838358f016d12883dc485760df5c882e01ab92a0ab921b20bb2f26a9c2", 0xa4}], 0x8, &(0x7f0000001740)="637657fea368b69873885201d4e8dc4c6c7ff3194562ebe16f0cd8e3a514dbe669efd0893c1c40170033499beb5ec0ae36340c0d2c4984bc079bce23c343a630c70561ee2d5c9c0e4e5a66a21b150c605e33525b78fc2bb1cdb3590b2cac30eddef834fa41b36d103b7fe2384fc75752d0d07860f3f63b5515749d50fdb27b76e75c1562aadddb5b222fa928ec9385507323e9b05165377b8ed92ab253847c385af7571c8f97cc854920668efc2cee25201990f8", 0xb4, 0x8040}, 0x4040004) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r6, 0x1, 0x45, 0x0, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001900)=ANY=[@ANYBLOB="ebf700201c000176178bd012ac0cf30000000000", @ANYRESOCT=r0, @ANYRES64=r5], 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x20000000) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000280)='user\x00', &(0x7f0000001800)=@chain={'key_or_keyring:', r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000001840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x400}, @register_looper], 0x0, 0x0, 0x0}) 536.526751ms ago: executing program 3 (id=3908): syz_io_uring_setup(0x3bad, &(0x7f0000000400)={0x0, 0x3fb0, 0x10, 0x0, 0x14f}, 0xfffffffffffffffc, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000380)=[@increfs_done, @register_looper, @release], 0x0, 0x0, 0x0}) 365.773854ms ago: executing program 3 (id=3909): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r2) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) splice(r0, 0x0, r1, 0x0, 0xaf4, 0x5) 283.480205ms ago: executing program 3 (id=3910): r0 = socket$inet(0x2, 0x1, 0x0) unshare(0x2040400) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = fcntl$dupfd(r0, 0x406, r2) setns(r3, 0x2000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, &(0x7f00000000c0), 0x4001) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e0002f0108000200e00000010c000280050001000000001d0800074000000000100006800c000380060002004e220000"], 0x74}}, 0x4010) 71.082648ms ago: executing program 6 (id=3911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mount(0x0, 0x0, 0x0, 0x2314438, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) io_setup(0x2f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r2, 0x147a5000) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) rt_sigaction(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.147749ms ago: executing program 4 (id=3912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe142, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r4) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44c1}, 0x4008010) write$FUSE_INIT(r2, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88000, 0x0) ioctl$TIOCSIG(r7, 0x40045436, 0x14) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_binder={0x77622a85, 0x1002, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=3913): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='maps\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000001c0)={0x8000000000000000, 0x3, 0x5, 0xb18, 0x1, 0x0, [{0xd, 0x1, 0x1, '\x00', 0x600}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000580)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 7fe6bf7b5fa0 RCX: 00007fe6bf58e929 [ 225.050522][ T8844] RDX: 0000000000004010 RSI: 0000200000000040 RDI: 0000000000000003 [ 225.050538][ T8844] RBP: 00007fe6c0367090 R08: 0000000000000000 R09: 0000000000000000 [ 225.050553][ T8844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.050568][ T8844] R13: 0000000000000000 R14: 00007fe6bf7b5fa0 R15: 00007ffeb5e8c668 [ 225.050587][ T8844] [ 225.353506][ T8846] netlink: 'syz.1.3070': attribute type 46 has an invalid length. [ 225.643884][ T8856] fuse: Unknown parameter 'I initial count (200000 ns). Using initial count to start timer. [ 239.983581][ T9308] kvm: user requested TSC rate below hardware speed [ 240.225487][ T9320] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3237'. [ 240.474202][ T9327] rust_binder: validate_parent_fixup: new_min_offset=1125899906842680, sg_entry.length=0 [ 240.474233][ T9327] rust_binder: Error while translating object. [ 240.532750][ T9327] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 240.545114][ T9327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206 [ 240.855294][ T9340] rust_binder: Read failure Err(EAGAIN) in pid:210 [ 240.998561][ T9345] random: crng reseeded on system resumption [ 241.120133][ T9353] netlink: 'syz.9.3251': attribute type 4 has an invalid length. [ 241.124474][ T9351] binder: Unknown parameter 'pefRcoQ' [ 241.339602][ T9362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 241.750089][ T9387] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 241.831239][ T9387] rust_binder: Error while translating object. [ 241.831272][ T9387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 241.852740][ T9387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:86 [ 242.425666][ T9408] tipc: Started in network mode [ 242.442223][ T9408] tipc: Node identity 1ec1ed0b3af1, cluster identity 4711 [ 242.450616][ T9408] tipc: Enabled bearer , priority 0 [ 242.464997][ T9408] tipc: Disabling bearer [ 242.719014][ T36] kauditd_printk_skb: 1627 callbacks suppressed [ 242.719035][ T36] audit: type=1400 audit(2000000014.520:15490): avc: denied { create } for pid=9428 comm="syz.1.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 242.767062][ T36] audit: type=1400 audit(2000000014.540:15491): avc: denied { mounton } for pid=9429 comm="syz.6.3273" path="/117/file0" dev="tmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 242.796695][ T9430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.798450][ T9430] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 242.835779][ T36] audit: type=1400 audit(2000000014.540:15492): avc: denied { mount } for pid=9429 comm="syz.6.3273" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 242.938938][ T36] audit: type=1400 audit(2000000014.560:15493): avc: denied { read } for pid=9428 comm="syz.1.3272" dev="nsfs" ino=4026532391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 242.986475][ T9436] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.006092][ T9438] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.013283][ T36] audit: type=1400 audit(2000000014.560:15494): avc: denied { read open } for pid=9428 comm="syz.1.3272" path="net:[4026532391]" dev="nsfs" ino=4026532391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 243.019622][ T9436] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 243.048988][ T9442] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.049610][ T9438] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 243.322689][ T799] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 243.352810][ T9451] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 243.396694][ T9451] kvm: user requested TSC rate below hardware speed [ 243.482805][ T799] usb 2-1: Using ep0 maxpacket: 16 [ 243.601518][ T799] usb 2-1: unable to get BOS descriptor or descriptor too short [ 243.632321][ T799] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 243.668261][ T799] usb 2-1: can't read configurations, error -71 [ 244.243534][ T9477] rust_binder: Error while translating object. [ 244.243573][ T9477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 244.250418][ T9477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246 [ 244.392303][ T9479] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 244.464018][ T7005] tipc: Subscription rejected, illegal request [ 244.806406][ T9490] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 244.806435][ T9490] rust_binder: Read failure Err(EFAULT) in pid:250 [ 244.991667][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3297'. [ 245.236030][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3303'. [ 245.257880][ T9513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=9513 comm=syz.1.3303 [ 245.297801][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.323684][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.341891][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.366409][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.374142][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.382135][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.390913][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.399388][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.407270][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.415599][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.424008][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.431777][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.439410][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.446986][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.455700][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.464535][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.472191][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.480759][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.489639][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.498523][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.507347][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.515981][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.524723][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.534020][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.542114][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.551389][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.560187][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.568853][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.577403][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.586548][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.595286][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.603714][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.611823][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.620652][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.629348][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.637902][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.646214][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.654861][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.663422][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.666120][ T9531] overlayfs: failed to clone upperpath [ 245.671342][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.671380][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.693963][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.701661][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.709987][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.718500][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.726337][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.734242][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.742021][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.749960][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.757681][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.759506][ T9534] tipc: Enabling of bearer rejected, failed to enable media [ 245.766207][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.784690][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.793921][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.802575][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.811894][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.820378][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.828835][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.837718][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.847182][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.857156][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.866114][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.874540][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.882586][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.891500][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.900942][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.909726][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.918535][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.927630][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.937419][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.947782][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.957936][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.972850][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.981468][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 245.995887][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.004407][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.013513][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.021340][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.024092][ T9545] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 246.030844][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.050927][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.059206][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.070134][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.078479][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.087171][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.095491][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.104008][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.115378][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.130459][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.142713][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.150611][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.172690][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.180444][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.194139][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.201967][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.212676][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.220245][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.228974][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.237354][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.255937][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.264346][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.272157][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.288541][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.298113][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.307039][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.315864][ T732] hid-generic 0009:0006:0004.0010: unknown main item tag 0x0 [ 246.332758][ T732] hid-generic 0009:0006:0004.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 246.475268][ T9562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3320'. [ 246.492341][ T9560] fido_id[9560]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 246.533893][ T9564] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 246.557662][ T9564] kvm: user requested TSC rate below hardware speed [ 246.787175][ T9572] 9pnet_fd: Insufficient options for proto=fd [ 246.915846][ T9578] input: syz0 as /devices/virtual/input/input28 [ 247.282869][ T9593] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 247.282901][ T9593] rust_binder: Error while translating object. [ 247.303169][ T9593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 247.320070][ T9593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:279 [ 247.362188][ T9599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 247.371775][ T9599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:414 [ 247.742397][ T36] kauditd_printk_skb: 625 callbacks suppressed [ 247.742421][ T36] audit: type=1400 audit(2000000019.533:16083): avc: denied { read write } for pid=9624 comm="syz.1.3347" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 247.772558][ T9626] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 247.792522][ T36] audit: type=1400 audit(2000000019.533:16084): avc: denied { read write open } for pid=9624 comm="syz.1.3347" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 247.798687][ T9626] rust_binder: Write failure EINVAL in pid:286 [ 247.825429][ T36] audit: type=1400 audit(2000000019.533:16085): avc: denied { ioctl } for pid=9624 comm="syz.1.3347" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 247.859693][ T36] audit: type=1400 audit(2000000019.552:16086): avc: denied { ioctl } for pid=9624 comm="syz.1.3347" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 247.888276][ T36] audit: type=1400 audit(2000000019.552:16087): avc: denied { set_context_mgr } for pid=9624 comm="syz.1.3347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 247.910373][ T36] audit: type=1400 audit(2000000019.552:16088): avc: denied { name_bind } for pid=9624 comm="syz.1.3347" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 247.933972][ T36] audit: type=1400 audit(2000000019.552:16089): avc: denied { node_bind } for pid=9624 comm="syz.1.3347" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 247.960628][ T36] audit: type=1400 audit(2000000019.552:16090): avc: denied { read } for pid=9624 comm="syz.1.3347" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 247.985341][ T36] audit: type=1400 audit(2000000019.561:16091): avc: denied { read open } for pid=9624 comm="syz.1.3347" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 248.012351][ T36] audit: type=1400 audit(2000000019.561:16092): avc: denied { ioctl } for pid=9624 comm="syz.1.3347" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 248.514409][ T9646] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 248.533971][ T9646] kvm: user requested TSC rate below hardware speed [ 248.745592][ T9657] overlayfs: failed to clone upperpath [ 248.893275][ T9666] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3361'. [ 248.919834][ T9668] batadv_slave_0: entered promiscuous mode [ 248.973068][ T9667] batadv_slave_0: left promiscuous mode [ 249.089410][ T9674] overlayfs: failed to clone upperpath [ 249.101922][ T9672] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 249.432380][ T9678] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 249.494779][ T9678] macsec0: mtu less than device minimum [ 249.774347][ T9694] serio: Serial port ttynull [ 250.085449][ T9710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 250.086470][ T9708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 250.113293][ T9710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 250.123082][ T9708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:448 [ 250.135803][ T9710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:448 [ 250.419703][ T9718] overlayfs: failed to clone upperpath [ 250.782895][ T9732] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 250.783709][ T9734] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 250.882187][ T9740] rust_binder: Error while translating object. [ 250.892490][ T9740] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 250.900986][ T9740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:315 [ 251.101190][ T9748] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 251.140205][ T9748] kvm: user requested TSC rate below hardware speed [ 251.972935][ T9805] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 251.997228][ T9805] kvm: user requested TSC rate below hardware speed [ 252.157378][ T9822] fuse: blksize only supported for fuseblk [ 253.104371][ T36] kauditd_printk_skb: 594 callbacks suppressed [ 253.104392][ T36] audit: type=1400 audit(2000000025.538:16687): avc: denied { read } for pid=9875 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 253.134766][ T36] audit: type=1400 audit(2000000025.538:16688): avc: denied { read open } for pid=9875 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 253.162028][ T36] audit: type=1400 audit(2000000025.547:16689): avc: denied { mounton } for pid=9875 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 253.187420][ T36] audit: type=1400 audit(2000000025.575:16690): avc: denied { sys_module } for pid=9875 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 253.211845][ T36] audit: type=1400 audit(2000000025.575:16691): avc: denied { sys_module } for pid=9875 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 253.235806][ T36] audit: type=1400 audit(2000000025.575:16692): avc: denied { sys_module } for pid=9875 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 253.261928][ T36] audit: type=1400 audit(2000000025.584:16693): avc: denied { sys_module } for pid=9875 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 253.292869][ T9875] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.301805][ T9875] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.310242][ T9875] bridge_slave_0: entered allmulticast mode [ 253.317183][ T9875] bridge_slave_0: entered promiscuous mode [ 253.325567][ T9875] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.333291][ T9875] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.341254][ T9875] bridge_slave_1: entered allmulticast mode [ 253.348562][ T9875] bridge_slave_1: entered promiscuous mode [ 253.364841][ T36] audit: type=1400 audit(2000000025.790:16694): avc: denied { sys_module } for pid=9875 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 253.388058][ T36] audit: type=1400 audit(2000000025.790:16695): avc: denied { sys_module } for pid=9875 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 253.418235][ T36] audit: type=1400 audit(2000000025.837:16696): avc: denied { sys_module } for pid=9875 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 253.505147][ T9875] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.512966][ T9875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.521806][ T9875] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.529979][ T9875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.626762][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.636886][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.654712][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.662465][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.674766][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.682420][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.776938][ T9875] veth0_vlan: entered promiscuous mode [ 253.819722][ T9875] veth1_macvtap: entered promiscuous mode [ 253.854339][ T65] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 254.025214][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 254.033114][ T65] usb 2-1: config 1 has an invalid interface number: 171 but max is 0 [ 254.042454][ T65] usb 2-1: config 1 has an invalid descriptor of length 10, skipping remainder of the config [ 254.054777][ T65] usb 2-1: config 1 has no interface number 0 [ 254.062875][ T65] usb 2-1: config 1 interface 171 has no altsetting 0 [ 254.078044][ T65] usb 2-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=f1.26 [ 254.088111][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.096708][ T65] usb 2-1: Product: syz [ 254.101177][ T65] usb 2-1: Manufacturer: syz [ 254.107003][ T65] usb 2-1: SerialNumber: syz [ 254.115222][ T65] ums-datafab 2-1:1.171: USB Mass Storage device detected [ 254.133324][ T65] ums-datafab 2-1:1.171: Quirks match for vid 0c0b pid a109: 1 [ 254.188966][ T65] ums-sddr55 2-1:1.171: USB Mass Storage device detected [ 254.207172][ T49] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 254.356604][ T49] usb 10-1: device descriptor read/64, error -71 [ 254.412192][ T65] usb 2-1: USB disconnect, device number 17 [ 254.613261][ T49] usb 10-1: device descriptor read/64, error -71 [ 254.836377][ T9893] rust_binder: Error in use_page_slow: ESRCH [ 254.836409][ T9893] rust_binder: use_range failure ESRCH [ 254.846423][ T9893] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 254.853396][ T9893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 254.869702][ T9893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:476 [ 254.891109][ T49] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 255.051430][ T49] usb 10-1: device descriptor read/64, error -71 [ 255.200405][ T9907] netlink: 'syz.6.3440': attribute type 4 has an invalid length. [ 255.217764][ T9909] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 255.300139][ T9915] SELinux: security_context_str_to_sid (01777777777777777777777) failed with errno=-22 [ 255.318905][ T49] usb 10-1: device descriptor read/64, error -71 [ 255.443189][ T49] usb usb10-port1: attempt power cycle [ 255.823546][ T49] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 255.887926][ T49] usb 10-1: device descriptor read/8, error -71 [ 255.942641][ T9941] binder: Unknown parameter 'defcontext01777777777777777777777' [ 256.032602][ T49] usb 10-1: device descriptor read/8, error -71 [ 256.158254][ T9947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=9947 comm=syz.6.3453 [ 256.232528][ T9947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 256.232567][ T9947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:501 [ 256.260763][ T305] tipc: Subscription rejected, illegal request [ 256.291857][ T49] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 256.300822][ T9947] rust_binder: Write failure EINVAL in pid:501 [ 256.344427][ T49] usb 10-1: device descriptor read/8, error -71 [ 256.438432][ T9954] overlayfs: workdir and upperdir must reside under the same mount [ 256.497663][ T49] usb 10-1: device descriptor read/8, error -71 [ 256.612822][ T49] usb usb10-port1: unable to enumerate USB device [ 256.706506][ T9962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:509 [ 256.794875][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.824434][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.835201][ T9961] bridge_slave_0: entered allmulticast mode [ 256.846641][ T9961] bridge_slave_0: entered promiscuous mode [ 256.869682][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.890205][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.904975][ T9961] bridge_slave_1: entered allmulticast mode [ 256.917229][ T9961] bridge_slave_1: entered promiscuous mode [ 256.965052][ T49] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 257.150834][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.158660][ T9961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.166280][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.174616][ T9961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.280064][ T9968] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 257.289346][ T49] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 257.329089][ T49] usb 7-1: New USB device strings: Mfr=222, Product=1, SerialNumber=3 [ 257.337545][ T49] usb 7-1: Product: syz [ 257.353053][ T49] usb 7-1: Manufacturer: syz [ 257.358561][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.362617][ T49] usb 7-1: SerialNumber: syz [ 257.373355][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.382102][ T49] usb 7-1: config 0 descriptor?? [ 257.401533][ T49] usb 7-1: Waiting for MOTU Microbook II to boot up... [ 257.409385][ T49] usb 7-1: failed setting the sample rate for Motu MicroBook II: -22 [ 257.435451][ T49] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 257.444065][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.456139][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.506010][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.513688][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.533355][ T9970] Restarting kernel threads ... done. [ 257.574327][ T9970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 257.753678][ T9961] veth0_vlan: entered promiscuous mode [ 257.860495][ T9961] veth1_macvtap: entered promiscuous mode [ 258.361492][ T9982] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 258.498961][ T36] kauditd_printk_skb: 822 callbacks suppressed [ 258.498982][ T36] audit: type=1400 audit(2000000030.589:17519): avc: denied { read write } for pid=9983 comm="syz.9.3469" name="binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 258.564159][ T36] audit: type=1400 audit(2000000030.589:17520): avc: denied { read write open } for pid=9983 comm="syz.9.3469" path="/dev/binderfs/binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 258.634402][ T36] audit: type=1400 audit(2000000030.589:17521): avc: denied { read write } for pid=9984 comm="syz.1.3468" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 258.661912][ T36] audit: type=1400 audit(2000000030.598:17522): avc: denied { read open } for pid=9984 comm="syz.1.3468" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 258.688858][ T36] audit: type=1400 audit(2000000030.598:17523): avc: denied { read write } for pid=9984 comm="syz.1.3468" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.715280][ T36] audit: type=1400 audit(2000000030.598:17524): avc: denied { read write open } for pid=9984 comm="syz.1.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.744678][ T36] audit: type=1400 audit(2000000030.598:17525): avc: denied { ioctl } for pid=9984 comm="syz.1.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.775186][ T36] audit: type=1400 audit(2000000030.598:17526): avc: denied { ioctl } for pid=9984 comm="syz.1.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.782604][ T411] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 258.804552][ T36] audit: type=1400 audit(2000000030.598:17527): avc: denied { ioctl } for pid=9984 comm="syz.1.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.838230][ T36] audit: type=1400 audit(2000000030.598:17528): avc: denied { ioctl } for pid=9984 comm="syz.1.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.996262][ T411] usb 2-1: Using ep0 maxpacket: 16 [ 259.007218][ T411] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 259.017464][ T411] usb 2-1: can't read configurations, error -61 [ 259.156690][ T411] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 259.316972][ T411] usb 2-1: Using ep0 maxpacket: 16 [ 259.335184][ T411] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 259.345069][ T411] usb 2-1: can't read configurations, error -61 [ 259.357018][ T411] usb usb2-port1: attempt power cycle [ 259.429602][ T9992] new mount options do not match the existing superblock, will be ignored [ 259.449451][ T9992] rust_binder: Error in use_page_slow: ESRCH [ 259.449477][ T9992] rust_binder: use_range failure ESRCH [ 259.457975][ T9992] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 259.464006][ T9992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 259.473461][ T9992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:23 [ 259.734071][ T411] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 259.781310][ T411] usb 2-1: Using ep0 maxpacket: 16 [ 259.804628][ T49] usb 7-1: USB disconnect, device number 9 [ 259.812386][ T411] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 259.832037][ T411] usb 2-1: can't read configurations, error -61 [ 259.969139][ T411] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 260.012549][ T411] usb 2-1: Using ep0 maxpacket: 16 [ 260.035791][ T411] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 260.044794][ T411] usb 2-1: can't read configurations, error -61 [ 260.065419][ T411] usb usb2-port1: unable to enumerate USB device [ 260.129484][ T732] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 260.303505][ T732] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.315985][ T732] usb 10-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 260.328281][ T732] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.340064][ T732] usb 10-1: config 0 descriptor?? [ 260.471581][ T49] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 260.640073][ T49] usb 7-1: unable to get BOS descriptor or descriptor too short [ 260.674352][T10026] ptm ptm33: ldisc open failed (-12), clearing slot 33 [ 260.683811][ T49] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 260.691968][ T49] usb 7-1: can't read configurations, error -71 [ 260.787770][ T732] lg-g15 0003:046D:C222.0011: unbalanced delimiter at end of report description [ 260.797628][ T732] lg-g15 0003:046D:C222.0011: probe with driver lg-g15 failed with error -22 [ 261.014837][ T9998] exFAT-fs (rnullb0): invalid boot record signature [ 261.021872][ T9998] exFAT-fs (rnullb0): failed to read boot sector [ 261.028914][ T9998] exFAT-fs (rnullb0): failed to recognize exfat type [ 261.036947][ T732] usb 10-1: USB disconnect, device number 6 [ 261.917998][T10056] netlink: 'syz.9.3490': attribute type 4 has an invalid length. [ 262.072307][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3492'. [ 262.268044][T10070] overlay: Unknown parameter 'fowner' [ 262.353159][ T411] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 262.411768][T10074] pim6reg1: entered promiscuous mode [ 262.421766][T10074] pim6reg1: entered allmulticast mode [ 262.433541][T10074] FAT-fs (rnullb0): bogus number of reserved sectors [ 262.440966][T10074] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 262.513462][ T411] usb 2-1: Using ep0 maxpacket: 32 [ 262.525405][ T411] usb 2-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.539882][ T411] usb 2-1: config 1 interface 0 has no altsetting 0 [ 262.552317][ T411] usb 2-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.40 [ 262.563217][ T411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.572764][ T411] usb 2-1: Product: syz [ 262.577240][ T411] usb 2-1: Manufacturer: syz [ 262.583863][ T411] usb 2-1: SerialNumber: syz [ 262.599289][ T732] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 262.748739][ T732] usb 10-1: device descriptor read/64, error -71 [ 263.005314][ T732] usb 10-1: device descriptor read/64, error -71 [ 263.038293][T10066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.047584][T10066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.065331][ T411] usbhid 2-1:1.0: can't add hid device: -71 [ 263.071761][ T411] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 263.090857][ T411] usb 2-1: USB disconnect, device number 22 [ 263.261869][ T732] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 263.411551][ T732] usb 10-1: device descriptor read/64, error -71 [ 263.668097][ T732] usb 10-1: device descriptor read/64, error -71 [ 263.691596][T10086] rust_binder: Write failure EINVAL in pid:16 [ 263.807143][ T732] usb usb10-port1: attempt power cycle [ 263.852254][ T36] kauditd_printk_skb: 888 callbacks suppressed [ 263.852275][ T36] audit: type=1400 audit(2000000035.603:18417): avc: denied { read } for pid=10092 comm="syz.1.3504" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 263.855647][T10093] rust_binder: Error while translating object. [ 263.859908][ T36] audit: type=1400 audit(2000000035.603:18418): avc: denied { read open } for pid=10092 comm="syz.1.3504" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 263.886565][T10093] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 263.894716][ T36] audit: type=1400 audit(2000000035.603:18419): avc: denied { ioctl } for pid=10092 comm="syz.1.3504" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 263.926144][T10093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 263.932457][ T36] audit: type=1400 audit(2000000035.603:18420): avc: denied { set_context_mgr } for pid=10092 comm="syz.1.3504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 263.992384][ T36] audit: type=1400 audit(2000000035.603:18421): avc: denied { map } for pid=10092 comm="syz.1.3504" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 264.020874][ T799] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 264.059611][ T36] audit: type=1400 audit(2000000035.603:18422): avc: denied { read } for pid=10092 comm="syz.1.3504" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 264.106172][ T36] audit: type=1400 audit(2000000035.603:18423): avc: denied { ioctl } for pid=10092 comm="syz.1.3504" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 264.137932][ T36] audit: type=1400 audit(2000000035.603:18424): avc: denied { call } for pid=10092 comm="syz.1.3504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 264.181203][ T799] usb 7-1: device descriptor read/64, error -71 [ 264.194375][ T36] audit: type=1400 audit(2000000035.631:18425): avc: denied { ioctl } for pid=10088 comm="syz.6.3502" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.232941][ T732] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 264.265071][ T36] audit: type=1400 audit(2000000035.668:18426): avc: denied { ioctl } for pid=10069 comm="syz.9.3495" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.301572][ T732] usb 10-1: device descriptor read/8, error -71 [ 264.331928][T10105] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 264.459195][ T799] usb 7-1: device descriptor read/64, error -71 [ 264.477612][ T732] usb 10-1: device descriptor read/8, error -71 [ 264.526247][T10111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10111 comm=syz.1.3509 [ 264.551970][T10111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10111 comm=syz.1.3509 [ 264.568283][T10111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10111 comm=syz.1.3509 [ 264.584300][T10111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10111 comm=syz.1.3509 [ 264.599919][T10111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10111 comm=syz.1.3509 [ 264.614125][T10111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10111 comm=syz.1.3509 [ 264.628529][T10111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10111 comm=syz.1.3509 [ 264.642698][T10111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10111 comm=syz.1.3509 [ 264.657575][T10111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10111 comm=syz.1.3509 [ 264.671725][T10111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10111 comm=syz.1.3509 [ 264.715758][ T799] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 264.747860][ T732] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 264.772531][ T732] usb 10-1: device descriptor read/8, error -71 [ 264.848555][T10114] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 264.848582][T10114] rust_binder: Error while translating object. [ 264.858991][T10114] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 264.865853][ T799] usb 7-1: device descriptor read/64, error -71 [ 264.867682][T10114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 264.885957][T10114] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.910980][ T732] usb 10-1: device descriptor read/8, error -71 [ 265.037226][ T732] usb usb10-port1: unable to enumerate USB device [ 265.132797][ T799] usb 7-1: device descriptor read/64, error -71 [ 265.218301][ T411] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 265.250427][ T799] usb usb7-port1: attempt power cycle [ 265.386153][ T411] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 265.396390][ T411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.404662][ T411] usb 2-1: Product: syz [ 265.409027][ T411] usb 2-1: Manufacturer: syz [ 265.413752][ T411] usb 2-1: SerialNumber: syz [ 265.613801][ T799] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 265.630009][T10125] rust_binder: Write failure EINVAL in pid:59 [ 265.637926][ T799] usb 7-1: device descriptor read/8, error -71 [ 265.679643][T10127] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 265.679680][T10127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:61 [ 265.808731][ T799] usb 7-1: device descriptor read/8, error -71 [ 266.073555][ T799] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 266.103058][ T799] usb 7-1: device descriptor read/8, error -71 [ 266.258622][ T799] usb 7-1: device descriptor read/8, error -71 [ 266.372917][ T799] usb usb7-port1: unable to enumerate USB device [ 267.113359][T10144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:549 [ 267.381437][T10159] syz.6.3524: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0 [ 267.409319][T10159] CPU: 1 UID: 0 PID: 10159 Comm: syz.6.3524 Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 5aa5a802a358a0169efaadab5c3b9a05fad29399 [ 267.409357][T10159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.409373][T10159] Call Trace: [ 267.409382][T10159] [ 267.409392][T10159] __dump_stack+0x21/0x30 [ 267.409444][T10159] dump_stack_lvl+0x10c/0x190 [ 267.409470][T10159] ? __cfi_dump_stack_lvl+0x10/0x10 [ 267.409500][T10159] dump_stack+0x19/0x20 [ 267.409526][T10159] warn_alloc+0x1bc/0x2a0 [ 267.409551][T10159] ? stack_depot_save_flags+0x38/0x800 [ 267.409580][T10159] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 267.409603][T10159] ? __cfi_warn_alloc+0x10/0x10 [ 267.409626][T10159] ? kasan_save_track+0x4f/0x80 [ 267.409660][T10159] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 267.409692][T10159] ? xskq_create+0x68/0x2a0 [ 267.409717][T10159] ? xsk_init_queue+0xb6/0x120 [ 267.409740][T10159] ? xsk_setsockopt+0x43f/0x6f0 [ 267.409763][T10159] ? do_sock_setsockopt+0x26d/0x400 [ 267.409788][T10159] ? __x64_sys_setsockopt+0x1b8/0x250 [ 267.409813][T10159] ? x64_sys_call+0x2adc/0x2ee0 [ 267.409843][T10159] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 267.409870][T10159] __vmalloc_node_range_noprof+0x135/0x1420 [ 267.409916][T10159] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 267.409944][T10159] ? avc_has_perm+0x1f2/0x220 [ 267.409970][T10159] ? kasan_save_alloc_info+0x40/0x50 [ 267.409997][T10159] ? __kasan_kmalloc+0x96/0xb0 [ 267.410029][T10159] vmalloc_user_noprof+0x77/0x90 [ 267.410054][T10159] ? xskq_create+0xdb/0x2a0 [ 267.410078][T10159] xskq_create+0xdb/0x2a0 [ 267.410103][T10159] xsk_init_queue+0xb6/0x120 [ 267.410128][T10159] xsk_setsockopt+0x43f/0x6f0 [ 267.410150][T10159] ? __cfi_xsk_setsockopt+0x10/0x10 [ 267.410171][T10159] ? do_futex+0x309/0x500 [ 267.410202][T10159] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 267.410227][T10159] ? security_socket_setsockopt+0x33/0xd0 [ 267.410258][T10159] ? __cfi_xsk_setsockopt+0x10/0x10 [ 267.410282][T10159] do_sock_setsockopt+0x26d/0x400 [ 267.410307][T10159] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 267.410335][T10159] __x64_sys_setsockopt+0x1b8/0x250 [ 267.410362][T10159] x64_sys_call+0x2adc/0x2ee0 [ 267.410393][T10159] do_syscall_64+0x58/0xf0 [ 267.410414][T10159] ? clear_bhb_loop+0x50/0xa0 [ 267.410442][T10159] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 267.410468][T10159] RIP: 0033:0x7f31d198e929 [ 267.410500][T10159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.410522][T10159] RSP: 002b:00007f31d2856038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 267.410548][T10159] RAX: ffffffffffffffda RBX: 00007f31d1bb5fa0 RCX: 00007f31d198e929 [ 267.410567][T10159] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 267.410583][T10159] RBP: 00007f31d1a10b39 R08: 0000000000000004 R09: 0000000000000000 [ 267.410599][T10159] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 267.410615][T10159] R13: 0000000000000000 R14: 00007f31d1bb5fa0 R15: 00007ffcbac5ee88 [ 267.410635][T10159] [ 267.775081][T10159] Mem-Info: [ 267.779755][T10159] active_anon:7566 inactive_anon:36 isolated_anon:0 [ 267.779755][T10159] active_file:12654 inactive_file:15434 isolated_file:0 [ 267.779755][T10159] unevictable:0 dirty:75 writeback:0 [ 267.779755][T10159] slab_reclaimable:5514 slab_unreclaimable:78247 [ 267.779755][T10159] mapped:25320 shmem:164 pagetables:956 [ 267.779755][T10159] sec_pagetables:0 bounce:0 [ 267.779755][T10159] kernel_misc_reclaimable:0 [ 267.779755][T10159] free:1511387 free_pcp:2340 free_cma:0 [ 267.839125][T10159] Node 0 active_anon:30264kB inactive_anon:144kB active_file:50616kB inactive_file:61736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101280kB dirty:300kB writeback:0kB shmem:656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:5124kB pagetables:3824kB sec_pagetables:0kB all_unreclaimable? no [ 267.877694][T10159] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966016kB mlocked:0kB bounce:0kB free_pcp:5804kB local_pcp:1276kB free_cma:0kB [ 267.915715][T10159] lowmem_reserve[]: 0 3921 3921 [ 267.922227][T10159] Normal free:3084140kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30264kB inactive_anon:144kB active_file:50616kB inactive_file:61736kB unevictable:0kB writepending:300kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4644kB local_pcp:1712kB free_cma:0kB [ 267.958525][T10159] lowmem_reserve[]: 0 0 0 [ 267.964489][T10159] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 267.982309][T10159] Normal: 406*4kB (UE) 658*8kB (UME) 603*16kB (UME) 609*32kB (UME) 744*64kB (UME) 277*128kB (UME) 92*256kB (UME) 35*512kB (UME) 47*1024kB (UME) 24*2048kB (UME) 690*4096kB (UM) = 3084088kB [ 268.003283][T10159] 28288 total pagecache pages [ 268.008808][T10159] 40 pages in swap cache [ 268.013236][T10159] Free swap = 124344kB [ 268.017934][T10159] Total swap = 124996kB [ 268.022445][T10159] 2097051 pages RAM [ 268.026658][T10159] 0 pages HighMem/MovableOnly [ 268.031798][T10159] 351517 pages reserved [ 268.036891][T10159] 0 pages cma reserved [ 268.044301][T10159] Memory allocations: [ 268.048959][T10159] 0 B 0 init/main.c:1370 func:do_initcalls [ 268.058111][T10159] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 268.068696][T10159] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 268.079098][T10159] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 268.103822][T10159] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 268.121127][T10159] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 268.146778][T10159] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 268.157198][T10159] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 268.165924][T10159] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 268.174131][T10164] tipc: Enabled bearer , priority 0 [ 268.183790][ T65] usb 2-1: USB disconnect, device number 23 [ 268.188677][T10164] rust_binder: Write failure EINVAL in pid:191 [ 268.192313][T10164] rust_binder: Read failure Err(EAGAIN) in pid:191 [ 268.196011][T10159] 0 B 0 init/initramfs.c:101 func:find_link [ 268.218164][T10166] tipc: Resetting bearer [ 268.265524][T10166] tipc: Disabling bearer [ 268.350165][T10171] rust_binder: Write failure EINVAL in pid:567 [ 268.788862][ T65] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 268.967941][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 268.986031][ T65] usb 2-1: not running at top speed; connect to a high speed hub [ 268.996283][ T65] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 269.012715][ T65] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.024504][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.037851][ T65] usb 2-1: Product: syz [ 269.042521][ T65] usb 2-1: Manufacturer: syz [ 269.048950][ T65] usb 2-1: SerialNumber: syz [ 269.206009][ T36] kauditd_printk_skb: 845 callbacks suppressed [ 269.206031][ T36] audit: type=1400 audit(2000000040.607:19272): avc: denied { write } for pid=10197 comm="syz.6.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 269.233953][ T36] audit: type=1400 audit(2000000040.607:19273): avc: denied { write } for pid=10197 comm="syz.6.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 269.250123][T10198] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.254354][ T36] audit: type=1400 audit(2000000040.607:19274): avc: denied { write } for pid=10197 comm="syz.6.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 269.261858][T10198] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 [ 269.281399][ T36] audit: type=1400 audit(2000000040.607:19275): avc: denied { write } for pid=10197 comm="syz.6.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 269.292127][T10198] audit: backlog limit exceeded [ 269.311003][ T36] audit: type=1400 audit(2000000040.607:19276): avc: denied { write } for pid=10197 comm="syz.6.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 269.337531][T10185] overlayfs: failed to resolve './file1': -2 [ 269.344958][ T36] audit: type=1400 audit(2000000040.607:19277): avc: denied { write } for pid=10197 comm="syz.6.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 269.358113][T10198] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.389644][ T65] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 269.407808][ T65] usb 2-1: USB disconnect, device number 24 [ 269.430685][T10201] tmpfs: Unknown parameter 'nr_blgcks' [ 269.594947][T10211] rust_binder: Write failure EFAULT in pid:591 [ 269.625874][ T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 270.016119][T10225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.394984][T10237] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.449844][T10237] rust_binder: Write failure EFAULT in pid:210 [ 270.500175][T10237] rust_binder: Write failure EINVAL in pid:210 [ 270.539957][T10246] binder: Bad value for 'max' [ 270.980432][ T49] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 271.150127][T10255] fuse: Unknown parameter '0x0000000000000003' [ 271.194044][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.211731][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.241671][ T49] usb 2-1: New USB device found, idVendor=0638, idProduct=1200, bcdDevice= 0.00 [ 271.258407][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.274053][ T49] usb 2-1: config 0 descriptor?? [ 271.430674][T10260] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388857856 i:0 err:EBUSY [ 271.430717][T10260] rust_binder: Error in use_page_slow: EBUSY [ 271.450891][T10260] rust_binder: use_range failure EBUSY [ 271.472983][T10260] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 271.478982][T10260] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 271.488826][T10260] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:94 [ 271.721952][ T49] hid-generic 0003:0638:1200.0012: unknown main item tag 0x3 [ 271.741198][ T49] hid-generic 0003:0638:1200.0012: hidraw0: USB HID v0.00 Device [HID 0638:1200] on usb-dummy_hcd.1-1/input0 [ 271.941156][T10251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.962602][T10251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.642927][T10282] bond_slave_0: mtu less than device minimum [ 273.718228][T10284] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3563'. [ 273.930229][ T732] usb 2-1: USB disconnect, device number 25 [ 274.087198][T10294] tipc: Started in network mode [ 274.112321][T10294] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 274.157924][T10294] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 274.207947][T10301] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 274.276076][T10301] rust_binder: Write failure EINVAL in pid:114 [ 274.276404][T10294] tipc: Enabled bearer , priority 10 [ 274.627718][ T36] kauditd_printk_skb: 574 callbacks suppressed [ 274.627738][ T36] audit: type=1400 audit(2000000045.677:19850): avc: denied { read write } for pid=10302 comm="syz.9.3570" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.698694][T10303] 9pnet_fd: Insufficient options for proto=fd [ 274.807675][ T36] audit: type=1400 audit(2000000045.714:19851): avc: denied { read write open } for pid=10302 comm="syz.9.3570" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.896865][ T36] audit: type=1400 audit(2000000045.724:19852): avc: denied { ioctl } for pid=10302 comm="syz.9.3570" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.927839][ T36] audit: type=1400 audit(2000000045.742:19853): avc: denied { mounton } for pid=10302 comm="syz.9.3570" path="/38/file0" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 274.958986][ T36] audit: type=1400 audit(2000000045.892:19854): avc: denied { read write } for pid=9875 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.007895][ T36] audit: type=1400 audit(2000000045.892:19855): avc: denied { read write open } for pid=9875 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.008304][T10308] tmpfs: Unknown parameter 'noswcR [ 275.008304][T10308] ꌒm^[:/Gj1)v4(gvpD̐T8d' [ 275.130700][ T36] audit: type=1400 audit(2000000045.892:19856): avc: denied { ioctl } for pid=9875 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.230456][T10310] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 275.242372][ T36] audit: type=1400 audit(2000000045.929:19857): avc: denied { read write } for pid=7999 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.304964][ T36] audit: type=1400 audit(2000000045.929:19858): avc: denied { read write open } for pid=7999 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.357337][ T36] audit: type=1400 audit(2000000045.929:19859): avc: denied { ioctl } for pid=7999 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.407276][T10315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 275.407321][T10315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:610 [ 275.481193][ T361] tipc: Node number set to 1 [ 275.687956][T10321] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3576'. [ 276.133304][ T361] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 276.309887][ T361] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 276.326264][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3581'. [ 276.335712][ T361] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.354562][ T361] usb 10-1: config 0 descriptor?? [ 276.610372][ T361] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 276.641838][ T361] asix 10-1:0.0: probe with driver asix failed with error -71 [ 276.670642][ T361] usb 10-1: USB disconnect, device number 11 [ 276.725128][T10340] tipc: Started in network mode [ 276.730930][T10340] tipc: Node identity 1e53ea0d30a1, cluster identity 4711 [ 276.741118][T10340] tipc: Enabled bearer , priority 0 [ 276.751489][T10340] tipc: Disabling bearer [ 277.110072][T10353] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3587'. [ 277.378957][T10366] Unsupported ieee802154 address type: 0 [ 277.405409][T10365] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 277.469685][T10371] sit0: entered promiscuous mode [ 277.512508][T10373] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.517206][T10371] netlink: 'syz.1.3593': attribute type 1 has an invalid length. [ 277.565670][T10371] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3593'. [ 277.647818][T10379] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 277.647847][T10379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 277.667748][T10379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:626 [ 277.847427][T10388] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3598'. [ 278.195803][T10404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.228845][T10404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.412080][T10417] usb usb1: usbfs: process 10417 (syz.4.3606) did not claim interface 63 before use [ 278.431465][ T31] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 278.634908][ T31] usb 7-1: device descriptor read/64, error -71 [ 278.689344][T10421] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 278.698261][T10421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:250 [ 278.863435][T10423] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3608'. [ 278.891490][ T31] usb 7-1: device descriptor read/64, error -71 [ 279.140002][T10429] rust_binder: Write failure EFAULT in pid:256 [ 279.140951][T10429] rust_binder: Write failure EFAULT in pid:256 [ 279.169440][ T31] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 279.361908][ T31] usb 7-1: device descriptor read/64, error -71 [ 279.363545][T10440] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 279.629221][ T31] usb 7-1: device descriptor read/64, error -71 [ 279.670770][T10449] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3620'. [ 279.779312][ T31] usb usb7-port1: attempt power cycle [ 279.875037][ T732] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 279.990967][ T36] kauditd_printk_skb: 1002 callbacks suppressed [ 279.990988][ T36] audit: type=1400 audit(2000000050.691:20850): avc: denied { create } for pid=10459 comm="syz.1.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 280.020255][ T36] audit: type=1400 audit(2000000050.700:20851): avc: denied { write } for pid=10459 comm="syz.1.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 280.059939][T10463] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 280.059969][T10463] rust_binder: Error while translating object. [ 280.068728][ T36] audit: type=1400 audit(2000000050.728:20852): avc: denied { read write } for pid=9961 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.071699][T10463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 280.098833][ T36] audit: type=1400 audit(2000000050.728:20853): avc: denied { read write open } for pid=9961 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.102356][T10463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125 [ 280.110914][ T732] usb 10-1: Using ep0 maxpacket: 16 [ 280.152516][ T36] audit: type=1400 audit(2000000050.728:20854): avc: denied { ioctl } for pid=9961 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.163685][ T31] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 280.192329][ T36] audit: type=1400 audit(2000000050.747:20855): avc: denied { read } for pid=10461 comm="syz.1.3625" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.193009][ T732] usb 10-1: unable to get BOS descriptor or descriptor too short [ 280.226402][ T36] audit: type=1400 audit(2000000050.747:20856): avc: denied { read open } for pid=10461 comm="syz.1.3625" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.261189][ T36] audit: type=1400 audit(2000000050.747:20857): avc: denied { ioctl } for pid=10461 comm="syz.1.3625" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.268801][ T732] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 280.288470][ T31] usb 7-1: device descriptor read/8, error -71 [ 280.304657][ T36] audit: type=1400 audit(2000000050.756:20858): avc: denied { set_context_mgr } for pid=10461 comm="syz.1.3625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 280.305859][ T732] usb 10-1: can't read configurations, error -71 [ 280.325224][ T36] audit: type=1400 audit(2000000050.756:20859): avc: denied { map } for pid=10461 comm="syz.1.3625" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.443930][ T31] usb 7-1: device descriptor read/8, error -71 [ 280.698299][ T31] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 280.733652][ T31] usb 7-1: device descriptor read/8, error -71 [ 280.874748][ T31] usb 7-1: device descriptor read/8, error -71 [ 280.997574][ T799] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 280.997797][ T31] usb usb7-port1: unable to enumerate USB device [ 281.162985][ T799] usb 2-1: config 0 has an invalid interface number: 144 but max is 0 [ 281.171828][ T799] usb 2-1: config 0 has no interface number 0 [ 281.186008][ T799] usb 2-1: New USB device found, idVendor=0e8d, idProduct=3329, bcdDevice=25.0f [ 281.198476][ T799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.206937][ T799] usb 2-1: Product: syz [ 281.211329][ T799] usb 2-1: Manufacturer: syz [ 281.216000][ T799] usb 2-1: SerialNumber: syz [ 281.233652][ T799] usb 2-1: config 0 descriptor?? [ 281.475150][T10475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 281.475189][T10475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:138 [ 281.498211][T10475] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 281.521359][T10475] rust_binder: Read failure Err(EFAULT) in pid:138 [ 281.554451][ T732] usb 2-1: USB disconnect, device number 26 [ 281.799347][ T31] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 281.959702][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 281.967391][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.977690][ T31] usb 7-1: config 0 has no interfaces? [ 281.986806][ T31] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 281.996408][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.004721][ T31] usb 7-1: Product: syz [ 282.009063][ T31] usb 7-1: Manufacturer: syz [ 282.013833][ T31] usb 7-1: SerialNumber: syz [ 282.019383][ T31] usb 7-1: config 0 descriptor?? [ 282.034527][ T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 282.200625][ T9] usb 10-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 282.210883][ T9] usb 10-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 282.219335][ T9] usb 10-1: Product: syz [ 282.224574][ T9] usb 10-1: Manufacturer: syz [ 282.229915][ T9] usb 10-1: SerialNumber: syz [ 282.238543][ T9] usb 10-1: config 0 descriptor?? [ 282.404540][ T732] usb 7-1: USB disconnect, device number 20 [ 282.907827][ T9] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 282.934543][ T9] asix 10-1:0.0: probe with driver asix failed with error -71 [ 282.951063][ T9] usb 10-1: USB disconnect, device number 14 [ 283.098340][T10512] binder: Unknown parameter 'contxtrʛ1tҥ\\/P' [ 283.123832][T10514] __vm_enough_memory: pid: 10514, comm: syz.6.3646, bytes: 70373039144960 not enough memory for the allocation [ 283.414279][T10522] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3648'. [ 283.428300][T10524] binder: Bad value for 'max' [ 283.507733][T10527] SELinux: security_context_str_to_sid () failed with errno=-22 [ 283.649071][T10531] binder: Bad value for 'stats' [ 283.967899][T10540] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.976041][T10540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3657'. [ 284.127835][T10543] selinux_netlink_send: 55 callbacks suppressed [ 284.127856][T10543] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=10543 comm=syz.4.3658 [ 284.289083][T10545] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 284.606306][T10554] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3662'. [ 284.726865][T10558] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 4096) [ 284.726892][T10558] rust_binder: Error while translating object. [ 284.759368][T10558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 284.770107][T10558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:660 [ 285.006630][T10568] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.039534][T10568] rust_binder: Error while translating object. [ 285.048024][T10568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 285.081370][T10568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:292 [ 285.339271][ T36] kauditd_printk_skb: 1550 callbacks suppressed [ 285.339292][ T36] audit: type=1400 audit(2000000055.695:22410): avc: denied { setattr } for pid=9875 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.380690][ T49] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 285.423443][ T36] audit: type=1400 audit(2000000055.704:22411): avc: denied { setattr } for pid=9875 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.476388][ T9875] audit: audit_backlog=65 > audit_backlog_limit=64 [ 285.476781][T10576] audit: audit_backlog=65 > audit_backlog_limit=64 [ 285.483616][T10572] audit: audit_backlog=65 > audit_backlog_limit=64 [ 285.496424][ T36] audit: type=1400 audit(2000000055.704:22412): avc: denied { read } for pid=10578 comm="syz.6.3672" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 285.507066][T10576] audit: audit_lost=22 audit_rate_limit=0 audit_backlog_limit=64 [ 285.519263][T10572] audit: audit_lost=23 audit_rate_limit=0 audit_backlog_limit=64 [ 285.519288][T10572] audit: backlog limit exceeded [ 285.519325][ T9875] audit: audit_lost=24 audit_rate_limit=0 audit_backlog_limit=64 [ 285.588404][ T49] usb 2-1: unable to get BOS descriptor or descriptor too short [ 285.600232][ T49] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 285.613137][ T49] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.623470][ T49] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.642183][ T49] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 285.657954][T10585] rust_binder: Error while translating object. [ 285.657999][T10585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 285.665375][T10585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:673 [ 285.701484][ T49] usb 2-1: string descriptor 0 read error: -22 [ 285.722874][ T49] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.732089][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.750437][ T49] usb 2-1: 0:2 : does not exist [ 285.950197][T10591] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3675'. [ 286.015459][T10572] netlink: 'syz.1.3670': attribute type 4 has an invalid length. [ 286.045296][T10572] netlink: 'syz.1.3670': attribute type 4 has an invalid length. [ 286.098484][T10572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 286.102094][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.122434][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.156144][T10572] binder: Unknown parameter 'fscontext?}' [ 286.180102][ T9] usb 2-1: USB disconnect, device number 27 [ 286.631542][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 286.677990][T10605] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3681'. [ 286.718407][T10605] UHID_CREATE from different security context by process 305 (syz.4.3681), this is not allowed. [ 286.845987][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.873974][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.904351][ T9] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 286.920119][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.936538][ T9] usb 7-1: config 0 descriptor?? [ 287.105596][T10618] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3684'. [ 287.365238][T10623] Unsupported ieee802154 address type: 0 [ 287.383068][T10623] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 287.383097][T10623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 287.397743][ T9] hid-led 0003:27B8:01ED.0013: unknown main item tag 0x0 [ 287.410395][T10623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:312 [ 287.444032][ T9] hid-led 0003:27B8:01ED.0013: unknown main item tag 0x0 [ 287.492804][ T9] hid-led 0003:27B8:01ED.0013: unknown main item tag 0x0 [ 287.509312][ T9] hid-led 0003:27B8:01ED.0013: unknown main item tag 0x0 [ 287.527270][ T9] hid-led 0003:27B8:01ED.0013: unknown main item tag 0x0 [ 287.625862][T10628] rust_binder: Error while translating object. [ 287.625900][T10628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 287.633947][T10598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:684 [ 287.655673][ T9] hid-led 0003:27B8:01ED.0013: probe with driver hid-led failed with error -71 [ 287.668506][T10628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:174 [ 287.679207][ T9] usb 7-1: USB disconnect, device number 21 [ 287.895302][T10630] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 287.895328][T10630] rust_binder: Read failure Err(EFAULT) in pid:176 [ 288.567415][T10646] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3696'. [ 288.799477][T10660] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3700'. [ 289.237874][T10668] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 289.237902][T10668] rust_binder: Read failure Err(EFAULT) in pid:700 [ 289.347931][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 289.550031][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 289.584247][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.614190][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.638219][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 289.667650][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.695830][ T9] usb 2-1: config 0 descriptor?? [ 289.713573][ T9] hub 2-1:0.0: USB hub found [ 289.787697][T10698] fuse: Bad value for 'group_id' [ 289.817766][T10698] fuse: Bad value for 'group_id' [ 289.939688][ T9] hub 2-1:0.0: 2 ports detected [ 290.161826][T10664] netlink: 'syz.1.3702': attribute type 5 has an invalid length. [ 290.170121][T10664] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3702'. [ 290.182688][ T9] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 290.189077][ T9] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 290.205275][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 290.211367][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 290.245379][ T9] usb 2-1: USB disconnect, device number 28 [ 290.319769][ T31] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 290.484368][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.496007][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.506150][ T31] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 290.515344][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.526325][ T31] usb 7-1: config 0 descriptor?? [ 290.694267][ T36] kauditd_printk_skb: 3610 callbacks suppressed [ 290.694288][ T36] audit: type=1400 audit(2000000060.709:26015): avc: denied { setattr } for pid=9875 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.725998][ T36] audit: type=1400 audit(2000000060.709:26016): avc: denied { setattr } for pid=9875 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.750986][ T36] audit: type=1400 audit(2000000060.709:26017): avc: denied { setattr } for pid=9875 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.776793][ T9875] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.784429][T10704] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.786224][ T9961] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.792411][T10704] audit: audit_lost=27 audit_rate_limit=0 audit_backlog_limit=64 [ 290.799813][ T9961] audit: audit_lost=28 audit_rate_limit=0 audit_backlog_limit=64 [ 290.805998][ T9875] audit: audit_lost=29 audit_rate_limit=0 audit_backlog_limit=64 [ 290.815332][ T36] audit: type=1400 audit(2000000060.709:26018): avc: denied { setattr } for pid=9875 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.848031][ T411] usb 7-1: USB disconnect, device number 22 [ 290.996790][T10706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3710'. [ 291.403741][T10714] overlayfs: failed to resolve './file0': -2 [ 291.666776][ T411] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 291.730901][ T361] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 291.843206][ T411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.857988][ T411] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 291.870729][ T411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.881359][ T411] usb 2-1: config 0 descriptor?? [ 291.891259][ T361] usb 7-1: Using ep0 maxpacket: 16 [ 291.904661][ T361] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.930093][ T361] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.955412][ T361] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.963616][ T361] usb 7-1: Product: syz [ 291.969784][ T361] usb 7-1: Manufacturer: syz [ 291.974430][ T361] usb 7-1: SerialNumber: syz [ 291.992909][ T361] cdc_ncm 7-1:1.0: skipping garbage [ 291.999435][ T361] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing [ 292.007675][ T361] cdc_ncm 7-1:1.0: bind() failure [ 292.212510][ T31] usb 7-1: USB disconnect, device number 23 [ 292.322336][ T411] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 292.342485][ T411] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0014/input/input31 [ 292.447760][ T411] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 292.538511][ T361] usb 2-1: USB disconnect, device number 29 [ 292.673739][T10722] fido_id[10722]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 292.930164][T10730] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3719'. [ 293.148765][T10734] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 293.152456][T10734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 293.160314][T10734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:338 [ 293.342416][T10737] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 293.612468][T10754] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 293.646336][T10756] netlink: 'syz.4.3728': attribute type 27 has an invalid length. [ 294.133782][T10776] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388857856 i:0 err:EBUSY [ 294.133823][T10776] rust_binder: Error in use_page_slow: EBUSY [ 294.155364][T10776] rust_binder: use_range failure EBUSY [ 294.172709][T10776] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 294.178437][T10776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 294.194528][T10776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:734 [ 295.558169][ T411] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 295.729237][ T411] usb 7-1: device descriptor read/64, error -71 [ 296.028547][ T411] usb 7-1: device descriptor read/64, error -71 [ 296.050001][ T36] kauditd_printk_skb: 4015 callbacks suppressed [ 296.050021][ T36] audit: type=1400 audit(2000000065.722:29932): avc: denied { setattr } for pid=9875 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.113037][ T36] audit: type=1400 audit(2000000065.751:29933): avc: denied { setattr } for pid=9875 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.156832][ T36] audit: type=1400 audit(2000000065.751:29934): avc: denied { setattr } for pid=9875 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.201771][ T9875] audit: audit_backlog=65 > audit_backlog_limit=64 [ 296.209759][ T36] audit: type=1400 audit(2000000065.751:29935): avc: denied { setattr } for pid=9875 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.234074][ T9875] audit: audit_lost=63 audit_rate_limit=0 audit_backlog_limit=64 [ 296.242245][ T9875] audit: backlog limit exceeded [ 296.248902][ T9875] audit: audit_backlog=65 > audit_backlog_limit=64 [ 296.255497][ T36] audit: type=1400 audit(2000000065.751:29936): avc: denied { setattr } for pid=9875 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.271785][ T9875] audit: audit_lost=64 audit_rate_limit=0 audit_backlog_limit=64 [ 296.289865][ T411] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 296.434794][ T411] usb 7-1: device descriptor read/64, error -71 [ 296.703071][ T411] usb 7-1: device descriptor read/64, error -71 [ 296.831427][ T411] usb usb7-port1: attempt power cycle [ 296.976553][T10824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3745'. [ 297.225889][ T411] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 297.260953][ T411] usb 7-1: device descriptor read/8, error -71 [ 297.399613][ T411] usb 7-1: device descriptor read/8, error -71 [ 297.654820][ T411] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 297.693601][ T411] usb 7-1: device descriptor read/8, error -71 [ 297.742160][T10836] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 297.742192][T10836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 297.751601][T10836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:364 [ 297.867231][T10840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.868726][ T411] usb 7-1: device descriptor read/8, error -71 [ 297.906091][T10840] tmpfs: Bad value for 'nr_blocks' [ 297.933588][T10840] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 168, size: 255) [ 297.933621][T10840] rust_binder: Error while translating object. [ 297.976564][T10840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 297.994209][T10840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:366 [ 298.038839][ T411] usb usb7-port1: unable to enumerate USB device [ 298.107360][T10843] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 298.193732][T10845] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3754'. [ 298.689768][T10856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 298.689802][T10856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:743 [ 298.798231][T10863] tipc: Enabled bearer , priority 0 [ 298.859427][T10859] tipc: Disabling bearer [ 298.872526][T10866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:746 [ 298.985300][T10869] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3764'. [ 299.428254][ T732] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 299.588504][ T732] usb 7-1: device descriptor read/64, error -71 [ 299.796483][T10803] bridge_slave_1: left allmulticast mode [ 299.808141][T10803] bridge_slave_1: left promiscuous mode [ 299.818775][T10803] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.845337][T10803] bridge_slave_0: left allmulticast mode [ 299.856030][T10803] bridge_slave_0: left promiscuous mode [ 299.862056][T10803] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.877164][ T732] usb 7-1: device descriptor read/64, error -71 [ 299.997928][T10803] tipc: Disabling bearer [ 300.007370][T10803] tipc: Left network mode [ 300.022073][T10803] veth1_macvtap: left promiscuous mode [ 300.028889][T10803] veth0_vlan: left promiscuous mode [ 300.122541][T10895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 300.122579][T10895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:267 [ 300.136695][T10896] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 300.148358][ T732] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 300.197764][T10893] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 300.281491][T10886] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.312718][ T732] usb 7-1: device descriptor read/64, error -71 [ 300.315705][T10886] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.331391][T10886] bridge_slave_0: entered allmulticast mode [ 300.349329][T10886] bridge_slave_0: entered promiscuous mode [ 300.357528][T10886] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.368952][T10886] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.381776][T10886] bridge_slave_1: entered allmulticast mode [ 300.396578][T10911] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 300.396603][T10911] rust_binder: Read failure Err(EFAULT) in pid:279 [ 300.406867][T10886] bridge_slave_1: entered promiscuous mode [ 300.419120][T10911] rust_binder: Write failure EINVAL in pid:279 [ 300.532488][T10913] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 300.595282][ T732] usb 7-1: device descriptor read/64, error -71 [ 300.637657][T10886] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.645241][T10886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.653395][T10886] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.660597][T10886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.711973][ T732] usb usb7-port1: attempt power cycle [ 300.750037][T10802] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.759971][T10802] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.776630][T10803] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.784424][T10803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.801066][T10802] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.808564][T10802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.899764][T10918] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 300.950882][T10886] veth0_vlan: entered promiscuous mode [ 301.008044][T10886] veth1_macvtap: entered promiscuous mode [ 301.085248][ T732] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 301.131466][ T732] usb 7-1: device descriptor read/8, error -71 [ 301.231513][T10923] FAT-fs (rnullb0): bogus number of reserved sectors [ 301.238933][T10923] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 301.269956][ T732] usb 7-1: device descriptor read/8, error -71 [ 301.412236][ T36] kauditd_printk_skb: 2834 callbacks suppressed [ 301.412258][ T36] audit: type=1400 audit(2000000070.727:32770): avc: denied { create } for pid=10926 comm="syz.4.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 301.460108][T10933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:5 [ 301.474285][ T36] audit: type=1400 audit(2000000070.764:32771): avc: denied { read } for pid=10932 comm="syz.2.3786" name="binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 301.535427][ T732] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 301.548644][ T36] audit: type=1400 audit(2000000070.764:32772): avc: denied { read open } for pid=10932 comm="syz.2.3786" path="/dev/binderfs/binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 301.570642][T10942] SELinux: Context system_u:object_r:public_content_t:s0 is not valid (left unmapped). [ 301.587982][ T36] audit: type=1400 audit(2000000070.764:32773): avc: denied { write } for pid=10926 comm="syz.4.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 301.598032][ T732] usb 7-1: device descriptor read/8, error -71 [ 301.619076][T10937] rust_binder: Error while translating object. [ 301.619123][T10937] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 301.639072][T10937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:293 [ 301.671858][ T36] audit: type=1400 audit(2000000070.764:32774): avc: denied { read } for pid=10926 comm="syz.4.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 301.734734][T10947] audit: audit_backlog=65 > audit_backlog_limit=64 [ 301.741416][T10947] audit: audit_lost=65 audit_rate_limit=0 audit_backlog_limit=64 [ 301.748034][ T36] audit: type=1400 audit(2000000070.764:32775): avc: denied { read } for pid=10926 comm="syz.4.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 301.755157][T10946] audit: audit_backlog=65 > audit_backlog_limit=64 [ 301.777296][ T36] audit: type=1400 audit(2000000070.764:32776): avc: denied { ioctl } for pid=10932 comm="syz.2.3786" path="/dev/binderfs/binder0" dev="binder" ino=31 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 301.805930][ T732] usb 7-1: device descriptor read/8, error -71 [ 301.930270][ T732] usb usb7-port1: unable to enumerate USB device [ 302.143496][T10957] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 302.186321][T10957] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 302.571363][T10972] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.581496][T10966] rust_binder: Error while translating object. [ 302.588269][T10966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 302.594625][T10966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:406 [ 302.635738][T10984] rust_binder: Write failure EFAULT in pid:301 [ 302.733963][T10991] fuseblk: Unknown parameter 'Uroup_id' [ 302.777189][T10993] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 303.147231][T11002] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 303.387284][T11015] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 303.395858][T11015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:756 [ 303.501069][T11017] rust_binder: Write failure EFAULT in pid:304 [ 303.644143][T11027] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.663183][T11027] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 303.719851][T11030] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.897276][T11046] rust_binder: Write failure EINVAL in pid:430 [ 304.151804][T11063] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 304.170184][T11063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:318 [ 304.599441][T11087] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 304.625100][T11088] __vm_enough_memory: pid: 11088, comm: syz.6.3835, bytes: 70373039144960 not enough memory for the allocation [ 304.700912][T11090] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 304.823693][T11094] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 304.873312][T11098] overlayfs: missing 'workdir' [ 304.924998][T11098] fuse: Bad value for 'rootmode' [ 305.113502][T11105] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 305.326750][T10803] bridge_slave_1: left allmulticast mode [ 305.336280][T10803] bridge_slave_1: left promiscuous mode [ 305.357548][T10803] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.392043][T10803] bridge_slave_0: left allmulticast mode [ 305.404215][T10803] bridge_slave_0: left promiscuous mode [ 305.414988][T10803] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.519781][T11125] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 305.604749][T10803] tipc: Left network mode [ 305.610520][T10803] veth1_macvtap: left promiscuous mode [ 305.616080][T10803] veth0_vlan: left promiscuous mode [ 305.822671][T11127] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.830682][T11127] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.838495][T11127] bridge_slave_0: entered allmulticast mode [ 305.850237][T11127] bridge_slave_0: entered promiscuous mode [ 305.859060][T11127] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.866267][T11127] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.873456][T11127] bridge_slave_1: entered allmulticast mode [ 305.884634][T11127] bridge_slave_1: entered promiscuous mode [ 306.003384][T11140] overlayfs: failed to resolve './file0': -2 [ 306.035361][ T361] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 306.148342][T11127] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.156076][T11127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.163435][T11127] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.170492][T11127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.195303][ T361] usb 3-1: device descriptor read/64, error -71 [ 306.305977][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.322014][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.341066][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.348197][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.370824][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.378040][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.483968][ T361] usb 3-1: device descriptor read/64, error -71 [ 306.525173][T11127] veth0_vlan: entered promiscuous mode [ 306.581828][T11127] veth1_macvtap: entered promiscuous mode [ 306.751247][ T361] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 306.763167][ T36] kauditd_printk_skb: 1116 callbacks suppressed [ 306.763189][ T36] audit: type=1400 audit(2000000075.741:33857): avc: denied { read write } for pid=7999 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.808577][ T36] audit: type=1400 audit(2000000075.741:33858): avc: denied { read write open } for pid=7999 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.836630][ T36] audit: type=1400 audit(2000000075.741:33859): avc: denied { ioctl } for pid=7999 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.863800][ T36] audit: type=1400 audit(2000000075.741:33860): avc: denied { read write } for pid=11127 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.893015][ T36] audit: type=1400 audit(2000000075.741:33861): avc: denied { read write open } for pid=11127 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.953764][ T36] audit: type=1400 audit(2000000075.741:33862): avc: denied { ioctl } for pid=11127 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.980477][ T361] usb 3-1: device descriptor read/64, error -71 [ 306.982330][ T36] audit: type=1400 audit(2000000075.741:33863): avc: denied { ioctl } for pid=11129 comm="syz.2.3855" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.012465][ T36] audit: type=1400 audit(2000000075.741:33864): avc: denied { ioctl } for pid=11129 comm="syz.2.3855" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.037784][ T36] audit: type=1400 audit(2000000075.741:33865): avc: denied { ioctl } for pid=11129 comm="syz.2.3855" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.063738][ T36] audit: type=1400 audit(2000000075.741:33866): avc: denied { ioctl } for pid=11129 comm="syz.2.3855" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.199477][T11170] rust_binder: Error while translating object. [ 307.199513][T11170] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 307.218493][T11170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:11 [ 307.241712][T11172] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3868'. [ 307.262011][ T361] usb 3-1: device descriptor read/64, error -71 [ 307.382597][ T361] usb usb3-port1: attempt power cycle [ 307.520997][ T732] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 307.670894][ T732] usb 7-1: device descriptor read/64, error -71 [ 307.745470][ T361] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 307.769982][ T361] usb 3-1: device descriptor read/8, error -71 [ 307.919308][ T361] usb 3-1: device descriptor read/8, error -71 [ 307.927271][ T732] usb 7-1: device descriptor read/64, error -71 [ 308.173074][ T361] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 308.184007][ T732] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 308.199050][ T361] usb 3-1: device descriptor read/8, error -71 [ 308.333513][ T732] usb 7-1: device descriptor read/64, error -71 [ 308.357350][ T361] usb 3-1: device descriptor read/8, error -71 [ 308.472959][ T361] usb usb3-port1: unable to enumerate USB device [ 308.590009][ T732] usb 7-1: device descriptor read/64, error -71 [ 308.593287][T11186] input input32: cannot allocate more than FF_MAX_EFFECTS effects [ 308.707693][ T732] usb usb7-port1: attempt power cycle [ 309.081962][ T732] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 309.105719][ T732] usb 7-1: device descriptor read/8, error -71 [ 309.244804][ T732] usb 7-1: device descriptor read/8, error -71 [ 309.402513][ T361] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 309.485202][T11212] usb usb6: usbfs: process 11212 (syz.3.3881) did not claim interface 2 before use [ 309.498728][ T732] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 309.535188][ T732] usb 7-1: device descriptor read/8, error -71 [ 309.569151][ T361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.590814][ T361] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 309.607496][ T361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.622169][ T361] usb 3-1: config 0 descriptor?? [ 309.683534][ T732] usb 7-1: device descriptor read/8, error -71 [ 309.765786][T11218] exFAT-fs (rnullb0): invalid boot record signature [ 309.772495][T11218] exFAT-fs (rnullb0): failed to read boot sector [ 309.779557][T11218] exFAT-fs (rnullb0): failed to recognize exfat type [ 309.800105][ T732] usb usb7-port1: unable to enumerate USB device [ 309.829858][T11220] rust_binder: Write failure EINVAL in pid:52 [ 309.849210][ T361] betop 0003:11C0:5506.0015: hidraw0: USB HID v0.00 Device [HID 11c0:5506] on usb-dummy_hcd.2-1/input0 [ 309.886754][ T361] betop 0003:11C0:5506.0015: no inputs found [ 309.997893][T10803] tipc: Subscription rejected, illegal request [ 310.065643][ T361] usb 3-1: USB disconnect, device number 33 [ 310.097650][T11229] tipc: Started in network mode [ 310.106189][T11229] tipc: Node identity -, cluster identity 4711 [ 310.236522][T11234] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 310.268043][T11234] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 310.727154][T11248] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 310.727182][T11248] rust_binder: Error while translating object. [ 310.749861][T11248] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 310.766948][T11248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 311.217717][T11267] 9pnet_fd: Insufficient options for proto=fd [ 311.241960][T11267] rust_binder: Failed to allocate buffer. len:4192, is_oneway:true [ 311.253469][T11267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:79 [ 311.358870][ T65] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 311.455911][ T799] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 311.533180][ T65] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 311.543187][ T65] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.554770][ T65] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.565107][ T65] usb 7-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 311.581758][ T65] usb 7-1: config 1 interface 0 has no altsetting 1 [ 311.599360][ T65] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.605186][ T799] usb 3-1: device descriptor read/64, error -71 [ 311.612860][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.624172][ T65] usb 7-1: Product: syz [ 311.629965][ T65] usb 7-1: Manufacturer: syz [ 311.634803][ T65] usb 7-1: SerialNumber: syz [ 311.687714][T11280] binder: Bad value for 'stats' [ 311.872019][ T799] usb 3-1: device descriptor read/64, error -71 [ 311.883832][T11264] rust_binder: Error while translating object. [ 311.883886][T11264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 311.890119][T11264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:825 [ 312.027603][T11291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 312.037149][T11291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 312.119181][ T36] kauditd_printk_skb: 828 callbacks suppressed [ 312.119204][ T36] audit: type=1400 audit(2000000080.754:34695): avc: denied { ioctl } for pid=11292 comm="syz.3.3908" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 312.171357][ T799] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 312.203515][ T36] audit: type=1400 audit(2000000080.810:34696): avc: denied { ioctl } for pid=11257 comm="syz.2.3897" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.256935][ T36] audit: type=1400 audit(2000000080.810:34697): avc: denied { ioctl } for pid=11257 comm="syz.2.3897" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.321088][ T799] usb 3-1: device descriptor read/64, error -71 [ 312.331713][ T36] audit: type=1400 audit(2000000080.810:34698): avc: denied { ioctl } for pid=11257 comm="syz.2.3897" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.385168][ T36] audit: type=1400 audit(2000000080.810:34699): avc: denied { ioctl } for pid=11257 comm="syz.2.3897" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.438619][ T36] audit: type=1400 audit(2000000080.810:34700): avc: denied { ioctl } for pid=11257 comm="syz.2.3897" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.486077][ T36] audit: type=1400 audit(2000000080.810:34701): avc: denied { ioctl } for pid=11257 comm="syz.2.3897" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.566910][ T36] audit: type=1400 audit(2000000080.810:34702): avc: denied { ioctl } for pid=11257 comm="syz.2.3897" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.593027][ T799] usb 3-1: device descriptor read/64, error -71 [ 312.621368][T11303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.637124][ T36] audit: type=1400 audit(2000000080.820:34703): avc: denied { read write } for pid=11127 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.717870][ T36] audit: type=1400 audit(2000000080.820:34704): avc: denied { read write open } for pid=11127 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.729928][ T799] usb usb3-port1: attempt power cycle [ 312.791915][T11308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.904932][T11307] BUG: unable to handle page fault for address: fffffffffffffff1 [ 312.920099][T11307] #PF: supervisor read access in kernel mode [ 312.926550][T11307] #PF: error_code(0x0000) - not-present page [ 312.932928][T11307] PGD 72ac067 P4D 72ac067 PUD 72ae067 PMD 0 [ 312.940403][T11307] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI [ 312.948084][T11307] CPU: 1 UID: 0 PID: 11307 Comm: syz.3.3913 Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 5aa5a802a358a0169efaadab5c3b9a05fad29399 [ 312.961826][T11307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.971912][T11307] RIP: 0010:filemap_read_folio+0xda/0x2c0 [ 312.977685][T11307] Code: 44 24 40 00 00 00 00 48 81 e3 00 02 00 00 0f 85 86 01 00 00 e8 67 ee c8 ff 48 8b 7c 24 18 4c 89 f6 4d 89 fb 41 ba de b1 eb db <45> 03 53 f1 74 02 0f 0b 41 ff d3 0f 1f 00 41 89 c7 31 ff 44 89 fe [ 312.997656][T11307] RSP: 0018:ffffc900046b7920 EFLAGS: 00010293 [ 313.003746][T11307] RAX: ffffffff81bcb389 RBX: 0000000000000000 RCX: ffff88813b99cc00 [ 313.011820][T11307] RDX: 0000000000000000 RSI: ffffea000533f380 RDI: ffff88813a152b40 [ 313.019803][T11307] RBP: ffffc900046b79e0 R08: ffffea000533f387 R09: 1ffffd4000a67e70 [ 313.027808][T11307] R10: 00000000dbebb1de R11: 0000000000000000 R12: 1ffff920008d6f28 [ 313.035880][T11307] R13: 1ffffd4000a67e70 R14: ffffea000533f380 R15: 0000000000000000 [ 313.043868][T11307] FS: 00007fac11dfa6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 313.052818][T11307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.059583][T11307] CR2: fffffffffffffff1 CR3: 000000011e866000 CR4: 00000000003526b0 [ 313.067627][T11307] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 313.075888][T11307] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 313.084020][T11307] Call Trace: [ 313.087471][T11307] [ 313.090443][T11307] ? trace_android_vh_filemap_fault_start+0x130/0x130 [ 313.097436][T11307] ? folio_add_lru+0xc8/0x170 [ 313.102345][T11307] ? filemap_add_folio+0x14d/0x2d0 [ 313.108541][T11307] do_read_cache_folio+0x2b8/0x4d0 [ 313.114395][T11307] ? down_read+0x79/0xe0 [ 313.118760][T11307] read_cache_folio+0x54/0x90 [ 313.124953][T11307] freader_get_folio+0x471/0x700 [ 313.130105][T11307] freader_fetch+0xa4/0x590 [ 313.134643][T11307] __build_id_parse+0x131/0x790 [ 313.139693][T11307] ? build_id_parse_nofault+0x50/0x50 [ 313.145092][T11307] ? futex_wake+0x63a/0x900 [ 313.149609][T11307] ? find_vma+0xcd/0x110 [ 313.153874][T11307] ? check_stack_object+0x107/0x140 [ 313.159137][T11307] build_id_parse+0x2e/0x40 [ 313.164124][T11307] procfs_procmap_ioctl+0x7f6/0xd10 [ 313.169442][T11307] ? __cfi_procfs_procmap_ioctl+0x10/0x10 [ 313.175201][T11307] ? __fget_files+0x2c5/0x340 [ 313.179899][T11307] ? bpf_lsm_file_ioctl+0xd/0x20 [ 313.184853][T11307] ? security_file_ioctl+0x34/0xd0 [ 313.190246][T11307] ? __cfi_procfs_procmap_ioctl+0x10/0x10 [ 313.195990][T11307] __se_sys_ioctl+0x132/0x1b0 [ 313.201054][T11307] __x64_sys_ioctl+0x7f/0xa0 [ 313.205791][T11307] x64_sys_call+0x1878/0x2ee0 [ 313.211357][T11307] do_syscall_64+0x58/0xf0 [ 313.215870][T11307] ? clear_bhb_loop+0x50/0xa0 [ 313.220838][T11307] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 313.227825][T11307] RIP: 0033:0x7fac10f8e929 [ 313.232271][T11307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.252774][T11307] RSP: 002b:00007fac11dfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.261548][T11307] RAX: ffffffffffffffda RBX: 00007fac111b6160 RCX: 00007fac10f8e929 [ 313.270070][T11307] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000008 [ 313.278060][T11307] RBP: 00007fac11010b39 R08: 0000000000000000 R09: 0000000000000000 [ 313.286041][T11307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.294196][T11307] R13: 0000000000000000 R14: 00007fac111b6160 R15: 00007fff7d4fe688 [ 313.303002][T11307] [ 313.306061][T11307] Modules linked in: [ 313.310012][T11307] CR2: fffffffffffffff1 [ 313.314408][T11307] ---[ end trace 0000000000000000 ]--- [ 313.319881][T11307] RIP: 0010:filemap_read_folio+0xda/0x2c0 [ 313.325625][T11307] Code: 44 24 40 00 00 00 00 48 81 e3 00 02 00 00 0f 85 86 01 00 00 e8 67 ee c8 ff 48 8b 7c 24 18 4c 89 f6 4d 89 fb 41 ba de b1 eb db <45> 03 53 f1 74 02 0f 0b 41 ff d3 0f 1f 00 41 89 c7 31 ff 44 89 fe [ 313.345719][T11307] RSP: 0018:ffffc900046b7920 EFLAGS: 00010293 [ 313.351824][T11307] RAX: ffffffff81bcb389 RBX: 0000000000000000 RCX: ffff88813b99cc00 [ 313.359831][T11307] RDX: 0000000000000000 RSI: ffffea000533f380 RDI: ffff88813a152b40 [ 313.367950][T11307] RBP: ffffc900046b79e0 R08: ffffea000533f387 R09: 1ffffd4000a67e70 [ 313.376390][T11307] R10: 00000000dbebb1de R11: 0000000000000000 R12: 1ffff920008d6f28 [ 313.384585][T11307] R13: 1ffffd4000a67e70 R14: ffffea000533f380 R15: 0000000000000000 [ 313.392756][T11307] FS: 00007fac11dfa6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 313.401882][T11307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.408710][T11307] CR2: fffffffffffffff1 CR3: 000000011e866000 CR4: 00000000003526b0 [ 313.416725][T11307] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 313.424802][T11307] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 313.432883][T11307] Kernel panic - not syncing: Fatal exception [ 313.439517][T11307] Kernel Offset: disabled [ 313.444462][T11307] Rebooting in 86400 seconds..