last executing test programs: 6m29.273410059s ago: executing program 32 (id=154): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7ffc, 0x3, 0x3e, 0xfffbffec, 0x4000336, 0x40, 0xf5, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0xfffa}, [{0x3, 0xf97, 0xfffffffffffffff8, 0xd, 0x8001c8, 0xe2, 0xfe10, 0x3}]}, 0x78) close(r2) sendmsg$can_raw(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@can={{0x2, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "4d62223656b28b92"}, 0x10}}, 0x4000004) r3 = getpid() syz_open_procfs$namespace(r3, 0x0) io_setup(0x8f0, 0x0) setns(r1, 0x24020000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m27.40522169s ago: executing program 33 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x1) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) (async) mount$bind(0x0, &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) eventfd(0xffff) (async) sendfile(r0, r0, &(0x7f0000000180)=0xc000000000000, 0x614) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000040)='./file1/file0\x00') (async, rerun: 64) madvise(&(0x7f000067f000/0x4000)=nil, 0x4000, 0x3) (async, rerun: 64) r1 = socket(0x1d, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x10000000, @mcast2, 0xfffffffe}}}, 0x108) (async) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) (async) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) mmap(&(0x7f0000b31000/0x2000)=nil, 0x2000, 0x1000002, 0x1010, r2, 0x1295c000) 6m23.946183848s ago: executing program 34 (id=253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x210240, 0x0) fremovexattr(r0, &(0x7f00000033c0)=@known='system.posix_acl_access\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/config\x00') read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002a40)={0x2020}, 0x2020) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1, 0x1, 0xffff, 0x2, 0x4388}}) 6m20.867105527s ago: executing program 35 (id=340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m19.263547316s ago: executing program 36 (id=386): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0x3, 0x5, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x8, 0x2f, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x4, 0x58, 0x1, 0xd}]}}}}}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @fda={0x66646185, 0x6, 0x1, 0x21}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 5m36.186684937s ago: executing program 37 (id=1317): r0 = getpgid(0x0) ptrace(0x4207, r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x48080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x14, 0x2, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20040804}, 0x8080) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) 5m20.830895034s ago: executing program 38 (id=1632): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000000c0)) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0xffffffffffffffda, r2, {0x7, 0x2b, 0xe44, 0x10000a0, 0x7fff, 0x7, 0x19, 0x8001, 0x0, 0x0, 0x4, 0x6}}, 0x50) write$FUSE_ENTRY(r0, &(0x7f00000021c0)={0x90, 0x0, r2, {0x5, 0x1, 0x2, 0x2, 0x50e, 0x9, {0x6, 0x34, 0x2, 0x4, 0x3, 0xfffffffffffffff8, 0x0, 0x9, 0x4, 0x6000, 0x7, r3, r4, 0x200, 0x2}}}, 0x90) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002280), 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f00000022c0)={{0x1, 0x0, 0x332c, 0x1, 0x1}, 0x10001, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000002340)={0x0, 0x9, 0x0, [0x1, 0x1, 0x7, 0x5a2f, 0xa], [0x3, 0xffff, 0x8, 0x1cd6, 0xfffffffffffffc00, 0x5, 0x0, 0x3, 0x9, 0x4c8, 0x6, 0x5, 0x1, 0xdbeb, 0x3, 0x80000001, 0x3, 0x8, 0x0, 0x7fffffff, 0x2263, 0x3, 0x8, 0x0, 0x0, 0x7, 0xfffffffffffff460, 0x7a243afd, 0x2, 0x9, 0x80000001, 0x9, 0xff, 0x8001, 0x4, 0x100000001, 0x5, 0xfabd, 0x4, 0x5, 0x6, 0x1000000, 0x6, 0x1, 0xdee9, 0x0, 0x1, 0xf4da, 0x2, 0x8, 0x3, 0x9, 0xb81, 0x19f1a1c9, 0x3, 0x81, 0xbe9, 0x7, 0x2, 0x7, 0x9, 0x3, 0x131, 0xfffffffffffffffd, 0xfff, 0x2, 0xfff, 0xb69, 0x8, 0x8, 0x1, 0xc6, 0x3, 0x1, 0x10, 0x9, 0x4, 0x2, 0x5, 0x7, 0x2, 0x7, 0x8, 0xbe29, 0x6, 0x0, 0x5, 0xd4, 0x5, 0x390, 0x5, 0xb, 0x6, 0x8, 0xf, 0x5, 0x1, 0xffffffff, 0x7fff, 0x0, 0x8, 0x8000, 0x4f8, 0x6, 0x0, 0x7, 0x4, 0x200, 0xff, 0x5, 0x1c000000000, 0x0, 0x9, 0x7, 0xffffffffffffffff, 0x6, 0x0, 0x101, 0x1, 0x9, 0x10001]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000002780)={r7, "afe6fe5f1d0f1b7277dd7b60d32f433c"}) r8 = syz_open_procfs$userns(r5, &(0x7f0000003780)) quotactl_fd$Q_GETQUOTA(r8, 0xffffffff80000701, r3, &(0x7f00000037c0)) kcmp(r5, r5, 0x0, r0, r0) fcntl$lock(r6, 0x23, &(0x7f0000003840)={0x2, 0x1, 0xa, 0x0, r5}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003880)='/sys/power/wake_unlock', 0x470040, 0x110) getsockopt$inet6_udp_int(r9, 0x11, 0x66, &(0x7f00000038c0), &(0x7f0000003900)=0x4) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000003980), r9) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000003a40)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x24, r10, 0x800, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x24020044}, 0x20000804) llistxattr(&(0x7f0000003a80)='./file0\x00', &(0x7f0000003ac0)=""/240, 0xf0) r11 = syz_open_dev$MSR(&(0x7f0000003bc0), 0xead40000000, 0x0) r12 = dup3(r1, r6, 0x0) kcmp(r5, 0xffffffffffffffff, 0x1, r11, r12) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000003c00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r12, 0x40089416, &(0x7f0000003e00)=r13) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x100000000) write$FUSE_WRITE(r9, &(0x7f0000003e40)={0x18, 0x0, r2, {0x10001}}, 0x18) statx(r9, &(0x7f0000003e80)='./file0\x00', 0x2000, 0x8, &(0x7f0000003ec0)) write$binfmt_script(r12, &(0x7f0000003fc0)={'#! ', './file1', [{}, {0x20, ',){[*.'}, {0x20, '$,!'}, {0x20, '\x00'}, {0x20, '/dev/cpu/#/msr\x00'}, {0x20, 'ns/user\x00'}, {0x20, '/dev/cpu/#/msr\x00'}, {0x20, '/dev/snd/timer\x00'}, {0x20, '/dev/cpu/#/msr\x00'}], 0xa, "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"}, 0x1062) 5m13.828605019s ago: executing program 39 (id=1747): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) socketpair(0x10, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = memfd_secret(0x80000) ftruncate(r4, 0x3) finit_module(r4, 0x0, 0x0) ftruncate(r1, 0x8) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000080)={0x6, 0x6}, 0x2) 5m12.017409065s ago: executing program 40 (id=1770): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x802, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_GET_NAME(0x10, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) r2 = inotify_init1(0x80000) close(r2) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000080), &(0x7f0000000140)=0x4) 5m8.468694301s ago: executing program 41 (id=1824): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/binder1\x00', 0x2, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) (async) setrlimit(0x40000000000008, &(0x7f0000000000)={0x1, 0x6}) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) setuid(0xee00) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)) (async, rerun: 32) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x800) (async, rerun: 32) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/key-users\x00', 0x0, 0x0) (async) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x0) sendfile(r7, r6, 0x0, 0xbc44) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1}}) close_range(r4, r5, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xfa7}) (async, rerun: 32) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) (rerun: 32) sendfile(r10, r0, &(0x7f00000003c0)=0x6, 0xda21) (async) r11 = syz_open_dev$loop(&(0x7f0000000280), 0x2, 0x424000) ioctl$LOOP_SET_FD(r11, 0x4c00, r0) (async) sendmmsg$unix(r9, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[', 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) (async) write$binfmt_elf64(r9, &(0x7f0000000600)=ANY=[], 0x78) recvmmsg$unix(r8, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}}], 0x1, 0x40002120, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000200)=[@dead_binder_done], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 5m7.764991987s ago: executing program 42 (id=1841): r0 = socket(0x10, 0x5, 0x0) write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mprotect(&(0x7f0000e04000/0x4000)=nil, 0x4000, 0x5) write(r2, &(0x7f0000001c00)="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", 0xfffffdbf) 4m23.701860619s ago: executing program 7 (id=2466): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) exit(0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0xc02, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket(0x4, 0x80000, 0x3) write(r3, &(0x7f0000002480)="3c00000058001f000307f4f9002304000a04d6490800010002010002070003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 4m22.861438196s ago: executing program 7 (id=2472): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x7) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000080)={0x1, 0x0, {0x56c4, @usage=0xa, 0x0, 0x4, 0x5, 0xfffffffffffeffff, 0x6, 0x5, 0x2, @struct={0xe1a, 0xd76e}, 0x0, 0x0, [0x400, 0x8000000000000001, 0x4, 0x7175, 0x4, 0x3]}, {0x7, @usage=0x8, 0x0, 0x4, 0x9, 0x5ab, 0x200, 0x9, 0x3d, @usage=0xb23, 0x400, 0x81, [0x101, 0x8000, 0x7, 0x40, 0x4, 0xd7]}, {0x5, @usage=0xfff, 0x0, 0x9, 0x2, 0x6, 0xff, 0xffffffffffffffc0, 0x80, @struct={0x7, 0x5}, 0x3, 0x800, [0x7, 0x7, 0x40, 0x4, 0x0, 0x1af]}, {0xf, 0x4, 0x8}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000480)={r1, 0x400, 0x0, [0x9, 0x9, 0x9, 0x3, 0x2390ac7f], [0x100, 0x7, 0x4, 0x3, 0x5, 0x6, 0x5, 0x5b3f, 0x945d, 0x4, 0x8, 0xffff, 0x3, 0x8, 0x4, 0x9, 0x74ca, 0x8001, 0x80000000, 0x401, 0x8000, 0xa, 0x0, 0xfffffffffffffffc, 0x401, 0x6, 0x3, 0x10000, 0x7f, 0x7fffffffffffffff, 0x67a, 0x2, 0xffffffffffffffff, 0x100000001, 0x7, 0xfff, 0x4, 0x3, 0xfffffffffffffe01, 0x100, 0x3, 0x7fffffff, 0x1c, 0x3, 0x2, 0x800, 0x80000000, 0x1, 0xbb, 0x4, 0x9, 0x8000, 0x10001, 0x4, 0x101, 0x2, 0x5, 0x0, 0x0, 0x8, 0x8, 0x2, 0x7f, 0x40, 0x7, 0x7, 0x0, 0x8, 0x6, 0x8, 0xffff, 0x0, 0x9, 0x2, 0x9f7f, 0x85, 0x9, 0xfffffffffffffd79, 0x3, 0x2, 0x7, 0x10000, 0x30, 0x1be4e5db, 0x5, 0x6, 0x80, 0x7, 0x200000000, 0x6800, 0x9, 0x1, 0x0, 0x6, 0x5, 0x6, 0x7, 0x1, 0x6e8b, 0x5, 0x7ff, 0x0, 0x3, 0xffffffffffffff1b, 0x4, 0x7fffffff, 0x100, 0x2, 0x8, 0x8000000000000001, 0xd, 0x0, 0xbb5, 0x9, 0x1, 0x3, 0x1, 0x2, 0xffff, 0x4d, 0xcb4b]}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0xc8, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000000000000f4000040"]) close_range(r0, 0xffffffffffffffff, 0x0) 4m22.842433247s ago: executing program 7 (id=2473): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x50, &(0x7f00000004c0)={{{@in6=@remote, @in6=@private0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) r3 = getpid() r4 = syz_open_dev$loop(&(0x7f0000000480), 0x926139, 0x101200) ioctl$BLKSECDISCARD(r4, 0x127d, 0x0) unshare(0x6060600) r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000080)=""/117, 0x75}], 0x1, 0x7fffffffffffffff, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x3) mkdirat(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) epoll_create(0x4) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) sendmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r9, 0x29, 0x40, &(0x7f0000000180)={'security\x00', 0x0, [0x6, 0x0, 0x3, 0x8000006, 0x17]}, &(0x7f0000000240)=0x54) syz_open_procfs$namespace(r3, 0x0) io_setup(0x8f0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) eventfd2(0x7fffffd, 0x1000) 4m22.789475912s ago: executing program 7 (id=2474): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0xe145bdb2ee425740, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0xe145bdb2ee425740, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) memfd_secret(0x0) (async) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ftruncate(r2, 0x51a9497) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000140), &(0x7f0000000080)=0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x15) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x440042, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x440042, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) io_setup(0x2, &(0x7f0000000000)) (async) io_setup(0x2, &(0x7f0000000000)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000040301"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x200000c4) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000500)={0x7, 0xf000, 0x1, r2, 0x7}) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000500)={0x7, 0xf000, 0x1, r2, 0x7}) memfd_secret(0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x5c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000540)={@flat=@handle={0x73682a85, 0xa, 0x2}, @flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x1, 0x0, 0x23}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}, @request_death={0x400c630e, 0x2}], 0xd1, 0x0, &(0x7f0000000380)="a99c9ce341f1360a311c59c544f9112e699bd2b40d4741e473eda639deec291ed505484ce1d1ef853e5dc248f3e68238d097358f3675c5f27e33c40ebdd601ca9b87f7c2376f6e53eb74652d015094b7a04bd32ad12daabfd7830c9c09bd726695c6a61d37c138a27ead02d72d8cab1f120d984dc7f2460fa08a91764d4d8670685ff424ecc1b6f6549972a086548313ca52600584692d0c69522073052ca30da044baaa18fc9792fb79fc3dfbea4bc65fdd56fe0c498ac6a7752cf9116a8c0c6109aa377ab3ca08c9acb5f0567c2b044c"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000036000/0x18000)=nil, 0x0, 0x0, 0x49, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m22.747338265s ago: executing program 7 (id=2475): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e554f985a733d66432c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',aname=wfdno,\x00']) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) chown(0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f00000029c0)={0x2020}, 0x2020) setresgid(0xffffffffffffffff, 0xee01, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x400c810) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0) 4m22.728549677s ago: executing program 7 (id=2476): setrlimit(0x9, &(0x7f0000000000)={0x6, 0x6}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) (async) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 4m11.661512238s ago: executing program 5 (id=2588): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_open_dev$evdev(&(0x7f0000000340), 0x10000000000003f, 0x9ca00) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m11.658656189s ago: executing program 5 (id=2589): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001900010000000000000000a20af3ff000500f8ff00000000040002"], 0x20}}, 0x0) sendmmsg$inet(r2, &(0x7f0000002580)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 4m11.622670082s ago: executing program 5 (id=2590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x82000, 0x0) unshare(0x6060600) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0xea, @private0, 0x8}, 0x1c) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000001a00)=ANY=[@ANYBLOB="0700000000000000000100c0"]) (async) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f0000000740)) (async) r7 = getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x80000, &(0x7f00000005c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xaa1b}}], [{@uid_gt={'uid>', r8}}, {@smackfsdef={'smackfsdef', 0x3d, 'security.capability\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/kvm\x00'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@uid_lt={'uid<', r9}}, {@hash}, {@obj_role={'obj_role', 0x3d, '[\\&{\xef:}'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security.capability\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-[*)\''}}]}}) (async) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff}, 0x0) fsetxattr$security_capability(r10, &(0x7f0000000980), &(0x7f0000000a80)=@v1={0x1000000, [{0x7, 0x10000}]}, 0xc, 0x2) mmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xba9a1000) (async) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x1, 0xb97f}) (async) r11 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r11, 0xc0046686, &(0x7f0000000180)={0x3, 0x8d, "8541ddb8df3f52b88405ee0df476e753f0b158a6ad59ec986caf6806b60fbc650429f3969da5941bf3076faf371f015d721d4f92b42e354a2cacb1364b8a4f0312526c6434b504b14b39fdf4482d3fcf9545652842e7b0ea2291b92d593b398c411750de85e34f5b6802eb54bab0450620e866e22ee7300a070696a5c8e62675bc5a607af2f8f11dc37e0de4b9"}) 4m11.480162024s ago: executing program 5 (id=2591): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0xf9fdffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4m11.452330615s ago: executing program 5 (id=2592): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252500000005002b000000000005002a000200000008000200", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x200440c4}, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r4, 0x1, 0x28, 0x0, &(0x7f00000001c0)) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) listen(r3, 0x5) accept4(r3, &(0x7f00000002c0)=@x25, 0x0, 0x80800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) 4m11.377321791s ago: executing program 5 (id=2596): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r1, 0x25319000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x5aa}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r4, @ANYBLOB="93132cbd7000fcdbdf2512"], 0xbc}, 0x1, 0x0, 0x0, 0x20000010}, 0x40804) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x18}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @flat=@binder={0x73622a85, 0x1001, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 4m11.315887307s ago: executing program 43 (id=2596): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r1, 0x25319000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x5aa}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r4, @ANYBLOB="93132cbd7000fcdbdf2512"], 0xbc}, 0x1, 0x0, 0x0, 0x20000010}, 0x40804) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x18}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @flat=@binder={0x73622a85, 0x1001, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 4m7.695880188s ago: executing program 44 (id=2476): setrlimit(0x9, &(0x7f0000000000)={0x6, 0x6}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) (async) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 4m1.60160923s ago: executing program 9 (id=2728): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252500000005002b000000000005002a000200000008000200", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x200440c4}, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) listen(0xffffffffffffffff, 0x5) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@x25, 0x0, 0x80800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) 4m1.551502213s ago: executing program 9 (id=2729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000012000501000001000000000005001900"], 0x40}}, 0x90) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 4m1.526403695s ago: executing program 9 (id=2730): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r1, &(0x7f0000000240), 0x0) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = gettid() rt_sigaction(0x16, &(0x7f0000000380)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000180)) tkill(r2, 0x16) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001e0009008601eaf16b44ce9c73f1f368f43302000000fcdb"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8048890) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, r4, 0x5c9a0000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000480), 0x4a81, &(0x7f0000000040)=ANY=[@ANYBLOB='max=000000000000000,\x00']) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0xdc, 0x0, &(0x7f0000000700)=[@acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x7, 0x1}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x400}, @increfs={0x40046304, 0x4001}, @release={0x40046306, 0x3}, @reply={0x40406301, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x200005, 0x1, 0x20}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000980)=""/4082, 0xff2, 0x1, 0x2a}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}, @increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x4800) ioctl$BLKRASET(r6, 0x1262, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES16=r5, @ANYRES64=r5], 0x14}, 0x1, 0x0, 0x0, 0x110}, 0x20004000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000000)={0x8, 'vlan0\x00', {'macvlan1\x00'}, 0x3}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x6800, &(0x7f0000000640)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c737461745fe3d2a8a9b37ab80db395733d676ce45109142c6c617a7974696d642c20e94884"]) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000540)={0x0, @adiantum, 0x0, @desc3}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000400)=@x86={0x9, 0x1, 0x8, 0x0, 0xe44b, 0x1, 0x3, 0x5, 0x7, 0xa, 0xf0, 0x7, 0x0, 0x488f, 0x1, 0x1d, 0x9, 0x7, 0xe6, '\x00', 0x73, 0x1}) 4m1.294223644s ago: executing program 9 (id=2732): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000+040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4m1.225261919s ago: executing program 9 (id=2734): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'gre0\x00', 0x1000}) (async) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 4m1.209005231s ago: executing program 9 (id=2735): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x22, &(0x7f0000000200)=0x9eb9, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) pipe2(&(0x7f0000000280), 0x80880) pipe2(&(0x7f0000000040), 0x84000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x311e, 0x47}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000010}, 0x40841) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x101002, 0x0, 0x2e}, 0x18) openat2(r5, &(0x7f0000000200)='.\x00', &(0x7f0000000240)={0x0, 0x1d, 0x2}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x2) syz_genetlink_get_family_id$tipc2(0x0, r5) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000701, 0xee01, &(0x7f00000005c0)) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x492}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x44041) bind$netlink(r5, &(0x7f0000000780)={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc) sendmsg$nl_generic(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x3b, 0x2, 0x70bd2c, 0x25dfdbff, {0x1}, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x71, 0x0, 0x0, @fd=r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x804) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xac, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x71}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1010}, 0x4081) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000a40)={0x2b, 0x5, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @pad1, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x10}, @ra={0x5, 0x2, 0xffff}]}, 0x38) socketpair(0x1e, 0x6, 0xff, &(0x7f0000000a80)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) 4m1.125616848s ago: executing program 45 (id=2735): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x22, &(0x7f0000000200)=0x9eb9, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) pipe2(&(0x7f0000000280), 0x80880) pipe2(&(0x7f0000000040), 0x84000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x311e, 0x47}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000010}, 0x40841) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x101002, 0x0, 0x2e}, 0x18) openat2(r5, &(0x7f0000000200)='.\x00', &(0x7f0000000240)={0x0, 0x1d, 0x2}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x2) syz_genetlink_get_family_id$tipc2(0x0, r5) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000701, 0xee01, &(0x7f00000005c0)) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x492}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x44041) bind$netlink(r5, &(0x7f0000000780)={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc) sendmsg$nl_generic(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x3b, 0x2, 0x70bd2c, 0x25dfdbff, {0x1}, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x71, 0x0, 0x0, @fd=r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x804) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xac, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x71}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1010}, 0x4081) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000a40)={0x2b, 0x5, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @pad1, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x10}, @ra={0x5, 0x2, 0xffff}]}, 0x38) socketpair(0x1e, 0x6, 0xff, &(0x7f0000000a80)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) 3m9.080665472s ago: executing program 8 (id=3663): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0xa0000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000100)=""/41, &(0x7f0000000140)=0x29) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) wait4(0x0, &(0x7f0000000440), 0x40000000, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xac, 0x14, 0x14, 0x21}, 0x1f, 0x7}}) (async) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0xc, 0x6000, 0x4, r4}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x6, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f0, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) (async) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f00000002c0)={0x400002, r7}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r10 = fcntl$dupfd(r9, 0x0, r9) sendmsg$NFT_BATCH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) (async) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000280)=0x46, 0x5) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r12, 0x1, 0x34, &(0x7f0000000340)=0x80000001, 0x4) (async) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14002100b6fee8a2a370a36730bce1921cf03e7f2212d96b4ce8d22bab4299684f5029f187c4d61dab61f2a7d61c0e99f85abb5bd86e15b9127d194980dd665489b83969ce1b770476bc66e11848c1216ca378e7070dadd20998ccd7dbf1750f2a3f744a8ab586b52094dc473ad7a97d40bfd1640d0f5c4b3c710b4d442dbc8eb7bcaad89a228a6cf1f9782fbea58ad504659ab630ebf46e8fa2aa1371282e60cb9e072040b9588016086dc20397e7e25b52a60188d7e8db142f0c14595b618e", @ANYRES16=r11, @ANYBLOB="0008263d7002ffdbdf2564000000"], 0x14}}, 0x4044057) (async) close_range(r0, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 3m9.072497002s ago: executing program 8 (id=3664): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 3m9.062241883s ago: executing program 8 (id=3665): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x9) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000480)={@private2={0xfc, 0x2, '\x00', 0xfe}, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xfff4, 0x1, 0x0, 0x6, 0x44150044}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="4d01000000000000002f00e50414090b00920000", 0x5e0, 0x81, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0xe, 0x6, @broadcast}, 0x14) close(r1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454ca, &(0x7f0000000100)=ANY=[]) r6 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r7 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) setresuid(0x0, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r8, r8, 0x8b598a4c6d8f8fc9, 0xffffffffffffffff, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000200)=ANY=[@ANYBLOB="72772c0088fb80fbf5550cd6aaf234232b677374d3565045a47197f30cf1bf5b43409f9d00b335edae7128776ee8082b344275b26e3d3ed2d31094fc"]) r9 = fsmount(0xffffffffffffffff, 0x1, 0x72) renameat2(r9, &(0x7f00000002c0)='./file0\x00', r9, &(0x7f0000000280)='./file0\x00', 0x4) close_range(r6, 0xffffffffffffffff, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fbdbdf253000000008000300", @ANYRES32=r11, @ANYBLOB="060036001800000006003600270000000600360036000000060036002d00000006003600150000000600360008000000060036003c000000"], 0x54}}, 0x20000000) close_range(r10, 0xffffffffffffffff, 0x0) 3m9.009534487s ago: executing program 8 (id=3666): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6}, 0x1c) (async) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/124, 0x7c}], 0x1, 0x8, 0x89d8) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 3m9.007892038s ago: executing program 8 (id=3667): r0 = eventfd(0x2) fchmod(r0, 0xa0ffff) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8ee4a000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000d00)) (async) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000040)=0xb80b6e64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setown(r4, 0x8, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m9.007675957s ago: executing program 8 (id=3668): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r4}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x300, r4, 0x4}) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noxattr}]}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) 2m52.343625521s ago: executing program 46 (id=3668): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r4}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x300, r4, 0x4}) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noxattr}]}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) 2m13.045429297s ago: executing program 0 (id=4631): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000100), 0x4) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2m13.045154917s ago: executing program 0 (id=4632): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16], 0x52) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001900010000000000fbdbcf251d01090050000f"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1040, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41, 0x0, 0x20000}}, 0x10, 0x0}, 0x0) connect$tipc(r4, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 2m12.493212142s ago: executing program 0 (id=4660): creat(&(0x7f0000000300)='./file0\x00', 0x28) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, r2}, 0x18) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64, @ANYBLOB="f4b02b86df87851e7be7b383760d80"], 0x138) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x1a, "2af01c3d0040fbffffffffffffff00"}) (async) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r4, 0x5406, &(0x7f00000001c0)={0x101, 0x104, 0x0, 0x38f, 0x3, "a0590469a322d928"}) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r6, r5, 0x0, 0x80000000) 2m12.405653939s ago: executing program 0 (id=4661): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 2m12.405358259s ago: executing program 0 (id=4662): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x202103, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001940)=""/197, 0xc5}, {&(0x7f0000001a40)=""/124, 0x7c}, {&(0x7f0000000380)=""/215, 0xd7}], 0x8}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40002100, 0x0) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x88, 0x1, 0x0, 0x0, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6, 0x0, 0xfe, 0x400}]}) readv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2) 2m12.404617609s ago: executing program 0 (id=4664): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') close(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ppoll(&(0x7f0000000100)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)='{', 0x1, 0x41, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="da3f2ac4ddefe19d88ebc96be3d5", 0xe, 0x20000041, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sync() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) r7 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) mount$9p_fd(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c776664e86f3d", @ANYRESHEX=r6, @ANYBLOB=',dfltgid=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) lchown(&(0x7f0000000040)='./file1\x00', r3, r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) r10 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) copy_file_range(r2, 0x0, r9, &(0x7f0000000080)=0x1, 0x9, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r11 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r11, r0, 0x0, 0x80000000) 2m8.644116382s ago: executing program 2 (id=4741): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x2208008, 0x0) 2m8.643942942s ago: executing program 2 (id=4742): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x800004, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) keyctl$revoke(0x3, 0x0) (async) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) (async) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_gettime(r1, 0x0) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x800]}, 0x0, 0x8) (async) socket$can_raw(0x1d, 0x3, 0x1) 2m8.643383122s ago: executing program 2 (id=4743): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2m8.572553728s ago: executing program 2 (id=4744): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) unshare(0x24060400) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2401) syncfs(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x78, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m8.571974498s ago: executing program 2 (id=4745): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, &(0x7f0000000040)='.\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x400000) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/74, 0x4a}, {&(0x7f0000000340)=""/233, 0xe9}, {&(0x7f0000000440)=""/12, 0xc}], 0x6) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x400200, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000540)={0x7, 'syz_tun\x00', {0x3}, 0x3}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000580)={0x0, 0x0, 0x4}) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000001980)={0x1, 0x5, 0x1000, &(0x7f0000000980)=""/4096}) recvfrom$inet_nvme(r2, &(0x7f00000019c0)=""/238, 0xee, 0x60, 0x0, 0x0) close_range(r1, r0, 0x2) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000001b40)={0x0, 0x48, '\x00', 0x0, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close_range(r2, r0, 0x2) close_range(r0, r0, 0x2) read$FUSE(r2, &(0x7f0000001b80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000003bc0)={0x50, 0x0, r3, {0x7, 0x2b, 0x6, 0x0, 0xa, 0x2, 0x6, 0xdcd, 0x0, 0x0, 0x10, 0x8}}, 0x50) r4 = accept(r2, 0x0, &(0x7f0000003c40)) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000003cc0), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003d00)={0x174, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x174}, 0x1, 0x0, 0x0, 0x2}, 0x8800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000004140)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004100)={&(0x7f0000003f40)={0x184, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x184}}, 0x20000010) bind$tipc(r2, 0x0, 0x0) timerfd_gettime(r2, &(0x7f0000004180)) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f00000041c0)={0x520, 0xffffffffffffffff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$can_bcm(r2, &(0x7f000000be00)={&(0x7f000000bd00), 0x10, &(0x7f000000bdc0)={&(0x7f000000bd40)={0x7, 0x71, 0x7, {}, {}, {0x1, 0x0, 0x1}, 0x1, @can={{0x2, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "101149cad4468939"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 2m8.569832278s ago: executing program 2 (id=4746): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = syz_clone(0xc004000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000004b80), 0x141000, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, 0x0) setpgid(r2, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000600) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000580)=""/176, 0xb0) lseek(r1, 0x0, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'ip6gretap0\x00', {0x2}, 0xff7f}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000023c0)={0x0, '\x00', {0x10001ffe}, 0x16}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4088, 0x1000}, {0x0, 0xfffffffc}], 0x2) 1m56.13247107s ago: executing program 47 (id=4664): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') close(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ppoll(&(0x7f0000000100)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)='{', 0x1, 0x41, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="da3f2ac4ddefe19d88ebc96be3d5", 0xe, 0x20000041, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sync() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) r7 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) mount$9p_fd(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c776664e86f3d", @ANYRESHEX=r6, @ANYBLOB=',dfltgid=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) lchown(&(0x7f0000000040)='./file1\x00', r3, r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) r10 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) copy_file_range(r2, 0x0, r9, &(0x7f0000000080)=0x1, 0x9, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r11 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r11, r0, 0x0, 0x80000000) 1m52.483485024s ago: executing program 48 (id=4746): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = syz_clone(0xc004000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000004b80), 0x141000, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, 0x0) setpgid(r2, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000600) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000580)=""/176, 0xb0) lseek(r1, 0x0, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'ip6gretap0\x00', {0x2}, 0xff7f}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000023c0)={0x0, '\x00', {0x10001ffe}, 0x16}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4088, 0x1000}, {0x0, 0xfffffffc}], 0x2) 8.586026678s ago: executing program 4 (id=6711): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresgid(0x0, 0x0, 0xee01) statx(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x2000, 0x4, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) fstat(r1, &(0x7f0000000200)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x20000ffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21, 0xf, 0x1, 0x8000, 0x0, r4, r5, 0x1000003, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.540910582s ago: executing program 4 (id=6712): request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) 8.539914231s ago: executing program 4 (id=6713): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ioprio_get$pid(0x2, 0x0) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000004480), 0x2000, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000044c0)=0x66, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@delsa={0x28, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0xa, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x80) eventfd2(0xd90a, 0x80801) recvmmsg(r1, &(0x7f00000049c0)=[{{&(0x7f00000000c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000000400)=""/205, 0xcd}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f00000005c0)=""/27, 0x1b}], 0x5}, 0x3}, {{&(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/145, 0x91}, {&(0x7f0000001880)=""/185, 0xb9}], 0x4, &(0x7f0000001980)=""/201, 0xc9}, 0x4}, {{&(0x7f0000001a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000001b00)=""/80, 0x50}, {&(0x7f0000001b80)=""/167, 0xa7}, {&(0x7f0000001c40)=""/11, 0xb}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/49, 0x31}, {&(0x7f0000002cc0)=""/3, 0x3}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/8, 0x8}, {&(0x7f0000003d40)=""/110, 0x6e}, {&(0x7f0000003dc0)=""/60, 0x3c}], 0xa, &(0x7f0000003ec0)=""/201, 0xc9}, 0x9}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000003fc0)=""/148, 0x94}, {&(0x7f0000004080)=""/222, 0xde}, {&(0x7f0000004180)=""/221, 0xdd}], 0x3, &(0x7f00000042c0)=""/124, 0x7c}, 0x1}, {{&(0x7f0000004340)=@nfc, 0x80, &(0x7f0000004640)=[{&(0x7f00000043c0)=""/59, 0x3b}, {&(0x7f0000004400)=""/54, 0x36}, {&(0x7f0000004440)=""/27, 0x1b}, {&(0x7f0000004480)}, {&(0x7f00000044c0)}, {&(0x7f0000004500)=""/18, 0x12}, {&(0x7f0000004540)=""/253, 0xfd}], 0x7, &(0x7f00000046c0)=""/102, 0x66}, 0x8}, {{&(0x7f0000004740)=@nfc_llcp, 0x80, &(0x7f0000004900)=[{&(0x7f00000047c0)=""/237, 0xed}, {&(0x7f00000048c0)=""/54, 0x36}], 0x2, &(0x7f0000004940)=""/107, 0x6b}, 0x4}], 0x6, 0x40010002, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000004b40), 0x4) close(0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = getuid() mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@fowner_eq={'fowner', 0x3d, r7}}, {@uid_gt={'uid>', r7}}, {@pcr={'pcr', 0x3d, 0x28}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x31, 0x36, 0x62, 0x35, 0x61, 0x62, 0x39], 0x2d, [0x61, 0x36, 0x36], 0x2d, [0x64, 0x61, 0x38, 0x61], 0x2d, [0xc6, 0x54, 0x63, 0x62], 0x2d, [0x61, 0x38, 0x34, 0x36, 0x30, 0x35, 0x36, 0x62]}}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@euid_eq={'euid', 0x3d, r7}}, {@euid_eq={'euid', 0x3d, r7}}]}}) 8.539769792s ago: executing program 4 (id=6714): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2800408, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$xdp(r2, 0x0, 0x0) getpgrp(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 8.485616576s ago: executing program 4 (id=6716): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000800) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='./file0\x00') (async, rerun: 64) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) 8.484727816s ago: executing program 4 (id=6717): sync() r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x200400c0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 1.48928255s ago: executing program 1 (id=6878): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x4000045) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2003) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000200)={'\x00', 0x8c, 0x1, 0x3, 0x80, 0x3, 0xffffffffffffffff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 1.441471523s ago: executing program 1 (id=6879): mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) tkill(0x0, 0x13) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000001140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102030109023b00010104909c09040000030206004d05240600b4bafae479e6244c0f010900000006000900080905820210000e0107090503020002080b03"], &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0xc8, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000580)='fd/3\x00') r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0103fcffffff000000002b0000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080028bd7000fcdbdf252700000008002c00fcffffff06000600020000000a0001007770616e34000000050831000a00000006000600020000000becfb22de04a29d301e61bd1addb2bf0d049f4a49d68092b6a1a8ac62b36c4d05d45a1e00d9374a5fa8a8705e59b462ba0a70bc6f89f480800204afed2e61af581e16f26739eee516aa48edf0236d4d8232b8818022a2dd79e52263f8cef0ab026878623984614f15df9d6479df11ed97aa589def0fa45a3e5379b78afbeb849c48dd79499006f02dc18537ff8ffa7f67a9c0bd60e28099324ab5a3e675a45119493349a456658ce6ae3a3749921967d67ec13c"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000011) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVBx:De', 0x0) 893.581618ms ago: executing program 1 (id=6885): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000040)=[@enter_looper, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x1098, 0x12, 0x800, 0x70bd2c, 0x25dfdbfc, {0x21, 0xc6, 0x4, 0x1, {0x4e20, 0x4e23, [0x4, 0x9, 0x7, 0x1], [0x3, 0xa, 0x0, 0xcd43], 0x0, [0xf, 0x2]}, 0xfffffffa, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x46, 0x1, "2d2772c98c1230aee7fc5c9042c5c034f95ae22ce6e0077ad2f7911228b95a6ad6b51ca838e59facf997219226f15010084e2d47254085f2dddf1117bbf1f678962d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1098}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) ppoll(&(0x7f0000000240)=[{r0, 0xc4}], 0x1, 0x0, 0x0, 0x0) 440.110394ms ago: executing program 3 (id=6887): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 389.677578ms ago: executing program 3 (id=6888): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req={0x8, 0x1000, 0x34b, 0xfff}, 0x10) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) 382.008739ms ago: executing program 3 (id=6889): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1, 0x1}) 381.250419ms ago: executing program 3 (id=6890): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x400, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = fcntl$getown(r2, 0x9) syz_pidfd_open(r3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r9, &(0x7f0000001940)={0x8, {"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", 0x1000}}, 0x1006) connect$can_bcm(r4, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r10}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r4], 0x48}}, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000440)=[@increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 298.179236ms ago: executing program 3 (id=6895): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresgid(0x0, 0x0, 0xee01) statx(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x2000, 0x4, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x20000ffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21, 0xf, 0x1, 0x8000, 0x0, r4, r5, 0x1000003, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 263.866158ms ago: executing program 3 (id=6897): openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x8281, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c733d0600e664f4d8b1", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x1b, 0x0, &(0x7f0000000100)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x109802, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x40000100000200) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000000b, 0x62280) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = openat$incfs(r5, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x40106726, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file1/file0\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x90) r7 = dup(r4) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000000)) pause() 215.102772ms ago: executing program 6 (id=6900): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000100)=0x1, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, 0x0) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r1, r0, 0x0, 0x80000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000100)=0x1, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETSNDBUF(r3, 0x400454d4, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) (async) sendfile(r1, r0, 0x0, 0x80000000) (async) 214.283553ms ago: executing program 6 (id=6901): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'syz_tun\x00', 0x2000}) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000440)=@srh={0x75, 0x0, 0x4, 0x0, 0x8d, 0x50, 0x7}, 0x8) r1 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000680)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x3d0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x58b9808bbcfa107b, 0x12, r6, 0x0) setsockopt$sock_int(r5, 0x1, 0x13, &(0x7f00000005c0)=0xf, 0x4) prctl$PR_SET_KEEPCAPS(0x8, 0x1) setreuid(r4, r4) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) keyctl$setperm(0x5, 0x0, 0x7613808) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000400)={0xff, 0xfffffffffffffff8, 0x3, 0x3}) truncate(&(0x7f0000000780)='./file0\x00', 0xb) setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r7, 0x1, 0x34, &(0x7f0000f59ffc)=0x4, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x1, 0x26}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@private, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x200000, &(0x7f00000007c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@sq={'sq', 0x3d, 0x147c}}, {@timeout={'timeout', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0xe}}, {@timeout={'timeout', 0x3d, 0x3}}, {@rq={'rq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x9}}, {@rq={'rq', 0x3d, 0x6}}, {@timeout={'timeout', 0x3d, 0x8200}}, {@timeout={'timeout', 0x3d, 0x1}}, {@sq}], [{@subj_role}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x7f%%'}}, {@hash}, {@euid_gt={'euid>', r4}}, {@appraise}, {@subj_role}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) 213.641942ms ago: executing program 6 (id=6902): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_names\x00') read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in=@multicast2, 0xfffd, 0x20, 0x101, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x100000001, 0x0, 0x7fffffffffffffff, 0x1, 0xffffffff}, {0x0, 0x0, 0x1}, 0x0, 0x4}, {{@in6=@mcast1, 0x4d5, 0x62}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x0, 0x2, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4b, 0x3, 0x8, '\x00', 0xe9}) (async) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r6, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r6, 0x0, 0x0, 0x0, 0x0, 0xd, @mcast1, @loopback, 0x40, 0x7800, 0xfffffffc}}) close_range(r0, 0xffffffffffffffff, 0x0) 189.326664ms ago: executing program 6 (id=6903): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xdc8c9eb444477045, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9950000c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00') ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r6, 0x80045440, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x80) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="b8000000000f23d00f21f8351000000d0f23f8660f38804f0c0fc72e66ba400066b8001066efb8280000000f23c80f21f8350c0020000f23f8f2d96a0066b84c000f00d8f80f2016670f01c8", 0x4c}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) write$tcp_mem(r7, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r7, 0xf505, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r11) r12 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r12, 0x29, 0x15, 0x0, 0x0) r13 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) signalfd4(r2, &(0x7f0000001080)={[0x2bec800000]}, 0x8, 0x80000) ioctl$BLKRRPART(r13, 0x125f, 0x0) 189.068044ms ago: executing program 6 (id=6904): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x381, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000200)=@sha1={0x1, "95100a3d0c98cf271e8c91ce83e18b32989be40a"}, 0x15, 0x3) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000380)="64f3466d2e3e672e452f0f070729d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410069e648b80010000000000000440f01c20f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c249dba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0xfd, 0x901, 0xfffffffffffffffd, 0x5, 0xfffffffffffffff5, 0x40000000000009e, 0xfffffffffffffffe, 0xffff, 0x3fffffff, 0x3, 0x5, 0x0, 0x9, 0x3a, 0x250, 0xffffffffffffffff], 0x0, 0x400}) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000300)={0x80, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0), 0xfd8f, 0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x3065a7505c571d71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 185.910905ms ago: executing program 6 (id=6905): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(0x0, 0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_setup(0x4021, &(0x7f0000000240)={0x0, 0x38d, 0x8, 0x2, 0xda}, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r1, &(0x7f0000000280)='F', 0x1, 0x20008000, 0x0, 0x0) mprotect(&(0x7f0000a86000/0x1000)=nil, 0x1000, 0x1000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xfffffffe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000880)=ANY=[@ANYBLOB="12011001000000103810101440000102030109022d0001010d000109040008000301017c0921"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000400)=@string={0x2}}, {0x4c, &(0x7f0000000640)=@string={0x4c, 0x3, "f1f5bf07551e92c974a8e3db755ab076c8780138257f53922b58dfcd8482bbdaa65de1a4fc1960550233a75e3a22f0d20cba56abfbc45d253a3241fdb550a59644adf67c4e4d5c5b2cdb"}}]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000080)) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 585.28µs ago: executing program 1 (id=6906): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresgid(0x0, 0x0, 0xee01) statx(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x2000, 0x4, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) fstat(r1, &(0x7f0000000200)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x20000ffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21, 0xf, 0x1, 0x8000, 0x0, r4, r5, 0x1000003, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 224.659µs ago: executing program 1 (id=6907): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000040)={0x2, 0xc}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x3ada, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@can={{0x0, 0x1, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "96ccd9f4c7b21421"}, 0x10}}, 0x44101) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r6, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$unix(r6, &(0x7f00000001c0)={&(0x7f0000000340), 0x6e, &(0x7f00000006c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/40, 0x28}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000005c0)=""/224, 0xe0}], 0x6, &(0x7f00000027c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x103) r8 = dup(r5) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$SIOCGSTAMPNS(r9, 0x8907, &(0x7f0000002880)) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r11, &(0x7f0000000240)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442bfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESOCT], 0x7a) close(0x4) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) syz_genetlink_get_family_id$mptcp(&(0x7f0000002840), r7) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=6908): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x5, 0xfffffffffffffffc, 0xffffffffffff8000, 0x8, 0xfffffffffffffffc, 0x4, 0x8, 0x2, 0xb, 0x0, 0x4, 0x3, 0x25, 0x2, 0xfff, 0xffffffff], 0x2000, 0x301000}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0xe0}, 0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) syz_open_pts(r5, 0x191600) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x41) syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x10b900) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7a, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x4df}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0xfb, 0x81}}}}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x2, 0x1ff}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) socket$netlink(0x10, 0x3, 0x0) write$vga_arbiter(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes m'], 0xc) close_range(r1, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r8, 0x1, 0x8, 0x0, &(0x7f00000000c0)) close_range(r8, r2, 0x2) kernel console output (not intermixed with test programs): ink: 8 bytes leftover after parsing attributes in process `syz.3.5097'. [ 321.509613][T16018] overlayfs: failed to clone upperpath [ 321.516233][T16018] overlay: Unknown parameter './file1' [ 321.759356][ T36] audit: type=1400 audit(2000000043.047:94008): avc: denied { shutdown } for pid=16042 comm="syz.1.5105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 321.763407][T16049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.788420][T16049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.844778][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 321.946005][T16057] overlayfs: failed to clone upperpath [ 321.986417][T16065] fuse: Bad value for 'user_id' [ 321.991302][T16065] fuse: Bad value for 'user_id' [ 322.017100][ T31] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.029454][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.038619][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.046607][ T31] usb 7-1: Product: syz [ 322.050785][ T31] usb 7-1: Manufacturer: syz [ 322.055381][ T31] usb 7-1: SerialNumber: syz [ 322.364104][T16088] overlayfs: failed to clone upperpath [ 322.370447][ T36] audit: type=1400 audit(2000000050.615:94009): avc: denied { setattr } for pid=16087 comm="syz.3.5121" name="file0" dev="tmpfs" ino=2359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 322.509503][ T36] audit: type=1400 audit(2000000050.746:94010): avc: denied { name_bind } for pid=16098 comm="syz.3.5125" src=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 323.103198][T16112] 9pnet_fd: Insufficient options for proto=fd [ 323.132914][ T31] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 323.139635][ T31] cdc_ncm 7-1:1.0: dwNtbInMaxSize=20 is too small. Using 2048 [ 323.147263][ T31] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 323.349803][ T31] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 323.363648][ T31] usb 7-1: USB disconnect, device number 7 [ 323.369857][ T31] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 323.548144][T16180] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 323.555204][T16180] overlayfs: failed to set xattr on upper [ 323.561202][T16180] overlayfs: ...falling back to redirect_dir=nofollow. [ 323.568537][T16180] overlayfs: ...falling back to index=off. [ 323.574494][T16180] overlayfs: ...falling back to uuid=null. [ 323.580377][T16180] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 323.617280][ T36] audit: type=1326 audit(2000000051.775:94011): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.4.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac9538ebe9 code=0x7ffc0000 [ 323.641873][ T36] audit: type=1326 audit(2000000051.775:94012): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.4.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac9538ebe9 code=0x7ffc0000 [ 323.665916][ T36] audit: type=1326 audit(2000000051.775:94013): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.4.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac9538ebe9 code=0x7ffc0000 [ 323.690563][ T36] audit: type=1326 audit(2000000051.775:94014): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.4.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac9538ebe9 code=0x7ffc0000 [ 323.714519][ T36] audit: type=1326 audit(2000000051.775:94015): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.4.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac9538ebe9 code=0x7ffc0000 [ 323.738535][ T36] audit: type=1326 audit(2000000051.775:94016): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.4.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac9538ebe9 code=0x7ffc0000 [ 323.762641][ T36] audit: type=1326 audit(2000000051.775:94017): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.4.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac9538ebe9 code=0x7ffc0000 [ 323.787463][ T36] audit: type=1326 audit(2000000051.775:94018): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.4.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac9538ebe9 code=0x7ffc0000 [ 323.820419][ T36] audit: type=1326 audit(2000000051.775:94019): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.4.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac9538ebe9 code=0x7ffc0000 [ 323.848902][ T36] audit: type=1326 audit(2000000051.775:94020): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.4.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac9538ebe9 code=0x7ffc0000 [ 324.080776][T16259] rust_binder: 60: no such ref 2 [ 324.085827][T16259] rust_binder: inc_ref_done called when no active inc_refs [ 324.086016][T16265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.096396][ T330] rust_binder: 16258: removing orphan mapping 0:24 [ 324.111490][ T330] rust_binder: 0: removing orphan mapping 24:8 [ 324.721225][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5157'. [ 324.725381][T16289] netlink: 'syz.4.5158': attribute type 27 has an invalid length. [ 324.746751][T16289] sit0: left promiscuous mode [ 324.747325][T16291] 9pnet_fd: Insufficient options for proto=fd [ 324.785613][T16297] 9pnet_fd: Insufficient options for proto=fd [ 325.002397][T16324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5169'. [ 325.022298][T16313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5165'. [ 325.122255][T16327] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5170'. [ 325.395551][ T330] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 325.410393][T16351] batadv_slave_1: entered promiscuous mode [ 325.416854][T16351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.417143][T16351] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 325.442716][T16356] 9pnet_fd: Insufficient options for proto=fd [ 325.473624][T16366] rust_binder: Error while translating object. [ 325.473668][T16366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 325.480132][T16366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:116 [ 325.579232][ T330] usb 7-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 325.599244][ T330] usb 7-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.606841][T16388] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 325.612294][ T330] usb 7-1: config 1 interface 0 has no altsetting 0 [ 326.210006][T16396] netlink: 'syz.3.5195': attribute type 2 has an invalid length. [ 326.217760][T16396] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5195'. [ 326.295672][T16350] batadv_slave_1: left promiscuous mode [ 326.366994][T16402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.367605][T16402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.382697][T16402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.391083][T16402] rust_binder: Failed copying remainder into alloc: EFAULT [ 326.391108][T16402] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 326.398442][T16402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 326.406787][T16402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:121 [ 326.961563][T16407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.971261][T16407] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 326.977727][T16407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 327.055093][T16413] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3354154791 (6708309582 ns) > initial count (4455734788 ns). Using initial count to start timer. [ 327.082752][T16413] 9pnet_fd: Insufficient options for proto=fd [ 327.139025][T16416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5204'. [ 327.149044][T16416] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.158693][T16416] bridge_slave_1 (unregistering): left allmulticast mode [ 327.165917][T16416] bridge_slave_1 (unregistering): left promiscuous mode [ 327.173419][T16416] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.308092][T16429] /dev/rnullb0: Can't open blockdev [ 327.314511][T16429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.323270][T16429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.429718][T16431] 9pnet_fd: Insufficient options for proto=fd [ 327.996033][T16444] netlink: 'syz.3.5213': attribute type 12 has an invalid length. [ 328.333458][ T330] usb 7-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.40 [ 328.349667][ T330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.357721][ T330] usb 7-1: Product: 翲锏헾Ƞ뭛피旟퇵㥏茄ڪ傺众돨씞篱 [ 328.367997][ T330] usb 7-1: can't set config #1, error -71 [ 328.375174][ T330] usb 7-1: USB disconnect, device number 8 [ 328.498537][T16465] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 329.332429][T16484] binder: Bad value for 'max' [ 329.435323][T16512] input: syz1 as /devices/virtual/input/input20 [ 329.497758][T16555] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 329.551776][T16512] rust_binder: 87: no such ref 2 [ 329.565008][ T344] rust_binder: 16511: removing orphan mapping 0:112 [ 329.572136][ T344] rust_binder: 0: removing orphan mapping 112:8 [ 329.590664][T16570] input: syz1 as /devices/virtual/input/input21 [ 329.621216][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 329.621232][ T36] audit: type=1326 audit(2000000057.390:94087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.6.5242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7daf8ebe9 code=0x0 [ 329.963109][T16586] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.092246][T16588] rust_binder: Error while translating object. [ 330.098750][T16588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 330.122819][T16588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157 [ 330.950912][T16633] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 330.979785][T16633] SELinux: failed to load policy [ 331.022498][T16643] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.022721][T16643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 331.029307][T16643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:110 [ 331.039557][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5263'. [ 331.064429][T16647] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.067392][T16647] rust_binder: Write failure EINVAL in pid:165 [ 331.098349][T16651] netlink: 324 bytes leftover after parsing attributes in process `syz.6.5264'. [ 331.219641][T16662] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.219775][T16662] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 331.226453][T16662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 331.234365][T16662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:171 [ 331.322414][T16664] rust_binder: Write failure EFAULT in pid:173 [ 331.386643][T16676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.460103][T16687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.475404][ T36] audit: type=1400 audit(2000000059.101:94088): avc: denied { accept } for pid=16673 comm="syz.1.5273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 331.507753][T16687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.523876][ T347] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 331.532383][T16687] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 352, limit: 1192, size: 18446744073709551388) [ 331.532409][T16687] rust_binder: Error while translating object. [ 331.555385][T16687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 331.561645][T16687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177 [ 331.696091][ T347] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 331.717676][ T347] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.737801][ T347] usb 7-1: config 0 has no interface number 0 [ 331.750111][ T347] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 331.759567][ T347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.767576][ T347] usb 7-1: Product: syz [ 331.779416][ T347] usb 7-1: Manufacturer: syz [ 331.784516][ T347] usb 7-1: SerialNumber: syz [ 331.800201][ T347] usb 7-1: config 0 descriptor?? [ 331.806383][ T347] hub 7-1:0.31: bad descriptor, ignoring hub [ 331.812400][ T347] hub 7-1:0.31: probe with driver hub failed with error -5 [ 331.823943][ T347] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 331.830481][ T347] uvcvideo 7-1:0.31: Entity type for entity Output 6 was not initialized! [ 331.849062][ T347] usb 7-1: Failed to create links for entity 6 [ 331.866281][ T347] usb 7-1: Failed to register entities (-22). [ 331.906363][T16708] overlayfs: missing 'workdir' [ 332.042426][T16666] syzkaller0: entered promiscuous mode [ 332.058673][T16666] syzkaller0: entered allmulticast mode [ 332.070175][ T9919] syzkaller0: tun_net_xmit 48 [ 332.073115][T16666] syzkaller0: create flow: hash 1189292544 index 1 [ 332.107952][T16666] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 332.145862][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5288'. [ 332.209660][T16666] syzkaller0 (unregistered): delete flow: hash 1189292544 index 0 [ 332.347501][ T2428] usb 7-1: USB disconnect, device number 9 [ 332.613028][T16739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.643354][T16739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.710227][T16742] 9pnet_fd: Insufficient options for proto=fd [ 332.749210][T16746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=16746 comm=syz.3.5298 [ 332.781321][T16751] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.787340][T16754] 9pnet_fd: Insufficient options for proto=fd [ 332.788107][T16756] 9pnet_fd: Insufficient options for proto=fd [ 332.800948][T16755] 9pnet_fd: Insufficient options for proto=fd [ 332.836223][T16765] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 332.836249][T16765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 332.844351][T16765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:117 [ 332.868451][T16771] /dev/rnullb0: Can't lookup blockdev [ 332.878674][T16740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.892977][T16740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.005848][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5311'. [ 333.014824][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5311'. [ 333.460401][T16797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.468915][T16797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.626906][T16809] 9pnet_fd: Insufficient options for proto=fd [ 333.692357][T16797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.700972][T16797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.941011][ T330] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 334.101411][ T330] usb 7-1: Using ep0 maxpacket: 16 [ 334.108101][ T330] usb 7-1: unable to get BOS descriptor or descriptor too short [ 334.115886][ T330] usb 7-1: too many configurations: 113, using maximum allowed: 8 [ 334.124832][ T330] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 334.132406][ T330] usb 7-1: can't read configurations, error -61 [ 334.263802][ T36] audit: type=1326 audit(2000000061.738:94089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.3.5316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f618ebe9 code=0x7fc00000 [ 334.272577][ T330] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 334.301475][T16831] fuse: Bad value for 'user_id' [ 334.306538][T16831] fuse: Bad value for 'user_id' [ 334.376715][T16852] overlayfs: failed to clone upperpath [ 334.382822][ T36] audit: type=1400 audit(2000000061.850:94090): avc: denied { create } for pid=16851 comm="syz.3.5336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 334.426649][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5339'. [ 334.435645][T16859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5339'. [ 334.444897][T16859] tc_dump_action: action bad kind [ 334.454357][ T330] usb 7-1: Using ep0 maxpacket: 16 [ 334.461632][ T330] usb 7-1: unable to get BOS descriptor or descriptor too short [ 334.469515][ T330] usb 7-1: too many configurations: 113, using maximum allowed: 8 [ 334.471462][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5341'. [ 334.479016][ T330] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 334.494147][ T330] usb 7-1: can't read configurations, error -61 [ 334.500577][ T330] usb usb7-port1: attempt power cycle [ 334.518392][T16868] netlink: 324 bytes leftover after parsing attributes in process `syz.3.5343'. [ 334.703104][T16878] rust_binder: Write failure EFAULT in pid:212 [ 334.710038][T16883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.754984][T16889] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3354154791 (6708309582 ns) > initial count (4455734788 ns). Using initial count to start timer. [ 334.871478][ T330] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 334.893482][ T330] usb 7-1: Using ep0 maxpacket: 16 [ 334.900886][ T330] usb 7-1: unable to get BOS descriptor or descriptor too short [ 334.909204][ T330] usb 7-1: too many configurations: 113, using maximum allowed: 8 [ 334.918397][ T330] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 334.926273][ T330] usb 7-1: can't read configurations, error -61 [ 335.064623][ T330] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 335.085737][ T330] usb 7-1: Using ep0 maxpacket: 16 [ 335.092257][ T330] usb 7-1: unable to get BOS descriptor or descriptor too short [ 335.099992][ T330] usb 7-1: too many configurations: 113, using maximum allowed: 8 [ 335.108848][ T330] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 335.116522][ T330] usb 7-1: can't read configurations, error -61 [ 335.123181][ T330] usb usb7-port1: unable to enumerate USB device [ 336.137504][T16944] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.040773][ T36] audit: type=1400 audit(2000000064.328:94091): avc: denied { append } for pid=16966 comm="syz.6.5373" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 337.069838][T16967] netlink: 'syz.6.5373': attribute type 27 has an invalid length. [ 337.095635][T16979] syzkaller0: entered promiscuous mode [ 337.101159][T16979] syzkaller0: entered allmulticast mode [ 337.107349][ T13] syzkaller0: tun_net_xmit 48 [ 337.110640][T16979] syzkaller0: create flow: hash 1189292544 index 1 [ 337.159752][T16994] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.169750][T16994] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.178907][T16978] syzkaller0 (unregistered): delete flow: hash 1189292544 index 0 [ 337.179741][T16998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5381'. [ 337.197950][T17000] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.202152][T16998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5381'. [ 337.218237][T17005] rust_binder: Fixups oob 156 120 160 164 [ 337.218261][T17005] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 337.224042][T17005] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 337.232353][T17005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270 [ 337.320645][T17040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17040 comm=syz.3.5393 [ 337.342623][T17040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2584 sclass=netlink_tcpdiag_socket pid=17040 comm=syz.3.5393 [ 337.355514][T17040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2562 sclass=netlink_tcpdiag_socket pid=17040 comm=syz.3.5393 [ 337.368813][T17040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2565 sclass=netlink_tcpdiag_socket pid=17040 comm=syz.3.5393 [ 337.375988][T17041] 9pnet_fd: Insufficient options for proto=fd [ 337.381887][T17040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=17040 comm=syz.3.5393 [ 337.390336][T17041] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17041 comm=syz.3.5393 [ 337.615375][T17056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.624620][T17056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.635146][T17056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.644395][T17056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.654219][T17056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.663335][T17056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.005165][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 338.054278][T17060] fuseblk: Bad value for 'fd' [ 338.167011][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 338.175485][ T10] usb 7-1: config index 0 descriptor too short (expected 4310, got 145) [ 338.183940][ T10] usb 7-1: config 193 has too many interfaces: 103, using maximum allowed: 32 [ 338.192837][ T10] usb 7-1: config 193 has an invalid descriptor of length 0, skipping remainder of the config [ 338.203159][ T10] usb 7-1: config 193 has 3 interfaces, different from the descriptor's value: 103 [ 338.212500][ T10] usb 7-1: config 193 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.218408][T17063] sock: sock_timestamping_bind_phc: sock not bind to device [ 338.229762][ T10] usb 7-1: config 193 interface 1 has no altsetting 0 [ 338.243878][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.253104][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.261174][ T10] usb 7-1: Product: syz [ 338.265487][ T10] usb 7-1: Manufacturer: syz [ 338.270341][ T10] usb 7-1: SerialNumber: syz [ 338.490762][T17058] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.493674][ T10] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 338.509913][ T10] snd-usb-audio 7-1:193.0: probe with driver snd-usb-audio failed with error -22 [ 338.521176][ T10] usb 7-1: USB disconnect, device number 14 [ 338.527620][T15561] udevd[15561]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:193.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 339.057793][T17074] syzkaller0: entered promiscuous mode [ 339.063397][T17074] syzkaller0: entered allmulticast mode [ 339.095730][T17075] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 339.466166][T17105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.474741][T17105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.799086][T17109] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5418'. [ 340.210961][ T36] audit: type=1400 audit(2000000067.292:94092): avc: denied { mount } for pid=17141 comm="syz.3.5429" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 340.211196][T17143] overlayfs: failed to clone lowerpath [ 340.288801][T17144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.297514][T17144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.933057][ T36] audit: type=1400 audit(2000000067.965:94093): avc: denied { write } for pid=17198 comm="syz.1.5449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 340.968191][T17207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5451'. [ 340.987829][T17212] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.995303][T17212] rust_binder: Error while translating object. [ 341.002098][T17212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 341.008300][T17212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:325 [ 341.018687][T17215] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 341.448422][T17248] fuse: Unknown parameter '0x0000000000000008' [ 341.448723][T17256] fuse: Unknown parameter '0x0000000000000008' [ 341.462805][T17257] 9pnet_fd: Insufficient options for proto=fd [ 342.398843][T17323] netlink: 8568 bytes leftover after parsing attributes in process `syz.4.5486'. [ 342.409096][T17325] netlink: 8568 bytes leftover after parsing attributes in process `syz.4.5486'. [ 342.878153][T17365] veth1: entered allmulticast mode [ 342.883649][T17365] veth1: left allmulticast mode [ 343.024197][T17371] netlink: 'syz.4.5500': attribute type 1 has an invalid length. [ 343.032588][T17371] overlayfs: missing 'lowerdir' [ 343.083228][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5504'. [ 343.104278][T17386] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 343.154752][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5511'. [ 343.202217][T17410] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.207261][T17415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5516'. [ 343.207468][T17411] 9pnet_fd: Insufficient options for proto=fd [ 343.354532][ T63] rust_binder: 17419: removing orphan mapping 0:24 [ 343.362566][T17423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 343.362599][T17423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:183 [ 343.365979][ T63] rust_binder: 0: removing orphan mapping 24:1024 [ 343.430852][ T36] audit: type=1400 audit(2000000070.303:94094): avc: denied { listen } for pid=17434 comm="syz.6.5522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 343.536355][T17459] fuse: Unknown parameter '000000000000000000000050x0000000000000005' [ 343.713452][T17499] overlayfs: failed to resolve './file1': -2 [ 343.827009][T17531] fuse: Bad value for 'fd' [ 343.831616][T17530] fuse: Bad value for 'fd' [ 343.836292][T17530] fuse: Bad value for 'fd' [ 343.840820][T17531] fuse: Bad value for 'fd' [ 343.895074][T17539] 9pnet_fd: Insufficient options for proto=fd [ 344.091661][T17554] netlink: 'syz.1.5563': attribute type 27 has an invalid length. [ 344.400597][T17578] netlink: 'syz.4.5573': attribute type 1 has an invalid length. [ 344.421789][ T36] audit: type=1326 audit(2000000071.219:94095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.4.5575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac9538ebe9 code=0x0 [ 344.436144][T17588] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 344.448849][ T63] rust_binder: 17571: removing orphan mapping 0:24 [ 344.469131][T17595] netlink: 516 bytes leftover after parsing attributes in process `syz.6.5577'. [ 344.479437][T17595] veth1_macvtap: left promiscuous mode [ 344.503964][T17595] veth1_macvtap: entered promiscuous mode [ 344.870837][T17602] usb usb8: usbfs: process 17602 (syz.6.5579) did not claim interface 0 before use [ 344.892169][T17607] netlink: 'syz.6.5580': attribute type 11 has an invalid length. [ 344.900506][T17607] rust_binder: Error while translating object. [ 344.900590][T17607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 344.906858][T17607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:225 [ 344.950782][T17611] 9pnet_fd: Insufficient options for proto=fd [ 345.168960][T17632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5591'. [ 345.214159][T17634] overlayfs: failed to clone upperpath [ 345.246748][ T63] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 345.249452][T17640] overlay: Unknown parameter 'fsuuid' [ 345.270138][T17642] overlayfs: failed to clone upperpath [ 345.338607][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5603'. [ 345.406211][ T63] usb 7-1: Using ep0 maxpacket: 16 [ 345.414783][ T63] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 345.427772][ T63] usb 7-1: config 0 has no interface number 0 [ 345.437564][ T63] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 345.453399][ T63] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 345.467257][ T63] usb 7-1: config 0 interface 41 has no altsetting 0 [ 345.475590][ T63] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 345.484887][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.495547][ T63] usb 7-1: Product: syz [ 345.499826][ T63] usb 7-1: Manufacturer: syz [ 345.504657][ T63] usb 7-1: SerialNumber: syz [ 345.511488][ T63] usb 7-1: config 0 descriptor?? [ 345.520405][T17613] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 345.527830][T17613] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 345.750522][T17613] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 345.761538][T17613] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 346.418076][ T63] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 346.533760][T17746] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 346.554126][T17748] incfs: ino conflict with backing FS 1 [ 346.560401][T17748] incfs: ino conflict with backing FS 1 [ 346.566612][T17748] overlayfs: conflicting options: nfs_export=on,index=off [ 346.625240][T17750] netlink: 'syz.4.5612': attribute type 4 has an invalid length. [ 346.635965][T17750] netlink: 'syz.4.5612': attribute type 4 has an invalid length. [ 346.645401][T17613] rust_binder: Write failure EFAULT in pid:231 [ 346.645792][ T63] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 346.663049][ T63] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 346.673452][ T63] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 346.686247][ T63] usb 7-1: USB disconnect, device number 16 [ 347.534619][ T10] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 347.603366][T17789] overlayfs: failed to clone upperpath [ 347.673613][ T10] usb 7-1: device descriptor read/64, error -71 [ 347.930308][ T10] usb 7-1: device descriptor read/64, error -71 [ 348.186989][ T10] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 348.326024][ T10] usb 7-1: device descriptor read/64, error -71 [ 348.416362][T17818] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.423576][T17818] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.430703][T17818] bridge_slave_0: entered allmulticast mode [ 348.437170][T17818] bridge_slave_0: entered promiscuous mode [ 348.443645][T17818] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.450759][T17818] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.458204][T17818] bridge_slave_1: entered allmulticast mode [ 348.464417][T17818] bridge_slave_1: entered promiscuous mode [ 348.504003][T17818] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.511090][T17818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.518365][T17818] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.525699][T17818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.545914][ T9919] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.553266][ T9919] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.563366][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.570433][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.579418][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.586471][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.604702][ T10] usb 7-1: device descriptor read/64, error -71 [ 348.612149][T17818] veth0_vlan: entered promiscuous mode [ 348.623018][T17818] veth1_macvtap: entered promiscuous mode [ 348.721933][ T10] usb usb7-port1: attempt power cycle [ 349.085478][ T10] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 349.108031][ T10] usb 7-1: device descriptor read/8, error -71 [ 349.220823][ T36] audit: type=1400 audit(2000000075.716:94096): avc: denied { create } for pid=17845 comm="syz.1.5640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 349.268346][ T10] usb 7-1: device descriptor read/8, error -71 [ 349.523870][ T10] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 349.546502][ T10] usb 7-1: device descriptor read/8, error -71 [ 349.559135][ T330] rust_binder: 17830: removing orphan mapping 0:24 [ 349.687526][ T10] usb 7-1: device descriptor read/8, error -71 [ 349.804345][ T10] usb usb7-port1: unable to enumerate USB device [ 349.825674][T17871] netlink: 'syz.1.5649': attribute type 4 has an invalid length. [ 349.862537][T17876] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5650'. [ 349.888188][T17874] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.895346][T17874] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.903372][T17874] bridge_slave_0: entered allmulticast mode [ 349.910246][T17874] bridge_slave_0: entered promiscuous mode [ 349.923218][T17874] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.930501][T17874] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.937818][T17874] bridge_slave_1: entered allmulticast mode [ 349.944209][T17874] bridge_slave_1: entered promiscuous mode [ 349.989822][T17874] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.996954][T17874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.004674][T17874] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.011856][T17874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.036821][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.045001][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.057926][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.065119][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.073261][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.080465][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.105947][T17874] veth0_vlan: entered promiscuous mode [ 350.117820][T17874] veth1_macvtap: entered promiscuous mode [ 350.189938][ T46] tipc: Disabling bearer [ 350.195221][ T46] tipc: Left network mode [ 350.400890][ T63] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 350.566421][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 350.577725][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 350.591456][ T63] usb 5-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 350.594148][T17908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.600577][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.620400][ T63] usb 5-1: config 0 descriptor?? [ 350.627899][T17897] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 350.661265][T17909] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 350.713920][T17913] netlink: 'syz.1.5658': attribute type 16 has an invalid length. [ 350.729950][T17913] netlink: 'syz.1.5658': attribute type 2 has an invalid length. [ 350.738756][T17913] netlink: 'syz.1.5658': attribute type 2 has an invalid length. [ 350.746692][T17913] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.5658'. [ 350.773164][T17915] overlayfs: failed to clone upperpath [ 351.070460][ T63] usbhid 5-1:0.0: can't add hid device: -71 [ 351.082479][ T63] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 351.099610][ T63] usb 5-1: USB disconnect, device number 7 [ 351.116536][T17931] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 351.374165][ T31] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 351.427612][ T63] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 351.545287][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 351.551729][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 351.560260][ T31] usb 7-1: config 1 interface 0 altsetting 14 endpoint 0x3 has invalid wMaxPacketSize 0 [ 351.570044][ T31] usb 7-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 0 [ 351.579893][ T31] usb 7-1: config 1 interface 0 has no altsetting 0 [ 351.587834][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.597260][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.605289][ T31] usb 7-1: Product: syz [ 351.609434][ T63] usb 5-1: Using ep0 maxpacket: 16 [ 351.610601][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.614629][ T31] usb 7-1: Manufacturer: syz [ 351.614647][ T31] usb 7-1: SerialNumber: syz [ 351.626196][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 351.647801][ T63] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 351.656925][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.665850][ T63] usb 5-1: config 0 descriptor?? [ 351.716514][ T330] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 351.847457][T17932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.855912][ T330] usb 4-1: device descriptor read/64, error -71 [ 351.856632][T17932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.870396][T17932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.879132][T17932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.887393][T17932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.896148][T17932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.904386][T17932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.913283][T17932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.921480][T17932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.930022][T17932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.941583][T17932] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 352.104906][ T63] nintendo 0003:057E:2019.0012: hidraw1: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 352.112694][ T330] usb 4-1: device descriptor read/64, error -71 [ 352.310086][T17967] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5675'. [ 352.319384][T17967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5675'. [ 352.380604][ T330] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 352.518530][ T330] usb 4-1: device descriptor read/64, error -71 [ 352.694397][ C0] usb 5-1: input irq status -75 received [ 352.775223][ T330] usb 4-1: device descriptor read/64, error -71 [ 352.892968][ T330] usb usb4-port1: attempt power cycle [ 353.162304][T17984] fuseblk: Bad value for 'fd' [ 353.204586][T17992] fuse: Bad value for 'fd' [ 353.256535][ T330] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 353.279085][ T330] usb 4-1: device descriptor read/8, error -71 [ 353.417976][ T330] usb 4-1: device descriptor read/8, error -71 [ 353.673614][ T330] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 353.696093][ T330] usb 4-1: device descriptor read/8, error -71 [ 353.836410][ T330] usb 4-1: device descriptor read/8, error -71 [ 353.855084][T18018] fuse: Unknown parameter '>' [ 353.951767][ T330] usb usb4-port1: unable to enumerate USB device [ 354.318688][ T63] nintendo 0003:057E:2019.0012: Failed to get joycon info; ret=-71 [ 354.327560][ T63] nintendo 0003:057E:2019.0012: Failed to retrieve controller info; ret=-71 [ 354.336426][ T63] nintendo 0003:057E:2019.0012: Failed to initialize controller; ret=-71 [ 354.338724][ T31] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 354.346391][ T63] nintendo 0003:057E:2019.0012: probe - fail = -71 [ 354.365839][ T31] usb 7-1: USB disconnect, device number 21 [ 354.371722][ T63] nintendo 0003:057E:2019.0012: probe with driver nintendo failed with error -71 [ 354.381412][T18020] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 354.381528][T18020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.408240][ T63] usb 5-1: USB disconnect, device number 8 [ 354.461207][T18027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5695'. [ 354.522205][T18046] 9pnet_fd: Insufficient options for proto=fd [ 354.588518][T18079] cgroup: Need name or subsystem set [ 354.618293][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.618374][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.629086][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 354.648041][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.648068][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.652045][T18091] rust_binder: Write failure EINVAL in pid:31 [ 354.661205][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 354.672707][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.674732][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.683440][T18091] rust_binder: Write failure EINVAL in pid:31 [ 354.688676][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.691078][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 354.701159][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.709229][T18091] rust_binder: Write failure EINVAL in pid:31 [ 354.712200][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.716493][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 354.736128][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.736233][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.746004][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.752947][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.760115][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.770151][T18091] rust_binder: Write failure EINVAL in pid:31 [ 354.771951][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.783036][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.787626][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 354.794920][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.796594][T18091] rust_binder: Write failure EINVAL in pid:31 [ 354.807371][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.815803][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.822412][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 354.832698][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.836187][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.849135][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.850051][T18091] rust_binder: Write failure EINVAL in pid:31 [ 354.855943][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.868715][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.871562][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 354.875556][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.890113][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.892680][T18091] rust_binder: Write failure EINVAL in pid:31 [ 354.896836][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.904539][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 354.914911][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.923063][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.925350][T18091] rust_binder: Write failure EINVAL in pid:31 [ 354.931276][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.942625][T18086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.944362][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 354.963845][T18091] rust_binder: Write failure EINVAL in pid:31 [ 354.963890][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 354.977382][T18091] rust_binder: Write failure EINVAL in pid:31 [ 354.977434][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 354.991140][T18091] rust_binder: Write failure EINVAL in pid:31 [ 354.991180][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.004774][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.004820][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.018330][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.018377][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.031752][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.031788][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.045140][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.045174][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.058604][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.058649][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.072091][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.072128][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.085539][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.085587][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.098996][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.099049][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.112505][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.112553][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.126180][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.126222][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.139630][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.139672][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.153038][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.153085][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.166471][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.166511][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.179962][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.180000][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.193647][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.193694][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.207081][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.207125][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.220500][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.220570][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.234052][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.234094][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.247530][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.247568][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.260939][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.260984][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.274517][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.274554][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.287925][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.287969][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.301406][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.301449][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.314820][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.314872][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.328339][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.328416][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.341834][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.341880][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.355344][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.355393][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.368771][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.368818][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.382183][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.382219][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.395588][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.395623][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.409102][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.409147][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.422645][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.422700][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.436064][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.436107][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.449702][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.449748][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.463170][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.463219][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.476593][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.476637][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.490292][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.490341][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.504181][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.504230][T18091] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.517956][T18091] rust_binder: Write failure EINVAL in pid:31 [ 355.582396][T18138] /dev/nullb0: Can't lookup blockdev [ 355.710912][T18143] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5730'. [ 356.037420][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 356.198707][ T9] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 356.206912][ T9] usb 5-1: config 0 has no interface number 0 [ 356.214753][ T9] usb 5-1: New USB device found, idVendor=0004, idProduct=0044, bcdDevice=d3.17 [ 356.224377][ T9] usb 5-1: New USB device strings: Mfr=4, Product=2, SerialNumber=3 [ 356.232486][ T9] usb 5-1: Product: syz [ 356.236655][ T9] usb 5-1: Manufacturer: syz [ 356.241264][ T9] usb 5-1: SerialNumber: syz [ 356.246770][ T9] usb 5-1: config 0 descriptor?? [ 356.495991][ T36] audit: type=1326 audit(2000000082.514:94097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18140 comm="syz.3.5729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737bd8ebe9 code=0x7fc00000 [ 356.520758][ T36] audit: type=1326 audit(2000000082.514:94098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18140 comm="syz.3.5729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f737bd8ebe9 code=0x7fc00000 [ 356.547336][ T36] audit: type=1326 audit(2000000082.514:94099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18140 comm="syz.3.5729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737bd8ebe9 code=0x7fc00000 [ 356.571912][ T36] audit: type=1326 audit(2000000082.514:94100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18140 comm="syz.3.5729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737bd8ebe9 code=0x7fc00000 [ 356.599165][ T36] audit: type=1326 audit(2000000082.514:94101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18140 comm="syz.3.5729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737bd8ebe9 code=0x7fc00000 [ 356.623119][ T36] audit: type=1326 audit(2000000082.514:94102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18140 comm="syz.3.5729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737bd8ebe9 code=0x7fc00000 [ 356.647001][ T36] audit: type=1326 audit(2000000082.514:94103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18140 comm="syz.3.5729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737bd8ebe9 code=0x7fc00000 [ 356.652302][ T9] usb 5-1: USB disconnect, device number 9 [ 356.672697][ T36] audit: type=1326 audit(2000000082.514:94104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18140 comm="syz.3.5729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737bd8ebe9 code=0x7fc00000 [ 356.700428][ T36] audit: type=1326 audit(2000000082.514:94105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18140 comm="syz.3.5729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737bd8ebe9 code=0x7fc00000 [ 356.724195][ T36] audit: type=1326 audit(2000000082.514:94106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18140 comm="syz.3.5729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737bd8ebe9 code=0x7fc00000 [ 364.606508][T18181] rust_binder: Write failure EFAULT in pid:37 [ 364.626509][T18193] fuse: Bad value for 'fd' [ 364.695531][T18210] binder: Bad value for 'stats' [ 364.718827][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 364.718843][ T36] audit: type=1400 audit(2000000090.199:94164): avc: denied { read } for pid=18221 comm="syz.1.5757" name="file2" dev="tmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 364.747671][ T36] audit: type=1326 audit(2000000090.199:94165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18221 comm="syz.1.5757" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f543e18ebe9 code=0x0 [ 364.924951][ T331] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 365.086486][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.096317][ T331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 365.110009][ T331] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 365.119142][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.127984][ T331] usb 5-1: config 0 descriptor?? [ 365.213453][ T36] audit: type=1326 audit(2000000090.667:94166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.6.5759" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7daf8ebe9 code=0x0 [ 365.538618][T18231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5760'. [ 365.584950][ T331] usb 5-1: string descriptor 0 read error: -71 [ 365.592924][ T331] usbhid 5-1:0.0: can't add hid device: -71 [ 365.599005][ T331] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 365.609330][ T331] usb 5-1: USB disconnect, device number 10 [ 365.611873][T18233] binder: Bad value for 'stats' [ 365.632094][T18233] syzkaller0: entered promiscuous mode [ 365.637650][T18233] syzkaller0: entered allmulticast mode [ 366.390179][ T347] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 366.496629][ T36] audit: type=1400 audit(2000000091.864:94167): avc: denied { remount } for pid=18273 comm="syz.3.5772" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 366.525377][T18274] /dev/rnullb0: Can't open blockdev [ 366.552271][ T347] usb 5-1: Using ep0 maxpacket: 32 [ 366.555432][T18285] tc_dump_action: action bad kind [ 366.558550][ T347] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 366.570722][ T347] usb 5-1: config 0 has no interface number 0 [ 366.578482][ T347] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 366.587737][ T347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.596101][ T347] usb 5-1: Product: syz [ 366.600320][ T347] usb 5-1: Manufacturer: syz [ 366.604951][ T347] usb 5-1: SerialNumber: syz [ 366.610401][ T347] usb 5-1: config 0 descriptor?? [ 366.616214][ T347] smsc95xx v2.0.0 [ 366.639556][T18290] rust_binder: Error while translating object. [ 366.639601][T18290] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 366.645890][T18290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:66 [ 366.664631][T18293] /dev/rnullb0: Can't open blockdev [ 366.699929][T18295] SELinux: failed to load policy [ 366.831396][T18316] rust_binder: Got transaction with invalid offset. [ 366.831475][T18316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 366.843659][T18316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 367.052285][ T347] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 367.075671][ T347] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 367.518535][T18253] bridge0: entered allmulticast mode [ 367.524263][T18253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5766'. [ 367.533356][T18253] bridge_slave_1: left allmulticast mode [ 367.539039][T18253] bridge_slave_1: left promiscuous mode [ 367.544655][T18253] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.552367][T18253] bridge_slave_0: left allmulticast mode [ 367.558168][T18253] bridge_slave_0: left promiscuous mode [ 367.563900][T18253] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.573469][T18253] bridge0 (unregistering): left allmulticast mode [ 367.675888][ T347] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 367.686866][ T347] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 367.696353][ T347] usb 5-1: USB disconnect, device number 11 [ 367.737142][T18433] netlink: 'syz.6.5801': attribute type 16 has an invalid length. [ 367.911067][T18454] overlayfs: failed to clone upperpath [ 368.192105][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5813'. [ 368.201093][T18470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5813'. [ 368.210052][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5813'. [ 368.220582][T18470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:91 [ 368.324178][T18481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:95 [ 368.348420][T18486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 368.357782][T18486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:100 [ 368.562337][ T330] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 368.614858][ T331] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 368.732427][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 368.738691][ T330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.748949][ T330] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.759432][ T330] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 368.768550][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.776587][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 368.781848][ T330] usb 5-1: Product: syz [ 368.786051][ T330] usb 5-1: Manufacturer: syz [ 368.790759][ T330] usb 5-1: SerialNumber: syz [ 368.795886][ T331] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 368.804382][ T331] usb 4-1: config 0 has no interface number 0 [ 368.810563][ T331] usb 4-1: config 0 interface 184 has no altsetting 0 [ 368.819812][ T331] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 368.828984][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.836996][ T331] usb 4-1: Product: syz [ 368.841201][ T331] usb 4-1: Manufacturer: syz [ 368.845828][ T331] usb 4-1: SerialNumber: syz [ 368.852675][ T331] usb 4-1: config 0 descriptor?? [ 368.858754][ T331] smsc75xx v1.0.0 [ 369.032724][ T330] usb 5-1: 0:2 : does not exist [ 369.032901][T18479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.046240][T18479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.064282][ T330] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 369.078814][ T330] usb 5-1: USB disconnect, device number 12 [ 369.088534][T18256] udevd[18256]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 369.227476][T18521] fuse: Unknown parameter 'T~gua;afd' [ 369.429112][T18529] rust_binder: Error while translating object. [ 369.429145][T18529] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 369.435353][T18529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 369.648637][T18540] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:89 [ 369.680622][T18543] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 369.698870][T18544] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 369.791056][ T36] audit: type=1400 audit(2000000094.940:94168): avc: denied { create } for pid=18568 comm="syz.1.5847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 370.614924][T18635] fuse: Bad value for 'fd' [ 370.749268][T18642] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 370.804975][T18657] overlayfs: failed to clone upperpath [ 370.936088][T18680] netlink: 'syz.1.5884': attribute type 16 has an invalid length. [ 370.944088][T18680] netlink: 'syz.1.5884': attribute type 25 has an invalid length. [ 370.952168][T18680] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.5884'. [ 371.026876][T18689] tipc: Failed to remove unknown binding: 66,1,1/0:3412229393/3412229395 [ 371.042585][T18689] tipc: Failed to remove unknown binding: 66,1,1/0:3412229393/3412229395 [ 371.054249][ T36] audit: type=1400 audit(2000000096.137:94169): avc: denied { setattr } for pid=18688 comm="syz.6.5887" name="TIPC" dev="sockfs" ino=68338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 371.082748][T18693] netlink: 'syz.1.5889': attribute type 126 has an invalid length. [ 371.568464][ T331] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 371.587824][ T331] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 371.598262][ T331] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 371.608676][ T331] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 371.620162][ T331] usb 4-1: USB disconnect, device number 16 [ 371.629568][T18723] 9pnet_fd: Insufficient options for proto=fd [ 371.644032][T18726] 9pnet_fd: Insufficient options for proto=fd [ 371.830544][T18737] /dev/rnullb0: Can't open blockdev [ 371.981534][T18752] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 371.981560][T18752] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 371.991043][T18752] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:123 [ 372.008246][ T9] rust_binder: 18751: removing orphan mapping 0:24 [ 372.589017][T18773] 9pnet_fd: Insufficient options for proto=fd [ 372.796592][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 372.933974][T18792] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 372.935620][ T9] usb 4-1: device descriptor read/64, error -71 [ 373.203011][ T9] usb 4-1: device descriptor read/64, error -71 [ 373.233247][T18803] 9pnet_fd: Insufficient options for proto=fd [ 373.459703][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 373.598718][ T9] usb 4-1: device descriptor read/64, error -71 [ 373.853214][ T36] audit: type=1400 audit(2000000098.745:94170): avc: denied { watch } for pid=18828 comm="syz.4.5935" path="/41/file0" dev="tmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 373.855710][ T9] usb 4-1: device descriptor read/64, error -71 [ 373.965434][T18840] input: syz0 as /devices/virtual/input/input24 [ 374.005466][ T9] usb usb4-port1: attempt power cycle [ 374.041550][T18843] 9pnet_fd: Insufficient options for proto=fd [ 374.047967][T18843] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 374.368825][ T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 374.401939][ T9] usb 4-1: device descriptor read/8, error -71 [ 374.540924][ T9] usb 4-1: device descriptor read/8, error -71 [ 374.706740][T18857] overlayfs: failed to clone lowerpath [ 374.796574][ T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 374.818926][ T9] usb 4-1: device descriptor read/8, error -71 [ 374.907062][T18862] syzkaller0: entered promiscuous mode [ 374.912599][T18862] syzkaller0: entered allmulticast mode [ 374.918770][ T46] syzkaller0: tun_net_xmit 48 [ 374.918959][T18863] syzkaller0: create flow: hash 1189292544 index 1 [ 374.958101][ T9] usb 4-1: device descriptor read/8, error -71 [ 374.979208][T18863] syzkaller0 (unregistered): delete flow: hash 1189292544 index 0 [ 375.074754][ T9] usb usb4-port1: unable to enumerate USB device [ 375.325894][T18895] netlink: 'syz.1.5958': attribute type 1 has an invalid length. [ 375.333704][T18895] netlink: 416 bytes leftover after parsing attributes in process `syz.1.5958'. [ 375.397113][ T36] audit: type=1400 audit(2000000100.195:94171): avc: denied { map } for pid=18907 comm="syz.4.5963" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 375.428694][T18910] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 375.428722][T18910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:187 [ 375.766838][T18932] fuse: Bad value for 'fd' [ 376.101417][ T31] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 376.240431][ T31] usb 4-1: device descriptor read/64, error -71 [ 376.365031][T18952] incfs: Options parsing error. -22 [ 376.370362][T18952] incfs: mount failed -22 [ 376.450324][T18956] syzkaller0: entered promiscuous mode [ 376.455871][T18956] syzkaller0: entered allmulticast mode [ 376.461653][T18954] overlayfs: failed to clone upperpath [ 376.497183][ T31] usb 4-1: device descriptor read/64, error -71 [ 376.571481][T18968] netlink: 'syz.1.5987': attribute type 19 has an invalid length. [ 376.579340][T18968] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5987'. [ 376.595225][T18969] rust_binder: Write failure EFAULT in pid:200 [ 376.595288][T18969] rust_binder: Write failure EFAULT in pid:200 [ 376.608611][ T331] rust_binder: 18961: removing orphan mapping 0:8 [ 376.664684][ T36] audit: type=1326 audit(2000000101.373:94172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18976 comm="syz.1.5990" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f543e18ebe9 code=0x0 [ 376.698710][T18979] binder: Unknown parameter 'E\'p{ə".8q68PP{'ߕxdwL]\.m˸z Eg-R;gˏ;g[v{2_wQj42яy)ǂ0.MuP00000000000000060928' [ 386.816853][ T36] audit: type=1400 audit(2000000110.865:94182): avc: denied { write } for pid=19344 comm="syz.1.6122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 386.837850][ T36] audit: type=1400 audit(2000000110.874:94183): avc: denied { read } for pid=19344 comm="syz.1.6122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 386.871918][T19355] fuse: Unknown parameter ' ' [ 386.925705][ T63] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 386.932068][ T63] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 386.941167][ T63] usbhid 5-1:0.0: can't add hid device: -32 [ 386.947160][ T63] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 387.821675][T19382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19382 comm=syz.1.6132 [ 387.932300][T19396] syzkaller0: entered promiscuous mode [ 387.937801][T19396] syzkaller0: entered allmulticast mode [ 388.026603][T17599] usb 5-1: USB disconnect, device number 21 [ 388.422299][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 388.582670][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 388.589109][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 388.595827][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 388.604948][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.613485][ T10] usb 5-1: config 0 descriptor?? [ 388.673631][T19421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=19421 comm=syz.6.6148 [ 388.686305][T19421] netlink: 4360 bytes leftover after parsing attributes in process `syz.6.6148'. [ 388.710857][T19424] overlayfs: failed to clone upperpath [ 388.717786][T19424] syz.6.6149 (19424): attempted to duplicate a private mapping with mremap. This is not supported. [ 388.807071][T19441] 9pnet_fd: Insufficient options for proto=fd [ 388.844123][T19447] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6159'. [ 389.053494][ T10] hid (null): global environment stack underflow [ 389.059908][ T10] hid (null): report_id 0 is invalid [ 389.067009][ T10] hid (null): global environment stack underflow [ 389.073573][ T10] hid (null): unknown global tag 0xc [ 389.078898][ T10] hid (null): report_id 25068 is invalid [ 389.084575][ T10] hid (null): report_id 0 is invalid [ 389.090011][ T10] hid (null): global environment stack overflow [ 389.097214][ T10] hid (null): unknown global tag 0xc [ 389.102765][ T10] hid (null): unknown global tag 0x58 [ 389.186845][T19455] netlink: 'syz.3.6161': attribute type 4 has an invalid length. [ 389.213330][T19461] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 389.213360][T19461] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 389.332767][ T10] usb 5-1: USB disconnect, device number 22 [ 389.412469][T19467] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 389.752063][T17895] bridge_slave_1: left allmulticast mode [ 389.757829][T17895] bridge_slave_1: left promiscuous mode [ 389.763523][T17895] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.771084][T17895] bridge_slave_0: left allmulticast mode [ 389.776727][T17895] bridge_slave_0: left promiscuous mode [ 389.782377][T17895] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.802331][T17895] bridge0 (unregistering): left allmulticast mode [ 389.879525][T19474] rust_binder: Write failure EFAULT in pid:293 [ 389.886181][T19476] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 389.922690][T17895] veth1_macvtap: left promiscuous mode [ 389.928309][T17895] veth0_vlan: left promiscuous mode [ 389.981992][T19480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 389.982017][T19480] rust_binder: Failure BR_FAILED_REPLY { source: EFAULT } during reply - delivering BR_FAILED_REPLY to sender. [ 389.991523][T19480] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:299 [ 390.003800][T19483] overlayfs: failed to clone upperpath [ 390.016564][ T10] rust_binder: 19479: removing orphan mapping 0:24 [ 390.037807][T19488] rust_binder: Write failure EFAULT in pid:305 [ 390.047432][T19492] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 390.127892][T19496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:311 [ 390.454317][ T330] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 390.585085][T19515] 9pnet_fd: Insufficient options for proto=fd [ 390.610564][T19521] 9pnet_fd: Insufficient options for proto=fd [ 390.626996][ T330] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 390.635476][ T330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.645586][ T330] usb 5-1: config 0 has no interface number 0 [ 390.651726][ T330] usb 5-1: config 0 interface 95 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 390.661660][ T330] usb 5-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 390.673149][ T330] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 390.682250][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.690257][ T330] usb 5-1: Product: syz [ 390.694440][ T330] usb 5-1: Manufacturer: syz [ 390.699024][ T330] usb 5-1: SerialNumber: syz [ 390.704318][ T330] usb 5-1: config 0 descriptor?? [ 390.926814][ T36] audit: type=1400 audit(2000000114.717:94184): avc: denied { watch } for pid=19503 comm="syz.4.6177" path="/101/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 390.956741][ T330] usb 5-1: MIDIStreaming interface descriptor not found [ 390.967290][ T330] usb 5-1: USB disconnect, device number 23 [ 390.978764][T18421] udevd[18421]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.95/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 391.083396][ T36] audit: type=1326 audit(2000000114.857:94185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19529 comm="syz.1.6185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f543e18ebe9 code=0x0 [ 391.084462][T19533] rust_binder: Error while translating object. [ 391.106581][T19533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 391.112808][T19533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:225 [ 391.213516][T19552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 391.223307][T19552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 391.229816][T19552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:241 [ 391.239664][T19552] rust_binder: 241: no such ref 3 [ 391.253969][T19552] rust_binder: 241: no such ref 1 [ 391.259056][T19552] rust_binder: Write failure EINVAL in pid:241 [ 391.294812][T19557] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6193'. [ 391.531491][T19564] fuse: Unknown parameter 'rootmhL o3ode' [ 391.593948][T19564] rust_binder: Write failure EFAULT in pid:253 [ 391.611272][ T36] audit: type=1400 audit(2000000115.353:94186): avc: denied { map } for pid=19570 comm="syz.3.6199" path="/proc/258/task/259/mounts" dev="proc" ino=77242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 391.611329][T19571] rust_binder: Failed to allocate buffer. len:16633436771123881744, is_oneway:false [ 391.766163][ T36] audit: type=1400 audit(2000000115.493:94187): avc: denied { read } for pid=19587 comm="syz.3.6203" path="socket:[76716]" dev="sockfs" ino=76716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 391.855403][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 392.015850][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 392.022099][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.033050][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 392.046024][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 392.055222][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.063860][ T10] usb 5-1: config 0 descriptor?? [ 392.229743][T17599] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 392.391326][T17599] usb 4-1: config 0 has no interfaces? [ 392.398354][T17599] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.407719][T17599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.415763][T17599] usb 4-1: Product: syz [ 392.419946][T17599] usb 4-1: Manufacturer: syz [ 392.424667][T17599] usb 4-1: SerialNumber: syz [ 392.430323][T17599] usb 4-1: config 0 descriptor?? [ 392.498641][ T10] microsoft 0003:045E:07DA.0014: collection stack underflow [ 392.506158][ T10] microsoft 0003:045E:07DA.0014: item 0 4 0 12 parsing failed [ 392.513840][ T10] microsoft 0003:045E:07DA.0014: parse failed [ 392.520031][ T10] microsoft 0003:045E:07DA.0014: probe with driver microsoft failed with error -22 [ 392.582804][T19623] netlink: 'syz.1.6215': attribute type 4 has an invalid length. [ 392.878737][T19660] overlayfs: failed to clone upperpath [ 393.267580][ T10] usb 4-1: USB disconnect, device number 25 [ 393.290871][T19668] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 393.305345][T19669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.313882][T19669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.443903][T19692] 9pnet_fd: Insufficient options for proto=fd [ 393.455625][T19691] 9pnet_fd: Insufficient options for proto=fd [ 393.474894][T19697] 9pnet_fd: Insufficient options for proto=fd [ 393.873207][T19717] netlink: 'syz.3.6248': attribute type 27 has an invalid length. [ 393.881216][T19717] lo: entered promiscuous mode [ 393.885998][T19717] lo: entered allmulticast mode [ 393.891666][T19717] tunl0: entered promiscuous mode [ 393.896909][T19717] tunl0: entered allmulticast mode [ 393.902516][T19717] gre0: entered promiscuous mode [ 393.907462][T19717] gre0: entered allmulticast mode [ 393.912995][T19717] gretap0: entered promiscuous mode [ 393.918207][T19717] gretap0: entered allmulticast mode [ 393.923558][T19717] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 394.013559][T19724] overlayfs: conflicting options: userxattr,redirect_dir=on [ 394.054077][ T36] audit: type=1400 audit(2000000117.634:94188): avc: denied { map } for pid=19727 comm="syz.3.6252" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 394.111444][T19740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6257'. [ 394.116378][T19742] 9pnet: Could not find request transport: xen [ 394.184956][T19757] rust_binder: Error while translating object. [ 394.184985][T19757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 394.191286][T19757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:313 [ 394.263849][T19761] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6264'. [ 394.288378][T17599] rust_binder: 19758: removing orphan mapping 0:24 [ 394.300812][T19765] rust_binder: Error while translating object. [ 394.300866][T19765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 394.307146][T19765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:318 [ 394.308408][T19767] 9pnet_fd: Insufficient options for proto=fd [ 394.394628][ T36] audit: type=1326 audit(2000000117.952:94189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19790 comm="syz.1.6275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f543e18ebe9 code=0x0 [ 394.571968][ T63] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 394.732385][ T63] usb 4-1: Using ep0 maxpacket: 8 [ 394.738700][ T63] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 394.747099][ T63] usb 4-1: config 179 has no interface number 0 [ 394.753361][ T63] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 394.764582][ T63] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 394.775890][ T63] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 394.787424][ T63] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 394.799734][ T63] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 394.803427][T17599] usb 5-1: USB disconnect, device number 24 [ 394.813085][ T63] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 394.813117][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.821483][T19769] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 394.841575][T19794] netlink: 'syz.4.6276': attribute type 1 has an invalid length. [ 394.851383][T19794] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6276'. [ 395.107218][T19801] rust_binder: Error while translating object. [ 395.107306][T19801] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 395.113652][T19801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:329 [ 395.218278][T19806] rust_binder: Write failure EINVAL in pid:334 [ 395.267664][T19808] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 395.279649][T19769] netlink: 3529 bytes leftover after parsing attributes in process `syz.3.6268'. [ 395.364720][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.372156][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.379924][T19823] rust_binder: Error in use_page_slow: ESRCH [ 395.379945][T19823] rust_binder: use_range failure ESRCH [ 395.386892][T19823] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 395.392378][T19823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 395.400949][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.406308][T19823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:320 [ 395.411799][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.445774][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.453463][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.462021][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.477970][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.486092][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.493826][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.501473][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.509006][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.516520][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.524077][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.526664][T19831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=19831 comm=syz.4.6288 [ 395.531559][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.531590][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.560586][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.568565][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.589171][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.596608][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.604495][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.613400][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.621319][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.629046][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.636777][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.644354][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.651768][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.659692][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.667364][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.674942][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.682398][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.690016][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.697675][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.705168][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.712877][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.720539][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.728115][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.735526][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.743455][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.751080][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.758491][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.766147][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.773734][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.781305][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.788707][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.796329][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.803912][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.811322][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.818976][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.826905][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.834575][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.841971][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.849494][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.857025][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.864435][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.871876][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.879395][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.886792][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.894234][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.901815][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.910259][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.917757][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.925364][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.932928][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.940420][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.947834][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.955431][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.962857][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.970336][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.977765][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.985365][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 395.992877][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.000359][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.007842][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.015342][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.022803][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.030322][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.037779][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.045175][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.052591][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.060032][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.067424][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.074950][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.082395][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.090137][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.097562][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.104980][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.112487][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.119876][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.127329][T17599] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 396.135423][T17599] hid-generic 0003:0008:000F.0015: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 396.149712][ T45] usb 4-1: USB disconnect, device number 26 [ 396.149799][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 396.164760][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 396.177643][T19837] fido_id[19837]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 396.728299][T19851] overlay: filesystem on ./bus not supported as upperdir [ 396.738368][T19851] overlay: filesystem on ./bus not supported as upperdir [ 396.754037][T19851] overlay: filesystem on ./bus not supported as upperdir [ 396.761581][T19851] overlay: filesystem on ./bus not supported as upperdir [ 396.777694][T19851] overlay: filesystem on ./bus not supported as upperdir [ 396.785344][T19851] overlay: filesystem on ./bus not supported as upperdir [ 396.793073][T19851] overlay: filesystem on ./bus not supported as upperdir [ 397.026181][T19878] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6298'. [ 397.832886][T19911] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 397.881226][ T36] audit: type=1400 audit(2000000121.215:94190): avc: denied { nlmsg_tty_audit } for pid=19917 comm="syz.3.6314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 397.948335][T19934] 9pnet_fd: Insufficient options for proto=fd [ 397.994604][T19943] overlayfs: failed to clone upperpath [ 398.007578][T19945] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 398.016523][T19945] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 398.026048][T19947] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 398.035026][T19947] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 398.208332][ T63] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 398.271609][ T36] audit: type=1326 audit(2000000121.570:94191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19891 comm="syz.6.6304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7daf8ebe9 code=0x7fc00000 [ 398.391354][ T63] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 398.402832][ T63] usb 5-1: config 0 has no interface number 0 [ 398.408956][ T63] usb 5-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 398.430834][ T63] usb 5-1: config 0 interface 214 has no altsetting 0 [ 398.439815][ T63] usb 5-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 398.449452][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.457734][ T63] usb 5-1: Product: syz [ 398.461989][ T63] usb 5-1: Manufacturer: syz [ 398.466807][ T63] usb 5-1: SerialNumber: syz [ 398.472211][ T63] usb 5-1: config 0 descriptor?? [ 398.478006][T19931] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 398.699774][T19931] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 399.298390][T20011] overlayfs: failed to clone upperpath [ 399.341147][T20028] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6353'. [ 399.372996][T20031] 9pnet_fd: Insufficient options for proto=fd [ 399.579326][T20058] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6363'. [ 399.624392][T20066] overlayfs: missing 'lowerdir' [ 399.668760][T20078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=20078 comm=syz.3.6370 [ 399.898543][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 400.235922][T20089] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6375'. [ 400.467257][T20100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 400.476148][T20100] overlayfs: missing 'lowerdir' [ 400.554095][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 400.565326][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 400.576524][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 400.587741][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 400.598847][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 400.609923][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 400.621575][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 400.632807][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 400.643818][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 400.654841][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 400.665925][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 400.677103][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 400.688214][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 400.699434][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 400.711858][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 400.723025][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 400.734263][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 400.745948][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 400.757100][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 400.768212][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 400.779472][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 400.790750][ T63] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 400.803076][ T63] ax88179_178a 5-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, e8:00:00:00:00:00 [ 400.820645][ T63] usb 5-1: USB disconnect, device number 25 [ 400.826852][ T63] ax88179_178a 5-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 401.167080][T20118] netlink: 'syz.3.6384': attribute type 1 has an invalid length. [ 401.167522][T20119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20119 comm=syz.3.6384 [ 401.187775][T20119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20119 comm=syz.3.6384 [ 401.202750][T20119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20119 comm=syz.3.6384 [ 401.215521][T20119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20119 comm=syz.3.6384 [ 401.228236][T20119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20119 comm=syz.3.6384 [ 401.240837][T20119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20119 comm=syz.3.6384 [ 401.258774][T20119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20119 comm=syz.3.6384 [ 401.271488][T20119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20119 comm=syz.3.6384 [ 401.284265][T20119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20119 comm=syz.3.6384 [ 401.297362][T20119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20119 comm=syz.3.6384 [ 401.360268][ T36] audit: type=1400 audit(2000000124.460:94192): avc: denied { create } for pid=20137 comm="syz.3.6391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 401.412866][T20142] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6392'. [ 401.441414][ T36] audit: type=1400 audit(2000000131.550:94193): avc: denied { setattr } for pid=20148 comm="syz.4.6394" name="file0" dev="incremental-fs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 401.759156][ T63] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 401.919564][ T63] usb 5-1: Using ep0 maxpacket: 8 [ 401.926414][ T63] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 401.927700][T20153] tmpfs: Unknown parameter 'noswa9}ge' [ 401.937319][ T63] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 401.954563][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 401.966021][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 401.977356][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 401.992511][ T63] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 402.001738][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.009980][ T63] usb 5-1: Product: syz [ 402.014158][ T63] usb 5-1: Manufacturer: syz [ 402.018793][ T63] usb 5-1: SerialNumber: syz [ 402.024190][ T63] usb 5-1: config 0 descriptor?? [ 402.030620][ T63] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input25 [ 403.377417][T20172] overlayfs: failed to clone upperpath [ 403.568213][ T36] audit: type=1326 audit(2000000133.533:94194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20098 comm="syz.1.6379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543e18ebe9 code=0x7fc00000 [ 403.798918][T20205] overlayfs: failed to clone upperpath [ 403.918635][T20209] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 404.722570][T17599] usb 5-1: USB disconnect, device number 26 [ 404.739836][T20291] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6445'. [ 404.849623][T20294] 9pnet: Could not find request transport: Iw὆y=wdJH! N2|<@&ŕ [ 404.939747][T20315] /dev/loop0: Can't lookup blockdev [ 404.961170][T20320] overlayfs: failed to clone upperpath [ 405.293854][T20340] overlayfs: failed to clone upperpath [ 405.300522][T20341] overlayfs: failed to clone upperpath [ 405.306759][ T36] audit: type=1326 audit(2000000135.150:94195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20335 comm="syz.3.6460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f737bd8ebe9 code=0x0 [ 405.331408][T20345] ip6gretap0: mtu less than device minimum [ 405.685057][T20370] overlayfs: failed to clone upperpath [ 405.700424][T20372] overlayfs: missing 'lowerdir' [ 405.931705][ T36] audit: type=1400 audit(2000000135.739:94196): avc: denied { setopt } for pid=20395 comm="syz.4.6480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 407.812087][T20475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6509'. [ 407.850627][T20479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6511'. [ 408.512650][T20502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6517'. [ 408.526569][T20502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6517'. [ 408.536087][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6517'. [ 408.546459][T20503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6517'. [ 408.584449][T20510] overlayfs: failed to clone upperpath [ 408.618868][T20520] netlink: 'syz.1.6522': attribute type 4 has an invalid length. [ 408.627945][T20516] 9pnet_fd: Insufficient options for proto=fd [ 408.634252][T20520] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.6522'. [ 409.066446][T20526] 9pnet_fd: Insufficient options for proto=fd [ 409.246531][T20545] overlayfs: failed to clone upperpath [ 409.324457][T20556] 9pnet_fd: Insufficient options for proto=fd [ 409.504542][ T36] audit: type=1326 audit(2000000139.087:94197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20519 comm="syz.1.6522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543e18ebe9 code=0x7fc00000 [ 409.541996][T20567] selinux_netlink_send: 55 callbacks suppressed [ 409.542017][T20567] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8221 sclass=netlink_xfrm_socket pid=20567 comm=syz.1.6538 [ 409.562190][T20567] netlink: 'syz.1.6538': attribute type 1 has an invalid length. [ 409.577595][T20567] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6538'. [ 409.602315][T20569] overlayfs: failed to clone upperpath [ 409.670878][T20576] netlink: 'syz.1.6541': attribute type 4 has an invalid length. [ 409.690203][T20576] netlink: 'syz.1.6541': attribute type 4 has an invalid length. [ 410.284798][T20605] overlayfs: failed to clone upperpath [ 410.309164][T20607] SELinux: Context system_u:object_r:urandom_device_t:s0 is not valid (left unmapped). [ 410.313848][T20609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20609 comm=syz.6.6550 [ 410.319358][ T36] audit: type=1400 audit(2000000139.844:94198): avc: denied { relabelto } for pid=20606 comm="syz.1.6553" name="fuse" dev="tmpfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:urandom_device_t:s0" [ 410.358718][ T36] audit: type=1400 audit(2000000139.844:94199): avc: denied { associate } for pid=20606 comm="syz.1.6553" name="fuse" dev="tmpfs" ino=1186 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:urandom_device_t:s0" [ 410.603230][ T36] audit: type=1326 audit(2000000140.106:94200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20612 comm="syz.3.6555" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f737bd8ebe9 code=0x0 [ 410.912332][ T36] audit: type=1400 audit(2000000140.396:94201): avc: denied { shutdown } for pid=20622 comm="syz.6.6559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 411.484895][T20628] overlayfs: failed to clone upperpath [ 411.522509][ T36] audit: type=1400 audit(2000000140.966:94203): avc: denied { shutdown } for pid=20630 comm="syz.3.6563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 411.545885][T20639] netlink: 'syz.6.6566': attribute type 1 has an invalid length. [ 411.554119][ T36] audit: type=1400 audit(2000000140.966:94202): avc: denied { shutdown } for pid=20630 comm="syz.3.6563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 411.590704][ T36] audit: type=1400 audit(2000000141.031:94204): avc: denied { map } for pid=20648 comm="syz.1.6570" path="socket:[80292]" dev="sockfs" ino=80292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 411.690804][T20656] overlayfs: failed to clone upperpath [ 411.734959][T20661] IPv6: NLM_F_CREATE should be specified when creating new route [ 411.781789][T20667] overlay: filesystem on ./bus not supported as upperdir [ 412.361362][ T36] audit: type=1326 audit(2000000141.751:94205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20682 comm="syz.4.6585" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc02898ebe9 code=0x0 [ 412.393904][T20694] 9pnet_fd: Insufficient options for proto=fd [ 412.514417][T20714] 9pnet_fd: Insufficient options for proto=fd [ 412.619978][T20736] overlayfs: failed to clone upperpath [ 413.359266][T20785] overlayfs: failed to clone upperpath [ 413.908682][T20861] /dev/loop0: Can't lookup blockdev [ 413.942853][T20868] overlayfs: failed to clone upperpath [ 413.999547][T20885] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6634'. [ 414.004101][T20888] tmpfs: Unknown parameter 'usrquota' [ 414.015018][T20889] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6636'. [ 414.022346][T20891] netlink: 'syz.6.6637': attribute type 4 has an invalid length. [ 414.026340][T20888] overlayfs: failed to clone upperpath [ 414.043513][T20887] TCP: out of memory -- consider tuning tcp_mem [ 414.086691][T20891] netlink: 'syz.6.6637': attribute type 4 has an invalid length. [ 414.161815][T20914] overlayfs: conflicting options: nfs_export=on,index=off [ 414.174461][T20919] overlayfs: failed to clone upperpath [ 414.203553][T20928] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6652'. [ 414.248338][T20943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6658'. [ 414.375945][T20951] overlayfs: failed to clone upperpath [ 414.434391][T20957] incfs_lookup_dentry err:-13 [ 414.439432][T20957] incfs: Can't find or create .index dir in ./bus [ 414.446465][T20957] incfs: mount failed -13 [ 414.993052][T20976] overlayfs: failed to clone upperpath [ 415.351646][T20997] netlink: 165 bytes leftover after parsing attributes in process `syz.4.6680'. [ 415.369385][T20999] overlayfs: failed to clone upperpath [ 415.411768][T21010] 9pnet_fd: p9_fd_create_unix (21010): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 415.844247][T21025] overlayfs: failed to clone upperpath [ 415.923062][T21035] 9pnet_fd: Insufficient options for proto=fd [ 416.101393][T21044] overlayfs: failed to clone upperpath [ 416.115944][T21046] overlayfs: failed to clone upperpath [ 416.221230][T21057] TCP: out of memory -- consider tuning tcp_mem [ 416.369041][T21054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21054 comm=syz.1.6704 [ 416.381900][T21054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21054 comm=syz.1.6704 [ 416.394808][T21054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21054 comm=syz.1.6704 [ 416.407896][T21054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21054 comm=syz.1.6704 [ 416.421054][T21054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21054 comm=syz.1.6704 [ 416.434126][T21054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21054 comm=syz.1.6704 [ 416.447451][T21054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21054 comm=syz.1.6704 [ 416.460315][T21054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21054 comm=syz.1.6704 [ 416.473263][T21054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21054 comm=syz.1.6704 [ 416.486175][T21054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21054 comm=syz.1.6704 [ 416.634326][T21067] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 416.642675][T21068] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 416.669299][T21075] overlayfs: failed to clone upperpath [ 416.698966][T21079] 9pnet_fd: Insufficient options for proto=fd [ 416.791064][ T36] audit: type=1400 audit(2000000145.893:94206): avc: denied { getopt } for pid=21097 comm="syz.3.6719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 417.086435][T21124] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 417.130991][T20850] bridge_slave_1: left allmulticast mode [ 417.136847][T20850] bridge_slave_1: left promiscuous mode [ 417.142709][T20850] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.155693][T20850] bridge_slave_0: left allmulticast mode [ 417.161375][T20850] bridge_slave_0: left promiscuous mode [ 417.166953][T20850] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.268807][T20850] veth1_macvtap: left promiscuous mode [ 417.274345][T20850] veth0_vlan: left promiscuous mode [ 417.429966][T21133] fuse: Bad value for 'fd' [ 417.463119][T21143] 9pnet_fd: Insufficient options for proto=fd [ 418.875872][T21168] 9pnet_fd: Insufficient options for proto=fd [ 418.896553][T21171] 9pnet_fd: Insufficient options for proto=fd [ 419.428586][T21240] veth0_vlan: left promiscuous mode [ 420.135358][ T36] audit: type=1400 audit(2000000150.024:94207): avc: denied { shutdown } for pid=21315 comm="syz.1.6787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 420.325473][T21327] overlay: Unknown parameter 'smackfsfloor' [ 420.412620][ T36] audit: type=1326 audit(2000000150.285:94208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21334 comm="syz.3.6794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f737bd8ebe9 code=0x0 [ 420.604020][T21362] overlayfs: failed to clone upperpath [ 421.081721][T21388] overlayfs: failed to clone upperpath [ 421.176467][ T36] audit: type=1400 audit(2000000150.996:94209): avc: denied { accept } for pid=21395 comm="syz.1.6815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 421.242195][T21400] overlayfs: failed to clone lowerpath [ 421.310169][T21427] Invalid ELF header type: 3 != 1 [ 421.310305][ T36] audit: type=1400 audit(2000000151.127:94210): avc: denied { module_load } for pid=21425 comm="syz.3.6824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 421.360730][T21439] overlayfs: failed to clone upperpath [ 421.407492][T21450] overlayfs: failed to clone upperpath [ 421.413855][T21450] fuse: Bad value for 'fd' [ 421.440180][ T36] audit: type=1326 audit(2000000151.239:94211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.3.6834" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f737bd8ebe9 code=0x0 [ 421.545754][T21481] 9pnet_fd: p9_fd_create_tcp (21481): problem binding to privport [ 422.099903][T21486] overlayfs: failed to clone upperpath [ 422.190642][T21524] overlayfs: conflicting options: nfs_export=on,index=off [ 422.206303][ T36] audit: type=1400 audit(2000000151.950:94212): avc: denied { setattr } for pid=21525 comm="syz.6.6857" name="RAWv6" dev="sockfs" ino=83166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 423.670003][T21565] selinux_netlink_send: 34 callbacks suppressed [ 423.670024][T21565] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65 sclass=netlink_xfrm_socket pid=21565 comm=syz.1.6873 [ 423.688811][T21565] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=53 sclass=netlink_xfrm_socket pid=21565 comm=syz.1.6873 [ 423.701374][T21565] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46 sclass=netlink_xfrm_socket pid=21565 comm=syz.1.6873 [ 423.984560][ T36] audit: type=1401 audit(2000000153.623:94213): op=setxattr invalid_context="" [ 424.224104][T21594] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6884'. [ 424.959906][T21626] overlayfs: failed to clone upperpath [ 424.960032][T21622] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6894'. [ 424.993359][T21631] 9pnet_fd: Insufficient options for proto=fd [ 425.003859][T21631] overlayfs: failed to clone upperpath [ 425.237902][T21659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6907'. [ 425.342318][ T37] INFO: task syz.0.4664:14614 blocked for more than 122 seconds. [ 425.350270][ T37] Not tainted syzkaller #0 [ 425.355483][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 425.364321][ T37] task:syz.0.4664 state:D stack:0 pid:14614 tgid:14603 ppid:8216 flags:0x00004004 [ 425.374633][ T37] Call Trace: [ 425.377921][ T37] [ 425.380872][ T37] __schedule+0x1322/0x1df0 [ 425.385448][ T37] ? __sched_text_start+0x10/0x10 [ 425.390490][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 425.396072][ T37] ? mutex_unlock+0x8b/0x240 [ 425.400682][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 425.406547][ T37] schedule+0xc6/0x240 [ 425.410629][ T37] super_lock+0x150/0x300 [ 425.414963][ T37] ? user_get_super+0x350/0x350 [ 425.419922][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 425.425404][ T37] ? __kasan_check_write+0x18/0x20 [ 425.430625][ T37] iterate_supers+0x8a/0x560 [ 425.435317][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 425.440894][ T37] ksys_sync+0x95/0x160 [ 425.445142][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 425.449944][ T37] ? switch_fpu_return+0x12/0x20 [ 425.454976][ T37] __ia32_sys_sync+0x12/0x20 [ 425.459562][ T37] x64_sys_call+0x2a58/0x2ee0 [ 425.464290][ T37] do_syscall_64+0x58/0xf0 [ 425.468706][ T37] ? clear_bhb_loop+0x50/0xa0 [ 425.473424][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 425.479418][ T37] RIP: 0033:0x7f24e7d8ebe9 [ 425.483893][ T37] RSP: 002b:00007f24e8c92038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 425.492381][ T37] RAX: ffffffffffffffda RBX: 00007f24e7fb6090 RCX: 00007f24e7d8ebe9 [ 425.500347][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 425.508377][ T37] RBP: 00007f24e7fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 425.516423][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.524436][ T37] R13: 00007f24e7fb6128 R14: 00007f24e7fb6090 R15: 00007ffed8720c98 [ 425.532436][ T37] [ 425.535601][ T37] NMI backtrace for cpu 1 [ 425.535614][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 40a6597ee361193aa500bbffa95ee137cbfef8e8 [ 425.535639][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.535651][ T37] Call Trace: [ 425.535656][ T37] [ 425.535664][ T37] __dump_stack+0x21/0x30 [ 425.535702][ T37] dump_stack_lvl+0x10c/0x190 [ 425.535725][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 425.535751][ T37] dump_stack+0x19/0x20 [ 425.535774][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 425.535797][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 425.535820][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 425.535841][ T37] ? sched_show_task+0x379/0x560 [ 425.535864][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 425.535884][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 425.535909][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 425.535932][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 425.535962][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 425.535985][ T37] watchdog+0xd8f/0xed0 [ 425.536010][ T37] ? __cfi_watchdog+0x10/0x10 [ 425.536033][ T37] ? __kasan_check_read+0x15/0x20 [ 425.536059][ T37] ? __kthread_parkme+0x138/0x180 [ 425.536077][ T37] ? schedule+0xc6/0x240 [ 425.536100][ T37] kthread+0x2c7/0x370 [ 425.536119][ T37] ? __cfi_watchdog+0x10/0x10 [ 425.536139][ T37] ? __cfi_kthread+0x10/0x10 [ 425.536157][ T37] ret_from_fork+0x67/0xa0 [ 425.536180][ T37] ? __cfi_kthread+0x10/0x10 [ 425.536199][ T37] ret_from_fork_asm+0x1a/0x30 [ 425.536225][ T37] [ 425.536233][ T37] Sending NMI from CPU 1 to CPUs 0: [ 425.694838][ C0] NMI backtrace for cpu 0 [ 425.694855][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 40a6597ee361193aa500bbffa95ee137cbfef8e8 [ 425.694876][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.694887][ C0] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 425.694910][ C0] Code: cc cc cc b8 94 0e bd f4 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 91 3b 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 425.694923][ C0] RSP: 0018:ffffffff87207da0 EFLAGS: 000002c6 [ 425.694938][ C0] RAX: ffff8881f6e00000 RBX: ffffffff87215540 RCX: ffffffff858bc09e [ 425.694950][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000072e4cc [ 425.694960][ C0] RBP: ffffffff87207da0 R08: ffff8881f6e39733 R09: 1ffff1103edc72e6 [ 425.694972][ C0] R10: dffffc0000000000 R11: ffffed103edc72e7 R12: 1ffffffff0e42aa8 [ 425.694984][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87cad7e8 [ 425.694994][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 425.695007][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.695018][ C0] CR2: 00007ffc9ce26ff8 CR3: 0000000115cf2000 CR4: 00000000003526b0 [ 425.695033][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000008d00c0ed [ 425.695042][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 425.695052][ C0] Call Trace: [ 425.695059][ C0] [ 425.695066][ C0] default_idle+0x17/0x30 [ 425.695084][ C0] arch_cpu_idle+0xd/0x20 [ 425.695098][ C0] default_idle_call+0x3f/0x80 [ 425.695114][ C0] do_idle+0x1a0/0x470 [ 425.695129][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 425.695146][ C0] cpu_startup_entry+0x48/0x70 [ 425.695160][ C0] rest_init+0x10b/0x130 [ 425.695182][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 425.695203][ C0] start_kernel+0x46a/0x4bb [ 425.695220][ C0] x86_64_start_reservations+0x2e/0x30 [ 425.695240][ C0] x86_64_start_kernel+0x6a/0x7b [ 425.695258][ C0] common_startup_64+0x13b/0x157 [ 425.695279][ C0]